last executing test programs: 5m43.943232918s ago: executing program 32 (id=418): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x7, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x20000020) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [], 0xa, "0cf6a15628e8855e0f5666bd9f557580b6e13349297c3921ff3268d65422eaa81f83cca2"}, 0x2f) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0xdb9303c4987113b7, 0x0, 0x1, 0x0, &(0x7f0000000080)) statfs(&(0x7f0000000680)='./bus\x00', 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)={0x64, r3, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) socket$l2tp6(0xa, 0x2, 0x73) 5m39.684299383s ago: executing program 33 (id=468): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f0000002ec0)='1', 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') setuid(0xee01) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91107c000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40840) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c008000", @ANYRES16=r8, @ANYBLOB="00012abd7000fddbdf25790000000c009900ce0a00004a0000000400f4000400f4000400f400"], 0x2c}}, 0x40004) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) listen(r10, 0xfffffffd) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x44}}, 0x20000804) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=@deltaction={0x1a0, 0x31, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20008810}, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r12, &(0x7f0000002800)=""/209, 0xd1, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) 5m20.659950498s ago: executing program 34 (id=759): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000380)={[{@acl}]}, 0x1, 0x561, &(0x7f0000000f80)="$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") syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000c12, &(0x7f0000000580)={[{@gid={'gid', 0x3d, 0xee00}}, {@map_off}, {@unhide}, {@sbsector={'sbsector', 0x3d, 0x4d59b1d3}}, {}, {@dmode={'dmode', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@check_strict}, {@mode={'mode', 0x3d, 0x921}}, {@unhide}, {@showassoc}, {@overriderock}]}, 0x3, 0xa3d, &(0x7f0000001440)="$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") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) ioctl$TCFLSH(r0, 0x540b, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0x0, 0xfffffff9}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRES64=r2, @ANYRESOCT=r3], &(0x7f0000000080)='GPL\x00'}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) accept(r5, &(0x7f0000000300)=@isdn, &(0x7f0000000180)=0x80) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={r6, 0x4}, &(0x7f00000001c0)=0x8) write$snapshot(r0, &(0x7f00000003c0)="424845a5bfcdc358a3ec8fad8629a1216938b7482d9bad1c952a9db51dded7194d726c11abef76fd310cd2c4671720cdf2f80dfe61a7f1ed8218c7d84c6bfd5776c73ff13aa1ef6fdc4cf5dd77495867e032c7ef453646ab9d232de2f17b3c3fc54f911ab300db349f1c874645ffe4055426d4a1b8909e851a1a09764c2014cbd7d84a8f96901f6c67ccae254344f377af1280e386142a99d7cb8b43ddfb1ff9c3e4086ae6f7c7", 0xa7) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r7, 0x1, 0xb, 0x0, &(0x7f0000000400)) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x23, &(0x7f0000000040), 0xcf) fallocate(r0, 0x50, 0x2080000, 0x1000f4) r9 = open(&(0x7f0000000500)='./file1\x00', 0x64842, 0x21) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000003) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) 3m2.996016054s ago: executing program 35 (id=2934): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x100010, 0x10000, 0x1, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800800010067747000140002800800030001"], 0x40}}, 0x20000000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x8188ca, &(0x7f0000000080)={[{@nodots}, {@nodots}, {@nodots}, {@fat=@dos1xfloppy}, {@nodots}, {@dots}, {@nodots}]}, 0x5, 0x11f8, &(0x7f0000002440)="$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") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) pwritev(r4, &(0x7f00000080c0)=[{&(0x7f0000000180)="428a", 0x2}, {0x0}], 0x2, 0x4, 0x2) 2m49.839421112s ago: executing program 36 (id=3112): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x140c, 0xb21, 0x70bd25, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000) r1 = socket$packet(0x11, 0x3, 0x300) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @remote}, 0x10) 2m48.65166721s ago: executing program 37 (id=3125): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x100, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x8b, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef2, 0x0, 0x19, 0x3, 0x2}}, {0x8, 0x2, [0x200, 0x6]}}, {{0x1c, 0x1, {0x8, 0x92, 0x5, 0xfffffff8, 0x2, 0x6, 0x8, 0x5}}, {0xe, 0x2, [0x0, 0xfff, 0x2, 0x1044, 0xe]}}, {{0x1c, 0x1, {0x8, 0x2, 0xee, 0x4, 0x2, 0x80, 0x3, 0x1}}, {0x6, 0x2, [0x78]}}, {{0x1c, 0x1, {0x0, 0xdb, 0x602, 0x7a, 0x1, 0xc84, 0x5, 0x2}}, {0x8, 0x2, [0xd, 0x5]}}, {{0x1c, 0x1, {0x7b, 0x8, 0x8000, 0xad, 0x0, 0x85, 0x3, 0x8}}, {0x14, 0x2, [0x2, 0x5, 0x8001, 0x2e2d, 0x4, 0x6, 0x3, 0x5817]}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) 2m28.911237047s ago: executing program 38 (id=3178): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x9840c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1700, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x2000000000000116, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x53, '\x00', 0x0, @fallback=0x14, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r8, &(0x7f0000000040)=ANY=[], 0xffffff6a) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080)={'vcan0', 0x32, 0x32}, 0x8) write$P9_RVERSION(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1300000065ffff64ffffee0600395032303030"], 0x13) ioctl$TCXONC(r0, 0x540a, 0x3) (fail_nth: 1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) io_uring_setup(0x2f04, &(0x7f0000000b80)={0x0, 0xa868, 0x40, 0x20001, 0x2d6}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) ioctl$PIO_SCRNMAP(r9, 0x4b41, &(0x7f0000000600)="e106a93d5a6614485b0f0ff6c5317a0a75789bb0e4a904ca8f261c943a5d327ef29e37d508d024ad68981b35ce6ce3fa55b2541a2e9af47010c71ae54b60d0dea9ae8601f8bca3761c1411b1bc82d307b2b9d1b9bf1843a8a1919f3f58bbeb8407045c0cfb92134fe66412eb78c7a387129fdda9c0705302f2121c8e6a4ccc285f43a9506156aeaafdb960a349fe775690a5e052b19c70ce40af326c82373d34073316eda114eae71ab83138f07f13a29ca9f0cc2619a0f5b0745fe3d80d3f119582ce08173775f34618c6cc6023f7412b315db426b566b00a25469c771648b6b9d981ac92a7") socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000180)={'wg1\x00', &(0x7f0000000000)=@ethtool_dump={0x3e, 0x7fff, 0x7}}) 2m18.098989879s ago: executing program 0 (id=3540): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x62404}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x3}}, 0x20) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000400)=@nl=@kern={0x10, 0x0, 0x0, 0x80000000}, 0x80, 0x0}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010000304981576f66e00000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002c00128009000100766c616e000000001c0002800600010001000000100003800c00fe00030000000800000008000500", @ANYRES32=r5, @ANYBLOB], 0x54}, 0x1, 0xba01}, 0x0) 2m17.880035292s ago: executing program 0 (id=3545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_io_uring_setup(0xec2, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x9}, &(0x7f0000000580)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x95d, 0xfa39, 0xe1, 0x0, 0x0) io_uring_enter(r1, 0xedd, 0x8acb, 0x41, 0x0, 0x0) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 2m17.770619838s ago: executing program 0 (id=3546): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x40, 0x0, 0x10, 0x70bd26, 0x21dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1d58078da822f49f}, 0x44000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030000000000000000000200000605000100070000000900020073797a310000000003000780080013000000000008001240fffffff70500050002008000000004000100000014000300686173683a69702c706f72742c697000"], 0x60}, 0x1, 0x0, 0x0, 0x4004800}, 0x20048888) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, r2, 0x0) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008004}, 0x4004) (async) socket$nl_generic(0x10, 0x3, 0x10) 2m17.74361822s ago: executing program 0 (id=3547): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003180), 0x80040) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) flock(r2, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffd}, [@alu={0x4, 0x0, 0x6, 0xa, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000031c0)={{0xd5, 0xb}, {0x0, 0x1}, 0x9, 0x3}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef0000001c0012800b0001006d616373656300000c000280050003000800000008000500", @ANYRES32=r1], 0x44}}, 0x0) 2m17.659719614s ago: executing program 0 (id=3548): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95", @ANYRES32], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2dbe549d}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="090000005f45ffe305000000080000000f00000039f60fa29902b29447b5402af5d61b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 64) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) (async) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async) close(0x3) (async, rerun: 64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (rerun: 64) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0xffffffffffffff99, 0x1b, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f00000001c0)=""/63) socket(0x1e, 0x4, 0x0) 2m17.582828019s ago: executing program 0 (id=3549): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_pidfd_open(0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000d8c0)=@delchain={0x34, 0x2e, 0x31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff2, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) 2m16.69809341s ago: executing program 39 (id=3565): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d800000000000000001d0048007ea6c0f9a94f441bdf551a0038001d001931a0e69ee517d34482bc06000000a705251e6182949a3e51f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0xffffffffffffff2c, 0x1f00c00e}, 0x20000081) (async) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r2, 0x891c, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711241000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 2m9.671970894s ago: executing program 8 (id=3642): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f00000003c0)={[{@grpjquota}, {@nouid32}, {@grpquota}, {@quota}, {@nombcache}, {@nombcache}, {@barrier_val={'barrier', 0x3d, 0x90a}}, {@dioread_lock}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) (fail_nth: 15) 2m9.160050643s ago: executing program 8 (id=3643): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000100)) 2m8.291998694s ago: executing program 8 (id=3650): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r2) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2a18422, 0x0) 2m8.129040133s ago: executing program 8 (id=3652): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000700)={{0x10, 0xf}, 'port0\x00', 0x1, 0x220040, 0x1, 0x9, 0x6, 0x7, 0x2, 0x0, 0x1, 0x7f}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x200001, 0x5, 0x0, 0x100, 0xfc8, 0x20c200a3, r3}) r5 = geteuid() getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x400) syz_clone3(&(0x7f0000000640)={0x81000000, &(0x7f0000000240)=0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), {0x30}, &(0x7f0000000300)=""/24, 0x18, &(0x7f00000005c0)=""/117, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) pidfd_getfd(r7, r1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@migrate={0xd4, 0x21, 0x8, 0x70bd28, 0x25dfdbff, {{@in=@private=0xa010101, @in=@private=0xa010100, 0x4e22, 0x0, 0x4e20, 0x3, 0xa, 0x180, 0x80, 0x84, r6, r5}, 0x6e6bb5}, [@etimer_thresh={0x8, 0xc, 0x8004}, @algo_aead={0x7c, 0x12, {{'gcm(fcrypt-generic)\x00'}, 0x180, 0xa0, "9c6fdbafe9f827fa101f9043c09bccb378c04c155edd7b020e5db7fc31d049de4c21c152576951ec38244ae708847ab6"}}]}, 0xd4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f00000003c0)={[{@grpjquota}, {@nouid32}, {@grpquota}, {@quota}, {@nombcache}, {@nombcache}, {@barrier_val={'barrier', 0x3d, 0x90a}}, {@dioread_lock}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) 2m7.995269201s ago: executing program 8 (id=3654): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = syz_io_uring_setup(0x5440, &(0x7f00000001c0)={0x0, 0x0, 0x10000, 0x4000000}, &(0x7f0000000080)=0x0, &(0x7f00000011c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r2 = eventfd(0xff9) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0)=r2, 0x1) (async) io_uring_enter(r0, 0x3, 0x10a5, 0x3, 0x0, 0x0) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111be0000e700000085100000020000008500d00e630000009500000000000100950500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0xee00}}, './file0\x00'}) (async) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_io_uring_setup(0x6e62, &(0x7f00000003c0)={0x0, 0xaf3, 0x80, 0x0, 0x240, 0x0, r0}, &(0x7f0000000500), &(0x7f0000000540)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000b00)={0x10, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000580)=""/65, 0x41}, {&(0x7f0000000600)=""/185, 0xb9}, {&(0x7f00000006c0)=""/117, 0x75}, {&(0x7f0000000740)=""/204, 0xcc}, {&(0x7f0000000840)=""/226, 0xe2}, {&(0x7f0000000940)=""/53, 0x35}, {&(0x7f0000000980)=""/20, 0x14}, {&(0x7f00000009c0)=""/85, 0x55}], &(0x7f0000000ac0)=[0x0, 0x5, 0xa8, 0x5, 0x7, 0x7, 0x1, 0x6], 0x8}, 0x20) (async) fstat(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f0000000340)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000380)=0x28) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee01}}, './file0\x00'}) (async) r10 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000001600)={0x0, 0x0}, &(0x7f0000001640)=0xc) setreuid(r11, r11) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x41010, &(0x7f00000002c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB=',gid=', @ANYRESHEX=r6, @ANYBLOB=',qid=', @ANYRESHEX=r8, @ANYBLOB=',fowner=', @ANYRESDEC=r9, @ANYBLOB=',euid>', @ANYRESDEC=r11, @ANYBLOB=',\x00']) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r12}, &(0x7f0000000d80), &(0x7f0000000dc0)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r14, 0x1, 0x22, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r13, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) (async) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) 2m7.882011847s ago: executing program 8 (id=3655): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006500bf1700000008003950323030302e4c"], 0x15) ioctl$TCXONC(r0, 0x540a, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = inotify_init() connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x80000, 0x85) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r5, 0xa9525000) timer_create(0x2, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r6, 0x0, 0xee01) close_range(r4, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x9840c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1700, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x4000, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x2000000000000116, &(0x7f0000000340)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x53, '\x00', 0x0, @fallback=0x14, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r10, &(0x7f0000000040)=ANY=[], 0xffffff6a) write$cgroup_netprio_ifpriomap(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="c012228105eead8a"], 0x8) 2m3.167385409s ago: executing program 40 (id=3549): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_pidfd_open(0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000d8c0)=@delchain={0x34, 0x2e, 0x31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff2, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) 1m57.813392037s ago: executing program 5 (id=3762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xb03}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2040}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x94) 1m57.459964578s ago: executing program 5 (id=3764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_io_uring_setup(0xec2, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x9}, &(0x7f0000000580)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x95d, 0xfa39, 0xe1, 0x0, 0x0) io_uring_enter(r1, 0xedd, 0x8acb, 0x41, 0x0, 0x0) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 1m57.332086785s ago: executing program 5 (id=3766): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00'}, 0x94) (async) syz_emit_ethernet(0x1c0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0xfea000, 0x2000402) (async) pwritev2(r0, &(0x7f00000013c0)=[{&(0x7f0000000140)="e5", 0x1}], 0x1, 0xa, 0xb, 0x0) (async) r1 = fsopen(&(0x7f0000000180)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) mknodat(r2, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a0088a80180c20000032833b165653286dd6676b0c9000c88"], 0x46) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c) r6 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xc69f, 0x400, 0x1, 0x36f}, &(0x7f00000004c0)=0x0, &(0x7f00000000c0)=0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0xefd, 0x3, 0x0, 0x10000}) (async) io_uring_enter(r6, 0x3498, 0x969, 0xffff0000000000a1, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) shutdown(0xffffffffffffffff, 0x1) (async) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000180)=""/51) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000004640)='>', 0x1, 0x0) (async) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.incfs.metadata\x00', 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) 1m57.268032718s ago: executing program 5 (id=3767): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000440)=ANY=[], 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) 1m57.202629692s ago: executing program 5 (id=3769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xe228]}, &(0x7f0000000040), 0x8) r1 = syz_io_uring_setup(0xec2, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x9}, &(0x7f0000000580)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0xf4, r4, 0xe701ac47a3d23ecd, 0x70bd28, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}]}, 0xf4}}, 0x0) io_uring_enter(r1, 0x95d, 0xfa39, 0xe1, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r5, 0x18, 0x887, 0xd) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000008000000806000186dd06100001aaaaaaaa0100fe8000000000000000000000000000aaa3587bb399f200000000000000000000000000000001"], 0x0) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f0000000080)) io_uring_enter(r1, 0xedd, 0x8acb, 0x41, 0x0, 0x0) write$tun(r5, &(0x7f00000002c0)={@void, @val={0x0, 0x3, 0x1, 0xc, 0x1}, @eth={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@mpls_uc={0x8847, {[{0x0, 0x0, 0x1}, {0x35a2d, 0x0, 0x1}, {0xd8, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x7}], @generic="1b47dc3f5d68e45b51dfa949693d77b7fe66b9e8dfa11ea27e6162334300a8fb936dd4fca3d1b59615cb3efb4712ec9a4e503aff95735c5be4689a0d7c4e5ba086ed32f607e43447e0d42d9f01a7a45db0e18357"}}}}}, 0x84) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_io_uring_setup(0x3c7d, &(0x7f0000000980)={0x0, 0xeee2, 0x20, 0x0, 0x220, 0x0, r6}, 0x0, 0x0) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) 1m57.137701896s ago: executing program 5 (id=3771): pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) socket$inet6(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x97ffffff) 1m57.111244767s ago: executing program 41 (id=3771): pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) socket$inet6(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x97ffffff) 1m53.42827853s ago: executing program 42 (id=3655): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006500bf1700000008003950323030302e4c"], 0x15) ioctl$TCXONC(r0, 0x540a, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = inotify_init() connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x80000, 0x85) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r5, 0xa9525000) timer_create(0x2, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r6, 0x0, 0xee01) close_range(r4, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x9840c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1700, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x4000, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x2000000000000116, &(0x7f0000000340)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x53, '\x00', 0x0, @fallback=0x14, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r10, &(0x7f0000000040)=ANY=[], 0xffffff6a) write$cgroup_netprio_ifpriomap(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="c012228105eead8a"], 0x8) 1m39.935312786s ago: executing program 1 (id=4025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70007bdbdf2511000d0037eb868500"/36], 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) readv(r2, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/162, 0xa2}], 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4010, r2, 0xb0e16000) close(0x3) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x20101) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x8, 0x8}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) r5 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r8 = accept(r6, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000080), &(0x7f00000002c0)=@udp6=r8}, 0x20) recvmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) accept4$inet6(r8, 0x0, 0x0, 0x800) close_range(r5, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000200)) 1m25.966073371s ago: executing program 1 (id=4038): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf250000", @ANYRES32, @ANYBLOB="001000008000000008000f002000"], 0xe8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf250000", @ANYRES32, @ANYBLOB="001000008000000008000f002000"], 0xe8}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 1m25.964726001s ago: executing program 1 (id=4040): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x8, 0x6, 0x900, 0x1000, 0x2, 0x8}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 1m25.80321969s ago: executing program 1 (id=4047): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0xb6df4c32c1d5c814, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000000c0)={0x4, 0xffffffffffffebaa}) 1m25.714382545s ago: executing program 1 (id=4048): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 1m25.700421676s ago: executing program 1 (id=4049): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000006c0)={[{@nogrpid}, {@bh}, {@discard}, {@errors_remount}, {@nolazytime, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@usrjquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'noblock\xa7\x0f\x9e\x03\xfe\x10\xa4\xe7y'}}, {@context={'context', 0x3d, 'user_u'}}], 0x2c}, 0x2, 0x505, &(0x7f0000001c80)="$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") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r0, 0x0) 1m11.291994886s ago: executing program 43 (id=4049): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000006c0)={[{@nogrpid}, {@bh}, {@discard}, {@errors_remount}, {@nolazytime, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@usrjquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'noblock\xa7\x0f\x9e\x03\xfe\x10\xa4\xe7y'}}, {@context={'context', 0x3d, 'user_u'}}], 0x2c}, 0x2, 0x505, &(0x7f0000001c80)="$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") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r0, 0x0) 59.153934304s ago: executing program 6 (id=4477): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffff00, 0xff000000, 0xffffffff, 0xff000000], 'wg2\x00', 'erspan0\x00', {}, {0xff}, 0x5c, 0xde, 0x2, 0x33}, 0x0, 0xa8, 0x110, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@RATEEST={0x0, 'RATEEST\x00', 0x0, {'syz0\x00', 0xa, 0x0, {0x2}}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff], 'netpci0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x2b, 0xd, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xa, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x36b) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005000000"], 0xd0}}, 0x0) 59.019661882s ago: executing program 6 (id=4480): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x3}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x7}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8c1}, 0x80) (fail_nth: 17) 58.69450291s ago: executing program 6 (id=4483): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x1400a, &(0x7f00000001c0), 0xff, 0x54f, &(0x7f0000000200)="$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") 58.544067329s ago: executing program 6 (id=4485): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff7000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x8b}]}, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) mount_setattr(r1, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x2014050, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mq_open(&(0x7f0000000000)='ramfs\x00', 0x800, 0x100, &(0x7f0000000100)={0x0, 0x9, 0xfffffffffffff12c, 0x4}) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) 58.471159574s ago: executing program 6 (id=4489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a32000000001400078008"], 0x5c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x40000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x80108906, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3a, 0x8e, 0x3}, {0xffffffffffffffbd}, {0x3}}]}, 0x54}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x7ff}}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x80) 55.434178018s ago: executing program 6 (id=4546): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x7}, {0x6, 0x2}]}) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10000010000000, 0x8}}) 55.378405722s ago: executing program 44 (id=4546): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x7}, {0x6, 0x2}]}) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10000010000000, 0x8}}) 14.919753811s ago: executing program 3 (id=5192): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000940)=[{&(0x7f00000003c0)="dc02e8", 0x3}], 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 14.911447782s ago: executing program 3 (id=5194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(r0) 14.863015004s ago: executing program 3 (id=5195): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x2c}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_getnetconf={0x44, 0x52, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x2}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x5}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x7fffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x4000) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x20000041) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000440)={0x4, 0x65, 0x7, 0x4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xffff5528}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xf}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x70}}, 0x80) 14.76521685s ago: executing program 3 (id=5197): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f00001a3000/0x3000)=nil, 0x3000, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60e}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x8100, 0x100) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x400000, 0xac, 0x6}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r3, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14.249030309s ago: executing program 3 (id=5208): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x144, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x3503, 0x3, 0x2, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0xa, @in=@remote, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x1fc}}, 0x4000) (async) r1 = socket$netlink(0x10, 0x3, 0x12) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}], 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x200}, @TCA_FQ_FLOW_REFILL_DELAY={0xffffff49, 0x9, 0x3}]}}]}, 0xa2}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@ipv6_newroute={0x3c, 0x18, 0x111, 0x70bd29, 0x0, {0xa, 0x0, 0x20, 0xfe, 0xfe, 0x2, 0x0, 0x8}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xf}}, @RTA_GATEWAY={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008815}, 0x0) 14.156280265s ago: executing program 3 (id=5210): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000280), 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801"], 0x128}, 0x4004000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r6 = io_uring_setup(0x56ac, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x3eb}}], 0x1, 0x8001) (async) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000300)=0x10, 0xe58238794a4800c0) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) (async) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) (async) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000a0000080004000100007d", 0x24) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) 2.887928644s ago: executing program 9 (id=5407): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0xfc, 0x0, 0x0, 0x4, 0x40426, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={0x0, 0xb}, 0xc004, 0x10000, 0x20000, 0x2, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) fcntl$setsig(r0, 0xa, 0x13) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="7a7ea22c2a1a89df53ff2a2d86dd", 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) truncate(&(0x7f0000000040)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) link(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) r2 = msgget$private(0x0, 0x80) msgrcv(r2, 0x0, 0x0, 0x0, 0x2000) msgrcv(r2, 0x0, 0x0, 0x1, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x3a) msgsnd(r2, &(0x7f0000000380)={0x1, "951723fe0ca323382bb3360fc04064db16c9493d0499612b826c6f46f2233ab0a8a935c4edee8cd075bd2d17796d7cb1e0424d352bee3bdc3b732635333fad4cf7dda3056d7bb306cc89415bc66910c969527aea39d7f204c65620aa4826d26d3eaa22dfb2fb7689ca143c55509c6523777e6ee74d33ec259b2ce5a42de564a3fe082e4758a0e4a0eaf87b1a641f81468349edac67e87b83ace0e57c5683ab4cbb9fffbd12d6484b0b7be77b646177f86347730a87aba8ae1fc6e0d30fd11227aef405f10107f88edbdb5c6225f834bb"}, 0xd8, 0x0) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000100)) 2.08107737s ago: executing program 9 (id=5419): syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) unshare(0x400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x6, 0x11, 0x400}]}) ioprio_set$pid(0x1, 0x0, 0x4007) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x6000a2, 0x0) 1.632146756s ago: executing program 2 (id=5425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 1.596723478s ago: executing program 2 (id=5426): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000100)={0x67, 0x16, '\x00', [@ra={0x5, 0x2, 0xc8}, @calipso={0x7, 0x8, {0x2, 0x0, 0x36, 0x246}}, @generic={0x6, 0x61, "511bbfaf2404c59bc751f3123a60d40439afbd6aa60f78fa1601419972a4f5f60f44f8cc69fc665f69374155760a6699c958b566ea01ad5277aefe851ba8cd94346b7aced2f3d580202556a1625f8094525cd99535cb4607e4f5274d98a73a0315"}, @enc_lim={0x4, 0x1, 0x15}, @jumbo={0xc2, 0x4, 0x401}, @calipso={0x7, 0x30, {0x2, 0xa, 0x8, 0x758f, [0xb71, 0x80000001, 0xe0, 0x2, 0x825]}}, @ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x10}, @enc_lim={0x4, 0x1, 0x6}]}, 0xc0) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3203000000000000c910fc00000000000000000001c204000000020000000000"], 0x20) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)={0x2, 0x0, '\x00', [@pad1]}, 0x10) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000600)={0x80, 0x6, 0xfffffef9, 0x75a, 0x7, "0400009100000400000000000a000000008b23"}) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000040)=0xa) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x2, 0x420, 0x3e0, 0x1c0, 0xffffffff, 0x1c0, 0x3e0, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, 0x0, {[{{@ipv6={@remote, @private2, [], [], 'veth1_virt_wifi\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@mcast1, @gre_key=0x6, @gre_key=0x73b}}}, {{@ipv6={@loopback, @empty, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@remote, @private0, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4a8) 1.298276485s ago: executing program 4 (id=5427): symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) (fail_nth: 9) 1.297917035s ago: executing program 2 (id=5428): r0 = open(&(0x7f0000000040)='./file0\x00', 0x301200, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)='R', 0x1}, {0x0}], 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000a, &(0x7f0000001c80), 0x1, 0x7b8, &(0x7f0000000980)="$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") unshare(0x2c020400) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x1, &(0x7f00000004c0)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x56633bd1cf1d94b2) io_submit(r3, 0x2, &(0x7f0000000480)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x3, r4, 0x0, 0x0, 0x400a00}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f00000000c0)="e321fb92d586adb266", 0x9, 0x7ff, 0x0, 0x2}]) sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x14c, 0x16, 0x401, 0x70bd2d, 0x0, {{{@in6=@dev={0xfe, 0x80, '\x00', 0xf}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0xfffe, 0x0, 0x0, 0xa, 0x80, 0x20}, {@in=@multicast1, 0x1ffffffe, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x21}, {0x4, 0xfffffffffffffffe, 0x8, 0x6, 0x80000}, {0x2, 0x0, 0x0, 0x4}, {0xe9, 0x400, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x8, 0x8e}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xe}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8801}, 0x6484c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x10) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x8fe, 0xffffffffffffffff}, {0xb, 0x0, 0x9, 0xa, 0xffffffffffffffff}]}) splice(0xffffffffffffffff, &(0x7f0000000000)=0x8000000000000001, r0, &(0x7f0000000080)=0xffffffffffffffff, 0x2, 0xd) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x4, 0x21, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@generic={0x83, 0x8, "a464e654cfb7"}, @cipso={0x86, 0x6, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, "9cc7e8", 0x3, "94125f"}}}}}}, 0x0) 1.256869428s ago: executing program 9 (id=5429): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0xfc, 0x0, 0x0, 0x4, 0x40426, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={0x0, 0xb}, 0xc004, 0x10000, 0x20000, 0x2, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="7a7ea22c2a1a89df53ff2a2d86dd", 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) truncate(&(0x7f0000000040)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) link(0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) r1 = msgget$private(0x0, 0x80) msgrcv(r1, 0x0, 0x0, 0x0, 0x2000) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0x3a) msgsnd(r1, &(0x7f0000000380)={0x1, "951723fe0ca323382bb3360fc04064db16c9493d0499612b826c6f46f2233ab0a8a935c4edee8cd075bd2d17796d7cb1e0424d352bee3bdc3b732635333fad4cf7dda3056d7bb306cc89415bc66910c969527aea39d7f204c65620aa4826d26d3eaa22dfb2fb7689ca143c55509c6523777e6ee74d33ec259b2ce5a42de564a3fe082e4758a0e4a0eaf87b1a641f81468349edac67e87b83ace0e57c5683ab4cbb9fffbd12d6484b0b7be77b646177f86347730a87aba8ae1fc6e0d30fd11227aef405f10107f88edbdb5c6225f834bb"}, 0xd8, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000100)) 1.243381599s ago: executing program 4 (id=5430): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) ftruncate(r4, 0x2007fff) sendfile(r5, r4, 0x0, 0x1000000200fff) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x42758, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 1.087930278s ago: executing program 7 (id=5431): r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f00000027c0)={0xfc, {"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", 0x1000}}, 0x1006) dup(0xffffffffffffffff) (async) write$UHID_INPUT(r0, &(0x7f00000027c0)={0xfc, {"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", 0x1000}}, 0x1006) (async) 1.087669717s ago: executing program 7 (id=5432): openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x400000, 0xac, 0x6}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.05034773s ago: executing program 2 (id=5433): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c000180"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e0800014000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 931.593786ms ago: executing program 2 (id=5434): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x7ff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_gettime(0x0, &(0x7f00000002c0)) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000001c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x42000400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) 809.500314ms ago: executing program 7 (id=5435): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x0, 0x37f, 0x148, 0x150, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @common=@inet=@multiport={{0x50}, {0x40, 0x0, [0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x0, 0x4e21], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x0, [0x6, 0x25, 0xd, 0x13, 0x39, 0x3f, 0x38, 0x8, 0x3b, 0x4, 0x15, 0x39, 0x4, 0x20, 0x13, 0x3], 0x1, 0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/mnt\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000021c0)={@map, 0xffffffffffffffff, 0x1a, 0x2021}, 0x20) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="4a000e001c"], 0xa0}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0x9, 0x0, &(0x7f0000001100)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x800}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x34}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9a54, 0x62}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x800) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) 631.522664ms ago: executing program 7 (id=5436): r0 = socket$inet6(0xa, 0x0, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0, r1}, 0x14) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xeb, @rand_addr=' \x01\x00', 0xfff}, 0x1c) 535.12306ms ago: executing program 7 (id=5437): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0xfffffffc, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10) 387.132738ms ago: executing program 9 (id=5438): prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x0, 0x7ffc0001}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x8, 0x4, 0x4, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@fallback=r1, r2, 0x37, 0x10, r2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x3, 0x9, 0xa, 0x20, 0x5}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0a0000000300000008000000020000", @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) unshare(0x68040200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 386.870438ms ago: executing program 2 (id=5439): syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) unshare(0x400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x6, 0x11, 0x400}]}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x6000a2, 0x0) 338.426321ms ago: executing program 4 (id=5440): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) fcntl$setsig(r0, 0xa, 0x30) 282.319844ms ago: executing program 9 (id=5441): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="140001"], 0x34}}, 0x0) 252.248075ms ago: executing program 9 (id=5442): syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) unshare(0x400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x6, 0x11, 0x400}]}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) 204.075808ms ago: executing program 4 (id=5443): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x14) umount2(&(0x7f0000000180)='./file0\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 175.06026ms ago: executing program 4 (id=5444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$netlink(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) (async) 81.507456ms ago: executing program 7 (id=5445): openat2(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x400000, 0xac, 0x6}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 4 (id=5446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) eventfd2(0x0, 0x0) (async) r1 = eventfd2(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x7, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x8, r2, 0x0, 0x0, 0x2, 0x0, 0x1, r1}]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e14", 0xfffffffffffffe4c, 0x20004811, 0x0, 0x0) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1}, 0x142) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) ftruncate(r10, 0x2007ffb) sendfile(r11, r10, 0x0, 0x1000000200fff) (async) sendfile(r11, r10, 0x0, 0x1000000200fff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) kernel console output (not intermixed with test programs): 6] [ 386.686386][T23346] __dump_stack+0x1d/0x30 [ 386.686414][T23346] dump_stack_lvl+0x95/0xd0 [ 386.686436][T23346] dump_stack+0x15/0x1b [ 386.686457][T23346] should_fail_ex+0x263/0x280 [ 386.686511][T23346] should_failslab+0x8c/0xb0 [ 386.686543][T23346] kmem_cache_alloc_noprof+0x68/0x490 [ 386.686577][T23346] ? getname_flags+0x7f/0x3b0 [ 386.686610][T23346] getname_flags+0x7f/0x3b0 [ 386.686674][T23346] user_path_at+0x28/0x130 [ 386.686714][T23346] __se_sys_mount+0x25b/0x2e0 [ 386.686787][T23346] ? fput+0x8f/0xc0 [ 386.686883][T23346] __x64_sys_mount+0x67/0x80 [ 386.686905][T23346] x64_sys_call+0x2cca/0x3000 [ 386.686949][T23346] do_syscall_64+0xc0/0x2a0 [ 386.686992][T23346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.687021][T23346] RIP: 0033:0x7f2cb7f4aeb9 [ 386.687097][T23346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.687144][T23346] RSP: 002b:00007f2cb69a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 386.687207][T23346] RAX: ffffffffffffffda RBX: 00007f2cb81c5fa0 RCX: 00007f2cb7f4aeb9 [ 386.687224][T23346] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000000 [ 386.687308][T23346] RBP: 00007f2cb69a7090 R08: 0000000000000000 R09: 0000000000000000 [ 386.687322][T23346] R10: 00000000006000a2 R11: 0000000000000246 R12: 0000000000000001 [ 386.687335][T23346] R13: 00007f2cb81c6038 R14: 00007f2cb81c5fa0 R15: 00007fffa2bf65f8 [ 386.687358][T23346] [ 386.870144][T23345] set_capacity_and_notify: 10 callbacks suppressed [ 386.870163][T23345] loop2: detected capacity change from 0 to 8192 [ 386.903402][T23345] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 387.104210][T23378] netlink: 'syz.9.4833': attribute type 39 has an invalid length. [ 387.133559][T23375] loop2: detected capacity change from 0 to 1024 [ 387.140437][T23380] loop4: detected capacity change from 0 to 2048 [ 387.158629][T23375] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.171277][T23375] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 8: comm syz.2.4832: lblock 8 mapped to illegal pblock 8 (length 8) [ 387.194447][T23375] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.4832: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 387.218518][T20369] loop4: p3 p4 < > [ 387.222557][T20369] loop4: p3 start 11362048 is beyond EOD, truncated [ 387.258516][T23380] loop4: p3 p4 < > [ 387.270329][T23380] loop4: p3 start 11362048 is beyond EOD, truncated [ 387.307859][ T3001] loop4: p3 p4 < > [ 387.316549][ T3001] loop4: p3 start 11362048 is beyond EOD, truncated [ 387.343434][T20380] udevd[20380]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 387.391569][T20380] udevd[20380]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 387.423354][T20380] udevd[20380]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 387.462334][T23395] syzkaller0: entered promiscuous mode [ 387.467903][T23395] syzkaller0: entered allmulticast mode [ 387.540980][T23406] loop7: detected capacity change from 0 to 512 [ 387.568439][T23406] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.597890][T23412] loop9: detected capacity change from 0 to 512 [ 387.629239][T23412] EXT4-fs (loop9): orphan cleanup on readonly fs [ 387.635796][T23412] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 387.647470][T23412] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 387.662428][T23412] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.4843: attempt to clear invalid blocks 2 len 1 [ 387.675637][T23412] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.4843: invalid indirect mapped block 1819239214 (level 0) [ 387.690365][T23412] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.4843: invalid indirect mapped block 1819239214 (level 1) [ 387.705187][T23412] EXT4-fs (loop9): 1 truncate cleaned up [ 387.811742][T23426] lo speed is unknown, defaulting to 1000 [ 387.829478][T23423] loop7: detected capacity change from 0 to 1024 [ 387.865986][T23428] sctp: [Deprecated]: syz.4.4849 (pid 23428) Use of int in max_burst socket option deprecated. [ 387.865986][T23428] Use struct sctp_assoc_value instead [ 387.883767][T23423] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.895989][T23423] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 8: comm syz.7.4848: lblock 8 mapped to illegal pblock 8 (length 8) [ 387.926515][T23423] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.4848: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 388.164183][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 388.164202][ T29] audit: type=1400 audit(1769538782.437:24691): avc: denied { sys_module } for pid=23444 comm="syz.4.4855" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 388.233009][ T29] audit: type=1400 audit(1769538782.468:24692): avc: denied { ioctl } for pid=23450 comm="syz.2.4857" path="socket:[74085]" dev="sockfs" ino=74085 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 388.303464][ T29] audit: type=1400 audit(1769538782.542:24693): avc: denied { write } for pid=23458 comm="syz.9.4860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 388.323985][ T29] audit: type=1400 audit(1769538782.552:24694): avc: denied { watch watch_reads } for pid=23456 comm="syz.7.4859" path="/214" dev="tmpfs" ino=1167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 388.376034][ T29] audit: type=1400 audit(1769538782.594:24695): avc: denied { map_read map_write } for pid=23458 comm="syz.9.4860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 388.396328][ T29] audit: type=1400 audit(1769538782.605:24696): avc: denied { create } for pid=23458 comm="syz.9.4860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 388.417496][ T29] audit: type=1400 audit(1769538782.605:24697): avc: denied { write } for pid=23458 comm="syz.9.4860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 388.437868][ T29] audit: type=1400 audit(1769538782.605:24698): avc: denied { shutdown } for pid=23458 comm="syz.9.4860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 388.458601][ T29] audit: type=1400 audit(1769538782.647:24699): avc: denied { nlmsg_write } for pid=23464 comm="syz.9.4864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 388.480580][T23469] loop2: detected capacity change from 0 to 1024 [ 388.508480][ T29] audit: type=1400 audit(1769538782.752:24700): avc: denied { create } for pid=23460 comm="syz.7.4863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 388.541178][T23469] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.564100][T23469] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 8: comm syz.2.4862: lblock 8 mapped to illegal pblock 8 (length 8) [ 388.594584][T23469] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.4862: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 388.788014][T23495] FAULT_INJECTION: forcing a failure. [ 388.788014][T23495] name failslab, interval 1, probability 0, space 0, times 0 [ 388.801600][T23495] CPU: 1 UID: 0 PID: 23495 Comm: syz.2.4872 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 388.801718][T23495] Tainted: [W]=WARN [ 388.801726][T23495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.801740][T23495] Call Trace: [ 388.801747][T23495] [ 388.801754][T23495] __dump_stack+0x1d/0x30 [ 388.801781][T23495] dump_stack_lvl+0x95/0xd0 [ 388.801852][T23495] dump_stack+0x15/0x1b [ 388.801880][T23495] should_fail_ex+0x263/0x280 [ 388.801999][T23495] should_failslab+0x8c/0xb0 [ 388.802030][T23495] __kmalloc_cache_noprof+0x64/0x4a0 [ 388.802065][T23495] ? alloc_fs_context+0x46/0x590 [ 388.802133][T23495] alloc_fs_context+0x46/0x590 [ 388.802163][T23495] ? security_capable+0x7b/0x90 [ 388.802213][T23495] fs_context_for_reconfigure+0x42/0x50 [ 388.802245][T23495] path_mount+0xa61/0xbc0 [ 388.802275][T23495] __se_sys_mount+0x28c/0x2e0 [ 388.802319][T23495] ? fput+0x8f/0xc0 [ 388.802359][T23495] __x64_sys_mount+0x67/0x80 [ 388.802387][T23495] x64_sys_call+0x2cca/0x3000 [ 388.802420][T23495] do_syscall_64+0xc0/0x2a0 [ 388.802474][T23495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.802504][T23495] RIP: 0033:0x7fc2664eaeb9 [ 388.802526][T23495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.802553][T23495] RSP: 002b:00007fc264f47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 388.802592][T23495] RAX: ffffffffffffffda RBX: 00007fc266765fa0 RCX: 00007fc2664eaeb9 [ 388.802613][T23495] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000000 [ 388.802631][T23495] RBP: 00007fc264f47090 R08: 0000000000000000 R09: 0000000000000000 [ 388.802648][T23495] R10: 00000000006000a2 R11: 0000000000000246 R12: 0000000000000001 [ 388.802664][T23495] R13: 00007fc266766038 R14: 00007fc266765fa0 R15: 00007ffec7822728 [ 388.802693][T23495] [ 388.865086][T23491] __nla_validate_parse: 9 callbacks suppressed [ 388.865139][T23491] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4870'. [ 389.103937][T23502] netlink: 'syz.2.4875': attribute type 27 has an invalid length. [ 389.185068][T23509] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4877'. [ 389.252770][T23502] team1: left promiscuous mode [ 389.257647][T23502] team1: left allmulticast mode [ 389.263891][T23502] team2: left promiscuous mode [ 389.268771][T23502] team2: left allmulticast mode [ 389.273838][T23502] team3: left promiscuous mode [ 389.278653][T23502] team3: left allmulticast mode [ 389.288944][ T4057] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.297943][ T4057] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.333795][ T4057] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.343145][ T4057] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.371801][T23502] bridge0: left promiscuous mode [ 389.381460][T23502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.399203][T23502] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.426301][T23512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4875'. [ 389.436738][T23502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.453090][ T4057] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.462164][ T4057] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.472191][T23512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4875'. [ 389.482944][ T4057] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.492130][ T4057] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.558120][T23529] netlink: 'syz.7.4881': attribute type 1 has an invalid length. [ 389.601313][T23537] FAULT_INJECTION: forcing a failure. [ 389.601313][T23537] name failslab, interval 1, probability 0, space 0, times 0 [ 389.614153][T23537] CPU: 1 UID: 0 PID: 23537 Comm: syz.9.4884 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 389.614197][T23537] Tainted: [W]=WARN [ 389.614208][T23537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 389.614250][T23537] Call Trace: [ 389.614257][T23537] [ 389.614266][T23537] __dump_stack+0x1d/0x30 [ 389.614292][T23537] dump_stack_lvl+0x95/0xd0 [ 389.614319][T23537] dump_stack+0x15/0x1b [ 389.614402][T23537] should_fail_ex+0x263/0x280 [ 389.614444][T23537] should_failslab+0x8c/0xb0 [ 389.614476][T23537] __kmalloc_cache_noprof+0x64/0x4a0 [ 389.614518][T23537] ? shmem_init_fs_context+0x36/0x110 [ 389.614555][T23537] shmem_init_fs_context+0x36/0x110 [ 389.614687][T23537] alloc_fs_context+0x4a3/0x590 [ 389.614767][T23537] fs_context_for_reconfigure+0x42/0x50 [ 389.614829][T23537] path_mount+0xa61/0xbc0 [ 389.614860][T23537] __se_sys_mount+0x28c/0x2e0 [ 389.614915][T23537] ? fput+0x8f/0xc0 [ 389.614953][T23537] __x64_sys_mount+0x67/0x80 [ 389.615038][T23537] x64_sys_call+0x2cca/0x3000 [ 389.615078][T23537] do_syscall_64+0xc0/0x2a0 [ 389.615122][T23537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.615149][T23537] RIP: 0033:0x7f02ee60aeb9 [ 389.615240][T23537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.615264][T23537] RSP: 002b:00007f02ed067028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 389.615289][T23537] RAX: ffffffffffffffda RBX: 00007f02ee885fa0 RCX: 00007f02ee60aeb9 [ 389.615307][T23537] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000000 [ 389.615324][T23537] RBP: 00007f02ed067090 R08: 0000000000000000 R09: 0000000000000000 [ 389.615341][T23537] R10: 00000000006000a2 R11: 0000000000000246 R12: 0000000000000001 [ 389.615359][T23537] R13: 00007f02ee886038 R14: 00007f02ee885fa0 R15: 00007ffda1a7f668 [ 389.615424][T23537] [ 389.824676][T23544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4883'. [ 389.839049][T23542] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 389.864125][T23542] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 389.871571][T23546] loop9: detected capacity change from 0 to 512 [ 389.888279][T23529] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 389.910528][T23546] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 389.926188][T23544] team1: entered promiscuous mode [ 389.931482][T23544] team1: entered allmulticast mode [ 389.948270][T23529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1291 sclass=netlink_route_socket pid=23529 comm=syz.7.4881 [ 389.971508][T23546] EXT4-fs (loop9): 1 truncate cleaned up [ 389.992272][T23529] bond2: (slave gretap1): making interface the new active one [ 390.006971][T23529] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 390.049244][T23529] macvlan0: entered promiscuous mode [ 390.054707][T23529] macvlan0: entered allmulticast mode [ 390.061086][T23529] bond2: entered promiscuous mode [ 390.066176][T23529] gretap1: entered promiscuous mode [ 390.117830][T23562] loop4: detected capacity change from 0 to 512 [ 390.125151][T23529] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 390.138449][T23561] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4888'. [ 390.158211][T23529] bond2: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 390.183925][T23562] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 390.202877][T23529] bond2: left promiscuous mode [ 390.207857][T23529] gretap1: left promiscuous mode [ 390.238481][T23562] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4889: bg 0: block 255: padding at end of block bitmap is not set [ 390.286718][T23562] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 390.308887][T23562] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4889: invalid indirect mapped block 1 (level 1) [ 390.369102][T23562] EXT4-fs (loop4): 1 truncate cleaned up [ 390.606791][T23584] lo speed is unknown, defaulting to 1000 [ 390.693371][T23589] syzkaller0: entered promiscuous mode [ 390.699555][T23589] syzkaller0: entered allmulticast mode [ 390.972577][T23594] FAULT_INJECTION: forcing a failure. [ 390.972577][T23594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.985787][T23594] CPU: 0 UID: 0 PID: 23594 Comm: syz.4.4896 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 390.985822][T23594] Tainted: [W]=WARN [ 390.985835][T23594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 390.985867][T23594] Call Trace: [ 390.985877][T23594] [ 390.985887][T23594] __dump_stack+0x1d/0x30 [ 390.985917][T23594] dump_stack_lvl+0x95/0xd0 [ 390.985939][T23594] dump_stack+0x15/0x1b [ 390.986023][T23594] should_fail_ex+0x263/0x280 [ 390.986142][T23594] should_fail+0xb/0x20 [ 390.986179][T23594] should_fail_usercopy+0x1a/0x20 [ 390.986264][T23594] _copy_to_user+0x20/0xa0 [ 390.986286][T23594] simple_read_from_buffer+0xb5/0x130 [ 390.986349][T23594] proc_fail_nth_read+0x10e/0x150 [ 390.986383][T23594] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 390.986451][T23594] vfs_read+0x1ab/0x7f0 [ 390.986477][T23594] ? __rcu_read_unlock+0x4e/0x70 [ 390.986578][T23594] ? __fget_files+0x184/0x1c0 [ 390.986607][T23594] ? mutex_lock+0x57/0x90 [ 390.986662][T23594] ksys_read+0xdc/0x1a0 [ 390.986683][T23594] __x64_sys_read+0x40/0x50 [ 390.986703][T23594] x64_sys_call+0x2889/0x3000 [ 390.986746][T23594] do_syscall_64+0xc0/0x2a0 [ 390.986784][T23594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.986807][T23594] RIP: 0033:0x7f2cb7f0b78e [ 390.986823][T23594] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 390.986882][T23594] RSP: 002b:00007f2cb69a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 390.986910][T23594] RAX: ffffffffffffffda RBX: 00007f2cb69a76c0 RCX: 00007f2cb7f0b78e [ 390.986927][T23594] RDX: 000000000000000f RSI: 00007f2cb69a70a0 RDI: 0000000000000005 [ 390.986940][T23594] RBP: 00007f2cb69a7090 R08: 0000000000000000 R09: 0000000000000000 [ 390.987008][T23594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.987022][T23594] R13: 00007f2cb81c6038 R14: 00007f2cb81c5fa0 R15: 00007fffa2bf65f8 [ 390.987046][T23594] [ 391.308842][T23607] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4902'. [ 391.317802][T23607] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4902'. [ 391.335902][T23601] macsec1: entered promiscuous mode [ 391.341210][T23601] vlan0: entered promiscuous mode [ 391.346570][T23601] macsec1: entered allmulticast mode [ 391.352219][T23601] vlan0: entered allmulticast mode [ 391.357449][T23601] veth0_vlan: entered allmulticast mode [ 391.376022][T23601] vlan0: left allmulticast mode [ 391.381039][T23601] veth0_vlan: left allmulticast mode [ 391.386558][T23601] vlan0: left promiscuous mode [ 391.544484][T23626] loop7: detected capacity change from 0 to 1024 [ 391.722385][T23637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=23637 comm=syz.9.4911 [ 391.965416][T23654] loop2: detected capacity change from 0 to 1024 [ 391.988887][T23654] EXT4-fs: Ignoring removed orlov option [ 392.022095][T23663] loop7: detected capacity change from 0 to 512 [ 392.030307][T23663] EXT4-fs (loop7): orphan cleanup on readonly fs [ 392.036909][T23663] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 392.045926][T23663] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 392.064248][T23663] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.4919: attempt to clear invalid blocks 2 len 1 [ 392.077366][T23663] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4919: invalid indirect mapped block 1819239214 (level 0) [ 392.099758][T23663] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4919: invalid indirect mapped block 1819239214 (level 1) [ 392.128192][T23663] EXT4-fs (loop7): 1 truncate cleaned up [ 392.233583][T23670] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4920'. [ 392.363123][T23658] loop3: detected capacity change from 0 to 512 [ 392.440258][T23658] EXT4-fs: Ignoring removed i_version option [ 392.488181][T23658] EXT4-fs (loop3): 1 truncate cleaned up [ 392.543458][T23682] bridge2: entered promiscuous mode [ 392.549543][T23682] bridge2: entered allmulticast mode [ 392.902397][T23701] loop4: detected capacity change from 0 to 512 [ 392.988648][T23701] EXT4-fs (loop4): orphan cleanup on readonly fs [ 392.995273][T23701] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 393.071417][T23701] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 393.094648][T23707] loop9: detected capacity change from 0 to 512 [ 393.101729][T23701] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.4930: attempt to clear invalid blocks 2 len 1 [ 393.125852][T23707] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 393.135129][T23707] EXT4-fs (loop9): filesystem is read-only [ 393.148669][T23701] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4930: invalid indirect mapped block 1819239214 (level 0) [ 393.186558][T23701] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4930: invalid indirect mapped block 1819239214 (level 1) [ 393.211284][T23707] EXT4-fs (loop9): failed to initialize system zone (-117) [ 393.229436][T23707] EXT4-fs (loop9): mount failed [ 393.246805][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 393.246823][ T29] audit: type=1400 audit(1769538787.770:24855): avc: denied { unlink } for pid=19177 comm="syz-executor" name="file0" dev="tmpfs" ino=1248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 393.293642][T23701] EXT4-fs (loop4): 1 truncate cleaned up [ 393.358787][T23715] nft_compat: unsupported protocol 1 [ 393.367871][ T29] audit: type=1400 audit(1769538787.906:24856): avc: denied { name_connect } for pid=23710 comm="syz.7.4932" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 393.389459][T23713] 8021q: adding VLAN 0 to HW filter on device bond5 [ 393.390819][ T29] audit: type=1400 audit(1769538787.906:24857): avc: denied { bind } for pid=23710 comm="syz.7.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 393.415762][ T29] audit: type=1326 audit(1769538787.906:24858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23710 comm="syz.7.4932" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5a7a0aeb9 code=0x0 [ 393.465989][ T29] audit: type=1400 audit(1769538788.001:24859): avc: denied { read } for pid=23712 comm="syz.9.4933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 393.511820][ T29] audit: type=1326 audit(1769538788.032:24860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23720 comm="syz.4.4935" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cb7f4aeb9 code=0x0 [ 393.584283][ T29] audit: type=1400 audit(1769538788.127:24861): avc: denied { getopt } for pid=23712 comm="syz.9.4933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 393.633869][ T29] audit: type=1400 audit(1769538788.179:24862): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 393.658296][ T29] audit: type=1400 audit(1769538788.179:24863): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 393.761874][ T29] audit: type=1400 audit(1769538788.316:24864): avc: denied { listen } for pid=23732 comm="syz.2.4940" lport=60106 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 393.777820][T23733] loop2: detected capacity change from 0 to 1024 [ 393.857259][T23735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4941'. [ 393.876051][T23735] team4: entered promiscuous mode [ 393.881242][T23735] team4: entered allmulticast mode [ 393.973375][T23737] lo speed is unknown, defaulting to 1000 [ 394.009484][T23737] loop2: detected capacity change from 0 to 256 [ 394.017185][T23737] vfat: Unknown parameter '0x00000000000000040x00000000000000040x0000000000000006' [ 394.063500][T23739] loop2: detected capacity change from 0 to 128 [ 394.097489][T23739] netlink: 'syz.2.4943': attribute type 29 has an invalid length. [ 394.106929][T23739] netlink: 'syz.2.4943': attribute type 29 has an invalid length. [ 394.116381][T23739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4943'. [ 394.160326][T23741] FAULT_INJECTION: forcing a failure. [ 394.160326][T23741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.173656][T23741] CPU: 0 UID: 0 PID: 23741 Comm: syz.7.4945 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 394.173697][T23741] Tainted: [W]=WARN [ 394.173707][T23741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 394.173769][T23741] Call Trace: [ 394.173780][T23741] [ 394.173791][T23741] __dump_stack+0x1d/0x30 [ 394.173820][T23741] dump_stack_lvl+0x95/0xd0 [ 394.173842][T23741] dump_stack+0x15/0x1b [ 394.173863][T23741] should_fail_ex+0x263/0x280 [ 394.173941][T23741] should_fail+0xb/0x20 [ 394.174032][T23741] should_fail_usercopy+0x1a/0x20 [ 394.174082][T23741] _copy_from_user+0x1c/0xb0 [ 394.174104][T23741] ___sys_sendmsg+0xc1/0x1e0 [ 394.174138][T23741] __x64_sys_sendmsg+0xd4/0x160 [ 394.174238][T23741] x64_sys_call+0x17ba/0x3000 [ 394.174273][T23741] do_syscall_64+0xc0/0x2a0 [ 394.174454][T23741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.174486][T23741] RIP: 0033:0x7fa5a7a0aeb9 [ 394.174508][T23741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.174567][T23741] RSP: 002b:00007fa5a6467028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.174592][T23741] RAX: ffffffffffffffda RBX: 00007fa5a7c85fa0 RCX: 00007fa5a7a0aeb9 [ 394.174658][T23741] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 394.174676][T23741] RBP: 00007fa5a6467090 R08: 0000000000000000 R09: 0000000000000000 [ 394.174692][T23741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.174709][T23741] R13: 00007fa5a7c86038 R14: 00007fa5a7c85fa0 R15: 00007ffc45759758 [ 394.174744][T23741] [ 394.475821][T23751] loop7: detected capacity change from 0 to 128 [ 394.500499][T23753] loop3: detected capacity change from 0 to 256 [ 394.616802][T23766] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4954'. [ 394.675015][T23776] netlink: 'syz.4.4958': attribute type 9 has an invalid length. [ 394.683012][T23776] netlink: 'syz.4.4958': attribute type 7 has an invalid length. [ 394.690921][T23776] netlink: 'syz.4.4958': attribute type 8 has an invalid length. [ 394.745428][T23784] FAULT_INJECTION: forcing a failure. [ 394.745428][T23784] name failslab, interval 1, probability 0, space 0, times 0 [ 394.759038][T23784] CPU: 1 UID: 0 PID: 23784 Comm: syz.9.4961 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 394.759082][T23784] Tainted: [W]=WARN [ 394.759100][T23784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 394.759117][T23784] Call Trace: [ 394.759126][T23784] [ 394.759137][T23784] __dump_stack+0x1d/0x30 [ 394.759171][T23784] dump_stack_lvl+0x95/0xd0 [ 394.759200][T23784] dump_stack+0x15/0x1b [ 394.759296][T23784] should_fail_ex+0x263/0x280 [ 394.759338][T23784] should_failslab+0x8c/0xb0 [ 394.759370][T23784] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 394.759405][T23784] ? __alloc_skb+0x2f0/0x4b0 [ 394.759469][T23784] __alloc_skb+0x2f0/0x4b0 [ 394.759506][T23784] ? __alloc_skb+0x219/0x4b0 [ 394.759546][T23784] netlink_alloc_large_skb+0xbf/0xf0 [ 394.759600][T23784] netlink_sendmsg+0x40c/0x6f0 [ 394.759622][T23784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.759643][T23784] ____sys_sendmsg+0x5af/0x600 [ 394.759673][T23784] ___sys_sendmsg+0x195/0x1e0 [ 394.759715][T23784] __x64_sys_sendmsg+0xd4/0x160 [ 394.759823][T23784] x64_sys_call+0x17ba/0x3000 [ 394.759889][T23784] do_syscall_64+0xc0/0x2a0 [ 394.759941][T23784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.759979][T23784] RIP: 0033:0x7f02ee60aeb9 [ 394.759996][T23784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.760016][T23784] RSP: 002b:00007f02ed067028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.760040][T23784] RAX: ffffffffffffffda RBX: 00007f02ee885fa0 RCX: 00007f02ee60aeb9 [ 394.760060][T23784] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 394.760078][T23784] RBP: 00007f02ed067090 R08: 0000000000000000 R09: 0000000000000000 [ 394.760179][T23784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.760197][T23784] R13: 00007f02ee886038 R14: 00007f02ee885fa0 R15: 00007ffda1a7f668 [ 394.760279][T23784] [ 395.065195][T23802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4968'. [ 395.187008][T23810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4967'. [ 395.352342][T23826] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4974'. [ 395.387411][T23836] EXT4-fs: dax option not supported [ 395.416767][T23826] syzkaller0: entered promiscuous mode [ 395.422396][T23826] syzkaller0: entered allmulticast mode [ 395.563933][T23852] EXT4-fs (loop2): orphan cleanup on readonly fs [ 395.570507][T23852] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 395.581176][T23851] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4984'. [ 395.597523][T23852] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 395.612363][T23852] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.4982: attempt to clear invalid blocks 2 len 1 [ 395.634233][T23852] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4982: invalid indirect mapped block 1819239214 (level 0) [ 395.663451][T23851] team1: entered promiscuous mode [ 395.668860][T23851] team1: entered allmulticast mode [ 395.681063][T23855] EXT4-fs mount: 40 callbacks suppressed [ 395.681119][T23855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.704926][T23852] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4982: invalid indirect mapped block 1819239214 (level 1) [ 395.742813][T23852] EXT4-fs (loop2): 1 truncate cleaned up [ 395.753745][T23852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 395.782403][T18883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.790714][ T3406] kernel read not supported for file 800/task/802/syscall (pid: 3406 comm: kworker/1:5) [ 395.816186][T23868] FAT-fs (loop3): bogus number of directory entries (390) [ 395.823507][T23868] FAT-fs (loop3): Can't find a valid FAT filesystem [ 395.904941][T23875] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 395.914964][T23875] SELinux: failed to load policy [ 395.921852][T23873] team0: Port device bridge1 added [ 395.927893][T18520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.993063][T23883] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 396.006667][T23882] syzkaller0: entered promiscuous mode [ 396.012231][T23882] syzkaller0: entered allmulticast mode [ 396.065112][T23883] lo speed is unknown, defaulting to 1000 [ 396.119957][T23890] FAULT_INJECTION: forcing a failure. [ 396.119957][T23890] name failslab, interval 1, probability 0, space 0, times 0 [ 396.132878][T23890] CPU: 0 UID: 0 PID: 23890 Comm: syz.9.5000 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 396.132917][T23890] Tainted: [W]=WARN [ 396.132924][T23890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 396.133004][T23890] Call Trace: [ 396.133011][T23890] [ 396.133021][T23890] __dump_stack+0x1d/0x30 [ 396.133128][T23890] dump_stack_lvl+0x95/0xd0 [ 396.133182][T23890] dump_stack+0x15/0x1b [ 396.133202][T23890] should_fail_ex+0x263/0x280 [ 396.133281][T23890] should_failslab+0x8c/0xb0 [ 396.133380][T23890] __kmalloc_noprof+0xb8/0x580 [ 396.133406][T23890] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 396.133438][T23890] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 396.133494][T23890] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 396.133573][T23890] ? selinux_capable+0x31/0x40 [ 396.133599][T23890] ? security_capable+0x7b/0x90 [ 396.133634][T23890] ? ns_capable+0x7c/0xb0 [ 396.133797][T23890] genl_rcv_msg+0x432/0x470 [ 396.133826][T23890] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 396.133866][T23890] netlink_rcv_skb+0x123/0x220 [ 396.133922][T23890] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.133961][T23890] genl_rcv+0x28/0x40 [ 396.133984][T23890] netlink_unicast+0x5c0/0x690 [ 396.134078][T23890] netlink_sendmsg+0x5c8/0x6f0 [ 396.134101][T23890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.134120][T23890] ____sys_sendmsg+0x5af/0x600 [ 396.134194][T23890] ___sys_sendmsg+0x195/0x1e0 [ 396.134360][T23890] __x64_sys_sendmsg+0xd4/0x160 [ 396.134391][T23890] x64_sys_call+0x17ba/0x3000 [ 396.134478][T23890] do_syscall_64+0xc0/0x2a0 [ 396.134522][T23890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.134547][T23890] RIP: 0033:0x7f02ee60aeb9 [ 396.134572][T23890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.134660][T23890] RSP: 002b:00007f02ed067028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.134682][T23890] RAX: ffffffffffffffda RBX: 00007f02ee885fa0 RCX: 00007f02ee60aeb9 [ 396.134697][T23890] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 396.134711][T23890] RBP: 00007f02ed067090 R08: 0000000000000000 R09: 0000000000000000 [ 396.134729][T23890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.134745][T23890] R13: 00007f02ee886038 R14: 00007f02ee885fa0 R15: 00007ffda1a7f668 [ 396.134818][T23890] [ 396.499793][T23901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5005'. [ 396.519250][T23901] team2: entered promiscuous mode [ 396.521910][T23904] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 396.524989][T23901] team2: entered allmulticast mode [ 396.547041][T23904] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.5006: bad orphan inode 131083 [ 396.563299][T23904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.596571][T23907] EXT4-fs: Ignoring removed mblk_io_submit option [ 396.603788][T23907] EXT4-fs: Ignoring removed nobh option [ 396.627675][T23907] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.643472][T23907] netlink: 'syz.7.5007': attribute type 1 has an invalid length. [ 396.670456][T23913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.688997][T23913] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.708495][T23913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5008'. [ 396.718833][T23913] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.5008: iget: bad i_size value: 2533274857506816 [ 396.732536][T23913] netlink: 'syz.2.5008': attribute type 13 has an invalid length. [ 396.741197][T23913] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.5008'. [ 396.770917][T18883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.826744][T23926] set_capacity_and_notify: 11 callbacks suppressed [ 396.826766][T23926] loop2: detected capacity change from 0 to 1024 [ 396.856466][T23926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.871152][T23926] FAULT_INJECTION: forcing a failure. [ 396.871152][T23926] name failslab, interval 1, probability 0, space 0, times 0 [ 396.882211][T23930] loop4: detected capacity change from 0 to 512 [ 396.885642][T23926] CPU: 1 UID: 0 PID: 23926 Comm: syz.2.5009 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 396.885753][T23926] Tainted: [W]=WARN [ 396.885776][T23926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 396.885826][T23926] Call Trace: [ 396.885849][T23926] [ 396.885880][T23926] __dump_stack+0x1d/0x30 [ 396.885966][T23926] dump_stack_lvl+0x95/0xd0 [ 396.886097][T23926] dump_stack+0x15/0x1b [ 396.886169][T23926] should_fail_ex+0x263/0x280 [ 396.886278][T23926] should_failslab+0x8c/0xb0 [ 396.886355][T23926] kmem_cache_alloc_noprof+0x68/0x490 [ 396.886490][T23926] ? __es_insert_extent+0x508/0xee0 [ 396.886598][T23926] __es_insert_extent+0x508/0xee0 [ 396.886763][T23926] ? perf_trace_kmalloc+0xe4/0x110 [ 396.886866][T23926] ext4_es_cache_extent+0x28d/0x390 [ 396.886985][T23926] ext4_find_extent+0x336/0x7a0 [ 396.887141][T23926] ext4_ext_map_blocks+0x128/0x38a0 [ 396.887239][T23926] ? xas_load+0x413/0x430 [ 396.887326][T23926] ? xas_load+0x413/0x430 [ 396.887437][T23926] ext4_map_query_blocks+0xae/0x550 [ 396.887582][T23926] ? ext4_es_lookup_extent+0x3ac/0x540 [ 396.887751][T23926] ext4_map_blocks+0x398/0xd70 [ 396.887859][T23926] ? css_rstat_updated+0xbb/0x280 [ 396.887976][T23926] ext4_getblk+0x128/0x530 [ 396.888093][T23926] ext4_bread_batch+0x5c/0x320 [ 396.888229][T23926] __ext4_find_entry+0x852/0xdf0 [ 396.888322][T23926] ? kmem_cache_alloc_lru_noprof+0x2bb/0x490 [ 396.888424][T23926] ? __rcu_read_unlock+0x4e/0x70 [ 396.888609][T23926] ? d_alloc_parallel+0xc01/0xce0 [ 396.888727][T23926] ext4_lookup+0xcd/0x3a0 [ 396.888811][T23926] __lookup_slow+0x19d/0x260 [ 396.888908][T23926] lookup_slow+0x3c/0x60 [ 396.889047][T23926] path_lookupat+0x2f7/0x500 [ 396.889174][T23926] filename_lookup+0x190/0x390 [ 396.889300][T23926] path_listxattrat+0xd1/0x2b0 [ 396.889400][T23926] __x64_sys_listxattr+0x4a/0x60 [ 396.889554][T23926] x64_sys_call+0x2a62/0x3000 [ 396.889700][T23926] do_syscall_64+0xc0/0x2a0 [ 396.889808][T23926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.889915][T23926] RIP: 0033:0x7fc2664eaeb9 [ 396.889979][T23926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.890042][T23926] RSP: 002b:00007fc264f47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 396.890185][T23926] RAX: ffffffffffffffda RBX: 00007fc266765fa0 RCX: 00007fc2664eaeb9 [ 396.890204][T23926] RDX: 0000000000100000 RSI: 0000000000000000 RDI: 0000200000000100 [ 396.890219][T23926] RBP: 00007fc264f47090 R08: 0000000000000000 R09: 0000000000000000 [ 396.890235][T23926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.890251][T23926] R13: 00007fc266766038 R14: 00007fc266765fa0 R15: 00007ffec7822728 [ 396.890275][T23926] [ 397.167200][T23930] EXT4-fs (loop4): orphan cleanup on readonly fs [ 397.173673][T23930] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 397.182044][T23930] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 397.196757][T23930] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.5012: attempt to clear invalid blocks 2 len 1 [ 397.210134][T23930] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5012: invalid indirect mapped block 1819239214 (level 0) [ 397.224746][T23930] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5012: invalid indirect mapped block 1819239214 (level 1) [ 397.242493][T23930] EXT4-fs (loop4): 1 truncate cleaned up [ 397.249835][T23930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 397.265696][T18883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.304283][T23934] syzkaller0: entered promiscuous mode [ 397.310199][T23934] syzkaller0: entered allmulticast mode [ 397.320689][T18520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.373304][T22116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.406489][T23943] FAULT_INJECTION: forcing a failure. [ 397.406489][T23943] name failslab, interval 1, probability 0, space 0, times 0 [ 397.419287][T23943] CPU: 1 UID: 0 PID: 23943 Comm: syz.9.5018 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 397.419323][T23943] Tainted: [W]=WARN [ 397.419331][T23943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.419344][T23943] Call Trace: [ 397.419352][T23943] [ 397.419361][T23943] __dump_stack+0x1d/0x30 [ 397.419394][T23943] dump_stack_lvl+0x95/0xd0 [ 397.419472][T23943] dump_stack+0x15/0x1b [ 397.419527][T23943] should_fail_ex+0x263/0x280 [ 397.419723][T23943] should_failslab+0x8c/0xb0 [ 397.419810][T23943] __kmalloc_noprof+0xb8/0x580 [ 397.419907][T23943] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 397.419942][T23943] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 397.419978][T23943] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 397.420010][T23943] ? selinux_capable+0x31/0x40 [ 397.420032][T23943] ? security_capable+0x7b/0x90 [ 397.420062][T23943] ? ns_capable+0x7c/0xb0 [ 397.420090][T23943] genl_rcv_msg+0x432/0x470 [ 397.420124][T23943] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 397.420163][T23943] netlink_rcv_skb+0x123/0x220 [ 397.420197][T23943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 397.420364][T23943] genl_rcv+0x28/0x40 [ 397.420393][T23943] netlink_unicast+0x5c0/0x690 [ 397.420428][T23943] netlink_sendmsg+0x5c8/0x6f0 [ 397.420517][T23943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.420559][T23943] ____sys_sendmsg+0x5af/0x600 [ 397.420590][T23943] ___sys_sendmsg+0x195/0x1e0 [ 397.420643][T23943] __x64_sys_sendmsg+0xd4/0x160 [ 397.420730][T23943] x64_sys_call+0x17ba/0x3000 [ 397.420763][T23943] do_syscall_64+0xc0/0x2a0 [ 397.420804][T23943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.420853][T23943] RIP: 0033:0x7f02ee60aeb9 [ 397.420872][T23943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.420897][T23943] RSP: 002b:00007f02ed067028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.420923][T23943] RAX: ffffffffffffffda RBX: 00007f02ee885fa0 RCX: 00007f02ee60aeb9 [ 397.420938][T23943] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 397.420951][T23943] RBP: 00007f02ed067090 R08: 0000000000000000 R09: 0000000000000000 [ 397.421003][T23943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.421020][T23943] R13: 00007f02ee886038 R14: 00007f02ee885fa0 R15: 00007ffda1a7f668 [ 397.421042][T23939] kexec: Could not allocate control_code_buffer [ 397.421047][T23943] [ 397.672859][T19177] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.698860][T23952] loop4: detected capacity change from 0 to 512 [ 397.714621][T23952] EXT4-fs: test_dummy_encryption option not supported [ 397.745947][T23956] loop2: detected capacity change from 0 to 1024 [ 397.759067][T23954] loop7: detected capacity change from 0 to 128 [ 397.769115][T23954] FAULT_INJECTION: forcing a failure. [ 397.769115][T23954] name failslab, interval 1, probability 0, space 0, times 0 [ 397.781962][T23954] CPU: 1 UID: 0 PID: 23954 Comm: syz.7.5020 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 397.782005][T23954] Tainted: [W]=WARN [ 397.782015][T23954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.782032][T23954] Call Trace: [ 397.782042][T23954] [ 397.782052][T23954] __dump_stack+0x1d/0x30 [ 397.782114][T23954] dump_stack_lvl+0x95/0xd0 [ 397.782140][T23954] dump_stack+0x15/0x1b [ 397.782213][T23954] should_fail_ex+0x263/0x280 [ 397.782256][T23954] should_failslab+0x8c/0xb0 [ 397.782416][T23954] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 397.782491][T23954] ? __d_alloc+0x37/0x340 [ 397.782521][T23954] __d_alloc+0x37/0x340 [ 397.782582][T23954] d_alloc+0x2e/0x100 [ 397.782617][T23954] lookup_one_qstr_excl+0x99/0x250 [ 397.782656][T23954] __start_renaming+0x13f/0x2a0 [ 397.782697][T23954] do_renameat2+0x2b4/0x850 [ 397.782789][T23954] __x64_sys_rename+0x58/0x70 [ 397.782813][T23954] x64_sys_call+0x24e/0x3000 [ 397.782839][T23954] do_syscall_64+0xc0/0x2a0 [ 397.782925][T23954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.782955][T23954] RIP: 0033:0x7fa5a7a0aeb9 [ 397.783052][T23954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.783078][T23954] RSP: 002b:00007fa5a6467028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 397.783105][T23954] RAX: ffffffffffffffda RBX: 00007fa5a7c85fa0 RCX: 00007fa5a7a0aeb9 [ 397.783121][T23954] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000580 [ 397.783198][T23954] RBP: 00007fa5a6467090 R08: 0000000000000000 R09: 0000000000000000 [ 397.783216][T23954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.783228][T23954] R13: 00007fa5a7c86038 R14: 00007fa5a7c85fa0 R15: 00007ffc45759758 [ 397.783249][T23954] [ 397.785926][T23960] loop3: detected capacity change from 0 to 512 [ 397.989159][T23965] veth0: entered promiscuous mode [ 397.994690][T23961] veth0: left promiscuous mode [ 398.003453][T23956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.016126][T23960] EXT4-fs (loop3): orphan cleanup on readonly fs [ 398.022618][T23960] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 398.030169][T23963] tap0: tun_chr_ioctl cmd 1074025677 [ 398.050368][T23960] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 398.065845][T23960] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.5025: attempt to clear invalid blocks 2 len 1 [ 398.079100][T23960] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5025: invalid indirect mapped block 1819239214 (level 0) [ 398.079152][T23963] tap0: linktype set to 0 [ 398.113745][T23960] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5025: invalid indirect mapped block 1819239214 (level 1) [ 398.135061][T23956] FAULT_INJECTION: forcing a failure. [ 398.135061][T23956] name failslab, interval 1, probability 0, space 0, times 0 [ 398.147833][T23956] CPU: 1 UID: 0 PID: 23956 Comm: syz.2.5024 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 398.147874][T23956] Tainted: [W]=WARN [ 398.147884][T23956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 398.147917][T23956] Call Trace: [ 398.147924][T23956] [ 398.147933][T23956] __dump_stack+0x1d/0x30 [ 398.147959][T23956] dump_stack_lvl+0x95/0xd0 [ 398.147983][T23956] dump_stack+0x15/0x1b [ 398.148011][T23956] should_fail_ex+0x263/0x280 [ 398.148133][T23956] should_failslab+0x8c/0xb0 [ 398.148163][T23956] kmem_cache_alloc_noprof+0x68/0x490 [ 398.148240][T23956] ? __es_insert_extent+0x508/0xee0 [ 398.148282][T23956] __es_insert_extent+0x508/0xee0 [ 398.148387][T23956] ext4_es_insert_extent+0x467/0x1c70 [ 398.148440][T23956] ext4_map_query_blocks+0x38e/0x550 [ 398.148480][T23956] ? ext4_es_lookup_extent+0x3ac/0x540 [ 398.148551][T23956] ext4_map_blocks+0x398/0xd70 [ 398.148598][T23956] ext4_getblk+0x128/0x530 [ 398.148640][T23956] ext4_bread_batch+0x5c/0x320 [ 398.148711][T23956] __ext4_find_entry+0x852/0xdf0 [ 398.148747][T23956] ? kmem_cache_alloc_lru_noprof+0x2bb/0x490 [ 398.148787][T23956] ? __rcu_read_unlock+0x4e/0x70 [ 398.148850][T23956] ? d_alloc_parallel+0xc01/0xce0 [ 398.148896][T23956] ext4_lookup+0xcd/0x3a0 [ 398.148932][T23956] __lookup_slow+0x19d/0x260 [ 398.149009][T23956] lookup_slow+0x3c/0x60 [ 398.149047][T23956] path_lookupat+0x2f7/0x500 [ 398.149207][T23956] filename_lookup+0x190/0x390 [ 398.149260][T23956] path_listxattrat+0xd1/0x2b0 [ 398.149302][T23956] __x64_sys_listxattr+0x4a/0x60 [ 398.149351][T23956] x64_sys_call+0x2a62/0x3000 [ 398.149387][T23956] do_syscall_64+0xc0/0x2a0 [ 398.149422][T23956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.149521][T23956] RIP: 0033:0x7fc2664eaeb9 [ 398.149545][T23956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.149570][T23956] RSP: 002b:00007fc264f47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 398.149655][T23956] RAX: ffffffffffffffda RBX: 00007fc266765fa0 RCX: 00007fc2664eaeb9 [ 398.149732][T23956] RDX: 0000000000100000 RSI: 0000000000000000 RDI: 0000200000000100 [ 398.149751][T23956] RBP: 00007fc264f47090 R08: 0000000000000000 R09: 0000000000000000 [ 398.149770][T23956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.149792][T23956] R13: 00007fc266766038 R14: 00007fc266765fa0 R15: 00007ffec7822728 [ 398.149821][T23956] [ 398.177872][T23960] EXT4-fs (loop3): 1 truncate cleaned up [ 398.402433][T23979] FAULT_INJECTION: forcing a failure. [ 398.402433][T23979] name failslab, interval 1, probability 0, space 0, times 0 [ 398.416343][T23979] CPU: 1 UID: 0 PID: 23979 Comm: syz.4.5031 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 398.416387][T23979] Tainted: [W]=WARN [ 398.416434][T23979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 398.416453][T23979] Call Trace: [ 398.416463][T23979] [ 398.416475][T23979] __dump_stack+0x1d/0x30 [ 398.416503][T23979] dump_stack_lvl+0x95/0xd0 [ 398.416605][T23979] dump_stack+0x15/0x1b [ 398.416633][T23979] should_fail_ex+0x263/0x280 [ 398.416709][T23979] should_failslab+0x8c/0xb0 [ 398.416734][T23979] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 398.416822][T23979] ? __alloc_skb+0x2f0/0x4b0 [ 398.416893][T23979] __alloc_skb+0x2f0/0x4b0 [ 398.416927][T23979] ? __alloc_skb+0x219/0x4b0 [ 398.416987][T23979] netlink_ack+0xfd/0x500 [ 398.417104][T23979] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 398.417143][T23979] netlink_rcv_skb+0x192/0x220 [ 398.417265][T23979] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.417317][T23979] genl_rcv+0x28/0x40 [ 398.417348][T23979] netlink_unicast+0x5c0/0x690 [ 398.417445][T23979] netlink_sendmsg+0x5c8/0x6f0 [ 398.417473][T23979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.417494][T23979] ____sys_sendmsg+0x5af/0x600 [ 398.417597][T23979] ___sys_sendmsg+0x195/0x1e0 [ 398.417641][T23979] __x64_sys_sendmsg+0xd4/0x160 [ 398.417674][T23979] x64_sys_call+0x17ba/0x3000 [ 398.417776][T23979] do_syscall_64+0xc0/0x2a0 [ 398.417818][T23979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.417849][T23979] RIP: 0033:0x7f2cb7f4aeb9 [ 398.417871][T23979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.417966][T23979] RSP: 002b:00007f2cb69a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.417994][T23979] RAX: ffffffffffffffda RBX: 00007f2cb81c5fa0 RCX: 00007f2cb7f4aeb9 [ 398.418014][T23979] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 398.418033][T23979] RBP: 00007f2cb69a7090 R08: 0000000000000000 R09: 0000000000000000 [ 398.418051][T23979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.418136][T23979] R13: 00007f2cb81c6038 R14: 00007f2cb81c5fa0 R15: 00007fffa2bf65f8 [ 398.418189][T23979] [ 398.429534][T23960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.512518][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 398.512567][ T29] audit: type=1400 audit(1769538796.305:24970): avc: denied { write } for pid=23981 comm="syz.7.5032" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 398.692395][T22116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.770853][T18883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.774005][T23993] __nla_validate_parse: 1 callbacks suppressed [ 398.774042][T23993] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5035'. [ 398.815908][ T29] audit: type=1400 audit(1769538796.609:24971): avc: denied { create } for pid=23996 comm="syz.7.5036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 398.836355][ T29] audit: type=1400 audit(1769538796.620:24972): avc: denied { ioctl } for pid=23996 comm="syz.7.5036" path="socket:[75608]" dev="sockfs" ino=75608 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 398.884936][T24002] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5038'. [ 398.915887][T24005] loop7: detected capacity change from 0 to 128 [ 398.976125][T24005] FAULT_INJECTION: forcing a failure. [ 398.976125][T24005] name failslab, interval 1, probability 0, space 0, times 0 [ 398.989029][T24005] CPU: 1 UID: 0 PID: 24005 Comm: syz.7.5039 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 398.989072][T24005] Tainted: [W]=WARN [ 398.989082][T24005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 398.989100][T24005] Call Trace: [ 398.989109][T24005] [ 398.989120][T24005] __dump_stack+0x1d/0x30 [ 398.989165][T24005] dump_stack_lvl+0x95/0xd0 [ 398.989188][T24005] dump_stack+0x15/0x1b [ 398.989210][T24005] should_fail_ex+0x263/0x280 [ 398.989251][T24005] ? __pfx_fat_alloc_inode+0x10/0x10 [ 398.989378][T24005] should_failslab+0x8c/0xb0 [ 398.989444][T24005] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 398.989477][T24005] ? fat_alloc_inode+0x38/0xc0 [ 398.989582][T24005] ? __pfx_fat_alloc_inode+0x10/0x10 [ 398.989634][T24005] fat_alloc_inode+0x38/0xc0 [ 398.989666][T24005] ? __pfx_fat_alloc_inode+0x10/0x10 [ 398.989698][T24005] alloc_inode+0x40/0x170 [ 398.989722][T24005] new_inode+0x1d/0xe0 [ 398.989785][T24005] fat_build_inode+0x169/0x290 [ 398.989817][T24005] msdos_lookup+0x22f/0x2a0 [ 398.989852][T24005] lookup_one_qstr_excl+0xcb/0x250 [ 398.989961][T24005] __start_renaming+0x13f/0x2a0 [ 398.990004][T24005] do_renameat2+0x2b4/0x850 [ 398.990046][T24005] __x64_sys_rename+0x58/0x70 [ 398.990078][T24005] x64_sys_call+0x24e/0x3000 [ 398.990126][T24005] do_syscall_64+0xc0/0x2a0 [ 398.990174][T24005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.990204][T24005] RIP: 0033:0x7fa5a7a0aeb9 [ 398.990225][T24005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.990250][T24005] RSP: 002b:00007fa5a6467028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 398.990303][T24005] RAX: ffffffffffffffda RBX: 00007fa5a7c85fa0 RCX: 00007fa5a7a0aeb9 [ 398.990318][T24005] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000580 [ 398.990340][T24005] RBP: 00007fa5a6467090 R08: 0000000000000000 R09: 0000000000000000 [ 398.990354][T24005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.990379][T24005] R13: 00007fa5a7c86038 R14: 00007fa5a7c85fa0 R15: 00007ffc45759758 [ 398.990428][T24005] [ 399.171405][T24018] FAULT_INJECTION: forcing a failure. [ 399.171405][T24018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.223770][T24018] CPU: 0 UID: 0 PID: 24018 Comm: syz.4.5043 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 399.223887][T24018] Tainted: [W]=WARN [ 399.223897][T24018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.223919][T24018] Call Trace: [ 399.223928][T24018] [ 399.223938][T24018] __dump_stack+0x1d/0x30 [ 399.224046][T24018] dump_stack_lvl+0x95/0xd0 [ 399.224125][T24018] dump_stack+0x15/0x1b [ 399.224146][T24018] should_fail_ex+0x263/0x280 [ 399.224179][T24018] should_fail+0xb/0x20 [ 399.224231][T24018] should_fail_usercopy+0x1a/0x20 [ 399.224334][T24018] _copy_from_user+0x1c/0xb0 [ 399.224364][T24018] kstrtouint_from_user+0x69/0xf0 [ 399.224399][T24018] proc_fail_nth_write+0x50/0x160 [ 399.224524][T24018] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 399.224585][T24018] vfs_write+0x269/0x9f0 [ 399.224606][T24018] ? __rcu_read_unlock+0x4e/0x70 [ 399.224712][T24018] ? __fget_files+0x184/0x1c0 [ 399.224738][T24018] ? mutex_lock+0x57/0x90 [ 399.224762][T24018] ksys_write+0xdc/0x1a0 [ 399.224785][T24018] __x64_sys_write+0x40/0x50 [ 399.224806][T24018] x64_sys_call+0x2847/0x3000 [ 399.224889][T24018] do_syscall_64+0xc0/0x2a0 [ 399.224926][T24018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.224991][T24018] RIP: 0033:0x7f2cb7f0b78e [ 399.225013][T24018] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 399.225038][T24018] RSP: 002b:00007f2cb69a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 399.225063][T24018] RAX: ffffffffffffffda RBX: 00007f2cb69a76c0 RCX: 00007f2cb7f0b78e [ 399.225083][T24018] RDX: 0000000000000001 RSI: 00007f2cb69a70a0 RDI: 0000000000000004 [ 399.225176][T24018] RBP: 00007f2cb69a7090 R08: 0000000000000000 R09: 0000000000000000 [ 399.225192][T24018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.225209][T24018] R13: 00007f2cb81c6038 R14: 00007f2cb81c5fa0 R15: 00007fffa2bf65f8 [ 399.225235][T24018] [ 399.440640][T24020] syzkaller0: entered promiscuous mode [ 399.446378][T24020] syzkaller0: entered allmulticast mode [ 399.488603][T24020] netlink: 324 bytes leftover after parsing attributes in process `syz.2.5044'. [ 399.511993][ T29] audit: type=1400 audit(1769538797.355:24973): avc: denied { watch } for pid=24024 comm="syz.9.5046" path="/448/file0" dev="tmpfs" ino=2430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 399.540542][T24025] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5046'. [ 399.549656][T24025] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5046'. [ 399.570941][ T29] audit: type=1400 audit(1769538797.376:24974): avc: denied { execute_no_trans } for pid=24024 comm="syz.9.5046" path="/448/file0" dev="tmpfs" ino=2430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 399.640919][T24034] loop4: detected capacity change from 0 to 1024 [ 399.698736][T24034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.743413][T24049] loop2: detected capacity change from 0 to 1024 [ 399.785753][T24059] loop9: detected capacity change from 0 to 128 [ 399.797949][T24034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.816808][T24059] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 399.831368][ T29] audit: type=1400 audit(1769538797.617:24975): avc: denied { read append } for pid=24030 comm="syz.4.5047" path="/298/file1/memory.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 399.856366][ T29] audit: type=1400 audit(1769538797.617:24976): avc: denied { ioctl } for pid=24030 comm="syz.4.5047" path="/298/file1/memory.stat" dev="loop4" ino=18 ioctlcmd=0x6614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 399.912256][ T29] audit: type=1400 audit(1769538797.774:24977): avc: denied { accept } for pid=24007 comm="syz.3.5040" lport=34474 faddr=::ffff:100.1.1.0 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 399.938793][T24049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.944204][T24059] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 399.961983][T24049] FAULT_INJECTION: forcing a failure. [ 399.961983][T24049] name failslab, interval 1, probability 0, space 0, times 0 [ 399.975087][T24049] CPU: 0 UID: 0 PID: 24049 Comm: syz.2.5051 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 399.975123][T24049] Tainted: [W]=WARN [ 399.975130][T24049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.975218][T24049] Call Trace: [ 399.975228][T24049] [ 399.975239][T24049] __dump_stack+0x1d/0x30 [ 399.975337][T24049] dump_stack_lvl+0x95/0xd0 [ 399.975368][T24049] dump_stack+0x15/0x1b [ 399.975396][T24049] should_fail_ex+0x263/0x280 [ 399.975432][T24049] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 399.975514][T24049] should_failslab+0x8c/0xb0 [ 399.975548][T24049] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 399.975632][T24049] ? ext4_alloc_inode+0x38/0x320 [ 399.975658][T24049] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 399.975680][T24049] ext4_alloc_inode+0x38/0x320 [ 399.975702][T24049] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 399.975741][T24049] alloc_inode+0x40/0x170 [ 399.975803][T24049] iget_locked+0x101/0x440 [ 399.975907][T24049] __ext4_iget+0x152/0x2350 [ 399.976012][T24049] ? __rcu_read_unlock+0x4e/0x70 [ 399.976095][T24049] ext4_lookup+0x173/0x3a0 [ 399.976122][T24049] __lookup_slow+0x19d/0x260 [ 399.976180][T24049] lookup_slow+0x3c/0x60 [ 399.976219][T24049] path_lookupat+0x2f7/0x500 [ 399.976317][T24049] filename_lookup+0x190/0x390 [ 399.976365][T24049] path_listxattrat+0xd1/0x2b0 [ 399.976402][T24049] __x64_sys_listxattr+0x4a/0x60 [ 399.976437][T24049] x64_sys_call+0x2a62/0x3000 [ 399.976469][T24049] do_syscall_64+0xc0/0x2a0 [ 399.976582][T24049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.976613][T24049] RIP: 0033:0x7fc2664eaeb9 [ 399.976632][T24049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.976657][T24049] RSP: 002b:00007fc264f47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 399.976685][T24049] RAX: ffffffffffffffda RBX: 00007fc266765fa0 RCX: 00007fc2664eaeb9 [ 399.976703][T24049] RDX: 0000000000100000 RSI: 0000000000000000 RDI: 0000200000000100 [ 399.976722][T24049] RBP: 00007fc264f47090 R08: 0000000000000000 R09: 0000000000000000 [ 399.976735][T24049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.976823][T24049] R13: 00007fc266766038 R14: 00007fc266765fa0 R15: 00007ffec7822728 [ 399.976844][T24049] [ 400.299049][T24075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5056'. [ 400.355797][ T3965] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 400.365611][T24080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 400.428373][T24080] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.444443][T18883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.457351][T24080] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 400.559998][T19177] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.595643][T24103] EXT4-fs (loop9): orphan cleanup on readonly fs [ 400.602944][T24103] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 400.615483][T24109] FAT-fs (loop4): bogus number of directory entries (390) [ 400.622666][T24109] FAT-fs (loop4): Can't find a valid FAT filesystem [ 400.634427][ T29] audit: type=1326 audit(1769538798.530:24978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24106 comm="syz.3.5068" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f794591aeb9 code=0x0 [ 400.674051][T24103] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 400.703199][T24103] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.5064: attempt to clear invalid blocks 2 len 1 [ 400.721051][T24103] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.5064: invalid indirect mapped block 1819239214 (level 0) [ 400.735485][T24103] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.5064: invalid indirect mapped block 1819239214 (level 1) [ 400.759099][T24113] forcing mempool usage for bio_alloc_bioset+0x448/0xa50 [ 400.792421][ T29] audit: type=1400 audit(1769538798.688:24979): avc: denied { getopt } for pid=24116 comm="syz.7.5070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 400.812996][T24103] EXT4-fs (loop9): 1 truncate cleaned up [ 400.822278][T24103] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 400.826910][T24117] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 400.866131][T24117] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 400.882892][T15436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.948853][T24123] x_tables: duplicate underflow at hook 1 [ 401.031536][T24129] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5076'. [ 401.231173][T24143] EXT4-fs (loop9): orphan cleanup on readonly fs [ 401.237995][T24143] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 401.273187][T24148] syzkaller0: entered promiscuous mode [ 401.278745][T24148] syzkaller0: entered allmulticast mode [ 401.284733][T24143] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 401.300646][T24143] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.5082: attempt to clear invalid blocks 2 len 1 [ 401.314914][T24143] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.5082: invalid indirect mapped block 1819239214 (level 0) [ 401.337516][T24150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5085'. [ 401.338527][T24143] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.5082: invalid indirect mapped block 1819239214 (level 1) [ 401.364735][T24143] EXT4-fs (loop9): 1 truncate cleaned up [ 401.371670][T24143] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 401.379388][T24150] netlink: 'syz.7.5085': attribute type 1 has an invalid length. [ 401.392119][T24150] netlink: 5 bytes leftover after parsing attributes in process `syz.7.5085'. [ 401.433453][T15436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.538792][T24160] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5090'. [ 401.566678][T24160] all: renamed from lo [ 401.639041][T24173] set_capacity_and_notify: 7 callbacks suppressed [ 401.639065][T24173] loop2: detected capacity change from 0 to 512 [ 401.656226][T24173] EXT4-fs (loop2): orphan cleanup on readonly fs [ 401.662663][T24173] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 401.674703][T24173] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 401.689723][T24173] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.5097: attempt to clear invalid blocks 2 len 1 [ 401.703602][T24173] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.5097: invalid indirect mapped block 1819239214 (level 0) [ 401.718138][T24173] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.5097: invalid indirect mapped block 1819239214 (level 1) [ 401.734189][T24173] EXT4-fs (loop2): 1 truncate cleaned up [ 401.744581][T24173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 401.783467][T18883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.793185][T24184] loop7: detected capacity change from 0 to 512 [ 401.812055][T24184] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.5100: invalid indirect mapped block 256 (level 2) [ 401.831879][T24184] EXT4-fs (loop7): 2 truncates cleaned up [ 401.839925][T24184] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.905946][T24195] team_slave_0: entered promiscuous mode [ 401.911719][T24195] team_slave_1: entered promiscuous mode [ 401.917784][T24195] team_slave_0: left promiscuous mode [ 401.923332][T24195] team_slave_1: left promiscuous mode [ 401.950537][T24195] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.5100: bg 0: block 5: invalid block bitmap [ 401.976534][T24195] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 401.989139][T24195] EXT4-fs (loop7): This should not happen!! Data will be lost [ 401.989139][T24195] [ 401.999602][T24195] EXT4-fs (loop7): Total free blocks count 0 [ 402.005675][T24195] EXT4-fs (loop7): Free/Dirty block details [ 402.011656][T24195] EXT4-fs (loop7): free_blocks=0 [ 402.016747][T24195] EXT4-fs (loop7): dirty_blocks=2755 [ 402.022120][T24195] EXT4-fs (loop7): Block reservation details [ 402.029029][T24195] EXT4-fs (loop7): i_reserved_data_blocks=2755 [ 402.165999][T24205] bond2: entered promiscuous mode [ 402.171990][T24205] bond2: entered allmulticast mode [ 402.333143][T24225] loop2: detected capacity change from 0 to 512 [ 402.346122][T24225] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 402.357727][T24225] EXT4-fs (loop2): 1 truncate cleaned up [ 402.364319][T24225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.449690][T18883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.475368][T24231] loop9: detected capacity change from 0 to 512 [ 402.481961][T24231] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 402.515683][T24234] netlink: 'syz.2.5117': attribute type 11 has an invalid length. [ 402.559204][ T4081] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2048 with error 28 [ 402.733438][T24261] loop7: detected capacity change from 0 to 512 [ 402.873668][T24283] netlink: 'syz.7.5128': attribute type 1 has an invalid length. [ 402.940972][T24298] loop2: detected capacity change from 0 to 512 [ 402.955155][T24299] hub 2-0:1.0: USB hub found [ 402.975519][T24299] hub 2-0:1.0: 8 ports detected [ 402.981027][T24298] EXT4-fs (loop2): orphan cleanup on readonly fs [ 402.987539][T24298] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 403.014572][T24298] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 403.026350][T24288] lo speed is unknown, defaulting to 1000 [ 403.037775][T24298] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.5132: attempt to clear invalid blocks 2 len 1 [ 403.067684][T24296] lo speed is unknown, defaulting to 1000 [ 403.083835][T24298] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.5132: invalid indirect mapped block 1819239214 (level 0) [ 403.102368][T24298] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.5132: invalid indirect mapped block 1819239214 (level 1) [ 403.142871][T24298] EXT4-fs (loop2): 1 truncate cleaned up [ 403.149599][T24298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 403.258405][T18883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.463405][T24332] syzkaller0: entered allmulticast mode [ 403.502453][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 403.502473][ T29] audit: type=1400 audit(1769538801.512:25004): avc: denied { mount } for pid=24331 comm="syz.9.5140" name="/" dev="hugetlbfs" ino=76584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 403.550806][ T52] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.560494][ T52] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.600189][ T52] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.618642][ T29] audit: type=1326 audit(1769538801.648:25005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24340 comm="syz.2.5143" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2664eaeb9 code=0x0 [ 403.642722][ T52] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.653275][ T29] audit: type=1400 audit(1769538801.690:25006): avc: denied { mount } for pid=24344 comm="syz.7.5145" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 403.713248][ T29] audit: type=1400 audit(1769538801.764:25007): avc: denied { ioctl } for pid=24347 comm="syz.3.5146" path="socket:[77189]" dev="sockfs" ino=77189 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 403.887588][T24370] loop9: detected capacity change from 0 to 128 [ 403.982707][ T29] audit: type=1400 audit(1769538802.037:25008): avc: denied { connect } for pid=24367 comm="syz.7.5155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 404.031846][ T29] audit: type=1400 audit(1769538802.037:25009): avc: denied { bind } for pid=24367 comm="syz.7.5155" lport=431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 404.052658][ T29] audit: type=1400 audit(1769538802.037:25010): avc: denied { name_bind } for pid=24367 comm="syz.7.5155" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 404.073800][ T29] audit: type=1400 audit(1769538802.037:25011): avc: denied { node_bind } for pid=24367 comm="syz.7.5155" saddr=2001:: src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 404.100091][T24379] syzkaller0: entered promiscuous mode [ 404.105694][T24379] syzkaller0: entered allmulticast mode [ 404.169174][T24387] __nla_validate_parse: 11 callbacks suppressed [ 404.169194][T24387] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5162'. [ 404.306278][ T29] audit: type=1400 audit(1769538802.383:25012): avc: denied { append } for pid=24392 comm="syz.3.5165" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 404.434410][T24405] loop3: detected capacity change from 0 to 128 [ 404.445954][T24405] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 404.467039][T24405] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 404.472630][T24410] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5169'. [ 404.503324][ T29] audit: type=1400 audit(1769538802.593:25013): avc: denied { nlmsg_read } for pid=24402 comm="syz.7.5169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 404.559749][T24414] syzkaller0: entered promiscuous mode [ 404.565344][T24414] syzkaller0: entered allmulticast mode [ 404.635323][T24418] syzkaller0: entered promiscuous mode [ 404.640854][T24418] syzkaller0: entered allmulticast mode [ 404.835593][T24430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5178'. [ 404.859974][T24430] all: renamed from lo (while UP) [ 405.328860][T24459] syzkaller0: entered promiscuous mode [ 405.334466][T24459] syzkaller0: entered allmulticast mode [ 405.581446][T24465] loop2: detected capacity change from 0 to 256 [ 405.664871][T24471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5197'. [ 405.725503][T24465] FAT-fs (loop2): bogus number of directory entries (5) [ 405.763580][T24465] FAT-fs (loop2): Can't find a valid FAT filesystem [ 405.769099][T24471] team1: entered promiscuous mode [ 405.775876][T24471] team1: entered allmulticast mode [ 406.089862][T24494] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 406.089862][T24494] The task syz.7.5203 (24494) triggered the difference, watch for misbehavior. [ 406.171692][T24504] loop4: detected capacity change from 0 to 1024 [ 406.193135][T24504] EXT4-fs: Ignoring removed mblk_io_submit option [ 406.223854][T24504] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 406.242384][T24504] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 406.278490][T24504] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.5209: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 406.301230][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 406.309688][T24504] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5209: couldn't read orphan inode 11 (err -117) [ 406.332159][T24504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.366368][T24504] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5209: Invalid block bitmap block 0 in block_group 0 [ 406.406793][T24504] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.5209: Failed to acquire dquot type 0 [ 406.455949][T24522] lo speed is unknown, defaulting to 1000 [ 406.488877][T18520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.500975][T24523] set_capacity_and_notify: 1 callbacks suppressed [ 406.500992][T24523] loop2: detected capacity change from 0 to 512 [ 406.528924][T24523] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 406.594404][T24523] EXT4-fs (loop2): invalid journal inode [ 406.604075][T24523] EXT4-fs (loop2): can't get journal size [ 406.631868][T24523] EXT4-fs (loop2): 1 truncate cleaned up [ 406.648473][T24539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5220'. [ 406.657763][T24539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5220'. [ 406.670055][T24523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.685494][T24540] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5219'. [ 406.696974][T24523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.708243][T24540] team1: entered promiscuous mode [ 406.713507][T24540] team1: entered allmulticast mode [ 406.754025][T24522] sctp: [Deprecated]: syz.2.5214 (pid 24522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 406.754025][T24522] Use struct sctp_sack_info instead [ 406.808933][T24544] loop7: detected capacity change from 0 to 512 [ 406.817899][T24522] SELinux: failed to load policy [ 406.846512][T24544] EXT4-fs (loop7): orphan cleanup on readonly fs [ 406.853069][T24544] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 406.863093][T24544] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 406.880613][T24544] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.5222: attempt to clear invalid blocks 2 len 1 [ 406.895326][T24544] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5222: invalid indirect mapped block 1819239214 (level 0) [ 406.910519][T24544] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5222: invalid indirect mapped block 1819239214 (level 1) [ 406.961559][T24550] bond0: (slave vlan3): Opening slave failed [ 406.975883][T24544] EXT4-fs (loop7): 1 truncate cleaned up [ 406.982579][T24544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 407.025733][T24554] loop4: detected capacity change from 0 to 512 [ 407.034568][T19177] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.041003][T24554] EXT4-fs: Ignoring removed nobh option [ 407.068138][T24556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=24556 comm=syz.7.5227 [ 407.092124][T24554] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 407.103316][T24556] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5227'. [ 407.114742][T24554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 407.129248][T24561] loop9: detected capacity change from 0 to 512 [ 407.132110][T24554] System zones: 1-12 [ 407.141903][T24554] EXT4-fs (loop4): 1 truncate cleaned up [ 407.153293][T24561] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 407.154733][T24554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.164951][T24561] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 407.231204][T24561] EXT4-fs (loop9): 1 truncate cleaned up [ 407.238628][T24561] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.271180][T24568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5231'. [ 407.291454][T15436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.301031][T24568] loop2: detected capacity change from 0 to 512 [ 407.302858][T18520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.332328][T24568] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.5231: iget: bad extended attribute block 1 [ 407.379524][T24568] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.5231: couldn't read orphan inode 15 (err -117) [ 407.392302][T24568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.428407][T24582] loop4: detected capacity change from 0 to 512 [ 407.449299][T18883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.474364][T24582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.492835][T24582] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.508650][T24582] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.5236: Failed to acquire dquot type 1 [ 407.542527][T18520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.553704][T24593] netlink: 'syz.2.5237': attribute type 29 has an invalid length. [ 407.581854][T24595] lo speed is unknown, defaulting to 1000 [ 407.621838][T24600] loop7: detected capacity change from 0 to 1024 [ 407.649915][T24604] loop4: detected capacity change from 0 to 512 [ 407.661563][T24600] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 407.702705][ T4076] Bluetooth: hci0: Frame reassembly failed (-84) [ 407.709640][T24600] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.228874][T24685] netlink: 'syz.9.5242': attribute type 4 has an invalid length. [ 408.261490][T24685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24685 comm=syz.9.5242 [ 408.353942][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 408.353959][ T29] audit: type=1400 audit(1769538806.635:25033): avc: denied { watch watch_reads } for pid=24707 comm="syz.2.5243" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 408.519754][T19177] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.542185][T24723] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5246'. [ 408.572151][ T29] audit: type=1400 audit(1769538806.855:25034): avc: denied { write } for pid=24711 comm="syz.2.5245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 408.611842][T24723] lo speed is unknown, defaulting to 1000 [ 408.958139][ T29] audit: type=1400 audit(1769538807.265:25035): avc: denied { bind } for pid=24741 comm="syz.2.5252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 408.979764][ T29] audit: type=1400 audit(1769538807.265:25036): avc: denied { write } for pid=24741 comm="syz.2.5252" path="socket:[78172]" dev="sockfs" ino=78172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 409.012973][T24747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5253'. [ 409.134911][ T29] audit: type=1400 audit(1769538807.454:25037): avc: denied { setattr } for pid=24758 comm="syz.2.5258" name="ns" dev="proc" ino=78225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 409.135300][T24759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5258'. [ 409.274117][T24765] netlink: 'syz.2.5261': attribute type 1 has an invalid length. [ 409.288814][T24763] loop9: detected capacity change from 0 to 1024 [ 409.292347][T24765] 8021q: adding VLAN 0 to HW filter on device bond4 [ 409.314275][T24765] loop2: detected capacity change from 0 to 1024 [ 409.324135][T24765] EXT4-fs: Ignoring removed orlov option [ 409.336920][T24763] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.354154][T24765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.363727][T24763] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5260'. [ 409.375735][T24763] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5260'. [ 409.414048][T18883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.414493][T15436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.431766][ T29] audit: type=1400 audit(1769538807.758:25038): avc: denied { ioctl } for pid=24774 comm="syz.7.5262" path="socket:[78268]" dev="sockfs" ino=78268 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 409.491756][T24777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5264'. [ 409.510137][T24779] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5265'. [ 409.579005][T24785] EXT4-fs: Ignoring removed orlov option [ 409.587592][T24785] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.603635][ T29] audit: type=1400 audit(1769538807.947:25039): avc: denied { map } for pid=24784 comm="syz.9.5267" path="/493/bus/file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 409.628475][ T29] audit: type=1400 audit(1769538807.947:25040): avc: denied { execute } for pid=24784 comm="syz.9.5267" path="/493/bus/file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 409.652198][T24611] Bluetooth: hci0: command 0x1003 tx timeout [ 409.660267][ T3517] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 409.969921][T15436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.229333][ T29] audit: type=1400 audit(1769538808.598:25041): avc: denied { sqpoll } for pid=24842 comm="syz.2.5277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 410.250725][ T29] audit: type=1400 audit(1769538808.598:25042): avc: denied { map } for pid=24842 comm="syz.2.5277" path="pipe:[77819]" dev="pipefs" ino=77819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 410.352355][T24851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.399711][T24851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5279'. [ 410.420942][T24857] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5281'. [ 410.460839][T18883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.543578][T24861] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 410.581709][T24865] xt_hashlimit: size too large, truncated to 1048576 [ 410.588833][T24865] xt_hashlimit: max too large, truncated to 1048576 [ 410.619779][T24867] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 410.629668][T24867] EXT4-fs (loop4): orphan cleanup on readonly fs [ 410.637089][T24867] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 410.654775][T24867] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 410.662465][T24867] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.5285: corrupted inode contents [ 410.675112][T24867] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #16: comm syz.4.5285: mark_inode_dirty error [ 410.687306][T24867] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.5285: corrupted inode contents [ 410.701251][T24867] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.5285: mark_inode_dirty error [ 410.717351][T24867] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.5285: corrupted inode contents [ 410.730688][T24867] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 410.747825][T24867] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.5285: corrupted inode contents [ 410.760546][T24867] EXT4-fs error (device loop4): ext4_truncate:4635: inode #16: comm syz.4.5285: mark_inode_dirty error [ 410.772545][T24867] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 410.782768][T24867] EXT4-fs (loop4): 1 truncate cleaned up [ 410.784674][T24878] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.790928][T24867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 410.805403][T24878] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.819116][T24867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.835377][T24878] EXT4-fs error (device loop9): ext4_empty_dir:3078: inode #12: comm syz.9.5288: Directory hole found for htree leaf block 0 [ 410.963433][T15436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.062918][T24896] netlink: 92 bytes leftover after parsing attributes in process `syz.9.5291'. [ 411.073250][T24896] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5291'. [ 411.089026][T24898] tmpfs: Bad value for 'mpol' [ 411.110189][T24898] xt_CT: No such helper "snmp_trap" [ 411.225573][T24909] FAULT_INJECTION: forcing a failure. [ 411.225573][T24909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.240215][T24909] CPU: 1 UID: 0 PID: 24909 Comm: syz.4.5300 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 411.240275][T24909] Tainted: [W]=WARN [ 411.240285][T24909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 411.240303][T24909] Call Trace: [ 411.240313][T24909] [ 411.240325][T24909] __dump_stack+0x1d/0x30 [ 411.240358][T24909] dump_stack_lvl+0x95/0xd0 [ 411.240436][T24909] dump_stack+0x15/0x1b [ 411.240510][T24909] should_fail_ex+0x263/0x280 [ 411.240556][T24909] should_fail+0xb/0x20 [ 411.240619][T24909] should_fail_usercopy+0x1a/0x20 [ 411.240684][T24909] strncpy_from_user+0x27/0x250 [ 411.240722][T24909] getname_flags+0xad/0x3b0 [ 411.240752][T24909] user_path_at+0x28/0x130 [ 411.240845][T24909] __se_sys_quotactl+0xb6/0x670 [ 411.240879][T24909] __x64_sys_quotactl+0x55/0x70 [ 411.240900][T24909] x64_sys_call+0x19a4/0x3000 [ 411.240931][T24909] do_syscall_64+0xc0/0x2a0 [ 411.241026][T24909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.241106][T24909] RIP: 0033:0x7f2cb7f4aeb9 [ 411.241128][T24909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.241186][T24909] RSP: 002b:00007f2cb69a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 411.241208][T24909] RAX: ffffffffffffffda RBX: 00007f2cb81c5fa0 RCX: 00007f2cb7f4aeb9 [ 411.241222][T24909] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: ffffffff80000200 [ 411.241319][T24909] RBP: 00007f2cb69a7090 R08: 0000000000000000 R09: 0000000000000000 [ 411.241335][T24909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.241352][T24909] R13: 00007f2cb81c6038 R14: 00007f2cb81c5fa0 R15: 00007fffa2bf65f8 [ 411.241379][T24909] [ 411.443212][T24911] set_capacity_and_notify: 4 callbacks suppressed [ 411.443234][T24911] loop9: detected capacity change from 0 to 1024 [ 411.478220][T24913] loop2: detected capacity change from 0 to 1764 [ 411.485370][T24913] iso9660: Unknown parameter 'gib5ڝu{vd' [ 411.537145][T24917] team3: entered promiscuous mode [ 411.542465][T24917] team3: entered allmulticast mode [ 411.577897][T24921] loop9: detected capacity change from 0 to 2048 [ 411.687547][T24929] loop4: detected capacity change from 0 to 1024 [ 411.694553][T24929] EXT4-fs: Ignoring removed bh option [ 411.792016][T24929] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.5308: Allocating blocks 497-513 which overlap fs metadata [ 411.863964][T24928] EXT4-fs (loop4): pa ffff888107e8ab60: logic 48, phys. 177, len 21 [ 411.872385][T24928] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 411.951328][T24950] FAULT_INJECTION: forcing a failure. [ 411.951328][T24950] name failslab, interval 1, probability 0, space 0, times 0 [ 411.965489][T24950] CPU: 1 UID: 0 PID: 24950 Comm: syz.4.5313 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 411.965525][T24950] Tainted: [W]=WARN [ 411.965549][T24950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 411.965562][T24950] Call Trace: [ 411.965631][T24950] [ 411.965639][T24950] __dump_stack+0x1d/0x30 [ 411.965796][T24950] dump_stack_lvl+0x95/0xd0 [ 411.965819][T24950] dump_stack+0x15/0x1b [ 411.965841][T24950] should_fail_ex+0x263/0x280 [ 411.965879][T24950] should_failslab+0x8c/0xb0 [ 411.965911][T24950] kmem_cache_alloc_noprof+0x68/0x490 [ 411.965952][T24950] ? getname_flags+0x7f/0x3b0 [ 411.966003][T24950] getname_flags+0x7f/0x3b0 [ 411.966037][T24950] __se_sys_quotactl+0x16a/0x670 [ 411.966072][T24950] __x64_sys_quotactl+0x55/0x70 [ 411.966097][T24950] x64_sys_call+0x19a4/0x3000 [ 411.966206][T24950] do_syscall_64+0xc0/0x2a0 [ 411.966245][T24950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.966271][T24950] RIP: 0033:0x7f2cb7f4aeb9 [ 411.966293][T24950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.966401][T24950] RSP: 002b:00007f2cb69a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 411.966426][T24950] RAX: ffffffffffffffda RBX: 00007f2cb81c5fa0 RCX: 00007f2cb7f4aeb9 [ 411.966439][T24950] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: ffffffff80000200 [ 411.966454][T24950] RBP: 00007f2cb69a7090 R08: 0000000000000000 R09: 0000000000000000 [ 411.966529][T24950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.966625][T24950] R13: 00007f2cb81c6038 R14: 00007f2cb81c5fa0 R15: 00007fffa2bf65f8 [ 411.966645][T24950] [ 412.159257][T24952] loop2: detected capacity change from 0 to 512 [ 412.188245][T24952] EXT4-fs (loop2): orphan cleanup on readonly fs [ 412.194842][T24952] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 412.204648][T24952] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 412.220598][T24952] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.5315: attempt to clear invalid blocks 2 len 1 [ 412.260928][T24952] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.5315: invalid indirect mapped block 1819239214 (level 0) [ 412.276117][T24952] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.5315: invalid indirect mapped block 1819239214 (level 1) [ 412.292233][T24952] EXT4-fs (loop2): 1 truncate cleaned up [ 412.759953][T24981] FAULT_INJECTION: forcing a failure. [ 412.759953][T24981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.773164][T24981] CPU: 0 UID: 0 PID: 24981 Comm: syz.7.5325 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 412.773209][T24981] Tainted: [W]=WARN [ 412.773219][T24981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.773299][T24981] Call Trace: [ 412.773309][T24981] [ 412.773320][T24981] __dump_stack+0x1d/0x30 [ 412.773353][T24981] dump_stack_lvl+0x95/0xd0 [ 412.773383][T24981] dump_stack+0x15/0x1b [ 412.773418][T24981] should_fail_ex+0x263/0x280 [ 412.773516][T24981] should_fail+0xb/0x20 [ 412.773607][T24981] should_fail_usercopy+0x1a/0x20 [ 412.773671][T24981] strncpy_from_user+0x27/0x250 [ 412.773747][T24981] getname_flags+0xad/0x3b0 [ 412.773778][T24981] __se_sys_quotactl+0x16a/0x670 [ 412.773858][T24981] __x64_sys_quotactl+0x55/0x70 [ 412.773882][T24981] x64_sys_call+0x19a4/0x3000 [ 412.773913][T24981] do_syscall_64+0xc0/0x2a0 [ 412.774032][T24981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.774058][T24981] RIP: 0033:0x7fa5a7a0aeb9 [ 412.774078][T24981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.774181][T24981] RSP: 002b:00007fa5a6467028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 412.774284][T24981] RAX: ffffffffffffffda RBX: 00007fa5a7c85fa0 RCX: 00007fa5a7a0aeb9 [ 412.774304][T24981] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: ffffffff80000200 [ 412.774382][T24981] RBP: 00007fa5a6467090 R08: 0000000000000000 R09: 0000000000000000 [ 412.774400][T24981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.774423][T24981] R13: 00007fa5a7c86038 R14: 00007fa5a7c85fa0 R15: 00007ffc45759758 [ 412.774448][T24981] [ 413.042369][T24988] team2: entered promiscuous mode [ 413.047618][T24988] team2: entered allmulticast mode [ 413.079584][T24992] loop9: detected capacity change from 0 to 1024 [ 413.091559][T24992] EXT4-fs: Ignoring removed bh option [ 413.229361][T25007] loop2: detected capacity change from 0 to 128 [ 413.239342][T25003] netlink: 'syz.7.5332': attribute type 3 has an invalid length. [ 413.252571][T25008] netlink: 'syz.7.5332': attribute type 3 has an invalid length. [ 413.309391][T25012] loop2: detected capacity change from 0 to 512 [ 413.348901][T25012] ext4 filesystem being mounted at /357/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.373230][T25015] lo speed is unknown, defaulting to 1000 [ 413.399677][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 413.399694][ T29] audit: type=1400 audit(1769538811.915:25086): avc: denied { create } for pid=25011 comm="syz.2.5336" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 413.429602][T25017] loop9: detected capacity change from 0 to 512 [ 413.477154][T25017] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.490704][T25023] FAULT_INJECTION: forcing a failure. [ 413.490704][T25023] name failslab, interval 1, probability 0, space 0, times 0 [ 413.504720][T25023] CPU: 1 UID: 0 PID: 25023 Comm: syz.2.5339 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 413.504821][T25023] Tainted: [W]=WARN [ 413.504828][T25023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 413.504840][T25023] Call Trace: [ 413.504847][T25023] [ 413.504863][T25023] __dump_stack+0x1d/0x30 [ 413.504892][T25023] dump_stack_lvl+0x95/0xd0 [ 413.504913][T25023] dump_stack+0x15/0x1b [ 413.504932][T25023] should_fail_ex+0x263/0x280 [ 413.505032][T25023] should_failslab+0x8c/0xb0 [ 413.505055][T25023] __kmalloc_cache_noprof+0x64/0x4a0 [ 413.505086][T25023] ? getname_flags+0x207/0x3b0 [ 413.505111][T25023] getname_flags+0x207/0x3b0 [ 413.505154][T25023] __se_sys_quotactl+0x16a/0x670 [ 413.505177][T25023] __x64_sys_quotactl+0x55/0x70 [ 413.505231][T25023] x64_sys_call+0x19a4/0x3000 [ 413.505286][T25023] do_syscall_64+0xc0/0x2a0 [ 413.505316][T25023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.505336][T25023] RIP: 0033:0x7fc2664eaeb9 [ 413.505381][T25023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.505399][T25023] RSP: 002b:00007fc264f47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 413.505417][T25023] RAX: ffffffffffffffda RBX: 00007fc266765fa0 RCX: 00007fc2664eaeb9 [ 413.505459][T25023] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: ffffffff80000200 [ 413.505472][T25023] RBP: 00007fc264f47090 R08: 0000000000000000 R09: 0000000000000000 [ 413.505484][T25023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.505495][T25023] R13: 00007fc266766038 R14: 00007fc266765fa0 R15: 00007ffec7822728 [ 413.505573][T25023] [ 413.524664][T25017] team0: Port device gtp1 added [ 413.698502][T25024] team0: Port device gtp2 added [ 413.786350][T25031] team5: entered promiscuous mode [ 413.792927][T25031] team5: entered allmulticast mode [ 414.022696][ T29] audit: type=1400 audit(1769538812.587:25087): avc: denied { write } for pid=25033 comm="syz.9.5343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 414.042314][ T29] audit: type=1400 audit(1769538812.587:25088): avc: denied { read } for pid=25033 comm="syz.9.5343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 414.094452][ T29] audit: type=1326 audit(1769538812.619:25089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25037 comm="syz.4.5344" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cb7f4aeb9 code=0x0 [ 414.134515][T25043] netlink: 'syz.2.5346': attribute type 1 has an invalid length. [ 414.142441][T25043] netlink: 'syz.2.5346': attribute type 2 has an invalid length. [ 414.150519][T25043] __nla_validate_parse: 7 callbacks suppressed [ 414.150536][T25043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5346'. [ 414.410188][T25063] loop2: detected capacity change from 0 to 164 [ 414.419931][T25063] rock: directory entry would overflow storage [ 414.426169][T25063] rock: sig=0x66, size=4, remaining=3 [ 414.433760][ T29] audit: type=1400 audit(1769538813.018:25090): avc: denied { mount } for pid=25052 comm="syz.2.5350" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 414.507387][T20369] loop7: p1 < > p4 [ 414.512291][T20369] loop7: p4 start 268435456 is beyond EOD, truncated [ 414.521128][T25062] loop7: p1 < > p4 [ 414.526048][T25062] loop7: p4 start 268435456 is beyond EOD, truncated [ 414.554525][ T29] audit: type=1400 audit(1769538813.144:25091): avc: denied { unmount } for pid=18883 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 414.598148][T20380] udevd[20380]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 414.609918][T25070] netlink: 'syz.2.5355': attribute type 36 has an invalid length. [ 414.626043][T25070] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 414.636380][T25070] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 414.683298][T25077] IPv6: NLM_F_CREATE should be specified when creating new route [ 414.683654][T25076] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5356'. [ 414.691971][T25077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 414.707741][T25077] IPv6: NLM_F_CREATE should be set when creating new route [ 414.718814][ T29] audit: type=1326 audit(1769538813.311:25092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.2.5357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2664eaeb9 code=0x7ffc0000 [ 414.718830][T25076] team3: entered promiscuous mode [ 414.719320][ T29] audit: type=1326 audit(1769538813.311:25093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.2.5357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc2664eaeb9 code=0x7ffc0000 [ 414.746044][T25076] team3: entered allmulticast mode [ 414.749157][ T29] audit: type=1326 audit(1769538813.343:25094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.2.5357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2664eaeb9 code=0x7ffc0000 [ 414.800213][ T29] audit: type=1326 audit(1769538813.343:25095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.2.5357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2664eaeb9 code=0x7ffc0000 [ 414.826448][T25077] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 414.864689][T25077] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 414.911925][T25086] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 414.937875][T25085] 9p: Bad value for 'rfdno' [ 414.942630][ T4080] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 415.033857][T25104] x_tables: duplicate underflow at hook 3 [ 415.042073][T25108] netlink: 'syz.7.5366': attribute type 8 has an invalid length. [ 415.050038][T25108] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5366'. [ 415.070868][T25110] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 415.080953][T25110] EXT4-fs (loop2): inodes count not valid: 0 vs 32 [ 415.096691][T25108] bond0: entered promiscuous mode [ 415.101895][T25108] bond_slave_0: entered promiscuous mode [ 415.107717][T25108] bond_slave_1: entered promiscuous mode [ 415.115739][T25108] batadv0: entered promiscuous mode [ 415.123706][T25108] gretap0: entered promiscuous mode [ 415.130102][T25108] ip6gretap0: entered promiscuous mode [ 415.137152][T25108] debugfs: 'hsr1' already exists in 'hsr' [ 415.144341][T25108] Cannot create hsr debugfs directory [ 415.149816][T25108] hsr1: entered promiscuous mode [ 415.155705][T25108] netlink: 'syz.7.5366': attribute type 8 has an invalid length. [ 415.163607][T25108] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5366'. [ 415.192760][T25102] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5365'. [ 415.202408][T25102] netlink: 'syz.9.5365': attribute type 21 has an invalid length. [ 415.210435][T25102] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5365'. [ 415.237712][T25108] netlink: 'syz.7.5366': attribute type 8 has an invalid length. [ 415.245501][T25108] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5366'. [ 415.280564][T25123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5368'. [ 415.291997][T25123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5368'. [ 415.301714][T25108] netlink: 'syz.7.5366': attribute type 8 has an invalid length. [ 415.309634][T25108] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5366'. [ 415.458316][T25144] EXT4-fs: Invalid want_extra_isize 0 [ 415.539923][T25153] team4: entered promiscuous mode [ 415.545177][T25153] team4: entered allmulticast mode [ 415.872046][T25179] EXT4-fs (loop7): orphan cleanup on readonly fs [ 415.878563][T25179] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 415.903139][T25179] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 415.919846][T25179] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.5379: attempt to clear invalid blocks 2 len 1 [ 415.934986][T25179] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5379: invalid indirect mapped block 1819239214 (level 0) [ 415.951884][T25182] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 415.964601][T25179] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5379: invalid indirect mapped block 1819239214 (level 1) [ 415.980076][T25179] EXT4-fs (loop7): 1 truncate cleaned up [ 416.020590][T25177] loop4: p1 p3 < > [ 416.079195][T25193] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.133997][T25200] SELinux: Context system_u:object_r:sshd_var_run_t:s0 is not valid (left unmapped). [ 416.203715][T25200] lo speed is unknown, defaulting to 1000 [ 416.255728][T25211] set_capacity_and_notify: 11 callbacks suppressed [ 416.255749][T25211] loop9: detected capacity change from 0 to 1024 [ 416.266806][T25208] 8021q: adding VLAN 0 to HW filter on device bond5 [ 416.285174][T20380] udevd[20380]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 416.299917][T20369] udevd[20369]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 416.303982][T25208] bond5: (slave geneve3): making interface the new active one [ 416.328984][T25208] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 416.337909][ T4075] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.354229][ T4080] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.370793][ T4080] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.395608][ T4080] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.409854][T25216] loop7: detected capacity change from 0 to 1024 [ 416.464703][T25223] loop2: detected capacity change from 0 to 256 [ 416.477434][T25223] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 416.486258][T25223] FAT-fs (loop2): Filesystem has been set read-only [ 416.493238][T25223] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 416.505301][T25223] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 416.515153][T25223] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 416.531709][T25223] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 416.540759][T25223] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 416.549633][T25223] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 416.558494][T25223] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 416.569842][T25223] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 416.589448][T25223] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 417.069303][T25247] FAULT_INJECTION: forcing a failure. [ 417.069303][T25247] name failslab, interval 1, probability 0, space 0, times 0 [ 417.083650][T25247] CPU: 1 UID: 0 PID: 25247 Comm: syz.9.5403 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 417.083737][T25247] Tainted: [W]=WARN [ 417.083748][T25247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 417.083766][T25247] Call Trace: [ 417.083775][T25247] [ 417.083784][T25247] __dump_stack+0x1d/0x30 [ 417.083810][T25247] dump_stack_lvl+0x95/0xd0 [ 417.083980][T25247] dump_stack+0x15/0x1b [ 417.084003][T25247] should_fail_ex+0x263/0x280 [ 417.084036][T25247] should_failslab+0x8c/0xb0 [ 417.084066][T25247] kmem_cache_alloc_noprof+0x68/0x490 [ 417.084160][T25247] ? getname_kernel+0x3c/0x1f0 [ 417.084194][T25247] getname_kernel+0x3c/0x1f0 [ 417.084225][T25247] kern_path+0x23/0x130 [ 417.084254][T25247] lookup_bdev+0x66/0x150 [ 417.084369][T25247] __se_sys_quotactl+0x1b7/0x670 [ 417.084404][T25247] __x64_sys_quotactl+0x55/0x70 [ 417.084424][T25247] x64_sys_call+0x19a4/0x3000 [ 417.084460][T25247] do_syscall_64+0xc0/0x2a0 [ 417.084535][T25247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.084586][T25247] RIP: 0033:0x7f02ee60aeb9 [ 417.084609][T25247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.084635][T25247] RSP: 002b:00007f02ed067028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 417.084663][T25247] RAX: ffffffffffffffda RBX: 00007f02ee885fa0 RCX: 00007f02ee60aeb9 [ 417.084696][T25247] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: ffffffff80000200 [ 417.084710][T25247] RBP: 00007f02ed067090 R08: 0000000000000000 R09: 0000000000000000 [ 417.084760][T25247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.084778][T25247] R13: 00007f02ee886038 R14: 00007f02ee885fa0 R15: 00007ffda1a7f668 [ 417.084808][T25247] [ 417.313906][T25250] gre1: entered promiscuous mode [ 417.320450][T25250] gre1: entered allmulticast mode [ 417.331178][T25252] loop2: detected capacity change from 0 to 1024 [ 417.339369][T25250] team0: Device gre1 is of different type [ 417.345216][T25254] loop9: detected capacity change from 0 to 128 [ 417.353030][T25252] EXT4-fs: Ignoring removed bh option [ 417.370393][T25254] sctp: [Deprecated]: syz.9.5404 (pid 25254) Use of int in max_burst socket option deprecated. [ 417.370393][T25254] Use struct sctp_assoc_value instead [ 417.497419][T25252] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.5405: Allocating blocks 497-513 which overlap fs metadata [ 417.519234][T25255] loop7: detected capacity change from 0 to 512 [ 417.565309][T25252] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.5405: Allocating blocks 497-513 which overlap fs metadata [ 417.607896][T25255] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.619517][T25262] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.5405: Allocating blocks 497-513 which overlap fs metadata [ 417.648977][T25251] EXT4-fs (loop2): pa ffff888107d54f50: logic 48, phys. 177, len 21 [ 417.657154][T25251] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 417.805220][T25273] team0: Port device dummy0 added [ 417.884331][T25285] FAULT_INJECTION: forcing a failure. [ 417.884331][T25285] name failslab, interval 1, probability 0, space 0, times 0 [ 417.898601][T25285] CPU: 1 UID: 0 PID: 25285 Comm: syz.2.5415 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 417.898638][T25285] Tainted: [W]=WARN [ 417.898668][T25285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 417.898682][T25285] Call Trace: [ 417.898689][T25285] [ 417.898704][T25285] __dump_stack+0x1d/0x30 [ 417.898737][T25285] dump_stack_lvl+0x95/0xd0 [ 417.898768][T25285] dump_stack+0x15/0x1b [ 417.898855][T25285] should_fail_ex+0x263/0x280 [ 417.898893][T25285] should_failslab+0x8c/0xb0 [ 417.898990][T25285] __kmalloc_cache_noprof+0x64/0x4a0 [ 417.899086][T25285] ? getname_kernel+0xb6/0x1f0 [ 417.899196][T25285] getname_kernel+0xb6/0x1f0 [ 417.899234][T25285] kern_path+0x23/0x130 [ 417.899268][T25285] lookup_bdev+0x66/0x150 [ 417.899349][T25285] __se_sys_quotactl+0x1b7/0x670 [ 417.899437][T25285] __x64_sys_quotactl+0x55/0x70 [ 417.899461][T25285] x64_sys_call+0x19a4/0x3000 [ 417.899495][T25285] do_syscall_64+0xc0/0x2a0 [ 417.899537][T25285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.899599][T25285] RIP: 0033:0x7fc2664eaeb9 [ 417.899620][T25285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.899643][T25285] RSP: 002b:00007fc264f47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 417.899665][T25285] RAX: ffffffffffffffda RBX: 00007fc266765fa0 RCX: 00007fc2664eaeb9 [ 417.899679][T25285] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: ffffffff80000200 [ 417.899693][T25285] RBP: 00007fc264f47090 R08: 0000000000000000 R09: 0000000000000000 [ 417.899714][T25285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.899731][T25285] R13: 00007fc266766038 R14: 00007fc266765fa0 R15: 00007ffec7822728 [ 417.899776][T25285] [ 417.901593][T25276] team4: entered promiscuous mode [ 418.004127][T25287] new mount options do not match the existing superblock, will be ignored [ 418.012754][T25276] team4: entered allmulticast mode [ 418.116711][T25287] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 418.126890][T25287] bridge2: entered promiscuous mode [ 418.155173][T25287] 9p: Bad value for 'rfdno' [ 418.176336][T25290] loop2: detected capacity change from 0 to 1024 [ 418.185232][T25290] EXT4-fs: Mount option(s) incompatible with ext3 [ 418.197606][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 418.197623][ T29] audit: type=1400 audit(2000000000.031:25218): avc: denied { unmount } for pid=18520 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 418.280120][ T29] audit: type=1326 audit(2000000000.125:25219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25296 comm="syz.9.5419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02ee60aeb9 code=0x0 [ 418.369896][ T29] audit: type=1326 audit(2000000000.209:25220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25303 comm="syz.7.5421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5a7a0aeb9 code=0x0 [ 418.421549][ T29] audit: type=1326 audit(2000000000.272:25221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25305 comm="syz.2.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2664eaeb9 code=0x7ffc0000 [ 418.445401][ T29] audit: type=1326 audit(2000000000.272:25222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25305 comm="syz.2.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2664eaeb9 code=0x7ffc0000 [ 418.445667][T25299] loop4: detected capacity change from 0 to 8192 [ 418.472171][ T29] audit: type=1326 audit(2000000000.272:25223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25305 comm="syz.2.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fc2664eaeb9 code=0x7ffc0000 [ 418.500694][ T29] audit: type=1326 audit(2000000000.272:25224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25305 comm="syz.2.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2664eaeb9 code=0x7ffc0000 [ 418.526209][ T29] audit: type=1326 audit(2000000000.272:25225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25305 comm="syz.2.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2664eaeb9 code=0x7ffc0000 [ 418.635125][ T29] audit: type=1326 audit(2000000000.325:25226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25305 comm="syz.2.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fc2664eaeb9 code=0x7ffc0000 [ 418.660489][ T29] audit: type=1326 audit(2000000000.325:25227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25305 comm="syz.2.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2664eaeb9 code=0x7ffc0000 [ 418.804605][T25323] FAULT_INJECTION: forcing a failure. [ 418.804605][T25323] name failslab, interval 1, probability 0, space 0, times 0 [ 418.817386][T25323] CPU: 0 UID: 0 PID: 25323 Comm: syz.4.5427 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 418.817460][T25323] Tainted: [W]=WARN [ 418.817530][T25323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 418.817544][T25323] Call Trace: [ 418.817551][T25323] [ 418.817561][T25323] __dump_stack+0x1d/0x30 [ 418.817601][T25323] dump_stack_lvl+0x95/0xd0 [ 418.817625][T25323] dump_stack+0x15/0x1b [ 418.817650][T25323] should_fail_ex+0x263/0x280 [ 418.817786][T25323] should_failslab+0x8c/0xb0 [ 418.817887][T25323] __kmalloc_cache_noprof+0x64/0x4a0 [ 418.817921][T25323] ? nd_alloc_stack+0x50/0xa0 [ 418.817948][T25323] ? __pfx_shmem_get_link+0x10/0x10 [ 418.818042][T25323] nd_alloc_stack+0x50/0xa0 [ 418.818079][T25323] pick_link+0x830/0x8e0 [ 418.818113][T25323] step_into_slowpath+0x36a/0x4c0 [ 418.818145][T25323] link_path_walk+0x974/0xe30 [ 418.818194][T25323] path_lookupat+0x8c/0x500 [ 418.818279][T25323] filename_lookup+0x190/0x390 [ 418.818323][T25323] ? __pfx_shmem_put_link+0x10/0x10 [ 418.818440][T25323] ? __pfx_shmem_put_link+0x10/0x10 [ 418.818533][T25323] kern_path+0x3b/0x130 [ 418.818570][T25323] lookup_bdev+0x66/0x150 [ 418.818650][T25323] __se_sys_quotactl+0x1b7/0x670 [ 418.818683][T25323] __x64_sys_quotactl+0x55/0x70 [ 418.818714][T25323] x64_sys_call+0x19a4/0x3000 [ 418.818756][T25323] do_syscall_64+0xc0/0x2a0 [ 418.818816][T25323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.818843][T25323] RIP: 0033:0x7f2cb7f4aeb9 [ 418.818896][T25323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.818921][T25323] RSP: 002b:00007f2cb69a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 418.818948][T25323] RAX: ffffffffffffffda RBX: 00007f2cb81c5fa0 RCX: 00007f2cb7f4aeb9 [ 418.818968][T25323] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: ffffffff80000200 [ 418.818985][T25323] RBP: 00007f2cb69a7090 R08: 0000000000000000 R09: 0000000000000000 [ 418.818999][T25323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.819027][T25323] R13: 00007f2cb81c6038 R14: 00007f2cb81c5fa0 R15: 00007fffa2bf65f8 [ 418.819053][T25323] [ 419.054160][T25325] loop2: detected capacity change from 0 to 2048 [ 419.098757][T25331] loop4: detected capacity change from 0 to 128 [ 419.105791][T25324] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.5428: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 419.252439][T25342] __nla_validate_parse: 18 callbacks suppressed [ 419.252487][T25342] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5432'. [ 419.302330][T25342] team5: entered promiscuous mode [ 419.307515][T25342] team5: entered allmulticast mode [ 419.831767][T25354] lo speed is unknown, defaulting to 1000 [ 419.941476][T25384] lo speed is unknown, defaulting to 1000 [ 420.198220][T25399] siw: device registration error -23 [ 420.264676][T25404] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5445'. [ 420.279506][T25404] team6: entered promiscuous mode [ 420.284605][T25404] team6: entered allmulticast mode [ 420.369957][T25407] ================================================================== [ 420.378401][T25407] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 420.386546][T25407] [ 420.388912][T25407] write to 0xffff88812e35e2e8 of 8 bytes by task 25408 on cpu 0: [ 420.396664][T25407] filemap_splice_read+0x523/0x780 [ 420.401828][T25407] splice_direct_to_actor+0x26e/0x670 [ 420.407240][T25407] do_splice_direct+0x119/0x1a0 [ 420.412105][T25407] do_sendfile+0x382/0x650 [ 420.416545][T25407] __x64_sys_sendfile64+0x105/0x150 [ 420.421768][T25407] x64_sys_call+0x2db1/0x3000 [ 420.426515][T25407] do_syscall_64+0xc0/0x2a0 [ 420.431073][T25407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.437017][T25407] [ 420.439352][T25407] write to 0xffff88812e35e2e8 of 8 bytes by task 25407 on cpu 1: [ 420.447089][T25407] filemap_splice_read+0x523/0x780 [ 420.452339][T25407] splice_direct_to_actor+0x26e/0x670 [ 420.457736][T25407] do_splice_direct+0x119/0x1a0 [ 420.462632][T25407] do_sendfile+0x382/0x650 [ 420.467074][T25407] __x64_sys_sendfile64+0x105/0x150 [ 420.472316][T25407] x64_sys_call+0x2db1/0x3000 [ 420.477029][T25407] do_syscall_64+0xc0/0x2a0 [ 420.481621][T25407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.487889][T25407] [ 420.490214][T25407] value changed: 0x000000000034b000 -> 0x0000000000350000 [ 420.497322][T25407] [ 420.499657][T25407] Reported by Kernel Concurrency Sanitizer on: [ 420.505909][T25407] CPU: 1 UID: 0 PID: 25407 Comm: syz.4.5446 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 420.517401][T25407] Tainted: [W]=WARN [ 420.521264][T25407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 420.531517][T25407] ==================================================================