last executing test programs: 52.683232745s ago: executing program 2 (id=113): r0 = syz_clone(0x20401200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="060000000000000069110a00000000000002000000850000000500000095000000000000009500a5050000000000000087e12725a26656f1bc398117d73d893174347abe6e1f870ac036e1130809c638117c0e2434e4d8fa901dc56d5b07ab10799e43e1b990f93cd081cd5efbf7c731b375c9d771f54641507e337b4a8d8c8d8f487f650d7b12e394219648e09a251224cab8420200000000000000911f843e946190cd0c0a06ac0f55269f4dda86391d73e21978"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$inet6(r1, &(0x7f0000002740)={&(0x7f00000002c0)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}, 0x4000000) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x200000, 0x388, 0x10}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000300)={0x2, 'bridge_slave_1\x00', 0x2}, 0x18) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x6, 0x34, 0x2f, 0x0, 0x2, 0x1020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9e, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x1000, 0x4, 0xf7, 0x0, 0x400, 0x5, 0x7, 0x0, 0xd, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, r3, 0x0, 0x3, &(0x7f0000000200)='/[\x00'}, 0x30) syz_clone(0x20401200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="060000000000000069110a00000000000002000000850000000500000095000000000000009500a5050000000000000087e12725a26656f1bc398117d73d893174347abe6e1f870ac036e1130809c638117c0e2434e4d8fa901dc56d5b07ab10799e43e1b990f93cd081cd5efbf7c731b375c9d771f54641507e337b4a8d8c8d8f487f650d7b12e394219648e09a251224cab8420200000000000000911f843e946190cd0c0a06ac0f55269f4dda86391d73e21978"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) sendmsg$inet6(r1, &(0x7f0000002740)={&(0x7f00000002c0)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}, 0x4000000) (async) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x200000, 0x388, 0x10}, 0x18) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000300)={0x2, 'bridge_slave_1\x00', 0x2}, 0x18) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x6, 0x34, 0x2f, 0x0, 0x2, 0x1020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9e, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x1000, 0x4, 0xf7, 0x0, 0x400, 0x5, 0x7, 0x0, 0xd, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, r3, 0x0, 0x3, &(0x7f0000000200)='/[\x00'}, 0x30) (async) 52.084011797s ago: executing program 2 (id=116): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00048, &(0x7f0000000140), 0x1, 0x7ad, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) eventfd(0x7) socket$nl_route(0x10, 0x3, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 51.142024915s ago: executing program 2 (id=118): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020100000e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000200aa000000000000000002001300", @ANYRES32=r1], 0x70}}, 0x0) 49.90283732s ago: executing program 2 (id=127): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[], 0xfe, 0x2c1, &(0x7f0000000080)="$eJzs3T2LY1UYAOD3ZvKlg8wUViJ4iy1sHDbbWphFRhCnUlL4Abq4u7BMwsIEAqti3MpfYGHh/7CzslFs/AeCP8DOQRaO3Nybj8nOJpOBzIrzPM28nPO+Oefec5gUl3vy2auD47sPh/cff/VHtNtZ1LrRjdMs9qMWU6kSAMD/wmlK8delvt/rtW3NCQDYroXv/8YzUlpPN7217WkBAFv0wYcfvXf76Ojw/TxvRwy+HfWyKP+W/bfvx4Pox724GXvxZP4sIKUyfufdo8Oo54X9uDEYj3pF5eDT3xYfGxT1nemI30T5SGFe38lLC/XjUa8RL0ZkWcSDblFxK/bi5dby+EX/4a1z6qPXjNfb1ZDF+AexF79/Hg+jH3cnE5iP/3Unz99O3/395cdF8rSoNcmbSztXsyIAAAAAAAAAAAAAAAAAAAAAAFwHB/nMftwYFE3V+Ts7Tyb9B2f6J+fr1Cb9ZX0W0ZwES+cDjVP8MD1f52ae5ykr8+fn+9TjlXrUn9uFAwAAAAAAAAAAAAAAAAAAwH/I8NEXx3f6/XsnVdCIiLMtmwTVS/6z1/ov+zndhZbX1syntdFYsVOlF3Ndzun88slg1lJcxOaTP31p1MhX38PGUy0vFPNZP8Q/KaWUZRH9fhFddpkaFxlrTbC7Oqe4wT99v/vG8Z1s3T1sTxfux8WuZpwMHy2taWRF8POvF1vutNH2a67IaVY75kKfs7sqZ7r3VuS8+WeZUrVkG1xFowriWduvvdF+voJ/PgAAAAAAAAAAAAAAAAAAwBnzl37P6Xy8srS2tUkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBWb//7/BsG4Kj4/J6U0nrU042T4nC8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAa+DfAAAA///wPWG+") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9}, 0x0, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x4000800) poll(0x0, 0x0, 0x9) syz_open_procfs(0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x3, 0x0, 0x4) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000004380)=""/4124, 0xcde) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 49.435717525s ago: executing program 2 (id=130): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00048, &(0x7f0000000140), 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) eventfd(0x7) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 46.940224664s ago: executing program 2 (id=149): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x459e, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9f8}}, {@lazytime}, {@jqfmt_vfsv1}, {@block_validity}, {@nojournal_checksum}, {@mblk_io_submit}, {@jqfmt_vfsv0}]}, 0x0, 0x459, &(0x7f0000000b80)="$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") chdir(&(0x7f0000000000)='./file0\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) chroot(0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x8000000, 0x0, 0x1b, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf251500000008000300", @ANYRES32=r2, @ANYBLOB="28002b801c00038006000300feff000006000100039658fadc00020002000000080001"], 0x44}, 0x1, 0x0, 0x0, 0xc884}, 0x4010084) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x0, 0x26) syz_io_uring_setup(0x548f, &(0x7f0000000140)={0x0, 0xa649, 0x20, 0x1, 0x1e4, 0x0, r9}, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300)) getdents64(r8, 0x0, 0x0) 46.939604524s ago: executing program 32 (id=149): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x459e, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9f8}}, {@lazytime}, {@jqfmt_vfsv1}, {@block_validity}, {@nojournal_checksum}, {@mblk_io_submit}, {@jqfmt_vfsv0}]}, 0x0, 0x459, &(0x7f0000000b80)="$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") chdir(&(0x7f0000000000)='./file0\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) chroot(0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x8000000, 0x0, 0x1b, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf251500000008000300", @ANYRES32=r2, @ANYBLOB="28002b801c00038006000300feff000006000100039658fadc00020002000000080001"], 0x44}, 0x1, 0x0, 0x0, 0xc884}, 0x4010084) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x0, 0x26) syz_io_uring_setup(0x548f, &(0x7f0000000140)={0x0, 0xa649, 0x20, 0x1, 0x1e4, 0x0, r9}, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300)) getdents64(r8, 0x0, 0x0) 27.300128117s ago: executing program 5 (id=319): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100000000000000, 0x0, 0x7ffffff, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x1, r0, 0x0) 27.204241972s ago: executing program 5 (id=322): socket$nl_route(0x10, 0x3, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {0x0, 0x0, 0x0, 0x1600}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 27.144184816s ago: executing program 5 (id=326): socket$kcm(0x2d, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c891}, 0x4) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) syz_open_dev$loop(&(0x7f0000000500), 0xea8, 0x10001) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001180000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 26.588404445s ago: executing program 5 (id=330): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200040, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x2000011a, &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES32=r4, @ANYRES16=r2], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x88d9d501}}, './file0\x00'}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001640)={&(0x7f0000000380)="6742ed7ff67ac9dd22e5fd8342c775579d2a2ca212b2331a2c8a1ecb7f530ac4653c1b8b94331e4b10d590cc1dfc760d41ca1b636ef99f4c0ca0a8c1ae2844a2e0d6a5855f431b2655cb0781bd40bced77c3493a6bdea8aeed08077ad9cc6e54db94e670d6d659d03218546eea90759d2f0c0345d3638ad2fd4207c5e6a86cbb963ade9aeae53f0a29b2b72f405b53aafbc8d5a1d0067fb7915862072e0670f88f2349598675e388448390b9e279abe94fb4ee4292", &(0x7f0000000440)=""/226, &(0x7f0000000540)="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", &(0x7f0000001540)="3cccbcacf24b6482138f7bec415a77b4176b9ff7db0d6106583466467394c6886ab25cb8483fcc7c00c8897aed240b453b0341b0dcea74913a96b89dc0afdc6afc14d39dcf6eac6fba80176beb344954635e2c3866fd2a8ab045d6a6ec18dcab8e6ca2d55d3a99224d0f45ce3769626b1a1ad4c7547e3331330f92a4b0a8c3c11501828e5b946a78c7e1ed4b17a89ae8fde3b13157589e73393fd40a3e41d6a20ea1f64ed3bd4173e11a4cfdfb6fe8c490f46bd55eb59b1119b66ef5e9cd9a74dc14f60725def8b8d6570c8999f4ccdaebe104281f6f02571d9608fa0f12", 0x0, r4}, 0x38) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000000)=""/48, 0x30) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 26.468463491s ago: executing program 5 (id=334): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020100000e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000003000000000000aa000000000000000002001300", @ANYRES32=r1], 0x70}}, 0x0) 26.226955073s ago: executing program 5 (id=342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40c21, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x79, 0x4}, 0x75, 0x400000, 0xffffffff, 0x0, 0xfffffffffffffffc}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x44085}, 0x8040) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000000380)={@private2, 0x0}, &(0x7f00000003c0)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000b00)={0x1a8, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4c000}, 0x4081) fchdir(r3) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000190001002dbd7000fedbdf2502202000fffed769"], 0x30}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) write$binfmt_script(r11, &(0x7f0000000000), 0x208e24b) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r13 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r13, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg$inet(r13, 0x0, 0x88c1) ioctl$sock_kcm_SIOCKCMUNATTACH(r13, 0x5411, 0x0) 26.176145376s ago: executing program 33 (id=342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40c21, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x79, 0x4}, 0x75, 0x400000, 0xffffffff, 0x0, 0xfffffffffffffffc}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x44085}, 0x8040) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000000380)={@private2, 0x0}, &(0x7f00000003c0)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000b00)={0x1a8, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4c000}, 0x4081) fchdir(r3) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000190001002dbd7000fedbdf2502202000fffed769"], 0x30}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) write$binfmt_script(r11, &(0x7f0000000000), 0x208e24b) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r13 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r13, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg$inet(r13, 0x0, 0x88c1) ioctl$sock_kcm_SIOCKCMUNATTACH(r13, 0x5411, 0x0) 12.356426306s ago: executing program 0 (id=458): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x18, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0xf8ff, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xd3588a68d39da5d3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x23}, 0x94) 12.237355572s ago: executing program 0 (id=462): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00048, &(0x7f0000000140), 0x1, 0x7ad, &(0x7f00000007c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 11.961718596s ago: executing program 0 (id=463): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00048, &(0x7f0000000140), 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (fail_nth: 3) 10.100369433s ago: executing program 0 (id=468): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[], 0xfe, 0x2c1, &(0x7f0000000080)="$eJzs3T2LY1UYAOD3ZvKlg8wUViJ4iy1sHDbbWphFRhCnUlL4Abq4u7BMwsIEAqti3MpfYGHh/7CzslFs/AeCP8DOQRaO3Nybj8nOJpOBzIrzPM28nPO+Oefec5gUl3vy2auD47sPh/cff/VHtNtZ1LrRjdMs9qMWU6kSAMD/wmlK8delvt/rtW3NCQDYroXv/8YzUlpPN7217WkBAFv0wYcfvXf76Ojw/TxvRwy+HfWyKP+W/bfvx4Pox724GXvxZP4sIKUyfufdo8Oo54X9uDEYj3pF5eDT3xYfGxT1nemI30T5SGFe38lLC/XjUa8RL0ZkWcSDblFxK/bi5dby+EX/4a1z6qPXjNfb1ZDF+AexF79/Hg+jH3cnE5iP/3Unz99O3/395cdF8rSoNcmbSztXsyIAAAAAAAAAAAAAAAAAAAAAAFwHB/nMftwYFE3V+Ts7Tyb9B2f6J+fr1Cb9ZX0W0ZwES+cDjVP8MD1f52ae5ykr8+fn+9TjlXrUn9uFAwAAAAAAAAAAAAAAAAAAwH/I8NEXx3f6/XsnVdCIiLMtmwTVS/6z1/ov+zndhZbX1syntdFYsVOlF3Ndzun88slg1lJcxOaTP31p1MhX38PGUy0vFPNZP8Q/KaWUZRH9fhFddpkaFxlrTbC7Oqe4wT99v/vG8Z1s3T1sTxfux8WuZpwMHy2taWRF8POvF1vutNH2a67IaVY75kKfs7sqZ7r3VuS8+WeZUrVkG1xFowriWduvvdF+voJ/PgAAAAAAAAAAAAAAAAAAwBnzl37P6Xy8srS2tUkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBWb//7/BsG4Kj4/J6U0nrU042T4nC8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAa+DfAAAA///wPWG+") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9}, 0x0, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x4000800) poll(0x0, 0x0, 0x9) syz_open_procfs(0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x3, 0x0, 0x4) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000004380)=""/4124, 0xcde) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 9.348033232s ago: executing program 4 (id=471): socket$nl_route(0x10, 0x3, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 9.228371729s ago: executing program 4 (id=472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6711220d90e69b97}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffffac, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRES64=r0], 0xcc}}, 0x40448e0) 9.166631522s ago: executing program 4 (id=473): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000340), 0x10) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9fd) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$kcm(0x23, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000108000000010000000000000000", @ANYRES32=0x0, @ANYBLOB="31200000004d00000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 8.212342812s ago: executing program 0 (id=479): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"/52, @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc0000000080ffffffffffffff000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x3, 0x3, 0x0, 0x1}, 0x8) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000480)=[{}], &(0x7f00000004c0)=0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0), 0x0, 0xae, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb9, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x2}, 0x8) 7.568375585s ago: executing program 0 (id=480): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x0, 0x56, 0xff}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000fd7910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) socket$inet6(0x10, 0x3, 0x0) 7.568080615s ago: executing program 34 (id=480): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x0, 0x56, 0xff}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000fd7910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) socket$inet6(0x10, 0x3, 0x0) 6.809402795s ago: executing program 1 (id=486): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0xfeffffffffffffff, 0x0, 0x7ffffff, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x1, r0, 0x0) 6.754050268s ago: executing program 1 (id=487): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0xfff0bdc1, 0xffffffffffffffff, 0x8000, 0x0, 0xffffffffffffffff, 0x7fff, 0x4, 0x100000000, 0xff, 0x0, 0xfffffffffffffffc, 0x618f, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x7, 0xeff, 0x6, 0x679e, 0x0, 0x3, 0x6}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000090bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000009b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x53}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x62, 0x0, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", 0x0, 0x2f00, 0x0, 0x82, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x50) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000bc0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) read(r4, &(0x7f0000001cc0)=""/218, 0xda) 4.029036819s ago: executing program 1 (id=490): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x2220c0, 0x0, 0x6, 0x0, &(0x7f0000000000)=0x5}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x8, 0x0, 0x8, r2}, 0x10) sendmmsg(r1, &(0x7f0000001c80)=[{{&(0x7f00000000c0)=@x25, 0x80, &(0x7f0000001800)=[{&(0x7f0000001580)}, {&(0x7f0000001680)="7ebb4e83c4cf856815b783fd632002eca4511e6116f1e6b513463b6cc948ec60", 0x20}, {&(0x7f00000016c0)="c3c53ed4836dae2249ac54bd562608c9cea440c4bf58fdc9f58a288d2ca81d0c8669a86ef36b9a0b56809d9b0a6c5f4ba23684c196b7182681d61fc53fb80d0a66289e6ec71fafe1dbe7414448a552d0736305a4fb81be38738f7407c897c33be84a2b1fd069fad8e61b26af4e4d317b77fb3a8bc8c55d37256111aed8613eb380259e45679bd22e85fdb2ba8b3c0d6fdd5b32ecb2af8a242f527745", 0x9c}, {&(0x7f0000001780)="a84bccbef6fb249eaef0cb54290d8bdd2ce66db5bf811d630d9f79cd203b7b4000", 0x21}], 0x4}}, {{&(0x7f0000001880)=@qipcrtr={0x2a, 0x3, 0x3fff}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000019c0)}], 0x1, &(0x7f0000001d00)=ANY=[], 0x1f0}}], 0x2, 0x20000800) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000010180000000000000000000100000000019500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffffeb702000008000000b50af8ffffff0000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 3.763101243s ago: executing program 4 (id=491): unshare(0x60000600) dup(0xffffffffffffffff) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r2) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) (async) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x200040, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073"], 0x100}, 0x1, 0x0, 0x0, 0x8084}, 0x24000000) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44400) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0x2c, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4008890}, 0x80) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000000c01000000030005000000000002004e21ac1e01010000000000000021020013"], 0x78}, 0x1, 0x7}, 0x0) 3.172067974s ago: executing program 4 (id=497): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000340), 0x10) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9fd) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$kcm(0x23, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000108000000010000000000000000", @ANYRES32=0x0, @ANYBLOB="31200000004d00000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.776424495s ago: executing program 6 (id=500): socket$nl_route(0x10, 0x3, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 2.739120187s ago: executing program 6 (id=501): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, 0x0, 0x4000000) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000240), 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x240008d0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x98240, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x80000, 0x8, 0x43fe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @empty}], 0x10) r6 = dup(r5) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r7 = dup(r5) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0x4, 0xe652, 0x5, 0x134, 0x2, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb7, 0x1a}, 0x9c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x13) recvfrom(r8, &(0x7f0000000380)=""/201, 0xc9, 0x40, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r9, 0xfffffffffffffffe, 0x1, 0xc) 2.647224372s ago: executing program 3 (id=502): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="5402000017000100000000000000000020010000000000000000000000000001000000006c000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300"], 0x254}}, 0x0) 2.428447913s ago: executing program 3 (id=503): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f00"/151], 0xb4}}, 0x0) 2.076543781s ago: executing program 6 (id=504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}]}}}]}]}], {0x14}}, 0x5c}}, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000001c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1], 0x44}}, 0x8000) 2.015563604s ago: executing program 3 (id=505): fremovexattr(0xffffffffffffffff, &(0x7f00000004c0)=@random={'trusted.', 'rpfilter\x00'}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x800) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000640)={'dvmrp1\x00', 0x2, 0x9}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x150, 0x1170, 0x1170, 0x150, 0x1170, 0x218, 0x1398, 0x1398, 0x218, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'macvlan1\x00', {0xff}}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 1.872341492s ago: executing program 3 (id=506): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$caif_seqpacket(0x25, 0x5, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x400, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x800}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 1.871858102s ago: executing program 1 (id=507): syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x7, 0x1, 0x1, 0xe92}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x20882, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @empty, 0x3}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x44, 0x4, 0x2}, 0x50) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000600), &(0x7f0000000480)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f00000003c0)="01", 0x0, 0x1}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010020000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6], 0xb4}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f0000000140), &(0x7f0000000340)=@udp6, 0x1}, 0x20) 1.843951153s ago: executing program 6 (id=508): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x183001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x14c1e, &(0x7f0000000200)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x511082, 0x100) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x803, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, 0x0, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x208401, 0x110) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r5, 0x2000) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r4, 0x58, &(0x7f0000000240)}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1.766719987s ago: executing program 1 (id=509): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(0x0, 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x101, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x2c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) accept$unix(r2, &(0x7f0000000240), &(0x7f0000000380)=0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x90, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0x8}, 0x104000, 0x0, 0xfff, 0x0, 0x2, 0x8, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x62}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) 1.272371143s ago: executing program 3 (id=510): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0}}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a402b, &(0x7f00000000c0)={[{@size={'size', 0x3d, [0x33]}}]}) 1.190530257s ago: executing program 7 (id=481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a34000000060a0104000000000000000002000001800c0001007061790002800800044000000000140000001100010000000000000000000000000a000000000000"], 0x5c}}, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac14142d", @ANYRES32=0x0, @ANYBLOB="ff003959f7ff3e0013d4ee7031393549cf000dc46d606f4599e8a6c4ddc3fdc52a5ed95a0b7683340ba7e6dfcf5987"], 0x40}, 0x20044084) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20a102, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r3], 0x44}}, 0x8000) 981.643938ms ago: executing program 3 (id=511): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8937, &(0x7f00000005c0)={'netdevsim0\x00', @ifru_settings={0x1, 0x2, @fr_pvc_info=0x0}}) r1 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x100000000]}, 0x0, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x22, 0x0, &(0x7f00000008c0)="f6f4e9a1000000000000000d0800c32a8bc678bb", 0x0, 0x80000000, 0x0, 0x2, 0x0, &(0x7f0000000980)="0102", 0x0}, 0x50) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r3 = gettid() tkill(r3, 0x12) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_enter(r1, 0xe7f, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) 810.054037ms ago: executing program 1 (id=512): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[], 0xfe, 0x2c1, &(0x7f0000000080)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9}, 0x0, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x4000800) poll(0x0, 0x0, 0x9) syz_open_procfs(0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x3, 0x0, 0x4) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000004380)=""/4124, 0xcde) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 809.271707ms ago: executing program 7 (id=513): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) r1 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x1, 'macvtap0\x00'}) 740.54396ms ago: executing program 7 (id=514): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000090903000000000000000000000d00000000000000000000000b"], 0x0, 0x3e, 0x0, 0x1}, 0x28) 714.128502ms ago: executing program 4 (id=515): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000340), 0x10) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9fd) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$kcm(0x23, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000108000000010000000000000000", @ANYRES32=0x0, @ANYBLOB="31200000004d00000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 646.789896ms ago: executing program 7 (id=516): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x800000, &(0x7f00000004c0)=ANY=[@ANYBLOB="00aa97c4e34e7f390bacfc13400000000000000021ca919fdd77ce62bfdc79dae0dd13d99836e3e0d10575cb1b1c881817216e5d684c6aa6f988295228b1d76ccda451a263087b479582a4d43026b82a9dc5b7547c89547ab32125ffd6c015c884b14926c5d789ddbaf267268b48b3f0b91b0d2808ed02"], 0x0, 0x55d, &(0x7f0000000540)="$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") 527.045082ms ago: executing program 6 (id=517): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJffjUjX11YRcFC3Yh4qKhSWro9AdJCrYWTMCFgoKI2yLd+A+4l+7diaDuXAtVpGJBS+dx79xJJpP5lSYzk+R+PjCZc889k3O+uXNyz713ztwASms++5FGvBvx+kYSMdu0bibqK+eLci/+/fhm9kiiVvvuv5JIirxG+aR4PlcsTEbEny5HfLpysN7Nh49uL1drdT+JuLB15/6FzYePPli/s3xr9dbq3aWLX/vwo8WvL3241NTQN3eueL5y9Tuf/+VPf/jVtT9XP0jiUlwf//FKtMRxXOZjPl4XITbnj0XER1mizd/ltDkDIZRapXg/jkfEZ2M2KvlS3Wys/2KkjQMGqlaJqHWX9CoAnFa6N5RVYxzQOLbv7zj4+oBHJcPz/OP6AdDB+MeKUw6T+bHR9Iuk6ciofm7j/DHUn9Xx6vHkk1eP557EvvMQL3e3ztgx1NPJ9k5EfK5d/EnetvN5pFn86b5j/TQiFiNiomjft47QhqQpPYjzMN0cJv7m7ZDFf6l4zvIvv2H9rae1hh0/AOX07ONiR76dLe3t/7KxR2P8E8X4p3nMOHP0SzK5Ue//Oo//Gvv7yXzck7aMw7Ixy7X2v3K8NePvP7/y607118d/c08aj6z+xlhwGJ7vRMy1xP+zLNhi/JPFn7QZ/2ZFblzqr45v/+WfVzqtG3X8tacR77U9/tkblWapLtcnL6ytV1cX6z/b1vGHP/7gd53qbx//WwOItL1s+093iL9p+6etr8v+Jvfb/8qd1ozfX3t6p1P9Mz23f/qPiaR+vDlR5PxoZ2trYyliIrm6WyjPX97a2rjYPd56mZe1/HmpHv/7X2rf//e9/1uimmr8y+zD/e/dftFp3Zu8/5suJr+u9dmGTrL4V3pv/wP9P8v7VZ91/Pf7D77QaV23+KeOEhgAAAAAAACUUJpfg03Shd10mi4s1OfLfiam0+q9za0vr917cHcl4v3885DjaaRJ/pGR2fpysrZeXV0qPg/bWL7YsvyViHgnIn5TmcqXF27eq66MOngAAAAAAAAAAAAAAAAAAAA4Ic4V8/8b96n+T6U+/x8oid43mDtw/wfgjBjkDSaBky3v/9128W8Pry3AcNn/Q3np/1Be+j+Ul/4P5aX/Q3np/1Be+j+Ul/4PAAAAAGfSO1989rckIra/MZU/MhPFOpN+4WwbP1TpysDaAQyfHg3ltXvp32AfSqev8f//ii8HHHxzgBFI2mXmg4Na987/rO0r9+wcvW0AAAAAAAAAAAAAQN1773ae/3+4ucHAaWPaH5TXEeb/++oAOOV89T+Ul2N8oMcs/pjstKLX/H8AAAAAAAAAAAAA4NjM5I8kXSjmAs9Emi4sRHwqIs7HeLK2Xl1djIi3I+KvlfG3suWlUTcaAAAAAAAAAAAAAAAAAAAAzpjNh49uL1erqxvNif8fyDnbicZdUHsXrvVRpmvim3HIV0Uy/D/LVESMfKMMLDHWlJNEbGdb/kQ0bGMzTkYz8sSI/zEBAAAAAAAAAAAAAAAAAEAJNc09bm/ut0NuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM3979/3skVqbrL+ir8P7EqGMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6nTwIAAP//MxREKw==") 174.60524ms ago: executing program 6 (id=518): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x46}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x2f}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x10000}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$kcm(0xa, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rename(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20040110) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1000000) connect$rxrpc(r6, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x3, &(0x7f00000010c0)=ANY=[@ANYRES16=r5], &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r6}, 0x94) 163.806601ms ago: executing program 7 (id=519): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa, 0x4, 0x40000000, 0x60, @private2, @private2, 0x10, 0x700, 0xbffffff6, 0x5}}) r1 = getpid() sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_NEWNSID={0x24, 0x58, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_PID={0x8, 0x2, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) 0s ago: executing program 7 (id=520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}]}}}]}]}], {0x14}}, 0x5c}}, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000001c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1], 0x44}}, 0x8000) (fail_nth: 4) kernel console output (not intermixed with test programs): 48.780661][ T3790] EXT4-fs error (device loop2) in ext4_setattr:6120: error 28 [ 48.848319][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.976484][ T3781] netlink: 'syz.3.80': attribute type 32 has an invalid length. [ 48.996754][ T3781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 49.049548][ T3804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.87'. [ 49.071652][ T3804] netlink: 48 bytes leftover after parsing attributes in process `syz.4.87'. [ 49.093292][ T3807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.88'. [ 49.138943][ T3781] bond1: option coupled_control: invalid value (83) [ 49.148466][ T3781] bond1 (unregistering): Released all slaves [ 49.264720][ T3818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 49.300472][ T3817] FAT-fs (loop0): codepage cp852 not found [ 49.358308][ T3822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.499644][ T3830] nfs: Unexpected value for 'acl' [ 49.509288][ T3830] capability: warning: `syz.0.91' uses deprecated v2 capabilities in a way that may be insecure [ 49.616854][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.768761][ T3841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.818278][ T3841] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 49.833239][ T3841] EXT4-fs error (device loop2) in ext4_setattr:6120: error 28 [ 50.498657][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 50.498676][ T28] audit: type=1400 audit(1776530845.986:224): avc: denied { create } for pid=3850 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.830754][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.357316][ T3877] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 51.874085][ T3903] set_capacity_and_notify: 6 callbacks suppressed [ 51.874398][ T3903] loop3: detected capacity change from 0 to 512 [ 51.976695][ T3903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.344930][ T28] audit: type=1400 audit(1776531103.202:225): avc: denied { read } for pid=3906 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.416321][ T28] audit: type=1400 audit(1776531104.842:226): avc: denied { setopt } for pid=3910 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.184485][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.215537][ T3930] loop2: detected capacity change from 0 to 2048 [ 55.610806][ T3930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.758457][ T3930] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 55.773520][ T3930] EXT4-fs error (device loop2) in ext4_setattr:6120: error 28 [ 55.853902][ T3939] __nla_validate_parse: 4 callbacks suppressed [ 55.853949][ T3939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 55.973631][ T3943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 56.012500][ T3943] netlink: 48 bytes leftover after parsing attributes in process `syz.3.114'. [ 56.022016][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.037906][ T3946] netlink: 76 bytes leftover after parsing attributes in process `syz.1.119'. [ 56.106722][ T28] audit: type=1400 audit(1776531106.962:227): avc: denied { read } for pid=3947 comm="syz.4.120" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 56.219001][ T28] audit: type=1400 audit(1776531106.962:228): avc: denied { open } for pid=3947 comm="syz.4.120" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 57.245838][ T3962] loop1: detected capacity change from 0 to 1024 [ 57.262318][ T3968] loop7: detected capacity change from 0 to 16384 [ 57.271166][ T3962] EXT4-fs: Ignoring removed bh option [ 57.291077][ T3966] loop2: detected capacity change from 0 to 256 [ 57.303587][ T3962] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.334468][ T3966] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.384774][ T3962] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 57.499448][ T3962] System zones: 0-1, 3-12 [ 57.536409][ T3962] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.125: bad orphan inode 11 [ 57.552303][ T3962] loop1: lost filesystem error report for type 5 error -117 [ 57.552526][ T3962] EXT4-fs (loop1): Remounting filesystem read-only [ 57.559998][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 57.560021][ C1] EXT4-fs (loop1): initial error at time 1776531108: ext4_orphan_get:1423 [ 57.560046][ C1] EXT4-fs (loop1): last error at time 1776531108: ext4_orphan_get:1423 [ 57.624180][ T3962] ext4_test_bit(bit=10, block=4) = 0 [ 57.631620][ T3969] loop7: detected capacity change from 16384 to 0 [ 57.654094][ T3962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.683518][ C0] I/O error, dev loop7, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 28 prio class 2 [ 57.698564][ T3322] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 57.708919][ T3322] FAT-fs (loop2): Filesystem has been set read-only [ 57.726811][ T3322] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 57.931274][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.947048][ T3987] loop0: detected capacity change from 0 to 512 [ 58.140692][ T3987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.402239][ T3987] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.429054][ T3997] loop1: detected capacity change from 0 to 1024 [ 58.453650][ T3997] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.543699][ T3997] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 58.786128][ T28] audit: type=1400 audit(1776531109.642:229): avc: denied { create } for pid=3984 comm="syz.0.133" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 58.828868][ T3987] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.133: corrupted inode contents [ 58.846232][ T3997] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.874228][ T3997] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 58.904776][ T3997] EXT4-fs (loop1): orphan cleanup on readonly fs [ 58.916242][ T28] audit: type=1400 audit(1776531109.782:230): avc: denied { getopt } for pid=4000 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.919846][ T3997] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.136: Inode bitmap for bg 0 marked uninitialized [ 58.949569][ T3987] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #2: comm syz.0.133: mark_inode_dirty error [ 58.988350][ T3997] loop1: lost filesystem error report for type 5 error -117 [ 58.990049][ T28] audit: type=1400 audit(1776531109.852:231): avc: denied { setopt } for pid=4000 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.997415][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 58.997434][ C1] EXT4-fs (loop1): initial error at time 1776531109: ext4_read_inode_bitmap:167 [ 58.997455][ C1] EXT4-fs (loop1): last error at time 1776531109: ext4_read_inode_bitmap:167 [ 59.053281][ T3997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.078320][ T4004] bridge0: entered promiscuous mode [ 59.083878][ T3987] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.133: corrupted inode contents [ 59.103230][ T3987] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.133: mark_inode_dirty error [ 59.115996][ T4004] macvlan2: entered allmulticast mode [ 59.144316][ T4004] bridge0: entered allmulticast mode [ 59.151011][ T3999] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #2: comm syz.0.133: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 59.151011][ T3999] [ 59.173060][ T28] audit: type=1400 audit(1776531110.022:232): avc: denied { create } for pid=3984 comm="syz.0.133" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 59.197193][ T4004] bridge0: port 3(macvlan2) entered blocking state [ 59.204262][ T4004] bridge0: port 3(macvlan2) entered disabled state [ 59.212442][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.223016][ T3999] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.133: corrupted inode contents [ 59.235589][ T4004] bridge0: left allmulticast mode [ 59.241200][ T4004] bridge0: left promiscuous mode [ 59.247920][ T3999] EXT4-fs error (device loop0): ext4_append:88: inode #2: comm syz.0.133: mark_inode_dirty error [ 59.262474][ T3999] EXT4-fs error (device loop0) in ext4_append:100: Corrupt filesystem [ 59.330773][ T4006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 59.347089][ T4006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.357548][ T4006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 59.366729][ T4006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 59.379351][ T4006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.388725][ T4006] bond1: (slave bond0): making interface the new active one [ 59.397955][ T4006] bond1: (slave bond0): Enslaving as an active interface with an up link [ 59.709788][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.713332][ T4010] loop4: detected capacity change from 0 to 128 [ 59.726665][ T4010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'. [ 59.737819][ T28] audit: type=1326 audit(1776531110.602:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd44fc819 code=0x7ffc0000 [ 59.745300][ T4010] loop4: detected capacity change from 0 to 512 [ 59.764086][ T4006] syz.3.141 (4006) used greatest stack depth: 9656 bytes left [ 59.768669][ T4010] journal_path: Non-blockdev passed as './file2' [ 59.782983][ T4010] EXT4-fs: error: could not find journal device path [ 59.827408][ T28] audit: type=1326 audit(1776531110.602:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8fd44fc819 code=0x7ffc0000 [ 59.884294][ T28] audit: type=1326 audit(1776531110.602:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd44fc819 code=0x7ffc0000 [ 59.919247][ T28] audit: type=1326 audit(1776531110.602:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8fd44fc819 code=0x7ffc0000 [ 59.995019][ T4024] loop4: detected capacity change from 0 to 128 [ 60.061209][ T4025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4025 comm=syz.0.140 [ 60.180738][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.254006][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.310734][ T4043] openvswitch: netlink: Flow actions attr not present in new flow. [ 60.324785][ T4043] program syz.4.153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.478194][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.700095][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.114047][ T4067] netlink: 9 bytes leftover after parsing attributes in process `syz.1.160'. [ 61.307915][ T4067] gretap0: entered promiscuous mode [ 61.378616][ T3038] 8021q: adding VLAN 0 to HW filter on device eth1 [ 61.390720][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 61.390736][ T28] audit: type=1400 audit(1776531112.253:265): avc: denied { mount } for pid=4088 comm="syz.3.162" name="/" dev="autofs" ino=5861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 61.463246][ T4097] loop1: detected capacity change from 0 to 1024 [ 61.466824][ T4098] unsupported nla_type 210 [ 61.481348][ T4097] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.494525][ T4097] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.506639][ T36] bridge_slave_1: left allmulticast mode [ 61.512638][ T36] bridge_slave_1: left promiscuous mode [ 61.518262][ T4097] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 61.518556][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.526937][ T4097] EXT4-fs (loop1): orphan cleanup on readonly fs [ 61.540648][ T4097] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.164: Freeing blocks not in datazone - block = 0, count = 4096 [ 61.566394][ T36] bridge_slave_0: left allmulticast mode [ 61.572846][ T4097] loop1: lost filesystem error report for type 5 error -117 [ 61.574778][ T4097] EXT4-fs (loop1): 1 orphan inode deleted [ 61.582250][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 61.582294][ C0] EXT4-fs (loop1): initial error at time 1776531112: ext4_free_blocks:6718 [ 61.582318][ C0] EXT4-fs (loop1): last error at time 1776531112: ext4_free_blocks:6718 [ 61.583918][ T36] bridge_slave_0: left promiscuous mode [ 61.595025][ T4097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.630130][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.643135][ T4107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.168'. [ 61.660863][ T4097] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.164: iget: bad i_size value: 1970324836974602 [ 61.794494][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.815036][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.825603][ T4112] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.164: iget: bad i_size value: 1970324836974602 [ 61.826711][ T36] bond0 (unregistering): Released all slaves [ 61.846412][ T4112] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.164: iget: bad i_size value: 1970324836974602 [ 61.847052][ T36] bond1 (unregistering): Released all slaves [ 61.873791][ T4100] FAULT_INJECTION: forcing a failure. [ 61.873791][ T4100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.892350][ T4100] CPU: 1 UID: 0 PID: 4100 Comm: syz.3.166 Not tainted syzkaller #0 PREEMPT(full) [ 61.892377][ T4100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 61.892438][ T4100] Call Trace: [ 61.892444][ T4100] [ 61.892452][ T4100] __dump_stack+0x1d/0x30 [ 61.892481][ T4100] dump_stack_lvl+0x95/0xd0 [ 61.892504][ T4100] dump_stack+0x15/0x1b [ 61.892527][ T4100] should_fail_ex+0x263/0x280 [ 61.892627][ T4100] should_fail+0xb/0x20 [ 61.892659][ T4100] should_fail_usercopy+0x1a/0x20 [ 61.892688][ T4100] _copy_to_user+0x20/0xa0 [ 61.892832][ T4100] simple_read_from_buffer+0xb5/0x130 [ 61.892853][ T4100] proc_fail_nth_read+0x10e/0x150 [ 61.892884][ T4100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.892912][ T4100] vfs_read+0x1ab/0x7f0 [ 61.892998][ T4100] ? __rcu_read_unlock+0x4e/0x70 [ 61.893021][ T4100] ? __fget_files+0x184/0x1c0 [ 61.893042][ T4100] ? mutex_lock+0x57/0x90 [ 61.893066][ T4100] ksys_read+0xdc/0x1a0 [ 61.893147][ T4100] __x64_sys_read+0x40/0x50 [ 61.893175][ T4100] x64_sys_call+0x2886/0x3020 [ 61.893202][ T4100] do_syscall_64+0x12c/0x3b0 [ 61.893242][ T4100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.893263][ T4100] RIP: 0033:0x7fc848e8d04e [ 61.893278][ T4100] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 61.893296][ T4100] RSP: 002b:00007fc84791efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.893382][ T4100] RAX: ffffffffffffffda RBX: 00007fc84791f6c0 RCX: 00007fc848e8d04e [ 61.893420][ T4100] RDX: 000000000000000f RSI: 00007fc84791f0a0 RDI: 0000000000000003 [ 61.893461][ T4100] RBP: 00007fc84791f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.893473][ T4100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.893485][ T4100] R13: 00007fc849146038 R14: 00007fc849145fa0 R15: 00007ffd13676fb8 [ 61.893504][ T4100] [ 62.118027][ T36] tipc: Left network mode [ 62.135048][ T36] hsr_slave_0: left promiscuous mode [ 62.141524][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.150929][ T36] hsr_slave_1: left promiscuous mode [ 62.157875][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.168239][ T4120] FAULT_INJECTION: forcing a failure. [ 62.168239][ T4120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.181764][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.189087][ T4120] CPU: 0 UID: 0 PID: 4120 Comm: syz.4.172 Not tainted syzkaller #0 PREEMPT(full) [ 62.189119][ T4120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 62.189131][ T4120] Call Trace: [ 62.189139][ T4120] [ 62.189147][ T4120] __dump_stack+0x1d/0x30 [ 62.189176][ T4120] dump_stack_lvl+0x95/0xd0 [ 62.189274][ T4120] dump_stack+0x15/0x1b [ 62.189338][ T4120] should_fail_ex+0x263/0x280 [ 62.189423][ T4120] should_fail+0xb/0x20 [ 62.189450][ T4120] should_fail_usercopy+0x1a/0x20 [ 62.189481][ T4120] _copy_from_user+0x1c/0xb0 [ 62.189565][ T4120] ___sys_sendmsg+0xc1/0x1e0 [ 62.189597][ T4120] __x64_sys_sendmsg+0xd4/0x160 [ 62.189619][ T4120] x64_sys_call+0x194c/0x3020 [ 62.189682][ T4120] do_syscall_64+0x12c/0x3b0 [ 62.189714][ T4120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.189816][ T4120] RIP: 0033:0x7f8fd44fc819 [ 62.189833][ T4120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.189852][ T4120] RSP: 002b:00007f8fd2f4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.189874][ T4120] RAX: ffffffffffffffda RBX: 00007f8fd4775fa0 RCX: 00007f8fd44fc819 [ 62.189888][ T4120] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000003 [ 62.189901][ T4120] RBP: 00007f8fd2f4f090 R08: 0000000000000000 R09: 0000000000000000 [ 62.189942][ T4120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.189956][ T4120] R13: 00007f8fd4776038 R14: 00007f8fd4775fa0 R15: 00007ffd582150c8 [ 62.189982][ T4120] [ 62.190315][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.366780][ T4133] loop1: detected capacity change from 0 to 256 [ 62.373246][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.384847][ T36] veth1_macvtap: left promiscuous mode [ 62.387779][ T4133] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.390420][ T36] veth0_macvtap: left promiscuous mode [ 62.424447][ T36] veth1_vlan: left promiscuous mode [ 62.430042][ T36] veth0_vlan: left promiscuous mode [ 62.556622][ T4136] loop4: detected capacity change from 0 to 128 [ 62.572601][ T36] team0 (unregistering): Port device team_slave_1 removed [ 62.585085][ T36] team0 (unregistering): Port device team_slave_0 removed [ 62.642528][ T4117] bridge0: entered promiscuous mode [ 62.647920][ T4117] macvlan2: entered allmulticast mode [ 62.653797][ T4117] bridge0: entered allmulticast mode [ 62.661931][ T4117] bridge0: port 3(macvlan2) entered blocking state [ 62.668796][ T4117] bridge0: port 3(macvlan2) entered disabled state [ 62.678383][ T4117] bridge0: left allmulticast mode [ 62.683580][ T4117] bridge0: left promiscuous mode [ 62.702622][ T4129] netlink: 'syz.4.173': attribute type 13 has an invalid length. [ 62.711799][ T4129] netlink: 'syz.4.173': attribute type 12 has an invalid length. [ 62.727469][ T3038] 8021q: adding VLAN 0 to HW filter on device eth3 [ 62.877359][ T308] kworker/u8:6: attempt to access beyond end of device [ 62.877359][ T308] loop4: rw=1, sector=145, nr_sectors = 104 limit=128 [ 62.913247][ T308] kworker/u8:6: attempt to access beyond end of device [ 62.913247][ T308] loop4: rw=1, sector=257, nr_sectors = 120 limit=128 [ 63.001545][ T4040] chnl_net:caif_netlink_parms(): no params data found [ 63.010007][ T308] kworker/u8:6: attempt to access beyond end of device [ 63.010007][ T308] loop4: rw=1, sector=385, nr_sectors = 128 limit=128 [ 63.011263][ T4162] loop3: detected capacity change from 0 to 2048 [ 63.041424][ T308] kworker/u8:6: attempt to access beyond end of device [ 63.041424][ T308] loop4: rw=1, sector=521, nr_sectors = 128 limit=128 [ 63.080117][ T308] kworker/u8:6: attempt to access beyond end of device [ 63.080117][ T308] loop4: rw=1, sector=657, nr_sectors = 128 limit=128 [ 63.102137][ T308] kworker/u8:6: attempt to access beyond end of device [ 63.102137][ T308] loop4: rw=1, sector=793, nr_sectors = 128 limit=128 [ 63.117384][ T308] kworker/u8:6: attempt to access beyond end of device [ 63.117384][ T308] loop4: rw=1, sector=929, nr_sectors = 112 limit=128 [ 63.117866][ T4162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.131603][ T308] kworker/u8:6: attempt to access beyond end of device [ 63.131603][ T308] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 63.170723][ T308] kworker/u8:6: attempt to access beyond end of device [ 63.170723][ T308] loop4: rw=1, sector=513, nr_sectors = 8 limit=128 [ 63.171202][ T4162] EXT4-fs (loop3): shut down requested (0) [ 63.185578][ T308] kworker/u8:6: attempt to access beyond end of device [ 63.185578][ T308] loop4: rw=1, sector=649, nr_sectors = 8 limit=128 [ 63.195955][ T28] audit: type=1400 audit(1776531114.053:266): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 63.227440][ T28] audit: type=1400 audit(1776531114.053:267): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.253735][ T28] audit: type=1400 audit(1776531114.053:268): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.280959][ T4162] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 63.291142][ T4162] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 63.325967][ T4040] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.333178][ T28] audit: type=1400 audit(1776531114.053:269): avc: denied { add_name } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.354580][ T4040] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.357096][ T4178] loop4: detected capacity change from 0 to 1024 [ 63.362123][ T4040] bridge_slave_0: entered allmulticast mode [ 63.374236][ T28] audit: type=1400 audit(1776531114.053:270): avc: denied { create } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.395909][ T4040] bridge_slave_0: entered promiscuous mode [ 63.416873][ T4182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'. [ 63.420967][ T4178] EXT4-fs: Ignoring removed bh option [ 63.431909][ T4040] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.442476][ T4040] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.451418][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.455517][ T28] audit: type=1400 audit(1776531114.053:271): avc: denied { append open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.484064][ T4178] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.495602][ T28] audit: type=1400 audit(1776531114.053:272): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.518528][ T4040] bridge_slave_1: entered allmulticast mode [ 63.519652][ T28] audit: type=1400 audit(1776531114.173:273): avc: denied { rmdir } for pid=4161 comm="syz.3.178" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.547433][ T4040] bridge_slave_1: entered promiscuous mode [ 63.559912][ T4178] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 63.583300][ T4178] System zones: 0-1, 3-12 [ 63.585564][ T28] audit: type=1400 audit(1776531114.183:274): avc: denied { add_name } for pid=4161 comm="syz.3.178" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.611580][ T4178] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.177: bad orphan inode 11 [ 63.624367][ T4178] loop4: lost filesystem error report for type 5 error -117 [ 63.624485][ T4178] EXT4-fs (loop4): Remounting filesystem read-only [ 63.626973][ T4040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.631839][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 63.653918][ C0] EXT4-fs (loop4): initial error at time 1776531114: ext4_orphan_get:1423 [ 63.662502][ C0] EXT4-fs (loop4): last error at time 1776531114: ext4_orphan_get:1423 [ 63.671177][ T4178] ext4_test_bit(bit=10, block=4) = 0 [ 63.677292][ T4178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.681347][ T4192] loop0: detected capacity change from 0 to 1024 [ 63.693459][ T4040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.707542][ T4192] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.729036][ T4040] team0: Port device team_slave_0 added [ 63.736371][ T4192] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 63.752954][ T4192] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.763871][ T4040] team0: Port device team_slave_1 added [ 63.777682][ T4192] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 63.817512][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.844739][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.885832][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.891505][ T4192] EXT4-fs (loop0): orphan cleanup on readonly fs [ 63.912476][ T4040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.960040][ T4192] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.183: Inode bitmap for bg 0 marked uninitialized [ 64.093818][ T4203] loop3: detected capacity change from 0 to 512 [ 64.216335][ T4203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.308775][ T4192] loop0: lost filesystem error report for type 5 error -117 [ 64.312554][ T4192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.429430][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.440873][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.448732][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.476893][ T4040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.807250][ T4040] hsr_slave_0: entered promiscuous mode [ 64.828607][ T4040] hsr_slave_1: entered promiscuous mode [ 64.853400][ T4040] debugfs: 'hsr0' already exists in 'hsr' [ 64.868040][ T4040] Cannot create hsr debugfs directory [ 64.955525][ T4213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 64.976549][ T4218] loop0: detected capacity change from 0 to 1764 [ 64.983508][ T4218] iso9660: Bad value for 'gid' [ 65.035395][ T4218] iso9660: Bad value for 'gid' [ 65.150012][ T4040] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.208229][ T4040] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.223521][ T4040] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.248196][ T4040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.269157][ T4040] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.301664][ T4040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.328955][ T4040] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.361570][ T4040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.385015][ T3038] 8021q: adding VLAN 0 to HW filter on device eth2 [ 65.459776][ T4244] loop1: detected capacity change from 0 to 128 [ 65.497610][ T4244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 65.545768][ T4040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.555206][ T4244] loop1: detected capacity change from 0 to 512 [ 65.570211][ T4244] journal_path: Non-blockdev passed as './file2' [ 65.587179][ T4040] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.608263][ T4244] EXT4-fs: error: could not find journal device path [ 65.634025][ T3443] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.641254][ T3443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.698416][ T3443] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.705750][ T3443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.730275][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.753040][ T4252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 65.789236][ T4252] netlink: 48 bytes leftover after parsing attributes in process `syz.1.191'. [ 65.799734][ T3038] 8021q: adding VLAN 0 to HW filter on device eth4 [ 65.862990][ T4265] loop3: detected capacity change from 0 to 1024 [ 65.891530][ T4273] netlink: 64 bytes leftover after parsing attributes in process `syz.4.195'. [ 65.905693][ T4265] EXT4-fs (loop3): unable to read superblock [ 65.993555][ T4279] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 66.030780][ T4279] EXT4-fs (loop1): orphan cleanup on readonly fs [ 66.044587][ T4040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.059051][ T4279] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.196: bad orphan inode 15 [ 66.095493][ T4279] loop1: lost filesystem error report for type 5 error -117 [ 66.095819][ T4279] ext4_test_bit(bit=14, block=18) = 1 [ 66.109056][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 66.109096][ C1] EXT4-fs (loop1): initial error at time 1776531371: ext4_orphan_get:1423 [ 66.109144][ C1] EXT4-fs (loop1): last error at time 1776531371: ext4_orphan_get:1423 [ 66.149307][ T4279] is_bad_inode(inode)=0 [ 66.153719][ T4279] NEXT_ORPHAN(inode)=1023 [ 66.158816][ T4279] max_ino=32 [ 66.162128][ T4279] i_nlink=0 [ 66.167653][ T4279] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #15: comm syz.1.196: corrupted xattr block 19: e_value size too large [ 66.182408][ T4279] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.182749][ T4279] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 66.216345][ T4279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 ro without journal. Quota mode: none. [ 66.246810][ T4279] xt_policy: neither incoming nor outgoing policy selected [ 66.297835][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 66.341197][ T4298] mmap: syz.3.199 (4298) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.404301][ T4040] veth0_vlan: entered promiscuous mode [ 66.438956][ T4308] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 66.451071][ T4308] EXT4-fs (loop4): mount failed [ 66.467739][ T4313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'. [ 66.491391][ T4040] veth1_vlan: entered promiscuous mode [ 66.587710][ T4319] capability: warning: `syz.3.202' uses 32-bit capabilities (legacy support in use) [ 66.628917][ T4040] veth0_macvtap: entered promiscuous mode [ 66.639642][ T4040] veth1_macvtap: entered promiscuous mode [ 66.673424][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.710339][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.915912][ T4322] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.927669][ T4322] EXT4-fs: Ignoring removed bh option [ 66.976035][ T4322] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 67.053833][ T4322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.070870][ T4322] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.100883][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 67.100901][ T28] audit: type=1400 audit(1776531372.968:323): avc: denied { append } for pid=4307 comm="syz.4.200" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.116135][ T4325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 67.141449][ T4325] netlink: 48 bytes leftover after parsing attributes in process `syz.0.204'. [ 67.155857][ T93] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.175500][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.188722][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.207996][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.263605][ T4337] xt_CT: No such helper "syz1" [ 67.337797][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 67.355794][ T4348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.210'. [ 67.367076][ T28] audit: type=1400 audit(1776531373.239:324): avc: denied { write } for pid=4345 comm="syz.0.209" name="file0" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 67.376313][ T4348] vfat: Unknown parameter '0xffffffffffffffff' [ 67.403780][ T4350] FAULT_INJECTION: forcing a failure. [ 67.403780][ T4350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.432997][ T4352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.150'. [ 67.444855][ T4352] vlan2: entered allmulticast mode [ 67.445351][ T4350] CPU: 0 UID: 0 PID: 4350 Comm: syz.0.212 Not tainted syzkaller #0 PREEMPT(full) [ 67.445428][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 67.445441][ T4350] Call Trace: [ 67.445448][ T4350] [ 67.445457][ T4350] __dump_stack+0x1d/0x30 [ 67.445505][ T4350] dump_stack_lvl+0x95/0xd0 [ 67.445532][ T4350] dump_stack+0x15/0x1b [ 67.445587][ T4350] should_fail_ex+0x263/0x280 [ 67.445618][ T4350] should_fail+0xb/0x20 [ 67.445646][ T4350] should_fail_usercopy+0x1a/0x20 [ 67.445743][ T4350] _copy_from_user+0x1c/0xb0 [ 67.445865][ T4350] __sys_bpf+0x183/0x7e0 [ 67.445985][ T4350] __x64_sys_bpf+0x41/0x50 [ 67.446012][ T4350] x64_sys_call+0x10cb/0x3020 [ 67.446076][ T4350] do_syscall_64+0x12c/0x3b0 [ 67.446119][ T4350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.446142][ T4350] RIP: 0033:0x7fa6d2efc819 [ 67.446159][ T4350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.446242][ T4350] RSP: 002b:00007fa6d1957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.446265][ T4350] RAX: ffffffffffffffda RBX: 00007fa6d3175fa0 RCX: 00007fa6d2efc819 [ 67.446394][ T4350] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 67.446408][ T4350] RBP: 00007fa6d1957090 R08: 0000000000000000 R09: 0000000000000000 [ 67.446422][ T4350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.446436][ T4350] R13: 00007fa6d3176038 R14: 00007fa6d3175fa0 R15: 00007ffecd2e7048 [ 67.446458][ T4350] [ 67.556903][ T4356] set_capacity_and_notify: 5 callbacks suppressed [ 67.556918][ T4356] loop9: detected capacity change from 0 to 7 [ 67.565106][ T4352] macvtap0: entered allmulticast mode [ 67.617510][ T4357] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 67.621586][ T4352] veth0_macvtap: entered allmulticast mode [ 67.623555][ T28] audit: type=1400 audit(1776531373.309:325): avc: denied { setopt } for pid=4349 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.648816][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 67.663023][ T28] audit: type=1400 audit(1776531373.459:326): avc: denied { block_suspend } for pid=4358 comm="syz.0.214" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.671284][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.693386][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 67.693427][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.693577][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 67.701516][ T28] audit: type=1400 audit(1776531373.479:327): avc: denied { mount } for pid=4358 comm="syz.0.214" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.710580][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.712055][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 67.766823][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.776680][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 67.786055][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.793999][ T4356] loop9: unable to read partition table [ 67.799934][ T4356] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 67.813624][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 67.813674][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.831025][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 67.840220][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.915099][ T4368] loop1: detected capacity change from 0 to 256 [ 68.031395][ T4373] loop5: detected capacity change from 0 to 736 [ 68.069522][ T4378] loop4: detected capacity change from 0 to 1024 [ 68.089093][ T4378] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.120044][ T4378] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.220: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 68.197892][ T4378] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.198082][ T4378] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.220: couldn't read orphan inode 11 (err -117) [ 68.207559][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 68.207579][ C0] EXT4-fs (loop4): initial error at time 1776531374: ext4_ext_check_inode:521: inode 11 [ 68.207612][ C0] EXT4-fs (loop4): last error at time 1776531374: ext4_ext_check_inode:521: inode 11 [ 68.255001][ T4378] loop4: lost filesystem error report for type 5 error -117 [ 68.257530][ T4378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.296509][ T4384] netlink: 'syz.5.221': attribute type 13 has an invalid length. [ 68.304536][ T4384] netlink: 'syz.5.221': attribute type 17 has an invalid length. [ 68.336006][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.342542][ T4387] loop3: detected capacity change from 0 to 1024 [ 68.354964][ T28] audit: type=1400 audit(1776531374.219:328): avc: denied { setopt } for pid=4382 comm="syz.5.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.381948][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.389155][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.393326][ T4387] EXT4-fs: Ignoring removed bh option [ 68.405784][ T28] audit: type=1400 audit(1776531374.249:329): avc: denied { read } for pid=4382 comm="syz.5.221" path="socket:[7397]" dev="sockfs" ino=7397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.432767][ T4387] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.455086][ T4390] netlink: 20 bytes leftover after parsing attributes in process `syz.5.221'. [ 68.486784][ T28] audit: type=1400 audit(1776531374.309:330): avc: denied { write } for pid=4382 comm="syz.5.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.493477][ T4387] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 68.549140][ T4387] System zones: 0-1, 3-12 [ 68.563532][ T4387] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.222: bad orphan inode 11 [ 68.599502][ T4387] loop3: lost filesystem error report for type 5 error -117 [ 68.599720][ T4387] EXT4-fs (loop3): Remounting filesystem read-only [ 68.607243][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 68.607267][ C0] EXT4-fs (loop3): initial error at time 1776531374: ext4_orphan_get:1423 [ 68.607294][ C0] EXT4-fs (loop3): last error at time 1776531374: ext4_orphan_get:1423 [ 68.714931][ T4387] ext4_test_bit(bit=10, block=4) = 0 [ 68.724218][ T4387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.868586][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.904512][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.933329][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.967162][ T4400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'. [ 69.008565][ T4383] veth0_macvtap: left allmulticast mode [ 69.075349][ T4404] loop3: detected capacity change from 0 to 256 [ 69.171931][ T4384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.183381][ T4384] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.199255][ T4384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.218834][ T54] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.236817][ T54] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.278198][ T54] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.317550][ T4326] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.192937][ T4431] loop5: detected capacity change from 0 to 1024 [ 70.206322][ T4431] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.261628][ T4431] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 70.294086][ T4431] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 70.416312][ T4431] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 70.551392][ T4431] loop5: detected capacity change from 0 to 512 [ 70.625016][ T28] audit: type=1400 audit(1776531376.469:331): avc: denied { connect } for pid=4435 comm="syz.0.235" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.734351][ T28] audit: type=1400 audit(1776531376.469:332): avc: denied { write } for pid=4435 comm="syz.0.235" path="socket:[8753]" dev="sockfs" ino=8753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.210668][ T4442] loop4: detected capacity change from 0 to 512 [ 71.404721][ T4431] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 71.489783][ T4442] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 71.532992][ T4431] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 71.546498][ T4431] EXT4-fs (loop5): 1 truncate cleaned up [ 71.552708][ T4431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.569293][ T4442] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.586304][ T4431] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 71.595769][ T4431] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 71.646135][ T4442] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.236: bad orphan inode 15 [ 71.662456][ T4455] loop3: detected capacity change from 0 to 256 [ 71.688205][ T4442] loop4: lost filesystem error report for type 5 error -117 [ 71.688683][ T4442] ext4_test_bit(bit=14, block=18) = 1 [ 71.696112][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 71.696155][ C1] EXT4-fs (loop4): initial error at time 1776531377: ext4_orphan_get:1423 [ 71.696209][ C1] EXT4-fs (loop4): last error at time 1776531377: ext4_orphan_get:1423 [ 71.842330][ T4442] is_bad_inode(inode)=0 [ 71.847662][ T4442] NEXT_ORPHAN(inode)=1023 [ 71.852235][ T4442] max_ino=32 [ 71.855824][ T4442] i_nlink=0 [ 71.859588][ T4442] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #15: comm syz.4.236: corrupted xattr block 19: e_value size too large [ 71.875697][ T4442] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.876100][ T4442] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 71.927185][ T4442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 ro without journal. Quota mode: none. [ 72.067003][ T4472] xt_policy: neither incoming nor outgoing policy selected [ 72.219588][ T4040] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.263732][ T4482] FAULT_INJECTION: forcing a failure. [ 72.263732][ T4482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.307991][ T4482] CPU: 1 UID: 0 PID: 4482 Comm: syz.5.242 Not tainted syzkaller #0 PREEMPT(full) [ 72.308034][ T4482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 72.308048][ T4482] Call Trace: [ 72.308056][ T4482] [ 72.308065][ T4482] __dump_stack+0x1d/0x30 [ 72.308098][ T4482] dump_stack_lvl+0x95/0xd0 [ 72.308127][ T4482] dump_stack+0x15/0x1b [ 72.308223][ T4482] should_fail_ex+0x263/0x280 [ 72.308257][ T4482] should_fail+0xb/0x20 [ 72.308282][ T4482] should_fail_usercopy+0x1a/0x20 [ 72.308358][ T4482] _copy_from_iter+0xcf/0xea0 [ 72.308393][ T4482] ? __alloc_skb+0x4f6/0x690 [ 72.308476][ T4482] ? __alloc_skb+0x200/0x690 [ 72.308589][ T4482] netlink_sendmsg+0x4ae/0x6f0 [ 72.308621][ T4482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.308675][ T4482] ____sys_sendmsg+0x563/0x5b0 [ 72.308703][ T4482] ___sys_sendmsg+0x195/0x1e0 [ 72.308740][ T4482] __x64_sys_sendmsg+0xd4/0x160 [ 72.308841][ T4482] x64_sys_call+0x194c/0x3020 [ 72.308894][ T4482] do_syscall_64+0x12c/0x3b0 [ 72.308924][ T4482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.309008][ T4482] RIP: 0033:0x7f36d021c819 [ 72.309063][ T4482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.309081][ T4482] RSP: 002b:00007f36cec77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.309103][ T4482] RAX: ffffffffffffffda RBX: 00007f36d0495fa0 RCX: 00007f36d021c819 [ 72.309121][ T4482] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000003 [ 72.309138][ T4482] RBP: 00007f36cec77090 R08: 0000000000000000 R09: 0000000000000000 [ 72.309153][ T4482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.309198][ T4482] R13: 00007f36d0496038 R14: 00007f36d0495fa0 R15: 00007ffd67695488 [ 72.309220][ T4482] [ 72.523919][ T4491] netlink: 20 bytes leftover after parsing attributes in process `syz.5.245'. [ 72.533435][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 72.552287][ T4493] netlink: 36 bytes leftover after parsing attributes in process `syz.0.247'. [ 72.603859][ T4504] loop0: detected capacity change from 0 to 512 [ 72.621342][ T4504] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 72.652670][ T4504] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.248: bad orphan inode 15 [ 72.675088][ T4504] loop0: lost filesystem error report for type 5 error -117 [ 72.677091][ T4504] ext4_test_bit(bit=14, block=5) = 0 [ 72.684520][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 72.684542][ C0] EXT4-fs (loop0): initial error at time 1776531378: ext4_orphan_get:1423 [ 72.684588][ C0] EXT4-fs (loop0): last error at time 1776531378: ext4_orphan_get:1423 [ 72.726707][ T4504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.729663][ T4517] loop1: detected capacity change from 0 to 256 [ 72.762737][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 72.762754][ T28] audit: type=1400 audit(1776531378.629:334): avc: denied { mount } for pid=4502 comm="syz.0.248" name="/" dev="ramfs" ino=8838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 72.806942][ T28] audit: type=1400 audit(1776531378.669:335): avc: denied { allowed } for pid=4502 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.851360][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.886709][ T28] audit: type=1400 audit(1776531378.749:336): avc: denied { getopt } for pid=4527 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.889728][ T4530] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 73.023322][ T4536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.254'. [ 73.046176][ T4530] program syz.3.253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.101892][ T4547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'. [ 73.301915][ T4563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'. [ 73.352679][ T4567] No such timeout policy "syz1" [ 73.353144][ T4568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'. [ 73.389053][ T4568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.264'. [ 73.735049][ T4563] bond1: option mode: unable to set because the bond device has slaves [ 73.790750][ T28] audit: type=1400 audit(1776531379.659:337): avc: denied { execute } for pid=4578 comm="syz.1.269" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 73.828589][ T28] audit: type=1326 audit(1776531379.689:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4578 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0528ac819 code=0x7ffc0000 [ 73.872391][ T28] audit: type=1326 audit(1776531379.689:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4578 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0528ac819 code=0x7ffc0000 [ 73.896339][ T28] audit: type=1326 audit(1776531379.689:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4578 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa0528ac819 code=0x7ffc0000 [ 73.928641][ T28] audit: type=1326 audit(1776531379.689:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4578 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0528ac819 code=0x7ffc0000 [ 73.952661][ T28] audit: type=1326 audit(1776531379.689:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4578 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0528ac819 code=0x7ffc0000 [ 73.979220][ T28] audit: type=1326 audit(1776531379.689:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4578 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0528ac819 code=0x7ffc0000 [ 74.221390][ T4598] loop4: detected capacity change from 0 to 128 [ 74.512119][ T4603] netlink: 'syz.5.278': attribute type 27 has an invalid length. [ 75.007066][ T4613] FAULT_INJECTION: forcing a failure. [ 75.007066][ T4613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.045889][ T4603] vlan2: left allmulticast mode [ 75.062973][ T4613] CPU: 0 UID: 0 PID: 4613 Comm: syz.0.281 Not tainted syzkaller #0 PREEMPT(full) [ 75.063004][ T4613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 75.063048][ T4613] Call Trace: [ 75.063056][ T4613] [ 75.063065][ T4613] __dump_stack+0x1d/0x30 [ 75.063099][ T4613] dump_stack_lvl+0x95/0xd0 [ 75.063188][ T4613] dump_stack+0x15/0x1b [ 75.063222][ T4613] should_fail_ex+0x263/0x280 [ 75.063257][ T4613] should_fail+0xb/0x20 [ 75.063298][ T4613] should_fail_usercopy+0x1a/0x20 [ 75.063390][ T4613] _copy_from_user+0x1c/0xb0 [ 75.063447][ T4613] bpf_test_init+0xb9/0x130 [ 75.063474][ T4613] bpf_prog_test_run_xdp+0x306/0xa10 [ 75.063503][ T4613] ? __rcu_read_unlock+0x4e/0x70 [ 75.063539][ T4613] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.063614][ T4613] bpf_prog_test_run+0x204/0x340 [ 75.063646][ T4613] __sys_bpf+0x52e/0x7e0 [ 75.063685][ T4613] __x64_sys_bpf+0x41/0x50 [ 75.063715][ T4613] x64_sys_call+0x10cb/0x3020 [ 75.063749][ T4613] do_syscall_64+0x12c/0x3b0 [ 75.063786][ T4613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.063874][ T4613] RIP: 0033:0x7fa6d2efc819 [ 75.063890][ T4613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.063909][ T4613] RSP: 002b:00007fa6d1957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.063963][ T4613] RAX: ffffffffffffffda RBX: 00007fa6d3175fa0 RCX: 00007fa6d2efc819 [ 75.063981][ T4613] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 75.063997][ T4613] RBP: 00007fa6d1957090 R08: 0000000000000000 R09: 0000000000000000 [ 75.064013][ T4613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.064028][ T4613] R13: 00007fa6d3176038 R14: 00007fa6d3175fa0 R15: 00007ffecd2e7048 [ 75.064048][ T4613] [ 75.246617][ T4603] macvtap0: left allmulticast mode [ 75.287390][ T4607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.297169][ T4607] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.309847][ T4607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.413965][ T4619] loop0: detected capacity change from 0 to 128 [ 75.533521][ T4624] loop1: detected capacity change from 0 to 128 [ 75.566488][ T4624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 75.638649][ T4626] netlink: 'syz.0.286': attribute type 10 has an invalid length. [ 75.664908][ T4629] loop1: detected capacity change from 0 to 512 [ 75.673422][ T4626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.286'. [ 75.685124][ T4629] journal_path: Non-blockdev passed as './file2' [ 75.708334][ T4630] loop3: detected capacity change from 0 to 512 [ 75.719644][ T4629] EXT4-fs: error: could not find journal device path [ 75.729841][ T4626] batadv0: entered promiscuous mode [ 75.739378][ T4630] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 75.758706][ T4626] batadv0: entered allmulticast mode [ 75.776530][ T4626] bridge0: port 3(batadv0) entered blocking state [ 75.789225][ T4626] bridge0: port 3(batadv0) entered disabled state [ 75.796980][ T4626] bridge0: port 3(batadv0) entered blocking state [ 75.803463][ T4626] bridge0: port 3(batadv0) entered forwarding state [ 75.810341][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 75.819735][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 75.854745][ T4630] EXT4-fs (loop3): orphan cleanup on readonly fs [ 75.861565][ T4630] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.287: bad orphan inode 15 [ 75.872143][ T4630] loop3: lost filesystem error report for type 5 error -117 [ 75.872467][ T4630] ext4_test_bit(bit=14, block=18) = 1 [ 75.879788][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 75.879821][ C0] EXT4-fs (loop3): initial error at time 1776531381: ext4_orphan_get:1423 [ 75.879843][ C0] EXT4-fs (loop3): last error at time 1776531381: ext4_orphan_get:1423 [ 75.910457][ T4630] is_bad_inode(inode)=0 [ 75.914973][ T4630] NEXT_ORPHAN(inode)=1023 [ 75.919509][ T4630] max_ino=32 [ 75.922827][ T4630] i_nlink=0 [ 75.926503][ T4630] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz.3.287: corrupted xattr block 19: e_value size too large [ 75.941071][ T4630] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.941233][ T4630] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 76.040044][ T4630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 ro without journal. Quota mode: none. [ 76.102565][ T4628] xt_policy: neither incoming nor outgoing policy selected [ 76.124685][ T4642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 76.145013][ T4643] loop4: detected capacity change from 0 to 512 [ 76.216396][ T4643] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 76.225066][ T4643] System zones: 0-2, 18-18, 34-34 [ 76.231490][ T4643] EXT4-fs (loop4): 1 orphan inode deleted [ 76.238239][ T4643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.251025][ T4643] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.322590][ T4647] loop0: detected capacity change from 0 to 512 [ 76.386685][ T4647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.101840][ T36] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 77.126410][ T36] EXT4-fs (loop4): Remounting filesystem read-only [ 77.135147][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 77.155386][ T4643] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.353321][ T4697] veth0_vlan: entered allmulticast mode [ 77.379362][ T4700] veth0_vlan: left promiscuous mode [ 77.386193][ T4700] veth0_vlan: entered promiscuous mode [ 77.553964][ T4709] bridge0: entered promiscuous mode [ 77.561786][ T4712] loop5: detected capacity change from 0 to 512 [ 77.592346][ T4709] macvlan2: entered allmulticast mode [ 77.604317][ T4712] EXT4-fs (loop5): 1 truncate cleaned up [ 77.616272][ T4709] bridge0: entered allmulticast mode [ 77.630921][ T4712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.640453][ T4709] bridge0: port 3(macvlan2) entered blocking state [ 77.649958][ T4709] bridge0: port 3(macvlan2) entered disabled state [ 77.688466][ T4709] bridge0: left allmulticast mode [ 77.695356][ T4709] bridge0: left promiscuous mode [ 77.695752][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.787079][ T4040] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.882578][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 77.882622][ T28] audit: type=1400 audit(1776531638.747:426): avc: denied { bind } for pid=4735 comm="syz.3.301" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.007144][ T4741] netlink: 'syz.4.298': attribute type 1 has an invalid length. [ 78.101683][ T4743] netlink: 68 bytes leftover after parsing attributes in process `syz.4.298'. [ 78.120401][ T4743] loop4: detected capacity change from 0 to 512 [ 78.138118][ T4743] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.205624][ T4743] EXT4-fs (loop4): 1 truncate cleaned up [ 78.212804][ T4743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.350940][ T4749] netlink: 'syz.1.303': attribute type 10 has an invalid length. [ 78.408841][ T28] audit: type=1400 audit(1776531638.757:427): avc: denied { name_bind } for pid=4735 comm="syz.3.301" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 78.432508][ T4749] hsr0: entered promiscuous mode [ 78.442509][ T4749] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 78.452769][ T4746] loop3: detected capacity change from 0 to 512 [ 78.458412][ T4749] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 78.466827][ T4746] EXT4-fs: Ignoring removed nobh option [ 78.477730][ T4749] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 78.497470][ T4746] EXT4-fs (loop3): orphan cleanup on readonly fs [ 78.507799][ T4746] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.301: EA inode hash validation failed [ 78.525336][ T4746] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 78.554009][ T4746] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.301: corrupted inode contents [ 78.570659][ T4755] loop1: detected capacity change from 0 to 512 [ 78.632753][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.646418][ T4746] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.646619][ T4746] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #15: comm syz.3.301: mark_inode_dirty error [ 78.655822][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 78.655851][ C0] EXT4-fs (loop3): initial error at time 1776531639: ext4_do_update_inode:5690: inode 15 [ 78.655879][ C0] EXT4-fs (loop3): last error at time 1776531639: ext4_do_update_inode:5690: inode 15 [ 78.693476][ T4748] loop0: detected capacity change from 0 to 32768 [ 78.702980][ T4746] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.703190][ T4746] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.301: corrupted inode contents [ 78.731961][ T4755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.751596][ T4755] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.767957][ T4746] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.804677][ T4746] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.301: mark_inode_dirty error [ 78.844145][ T28] audit: type=1400 audit(1776531639.697:428): avc: denied { bind } for pid=4754 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.867055][ T4746] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.878692][ T4746] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.301: mark inode dirty (error -117) [ 78.894980][ T28] audit: type=1400 audit(1776531639.697:429): avc: denied { name_connect } for pid=4754 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 78.918781][ T4746] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.998455][ T4746] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 79.101022][ T4746] EXT4-fs (loop3): 1 orphan inode deleted [ 79.143939][ T4746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 79.358851][ T4738] raw_sendmsg: syz.3.301 forgot to set AF_INET. Fix it! [ 79.400108][ T28] audit: type=1400 audit(1776531640.267:430): avc: denied { getopt } for pid=4735 comm="syz.3.301" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.420884][ T4738] netlink: 96 bytes leftover after parsing attributes in process `syz.3.301'. [ 79.463059][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.504684][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.311'. [ 79.518379][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.555864][ T4775] macvlan2: entered promiscuous mode [ 79.579030][ T4775] hsr0: entered promiscuous mode [ 79.587327][ T4775] macvlan2: entered allmulticast mode [ 79.592975][ T4775] hsr0: entered allmulticast mode [ 79.598127][ T4775] hsr_slave_0: entered allmulticast mode [ 79.610204][ T4775] hsr_slave_1: entered allmulticast mode [ 79.628928][ T4784] loop3: detected capacity change from 0 to 1024 [ 79.658771][ T4786] loop1: detected capacity change from 0 to 128 [ 79.703404][ T28] audit: type=1400 audit(1776531640.547:431): avc: denied { mounton } for pid=4783 comm="syz.3.312" path="/syzcgroup/net/syz3/cgroup.procs" dev="cgroup" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 79.746543][ T28] audit: type=1400 audit(1776531640.607:432): avc: denied { connect } for pid=4791 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.760570][ T4785] bio_check_eod: 3 callbacks suppressed [ 79.760587][ T4785] syz.1.313: attempt to access beyond end of device [ 79.760587][ T4785] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 79.775065][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.5.317'. [ 79.787170][ T4784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.826314][ T4784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.929334][ T4814] netlink: 'syz.4.323': attribute type 12 has an invalid length. [ 79.949416][ T4814] netlink: 'syz.4.323': attribute type 28 has an invalid length. [ 79.975902][ T4814] netlink: 148 bytes leftover after parsing attributes in process `syz.4.323'. [ 80.053732][ T28] audit: type=1400 audit(1776531640.917:433): avc: denied { ioctl } for pid=4826 comm="syz.4.327" path="socket:[7998]" dev="sockfs" ino=7998 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.523120][ T4832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'. [ 80.542543][ T4834] loop5: detected capacity change from 0 to 256 [ 80.570411][ T4834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.330'. [ 80.604005][ T4838] tipc: Started in network mode [ 80.619087][ T4842] loop3: detected capacity change from 0 to 764 [ 80.626366][ T4040] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 80.634512][ T4838] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 80.648864][ T4842] rock: directory entry would overflow storage [ 80.655313][ T4842] rock: sig=0x4654, size=5, remaining=4 [ 80.663879][ T4040] FAT-fs (loop5): Filesystem has been set read-only [ 80.668364][ T4838] tipc: Enabling of bearer rejected, failed to enable media [ 80.691385][ T4040] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000007) [ 80.708876][ T4850] loop1: detected capacity change from 0 to 1024 [ 80.715611][ T4040] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000007) [ 80.726840][ T4850] EXT4-fs: Ignoring removed bh option [ 80.762082][ T4850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.811032][ T28] audit: type=1400 audit(1776531641.677:434): avc: denied { create } for pid=4849 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.879508][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.930235][ T4866] netlink: 76 bytes leftover after parsing attributes in process `syz.1.341'. [ 80.996439][ T28] audit: type=1400 audit(1776531641.867:435): avc: denied { create } for pid=4869 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 81.052018][ T4873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'. [ 81.073775][ T4873] netlink: 580 bytes leftover after parsing attributes in process `syz.1.345'. [ 81.214916][ T3443] bridge_slave_1: left allmulticast mode [ 81.222054][ T4893] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 81.244124][ T3443] bridge_slave_1: left promiscuous mode [ 81.256436][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.330936][ T3443] bridge_slave_0: left allmulticast mode [ 81.343354][ T3443] bridge_slave_0: left promiscuous mode [ 81.357010][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.365315][ T4893] loop0: detected capacity change from 0 to 128 [ 81.507909][ T3443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.529142][ T3443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.542960][ T3443] bond0 (unregistering): Released all slaves [ 81.567854][ T3038] 8021q: adding VLAN 0 to HW filter on device eth5 [ 81.671777][ T3443] hsr_slave_0: left promiscuous mode [ 81.696242][ T3443] hsr_slave_1: left promiscuous mode [ 81.712419][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.735424][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.750380][ T3443] hsr0: left allmulticast mode [ 81.757021][ T3443] hsr0: left promiscuous mode [ 81.796303][ T4919] journal_path: Non-blockdev passed as './file2' [ 81.804324][ T4919] EXT4-fs: error: could not find journal device path [ 81.826786][ T3443] team0 (unregistering): Port device team_slave_1 removed [ 81.838885][ T3443] team0 (unregistering): Port device team_slave_0 removed [ 81.908229][ T4917] bond1: option mode: unable to set because the bond device has slaves [ 81.956554][ T4918] batadv0: left promiscuous mode [ 81.961797][ T4918] bridge0: port 3(batadv0) entered disabled state [ 81.976045][ T4918] bridge_slave_0: left allmulticast mode [ 81.982046][ T4918] bridge_slave_0: left promiscuous mode [ 81.988513][ T4918] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.998631][ T4918] bridge_slave_1: left allmulticast mode [ 82.004949][ T4918] bridge_slave_1: left promiscuous mode [ 82.010865][ T4918] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.021635][ T4918] bond0: (slave bond_slave_0): Releasing backup interface [ 82.036736][ T4918] bond0: (slave bond_slave_1): Releasing backup interface [ 82.070472][ T4918] team0: Port device team_slave_0 removed [ 82.092492][ T4918] team0: Port device team_slave_1 removed [ 82.102414][ T4918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.110844][ T4918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.119747][ T4918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.127635][ T4918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.136815][ T4918] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 82.397150][ T3038] 8021q: adding VLAN 0 to HW filter on device eth6 [ 82.574915][ T36] bond1: (slave bond0): link status definitely down, disabling slave [ 82.616356][ T36] bond1: now running without any active interface! [ 82.853571][ T4874] chnl_net:caif_netlink_parms(): no params data found [ 82.882485][ T4957] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 83.192012][ T4874] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.199446][ T4874] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.206717][ T4874] bridge_slave_0: entered allmulticast mode [ 83.213265][ T4874] bridge_slave_0: entered promiscuous mode [ 83.220391][ T4874] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.228598][ T4874] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.244058][ T4874] bridge_slave_1: entered allmulticast mode [ 83.258628][ T4966] set_capacity_and_notify: 3 callbacks suppressed [ 83.258694][ T4966] loop4: detected capacity change from 0 to 2048 [ 83.264873][ T4874] bridge_slave_1: entered promiscuous mode [ 83.301059][ T4874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.318316][ T4966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.450831][ T4973] loop1: detected capacity change from 0 to 1024 [ 83.460575][ T4973] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 83.474502][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 83.474551][ T28] audit: type=1400 audit(1776531644.307:477): avc: denied { lock } for pid=4961 comm="syz.1.361" path="socket:[10258]" dev="sockfs" ino=10258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 83.516693][ T4874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.451195][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.507772][ T4990] __nla_validate_parse: 5 callbacks suppressed [ 84.507868][ T4990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 84.526016][ T3038] 8021q: adding VLAN 0 to HW filter on device eth7 [ 84.547314][ T4874] team0: Port device team_slave_0 added [ 84.574981][ T4874] team0: Port device team_slave_1 added [ 84.615481][ T4994] loop4: detected capacity change from 0 to 1024 [ 84.662989][ T4998] netlink: 64 bytes leftover after parsing attributes in process `syz.3.367'. [ 84.672319][ T4994] EXT4-fs: Ignoring removed bh option [ 84.705434][ T4874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.718338][ T4994] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.730508][ T4874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.758272][ T4994] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 84.766606][ T4874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.779338][ T4994] System zones: 0-1, 3-12 [ 84.785081][ T4994] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 1: comm syz.4.364: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.800276][ T4874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.807751][ T4874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.834095][ T4994] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 84.834262][ T4994] EXT4-fs (loop4): Remounting filesystem read-only [ 84.843430][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 84.843447][ C1] EXT4-fs (loop4): initial error at time 1776531645: ext4_map_blocks:833: inode 3: block 1 [ 84.843487][ C1] EXT4-fs (loop4): last error at time 1776531645: ext4_map_blocks:833: inode 3: block 1 [ 84.876970][ T4874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.890421][ T4994] Quota error (device loop4): write_blk: dquota write failed [ 84.931134][ T5001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'. [ 84.945668][ T4874] hsr_slave_0: entered promiscuous mode [ 84.961985][ T4874] hsr_slave_1: entered promiscuous mode [ 84.967799][ T5001] netlink: 'syz.0.369': attribute type 1 has an invalid length. [ 84.975982][ T4994] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 84.989417][ T4874] debugfs: 'hsr0' already exists in 'hsr' [ 85.003416][ T5001] netlink: 568 bytes leftover after parsing attributes in process `syz.0.369'. [ 85.012635][ T4994] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 85.021587][ T4874] Cannot create hsr debugfs directory [ 85.047005][ T4994] EXT4-fs (loop4): 1 orphan inode deleted [ 85.083679][ T4994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.283386][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.305454][ T4874] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 85.321695][ T4874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.331298][ T5018] loop1: detected capacity change from 0 to 2048 [ 85.338500][ T4874] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 85.354038][ T4874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.354724][ T5018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.382496][ T4874] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 85.414994][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.435740][ T4874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.465397][ T4874] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 85.533186][ T5036] netlink: 76 bytes leftover after parsing attributes in process `syz.1.374'. [ 85.626575][ T5042] FAULT_INJECTION: forcing a failure. [ 85.626575][ T5042] name failslab, interval 1, probability 0, space 0, times 1 [ 85.639782][ T5042] CPU: 1 UID: 0 PID: 5042 Comm: syz.3.378 Not tainted syzkaller #0 PREEMPT(full) [ 85.639809][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 85.639821][ T5042] Call Trace: [ 85.639829][ T5042] [ 85.639839][ T5042] __dump_stack+0x1d/0x30 [ 85.639872][ T5042] dump_stack_lvl+0x95/0xd0 [ 85.639911][ T5042] dump_stack+0x15/0x1b [ 85.639938][ T5042] should_fail_ex+0x263/0x280 [ 85.640070][ T5042] should_failslab+0x8c/0xb0 [ 85.640092][ T5042] __kvmalloc_node_noprof+0x155/0x640 [ 85.640120][ T5042] ? bpf_test_run_xdp_live+0x17e/0x1360 [ 85.640147][ T5042] bpf_test_run_xdp_live+0x17e/0x1360 [ 85.640250][ T5042] ? __pfx_autoremove_wake_function+0x10/0x10 [ 85.640298][ T5042] ? mutex_unlock+0x4e/0x90 [ 85.640321][ T5042] ? bpf_dispatcher_xdp+0x800/0x1000 [ 85.640341][ T5042] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 85.640392][ T5042] ? bpf_dispatcher_xdp+0x800/0x1000 [ 85.640437][ T5042] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 85.640532][ T5042] bpf_prog_test_run_xdp+0x57b/0xa10 [ 85.640558][ T5042] ? __rcu_read_unlock+0x4e/0x70 [ 85.640656][ T5042] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.640684][ T5042] bpf_prog_test_run+0x204/0x340 [ 85.640718][ T5042] __sys_bpf+0x52e/0x7e0 [ 85.640812][ T5042] __x64_sys_bpf+0x41/0x50 [ 85.640862][ T5042] x64_sys_call+0x10cb/0x3020 [ 85.640900][ T5042] do_syscall_64+0x12c/0x3b0 [ 85.640937][ T5042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.640963][ T5042] RIP: 0033:0x7fc848ecc819 [ 85.641004][ T5042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.641032][ T5042] RSP: 002b:00007fc84791f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.641057][ T5042] RAX: ffffffffffffffda RBX: 00007fc849145fa0 RCX: 00007fc848ecc819 [ 85.641072][ T5042] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 85.641120][ T5042] RBP: 00007fc84791f090 R08: 0000000000000000 R09: 0000000000000000 [ 85.641136][ T5042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.641152][ T4874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.641151][ T5042] R13: 00007fc849146038 R14: 00007fc849145fa0 R15: 00007ffd13676fb8 [ 85.641175][ T5042] [ 85.729956][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 85.785534][ T3038] 8021q: adding VLAN 0 to HW filter on device eth8 [ 85.812500][ T5050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 85.927824][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 85.944025][ T5060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.381'. [ 85.960019][ T5061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.381'. [ 85.961431][ T5044] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.034104][ T5050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.078051][ T5050] bond1: (slave bond0): making interface the new active one [ 86.090217][ T5050] bond1: (slave bond0): Enslaving as an active interface with an up link [ 86.127809][ T5069] loop3: detected capacity change from 0 to 1024 [ 86.151769][ T5069] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.168378][ T5069] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.383: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 86.187338][ T5069] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 86.188713][ T5069] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.383: couldn't read orphan inode 11 (err -117) [ 86.197924][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 86.197946][ C1] EXT4-fs (loop3): initial error at time 1776531647: ext4_ext_check_inode:521: inode 11 [ 86.197980][ C1] EXT4-fs (loop3): last error at time 1776531647: ext4_ext_check_inode:521: inode 11 [ 86.242991][ T5069] loop3: lost filesystem error report for type 5 error -117 [ 86.248734][ T5069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.286124][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.307263][ T4874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.358001][ T4874] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.378451][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.385605][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.432255][ T4874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.445318][ T4874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.465403][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.472543][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.488240][ T5084] loop3: detected capacity change from 0 to 1024 [ 86.520940][ T5084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.541157][ T28] audit: type=1400 audit(1776531647.408:478): avc: denied { mounton } for pid=5083 comm="syz.3.389" path="/89/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.547774][ T5084] xt_hashlimit: size too large, truncated to 1048576 [ 86.591243][ T28] audit: type=1400 audit(1776531647.408:479): avc: denied { append } for pid=5083 comm="syz.3.389" path="/89/file1/blkio.bfq.io_merged" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.633679][ T28] audit: type=1400 audit(1776531647.408:480): avc: denied { map } for pid=5083 comm="syz.3.389" path="/89/file1/blkio.bfq.io_merged" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.731508][ T28] audit: type=1400 audit(1776531647.408:481): avc: denied { append } for pid=5083 comm="syz.3.389" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.809158][ T28] audit: type=1400 audit(1776531647.678:482): avc: denied { remove_name } for pid=3321 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.833608][ T4874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.839101][ T28] audit: type=1400 audit(1776531647.678:483): avc: denied { rmdir } for pid=3321 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.889104][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.920105][ T5109] loop3: detected capacity change from 0 to 1024 [ 86.951898][ T5109] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.963075][ T5109] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 86.995876][ T5109] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.032574][ T5109] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 87.081085][ T5109] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.098425][ T5109] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.394: Inode bitmap for bg 0 marked uninitialized [ 87.115929][ T5109] loop3: lost filesystem error report for type 5 error -117 [ 87.118290][ T5109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.174595][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.359791][ T5120] loop1: detected capacity change from 0 to 512 [ 88.022034][ T5120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.329615][ T5138] FAULT_INJECTION: forcing a failure. [ 88.329615][ T5138] name failslab, interval 1, probability 0, space 0, times 0 [ 88.352513][ T4874] veth0_vlan: entered promiscuous mode [ 88.361328][ T4874] veth1_vlan: entered promiscuous mode [ 88.370554][ T5138] CPU: 1 UID: 0 PID: 5138 Comm: syz.4.398 Not tainted syzkaller #0 PREEMPT(full) [ 88.370656][ T5138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 88.370671][ T5138] Call Trace: [ 88.370678][ T5138] [ 88.370687][ T5138] __dump_stack+0x1d/0x30 [ 88.370717][ T5138] dump_stack_lvl+0x95/0xd0 [ 88.370741][ T5138] dump_stack+0x15/0x1b [ 88.370829][ T5138] should_fail_ex+0x263/0x280 [ 88.370859][ T5138] ? genl_start+0x117/0x390 [ 88.370943][ T5138] should_failslab+0x8c/0xb0 [ 88.370963][ T5138] __kmalloc_cache_noprof+0x5f/0x400 [ 88.370991][ T5138] genl_start+0x117/0x390 [ 88.371079][ T5138] __netlink_dump_start+0x334/0x520 [ 88.371107][ T5138] genl_family_rcv_msg_dumpit+0x1a5/0x210 [ 88.371142][ T5138] ? __pfx_genl_start+0x10/0x10 [ 88.371187][ T5138] ? __pfx_genl_dumpit+0x10/0x10 [ 88.371213][ T5138] ? __pfx_genl_done+0x10/0x10 [ 88.371267][ T5138] genl_rcv_msg+0x400/0x470 [ 88.371343][ T5138] ? __pfx_ethnl_default_start+0x10/0x10 [ 88.371392][ T5138] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 88.371494][ T5138] ? __pfx_ethnl_default_done+0x10/0x10 [ 88.371646][ T5138] netlink_rcv_skb+0x123/0x220 [ 88.371735][ T5138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.371770][ T5138] genl_rcv+0x28/0x40 [ 88.371806][ T5138] netlink_unicast+0x5a8/0x680 [ 88.371826][ T5138] netlink_sendmsg+0x5c8/0x6f0 [ 88.371904][ T5138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.371929][ T5138] ____sys_sendmsg+0x563/0x5b0 [ 88.371957][ T5138] ___sys_sendmsg+0x195/0x1e0 [ 88.372015][ T5138] __x64_sys_sendmsg+0xd4/0x160 [ 88.372037][ T5138] x64_sys_call+0x194c/0x3020 [ 88.372066][ T5138] do_syscall_64+0x12c/0x3b0 [ 88.372103][ T5138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.372243][ T5138] RIP: 0033:0x7f8fd44fc819 [ 88.372260][ T5138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.372280][ T5138] RSP: 002b:00007f8fd2f4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.372304][ T5138] RAX: ffffffffffffffda RBX: 00007f8fd4775fa0 RCX: 00007f8fd44fc819 [ 88.372340][ T5138] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000003 [ 88.372356][ T5138] RBP: 00007f8fd2f4f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.372372][ T5138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.372385][ T5138] R13: 00007f8fd4776038 R14: 00007f8fd4775fa0 R15: 00007ffd582150c8 [ 88.372407][ T5138] [ 88.752349][ T4874] veth0_macvtap: entered promiscuous mode [ 88.799855][ T4874] veth1_macvtap: entered promiscuous mode [ 88.860208][ T4874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.909383][ T4874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.981640][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.007603][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.019178][ T5157] loop3: detected capacity change from 0 to 2048 [ 89.042844][ T5157] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 89.080747][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.114828][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.134007][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.187793][ T5167] syz.1.409 (5167): /proc/5166/oom_adj is deprecated, please use /proc/5166/oom_score_adj instead. [ 89.265836][ T5174] loop1: detected capacity change from 0 to 1024 [ 89.282291][ T5174] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.355359][ T5174] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.412: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 89.403250][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 89.403268][ T28] audit: type=1400 audit(1776531905.277:487): avc: denied { write } for pid=5177 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.433276][ T28] audit: type=1400 audit(1776531905.307:488): avc: denied { write } for pid=5177 comm="syz.3.415" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 89.440395][ T5174] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 89.495447][ T5174] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.412: couldn't read orphan inode 11 (err -117) [ 89.504699][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 89.504718][ C0] EXT4-fs (loop1): initial error at time 1776531905: ext4_ext_check_inode:521: inode 11 [ 89.504751][ C0] EXT4-fs (loop1): last error at time 1776531905: ext4_ext_check_inode:521: inode 11 [ 89.544085][ T5174] loop1: lost filesystem error report for type 5 error -117 [ 89.544663][ T5174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.605802][ T5190] loop6: detected capacity change from 0 to 128 [ 89.629320][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.642118][ T5190] __nla_validate_parse: 11 callbacks suppressed [ 89.642139][ T5190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.420'. [ 89.671130][ T5192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 89.681659][ T5184] xt_l2tp: missing protocol rule (udp|l2tpip) [ 89.691574][ T28] audit: type=1326 audit(1776531905.557:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.6.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d7dec819 code=0x7ffc0000 [ 89.717540][ T5192] netlink: 580 bytes leftover after parsing attributes in process `syz.1.421'. [ 89.728183][ T5193] loop6: detected capacity change from 0 to 512 [ 89.736519][ T5193] journal_path: Non-blockdev passed as './file2' [ 89.743723][ T5193] EXT4-fs: error: could not find journal device path [ 89.751088][ T28] audit: type=1326 audit(1776531905.557:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.6.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d7dec819 code=0x7ffc0000 [ 89.786334][ T28] audit: type=1326 audit(1776531905.557:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.6.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21d7dec819 code=0x7ffc0000 [ 89.817650][ T5199] loop1: detected capacity change from 0 to 1024 [ 89.859067][ T5199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 89.864900][ T28] audit: type=1326 audit(1776531905.557:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.6.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d7dec819 code=0x7ffc0000 [ 89.871594][ T5199] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.944211][ T28] audit: type=1326 audit(1776531905.557:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.6.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d7dec819 code=0x7ffc0000 [ 89.967726][ T28] audit: type=1326 audit(1776531905.557:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.6.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f21d7dec819 code=0x7ffc0000 [ 89.992238][ T28] audit: type=1326 audit(1776531905.557:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.6.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d7dec819 code=0x7ffc0000 [ 90.015949][ T28] audit: type=1326 audit(1776531905.557:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.6.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d7dec819 code=0x7ffc0000 [ 90.105194][ T5213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.424'. [ 90.212550][ T5206] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 90.235491][ T5206] EXT4-fs (loop1): Remounting filesystem read-only [ 90.321746][ T5217] batman_adv: batadv0: Adding interface: dummy0 [ 90.329014][ T5217] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.409638][ T5217] batman_adv: batadv0: Interface activated: dummy0 [ 90.443395][ T5212] batadv0: mtu less than device minimum [ 90.463332][ T5212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.474495][ T5212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.485646][ T5212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.496811][ T5212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.508222][ T5212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.519342][ T5212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.530919][ T5212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.542140][ T5212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.553294][ T5212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.604573][ T5219] netlink: 'syz.3.427': attribute type 13 has an invalid length. [ 90.667805][ T5220] netlink: 'syz.3.427': attribute type 1 has an invalid length. [ 92.836412][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.856595][ T5220] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 92.896086][ T4326] bond1: (slave bond0): link status definitely up, 20000 Mbps full duplex [ 92.920105][ T4326] bond1: (slave bond0): making interface the new active one [ 92.928933][ T4326] bond1: active interface up! [ 92.944211][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 93.097362][ T5240] bridge0: entered promiscuous mode [ 93.118656][ T5240] macvlan2: entered allmulticast mode [ 93.124790][ T5245] loop6: detected capacity change from 0 to 512 [ 93.129157][ T5240] bridge0: entered allmulticast mode [ 93.151339][ T5245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.156700][ T5240] bridge0: port 3(macvlan2) entered blocking state [ 93.164151][ T5245] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.194216][ T5240] bridge0: port 3(macvlan2) entered disabled state [ 93.203788][ T5244] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #2: comm syz.6.435: corrupted inode contents [ 93.231688][ T5240] bridge0: left allmulticast mode [ 93.237467][ T5244] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #2: comm syz.6.435: mark_inode_dirty error [ 93.250389][ T5244] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #2: comm syz.6.435: corrupted inode contents [ 93.255225][ T5240] bridge0: left promiscuous mode [ 93.292514][ T5244] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.435: mark_inode_dirty error [ 93.452220][ T5262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.439'. [ 93.622372][ T4874] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.753448][ T5278] FAULT_INJECTION: forcing a failure. [ 93.753448][ T5278] name failslab, interval 1, probability 0, space 0, times 0 [ 93.800700][ T5278] CPU: 0 UID: 0 PID: 5278 Comm: syz.6.443 Not tainted syzkaller #0 PREEMPT(full) [ 93.800742][ T5278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 93.800823][ T5278] Call Trace: [ 93.800831][ T5278] [ 93.800840][ T5278] __dump_stack+0x1d/0x30 [ 93.800885][ T5278] dump_stack_lvl+0x95/0xd0 [ 93.800962][ T5278] dump_stack+0x15/0x1b [ 93.800991][ T5278] should_fail_ex+0x263/0x280 [ 93.801027][ T5278] should_failslab+0x8c/0xb0 [ 93.801052][ T5278] __kvmalloc_node_noprof+0x155/0x640 [ 93.801117][ T5278] ? page_pool_create_percpu+0x223/0x640 [ 93.801156][ T5278] page_pool_create_percpu+0x223/0x640 [ 93.801234][ T5278] page_pool_create+0x1a/0x30 [ 93.801328][ T5278] bpf_test_run_xdp_live+0x1a8/0x1360 [ 93.801358][ T5278] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 93.801464][ T5278] ? __pfx_autoremove_wake_function+0x10/0x10 [ 93.801493][ T5278] ? mutex_unlock+0x4e/0x90 [ 93.801535][ T5278] ? 0xffffffffa0205240 [ 93.801554][ T5278] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 93.801592][ T5278] ? 0xffffffffa0205240 [ 93.801619][ T5278] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 93.801654][ T5278] bpf_prog_test_run_xdp+0x57b/0xa10 [ 93.801732][ T5278] ? __rcu_read_unlock+0x4e/0x70 [ 93.801765][ T5278] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.801794][ T5278] bpf_prog_test_run+0x204/0x340 [ 93.801854][ T5278] __sys_bpf+0x52e/0x7e0 [ 93.801893][ T5278] __x64_sys_bpf+0x41/0x50 [ 93.801917][ T5278] x64_sys_call+0x10cb/0x3020 [ 93.801944][ T5278] do_syscall_64+0x12c/0x3b0 [ 93.802006][ T5278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.802032][ T5278] RIP: 0033:0x7f21d7dec819 [ 93.802088][ T5278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.802111][ T5278] RSP: 002b:00007f21d6847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.802138][ T5278] RAX: ffffffffffffffda RBX: 00007f21d8065fa0 RCX: 00007f21d7dec819 [ 93.802196][ T5278] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 93.802209][ T5278] RBP: 00007f21d6847090 R08: 0000000000000000 R09: 0000000000000000 [ 93.802224][ T5278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.802240][ T5278] R13: 00007f21d8066038 R14: 00007f21d8065fa0 R15: 00007fff2f00d088 [ 93.802313][ T5278] [ 94.097205][ T5278] page_pool_create_percpu() gave up with errno -12 [ 94.149586][ T5294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 94.180565][ T5294] bond1: option mode: unable to set because the bond device has slaves [ 94.192375][ T5296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'. [ 94.207406][ T5296] hsr0: entered promiscuous mode [ 94.249558][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 94.320826][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 94.350236][ T5305] loop6: detected capacity change from 0 to 1024 [ 94.363649][ T5307] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 94.427559][ T5305] EXT4-fs: test_dummy_encryption option not supported [ 94.456747][ T5309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.454'. [ 94.502002][ T5307] loop0: detected capacity change from 0 to 128 [ 94.533072][ T4326] bond1: (slave bond0): link status definitely down, disabling slave [ 94.555974][ T4326] bond1: now running without any active interface! [ 94.631200][ T5298] loop3: detected capacity change from 0 to 1024 [ 94.676864][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 94.676880][ T28] audit: type=1400 audit(1776531910.548:520): avc: denied { mount } for pid=5315 comm="syz.0.457" name="/" dev="rpc_pipefs" ino=11525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 94.725199][ T5298] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.738775][ T5298] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.755617][ T5298] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.811460][ T5298] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.449: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 94.864450][ T5298] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 94.871918][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 94.887803][ C1] EXT4-fs (loop3): initial error at time 1776531910: ext4_ext_check_inode:521: inode 11 [ 94.897593][ C1] EXT4-fs (loop3): last error at time 1776531910: ext4_ext_check_inode:521: inode 11 [ 94.931626][ T5298] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.449: couldn't read orphan inode 11 (err -117) [ 94.943763][ T5327] loop0: detected capacity change from 0 to 2048 [ 94.954313][ T5298] loop3: lost filesystem error report for type 5 error -117 [ 94.957721][ T5298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.994882][ T5327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.283444][ T28] audit: type=1400 audit(1776531911.098:521): avc: denied { read } for pid=5297 comm="syz.3.449" lport=56789 faddr=::ffff:10.1.1.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.342175][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.532701][ T5339] loop0: detected capacity change from 0 to 2048 [ 95.563221][ T28] audit: type=1400 audit(1776531911.428:522): avc: denied { read write } for pid=5334 comm="syz.6.464" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 95.591338][ T28] audit: type=1400 audit(1776531911.428:523): avc: denied { open } for pid=5334 comm="syz.6.464" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 95.888520][ T5339] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.915463][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.925342][ T5339] FAULT_INJECTION: forcing a failure. [ 95.925342][ T5339] name failslab, interval 1, probability 0, space 0, times 0 [ 96.552260][ T5339] CPU: 0 UID: 0 PID: 5339 Comm: syz.0.463 Not tainted syzkaller #0 PREEMPT(full) [ 96.552339][ T5339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 96.552354][ T5339] Call Trace: [ 96.552360][ T5339] [ 96.552368][ T5339] __dump_stack+0x1d/0x30 [ 96.552396][ T5339] dump_stack_lvl+0x95/0xd0 [ 96.552423][ T5339] dump_stack+0x15/0x1b [ 96.552473][ T5339] should_fail_ex+0x263/0x280 [ 96.552575][ T5339] should_failslab+0x8c/0xb0 [ 96.552600][ T5339] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 96.552626][ T5339] ? __d_alloc+0x37/0x340 [ 96.552665][ T5339] __d_alloc+0x37/0x340 [ 96.552764][ T5339] d_alloc+0x2e/0x100 [ 96.552795][ T5339] lookup_one_qstr_excl+0x95/0x240 [ 96.552854][ T5339] filename_unlinkat+0x149/0x410 [ 96.552884][ T5339] __se_sys_unlinkat+0x80/0x140 [ 96.552967][ T5339] __x64_sys_unlinkat+0x43/0x50 [ 96.552986][ T5339] x64_sys_call+0x1120/0x3020 [ 96.553020][ T5339] do_syscall_64+0x12c/0x3b0 [ 96.553094][ T5339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.553122][ T5339] RIP: 0033:0x7fa6d2efc819 [ 96.553143][ T5339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.553163][ T5339] RSP: 002b:00007fa6d1957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 96.553190][ T5339] RAX: ffffffffffffffda RBX: 00007fa6d3175fa0 RCX: 00007fa6d2efc819 [ 96.553282][ T5339] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 96.553295][ T5339] RBP: 00007fa6d1957090 R08: 0000000000000000 R09: 0000000000000000 [ 96.553308][ T5339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.553320][ T5339] R13: 00007fa6d3176038 R14: 00007fa6d3175fa0 R15: 00007ffecd2e7048 [ 96.553343][ T5339] [ 97.008363][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.729280][ T5370] loop0: detected capacity change from 0 to 256 [ 97.818035][ T5370] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.843185][ T5375] __nla_validate_parse: 1 callbacks suppressed [ 97.843226][ T5375] netlink: 44 bytes leftover after parsing attributes in process `syz.3.470'. [ 97.863170][ T5372] loop1: detected capacity change from 0 to 1024 [ 97.885553][ T5372] EXT4-fs: Ignoring removed bh option [ 97.932569][ T5372] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.952938][ T5375] netlink: 43 bytes leftover after parsing attributes in process `syz.3.470'. [ 97.999428][ T5372] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 98.023040][ T5372] System zones: 0-1, 3-12 [ 98.027667][ T5375] netlink: 'syz.3.470': attribute type 6 has an invalid length. [ 98.038882][ T5375] netlink: 'syz.3.470': attribute type 5 has an invalid length. [ 98.047100][ T5375] netlink: 43 bytes leftover after parsing attributes in process `syz.3.470'. [ 98.057340][ T5372] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 1: comm syz.1.469: lblock 1 mapped to illegal pblock 1 (length 1) [ 98.072258][ T5372] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 98.072530][ T5372] EXT4-fs (loop1): Remounting filesystem read-only [ 98.081590][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 98.081611][ C1] EXT4-fs (loop1): initial error at time 1776531913: ext4_map_blocks:833: inode 3: block 1 [ 98.081660][ C1] EXT4-fs (loop1): last error at time 1776531913: ext4_map_blocks:833: inode 3: block 1 [ 98.185880][ T5389] bridge0: entered promiscuous mode [ 98.213062][ T5389] macvlan2: entered allmulticast mode [ 98.241616][ T5389] bridge0: entered allmulticast mode [ 98.268202][ T5389] bridge0: port 3(macvlan2) entered blocking state [ 98.286367][ T5372] Quota error (device loop1): write_blk: dquota write failed [ 98.304106][ T5389] bridge0: port 3(macvlan2) entered disabled state [ 98.311407][ T5372] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 98.322398][ T5389] bridge0: left allmulticast mode [ 98.330917][ T5389] bridge0: left promiscuous mode [ 98.336417][ T5403] netlink: 64 bytes leftover after parsing attributes in process `syz.6.476'. [ 98.347191][ T5372] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 98.357637][ T5372] EXT4-fs (loop1): 1 orphan inode deleted [ 98.378554][ T5372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.575479][ T28] audit: type=1400 audit(1776531914.438:524): avc: denied { setopt } for pid=5369 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 98.729045][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.934004][ T3314] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 99.003334][ T3314] FAT-fs (loop0): Filesystem has been set read-only [ 99.077459][ T3314] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 99.495252][ T5422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.478'. [ 99.746532][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 100.012990][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.100112][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.205612][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.359289][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.682118][ T5458] loop1: detected capacity change from 0 to 512 [ 100.937732][ T5462] netlink: 'syz.3.488': attribute type 12 has an invalid length. [ 101.050222][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.488'. [ 101.399998][ T36] bond0 (unregistering): Released all slaves [ 101.465871][ T5462] bond0: option primary_reselect: invalid value (111) [ 101.702818][ T5458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.811298][ T36] tipc: Left network mode [ 101.863788][ T5475] loop3: detected capacity change from 0 to 256 [ 102.069617][ T5475] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.206481][ T36] veth1_macvtap: left promiscuous mode [ 102.262072][ T36] veth0_macvtap: left promiscuous mode [ 102.346481][ T36] veth1_vlan: left promiscuous mode [ 102.413447][ T36] veth0_vlan: left promiscuous mode [ 103.121578][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.277329][ T5432] chnl_net:caif_netlink_parms(): no params data found [ 103.358252][ T5432] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.365589][ T5432] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.373054][ T5432] bridge_slave_0: entered allmulticast mode [ 103.381919][ T5432] bridge_slave_0: entered promiscuous mode [ 103.389050][ T5432] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.396297][ T5432] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.403848][ T5432] bridge_slave_1: entered allmulticast mode [ 103.410379][ T5432] bridge_slave_1: entered promiscuous mode [ 103.443414][ T5432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.472633][ T5432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.483593][ T5497] x_tables: duplicate entry at hook 2 [ 103.546103][ T5432] team0: Port device team_slave_0 added [ 103.590833][ T5432] team0: Port device team_slave_1 added [ 103.702772][ T3038] 8021q: adding VLAN 0 to HW filter on device eth9 [ 103.724338][ T5432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.731770][ T5432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.757980][ T5432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.792068][ T5432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.800430][ T5432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.826854][ T5432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.895837][ T5432] hsr_slave_0: entered promiscuous mode [ 103.909252][ T5432] hsr_slave_1: entered promiscuous mode [ 103.993107][ T28] audit: type=1400 audit(1776532174.860:525): avc: denied { getopt } for pid=5528 comm="syz.6.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.088458][ T5542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.498'. [ 104.130483][ T3038] 8021q: adding VLAN 0 to HW filter on device eth10 [ 104.145846][ T5542] netlink: 12 bytes leftover after parsing attributes in process `syz.6.498'. [ 104.167229][ T5432] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 104.182220][ T5432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.200717][ T5432] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 104.219538][ T5432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.237253][ T5432] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 104.256089][ T5432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.284734][ T5432] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 104.310058][ T5432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.409049][ T5432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.438242][ T3038] 8021q: adding VLAN 0 to HW filter on device eth11 [ 104.452057][ T5571] loop6: detected capacity change from 0 to 1024 [ 104.471520][ T5432] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.502645][ T5571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.523143][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.531253][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.550137][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.557731][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.557952][ T28] audit: type=1400 audit(1776532175.410:526): avc: denied { mounton } for pid=5570 comm="syz.6.501" path="/21/file1/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.579517][ T5577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'. [ 104.627573][ T5432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.651409][ T5571] netlink: 12 bytes leftover after parsing attributes in process `syz.6.501'. [ 104.766174][ T5432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.784657][ T5594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'. [ 104.959415][ T3038] 8021q: adding VLAN 0 to HW filter on device eth12 [ 105.072146][ T28] audit: type=1400 audit(1776532175.940:527): avc: denied { unmount } for pid=4874 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.100150][ T4874] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.194437][ T5619] netlink: 'syz.6.504': attribute type 12 has an invalid length. [ 105.214759][ T5619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.504'. [ 105.248121][ T5619] bond0: option primary_reselect: invalid value (111) [ 105.293983][ T5432] veth0_vlan: entered promiscuous mode [ 105.316158][ T5626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 105.332839][ T5432] veth1_vlan: entered promiscuous mode [ 105.370530][ T5628] loop6: detected capacity change from 0 to 512 [ 105.371428][ T5432] veth0_macvtap: entered promiscuous mode [ 105.383510][ T5432] veth1_macvtap: entered promiscuous mode [ 105.407416][ T5432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.424555][ T5432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.440558][ T5628] EXT4-fs: Ignoring removed bh option [ 105.546261][ T5628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.569604][ T4326] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.588336][ T5628] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.609547][ T4326] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.707484][ T4326] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.810969][ T4326] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.132089][ T5644] netlink: 32 bytes leftover after parsing attributes in process `syz.7.481'. [ 106.168914][ T5640] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.508: iget: bad i_size value: 2533274857506816 [ 106.184696][ T28] audit: type=1400 audit(1776532177.030:528): avc: denied { read } for pid=5627 comm="syz.6.508" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 106.239426][ T5644] netlink: 'syz.7.481': attribute type 13 has an invalid length. [ 106.251374][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.7.481'. [ 106.260706][ T5644] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 106.344385][ T5649] loop1: detected capacity change from 0 to 256 [ 106.389075][ T5649] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.405656][ T28] audit: type=1400 audit(1776532177.270:529): avc: denied { execute } for pid=5627 comm="syz.6.508" path="/memory.swap.current" dev="ramfs" ino=11147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 106.516956][ T5658] loop7: detected capacity change from 0 to 164 [ 106.576054][ T5658] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 106.653709][ T4874] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.690464][ T5662] loop6: detected capacity change from 0 to 1024 [ 106.726076][ T5662] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.743068][ T5662] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.517: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 106.785665][ T5662] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 106.785881][ T5662] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.517: couldn't read orphan inode 11 (err -117) [ 106.795120][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 106.795147][ C0] EXT4-fs (loop6): initial error at time 1776532177: ext4_ext_check_inode:521: inode 11 [ 106.795184][ C0] EXT4-fs (loop6): last error at time 1776532177: ext4_ext_check_inode:521: inode 11 [ 106.840587][ T5662] loop6: lost filesystem error report for type 5 error -117 [ 106.857162][ T5662] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.960310][ T4874] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.021769][ T5668] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 107.175308][ T5668] loop6: detected capacity change from 0 to 128 [ 107.221337][ T5676] FAULT_INJECTION: forcing a failure. [ 107.221337][ T5676] name failslab, interval 1, probability 0, space 0, times 0 [ 107.237978][ T2999] ================================================================== [ 107.246204][ T2999] BUG: KCSAN: data-race in d_delete / path_lookupat [ 107.253005][ T2999] [ 107.255421][ T2999] read-write to 0xffff88811b575e40 of 4 bytes by task 3303 on cpu 1: [ 107.263690][ T2999] d_delete+0xbe/0xe0 [ 107.267724][ T2999] d_delete_notify+0x32/0x100 [ 107.272528][ T2999] vfs_unlink+0x289/0x490 [ 107.276890][ T2999] filename_unlinkat+0x1e2/0x410 [ 107.281872][ T2999] __se_sys_unlink+0x2b/0xe0 [ 107.286576][ T2999] __x64_sys_unlink+0x1f/0x30 [ 107.290523][ T5676] CPU: 1 UID: 0 PID: 5676 Comm: syz.7.520 Not tainted syzkaller #0 PREEMPT(full) [ 107.290552][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 107.290565][ T5676] Call Trace: [ 107.290572][ T5676] [ 107.290581][ T5676] __dump_stack+0x1d/0x30 [ 107.290667][ T5676] dump_stack_lvl+0x95/0xd0 [ 107.290693][ T5676] dump_stack+0x15/0x1b [ 107.290718][ T5676] should_fail_ex+0x263/0x280 [ 107.290773][ T5676] should_failslab+0x8c/0xb0 [ 107.290794][ T5676] kmem_cache_alloc_noprof+0x66/0x3f0 [ 107.290834][ T5676] ? skb_clone+0x151/0x1f0 [ 107.290891][ T5676] skb_clone+0x151/0x1f0 [ 107.290912][ T5676] __netlink_deliver_tap+0x2c9/0x500 [ 107.290940][ T5676] netlink_unicast+0x653/0x680 [ 107.291005][ T5676] netlink_sendmsg+0x5c8/0x6f0 [ 107.291032][ T5676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.291058][ T5676] ____sys_sendmsg+0x563/0x5b0 [ 107.291082][ T5676] ___sys_sendmsg+0x195/0x1e0 [ 107.291230][ T5676] __x64_sys_sendmsg+0xd4/0x160 [ 107.291266][ T5676] x64_sys_call+0x194c/0x3020 [ 107.291363][ T5676] do_syscall_64+0x12c/0x3b0 [ 107.291397][ T5676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.291420][ T5676] RIP: 0033:0x7f72a0f5c819 [ 107.291438][ T5676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.291466][ T5676] RSP: 002b:00007f729f98e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.291488][ T5676] RAX: ffffffffffffffda RBX: 00007f72a11d6090 RCX: 00007f72a0f5c819 [ 107.291504][ T5676] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 000000000000000d [ 107.291520][ T5676] RBP: 00007f729f98e090 R08: 0000000000000000 R09: 0000000000000000 [ 107.291534][ T5676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.291548][ T5676] R13: 00007f72a11d6128 R14: 00007f72a11d6090 R15: 00007ffec3e0de38 [ 107.291568][ T5676] [ 107.293867][ T5676] netlink: 'syz.7.520': attribute type 12 has an invalid length. [ 107.300625][ T2999] x64_sys_call+0x2eb6/0x3020 [ 107.300661][ T2999] do_syscall_64+0x12c/0x3b0 [ 107.378937][ T5676] netlink: 8 bytes leftover after parsing attributes in process `syz.7.520'. [ 107.383165][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.383197][ T2999] [ 107.383205][ T2999] read to 0xffff88811b575e40 of 4 bytes by task 2999 on cpu 0: [ 107.383227][ T2999] path_lookupat+0x1d8/0x500 [ 107.383254][ T2999] filename_lookup+0x190/0x390 [ 107.383280][ T2999] do_readlinkat+0x74/0x2f0 [ 107.383310][ T2999] __x64_sys_readlink+0x47/0x60 [ 107.383334][ T2999] x64_sys_call+0x2b51/0x3020 [ 107.383365][ T2999] do_syscall_64+0x12c/0x3b0 [ 107.383399][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.383425][ T2999] [ 107.383431][ T2999] value changed: 0x00300180 -> 0x00004080 [ 107.383454][ T2999] [ 107.383460][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 107.575275][ T2999] CPU: 0 UID: 0 PID: 2999 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 107.584150][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 107.594230][ T2999] ================================================================== [ 107.716940][ T5676] bond0: option primary_reselect: invalid value (111)