last executing test programs: 12.579461426s ago: executing program 1 (id=953): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625", 0x38}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c2528899c4dafaadec1", 0xf}, {&(0x7f0000000380)="863df713b27092133340e45590eac45df1f0a54f338c8d702066c10522ae87000000", 0x22}, {&(0x7f0000000ac0)="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", 0x11b}], 0x3}}], 0x3, 0x4004) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x42, 0x0, 0x8}, 0x28) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000280), 0x8002) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8110, &(0x7f0000000380)={'trans=xen,', {[{@version_u}, {@cache_readahead}, {@directio}, {@posixacl}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@appraise_type}, {@obj_type={'obj_type', 0x3d, '-@'}}, {@dont_measure}]}}) close(r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000108000140000000010900010073797a3000"], 0xe0}}, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*']}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000a030000000000000000000002"], 0x0, 0x3e, 0x0, 0x1}, 0x28) 11.738646424s ago: executing program 1 (id=977): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x2) fchdir(r4) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 11.689050157s ago: executing program 1 (id=979): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="94", 0x1}], 0x1, 0x0, 0x0, 0x5c656f613d3ffcde}}], 0x2, 0x4000045) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async, rerun: 64) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) (async) socket(0x14113bb826962a43, 0x803, 0xfffffffe) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) sendto$inet6(r1, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0) (async) close(r1) 11.574541154s ago: executing program 1 (id=980): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0xf683530070709e22}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x10, &(0x7f0000000000)='\x00\xd5S\x99\x90\x9c8;b\xea\x1c\xad\'w\x0f\x01y\x1a#\xd3\xd3\xb8\x84\v\x84\xc6S\xb3Um\xb3\xf8\x89\xe8>\xe0\xbb\t^W\xfa\x8f\x8e\xbc\x11\xb3\xe4a\x9f\t{\x9a\"') 11.572484744s ago: executing program 1 (id=982): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async, rerun: 64) r2 = semget$private(0x0, 0x7, 0x180) (rerun: 64) semtimedop(r2, &(0x7f0000000100)=[{0x0, 0x7fff, 0x400}, {0x3, 0x86ac, 0x1000}], 0x2, 0x0) semctl$SETVAL(r2, 0x0, 0x10, &(0x7f0000000040)) (async) perf_event_open(0x0, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000040026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="d44fa600000000000000002000128009000100697069700000000010000280080014000080000004001300140003006e696376663000"/63], 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x80) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.367525746s ago: executing program 1 (id=985): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) (async) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000004080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x226) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@delneigh={0x68, 0x1a, 0x1, 0x70bd2d, 0x4000800, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36eb47deb9f71e09}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x0, 0x0, 0x1}}, @NDA_DST_IPV6={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}}, @NDA_SRC_VNI={0x8, 0xb, 0xfffffff9}, @NDA_MASTER={0x8, 0x9, 0x5}, @NDA_CACHEINFO={0x14, 0x3, {0x1, 0x1, 0xbe84, 0xe}}]}, 0x68}}, 0x90) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) socket$key(0xf, 0x3, 0x2) (async) syz_clone3(&(0x7f0000000240)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) (async) sendto$inet(r7, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r8}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100001082dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="004004006400000008001b00000000000c002b80080001"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000140)=0x401, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x10000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x72, 0x20000}, 0x20) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ff0a1492733a0734bd102347bb942fb398d41dcb6e35ba9dff6500000008"], 0x15) (async) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x8010, r2, 0x9) (async) socket$xdp(0x2c, 0x3, 0x0) socket(0x1, 0x3, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x2, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x4, 0x701, 0x2, 0x40000006, 0x0, 0x7, 0x9}, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 5.511839308s ago: executing program 2 (id=1051): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)='B', 0x5ac}], 0x1, 0x0, 0x0, 0xffffff97}}, {{0x0, 0x0, &(0x7f00000006c0)}}, {{0x0, 0x0, &(0x7f0000000a40)=[{0x0, 0x11}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000bc0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f00)="e8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x7, 0x400c404) (async) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)='B', 0x5ac}], 0x1, 0x0, 0x0, 0xffffff97}}, {{0x0, 0x0, &(0x7f00000006c0)}}, {{0x0, 0x0, &(0x7f0000000a40)=[{0x0, 0x11}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000bc0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f00)="e8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x7, 0x400c404) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket(0x1, 0x803, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x8000) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x8000) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r6], 0x4c}}, 0x0) 5.404111515s ago: executing program 2 (id=1053): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0xe6d, 0x1, 0x9, 0x9, 0x80, 0x0}) process_vm_writev(r0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/165, 0xa5}, {&(0x7f0000000500)=""/245, 0xf5}], 0x2, &(0x7f0000001f00)=[{&(0x7f0000000600)=""/68, 0x44}, {&(0x7f0000000680)=""/112, 0x70}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000000700)=""/109, 0x6d}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f0000000480)=""/30, 0x1e}, {&(0x7f00000009c0)=""/154, 0x9a}], 0x7, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nodioread_nolock}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@abort}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d300000018010000e4d400bf00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000d00)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) ftruncate(r1, 0xb35) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000280)=0xc) write$cgroup_devices(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022adbbfc76e01d7dfff000000008000"], 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x44030) 4.835674168s ago: executing program 2 (id=1060): r0 = socket(0x11, 0x803, 0x104000) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="12000000400000000400000002"], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)=@tcp6=r2}, 0x20) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x1010, r0, 0x7e8b6000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002080)={r1, &(0x7f0000001f80), 0x0}, 0x20) write(r0, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) 4.491774658s ago: executing program 2 (id=1063): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, &(0x7f0000000080)={0x2a, 0x0, 0x2}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) close(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB="000000000000000000000000000061a78700000000000013ce413c5088d74f245efb5016a74575eee79aa7cf0785c4b75779c8e4899055ecccc964751b167251312d9b16414650706e13eae6c87ef1c74a5ccaa897081d70d0c521a6ca5301f248bb201841bd057e50a5d31f25395221251f218d910eb10acc47fb2bfecdedf5004808c335a41e7bc92201ceb20e68055bd7e22b20108659cd7789ff76fdab8497fb1e166ef273717da839629227d6a716e3f52db161e1b5515a42c6d86bca28a3010242d18dc1a31ec061d0", @ANYRES32, @ANYRESDEC=0x0, @ANYRESDEC=r0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x6) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) r9 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r9, &(0x7f00000004c0)="71ca96c1ffc2ca1e6456cba0ba8ff7ce3fc7f0a8bc1f21d3e03f4e098a8af6a813cbc9f8b0fd21472c6cf68a8e2d1323ba19ee46475e4c87d54d81d0e32a4b1efa4e5ed21edfbca7dac10cebd7dd758ab78e036ad1a35bb9af38bbbb7b2d205ce22616899963aabc9ef308a27c36ea90f81623eae25a8853b3f97293681ee9090c37f41379bb01bb38801113b07b6773c85fc32a1d8ed32acba16e3a5d15118cae064a3c7543085cbdc47e76fa6a44240301c10aa3c37faab73e974eb784789dd43336a5e24dc6a202277120", 0xcc, 0x4000, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f00000008c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0xfff9, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000140)=0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000180)={'batadv0\x00', &(0x7f0000000140)=@ethtool_stats}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x0, 0xee, 0xffffffff}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x6, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r0}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000840)={r7, 0x100000000, 0x3, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0xc, &(0x7f0000000940)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRES16=r6, @ANYRES16=r3, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$eJzs3c9rHNcdAPDvzEqyZauVXUqpTUsFPdhQvJZcU7c92e6hPhhqqA8h5GBhSY7w+geWDLZjsAw5JJBACLmG4Ev+gZBr0DXkFgKJbzkHnBCc5JAEb5jZWWuz2rU3kla78Xw+MDNv3szue98dvZ03MzuaAEprKhulEfsi4lwSMdmybCIaC6eK9R5+fft8NiRRr///qySSIq+5/qNiujsbJY3XfHwy4neV9eUu3bx1cbZWb7gTcXj50tXDSzdvHVq8NHth/sL85Zkj/zx6bPpfMx9uTZy7i+mp0//70+svv/iPhU9qh5I4HmdHX5qLtji2ylTj040sxNb8kYg4liU6fC6wnSrF3+NoRPwhJqOSzzVMxuJrA60c0Ff1SmP/VB+rA6WTxKBrAAxGsx/QPLbvx3HwMHtwIhvf6BD/SHH0vjM/Ntr1MGk5MspyI/ZsQfkrEfHj7f1vZ0N0OQ8xsgXldC3/bkT8sdP2T/L49+SRZvGnkba8LktPF+c2svr9ZxN1SFrSvf393dlEaT/3S+Jv3Q5Z/MeLaZZ/ssv7P+0Uz1TbfNnaHwCDsXqi2JFnHZFY2/9lPcNm/yfa+z/19/NrQ+37ro3ovv9Lt+Ddny7v/4102v839/c783142tYPS2Ll2zOd33K0PePzV0+92a38qZb+XzZk5Tf7gj3YdNfwwd2I/W3xv5J/9Mnj7Z906P9mq5zrsYz/fvrlqW7LNhn/ptXvRRzoePyz1ivNUm3XJ5NoXp88OnN4YbE2P90Ydyzjg49eeLdb+YOOP9v+u7rE/6Ttn+Vd7bGM987cu9RI7Vi3bOKp8adfjCVn89RYPl5rXmPJ6WKVxuTG7PLytSNPrktznXw604j/4F87t/8u8ecHH+PNr8weXH3u4sNuyza5/R/Ve1yxmyz+uQ1u/zd6LOO756//uduy9fGvnZMY32hQAAAAAAAAUFJpfg02SauP02laLS68/T52pbUrS8t/W7hy/fJcxMH895CjafNK92RjPsnmZ4rfwzbnj7TN/z0i9kbEW5XxfL56/kptbtDBAwAAAAAAAAAAAAAAAAAAwJDYXdz//6h4Htg3lTStVgddK2Db9PMBc8Bw0/6hvPL2vz3PWwOGjP0/lFfH9u9LAUpBU4fy0v6hvLR/KC/tH8pL+4fy6t7+1y252++6AAAAAABbZu9fVu+PRMTKv8fzITNWLBsdaM2AftPGobwqg64AMDCPL/C7/R9Kp6f+//fFPwfsf3WAAUg6Zeadg/qTG/9qx1cCAAAAAAAAAAAAAH1wYN/q/cT9/1BKbvuD8trY/f+Vjb8UGBqd/vW/x4FAOTjGh5Lr4STAzm4L3P8PAAAAAAAAAAAAANtmIh+StFr8DHgi0rRajfhNROyJ0WRhsTY/HRG/jYjPKqM7svmZQVcaAAAAAAAAAAAAAAAAAAAAnjFLN29dnK3V5q+1Jn5Yl/NsJ5pPPB2W+rQmIul7EWm05YxHxDDE3p/ESEtOErGSbfmteOdk838/MQyfT5EY8BcTAAAAAAAAAAAAAAAAAACUUMu9x53tf2ebawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA22/t+f/9Sww6RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg1+mnAAAA//+EYjvS") 4.487655479s ago: executing program 2 (id=1066): r0 = socket$netlink(0x10, 0x3, 0x15) (async) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000640)=ANY=[@ANYRES8=0x0], 0x6, 0x2c1, &(0x7f0000001880)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') getdents64(r1, 0x0, 0x0) (async) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000340), &(0x7f0000000740), 0x2, 0x0) (async, rerun: 64) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x119) (rerun: 64) setresuid(0xee00, 0xee00, 0x0) (async, rerun: 32) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x40047211, &(0x7f00000000c0)) (rerun: 32) wait4(0xffffffffffffffff, 0x0, 0x20000000, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c010000010301"], 0x18c}, 0x1, 0x0, 0x0, 0x2010}, 0x4000000) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000400)={0x2eb, 0x3, 0x1, 'queue1\x00', 0x7}) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) (async) r5 = syz_open_procfs(0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r7, 0x4) (async, rerun: 32) setsockopt$sock_int(r4, 0x1, 0x5, 0x0, 0x0) (rerun: 32) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000780)={{0x4, 0x3}, 'port1\x00', 0xbc, 0x1, 0x6, 0x80000001, 0x3, 0x46, 0x80000000, 0x0, 0x1, 0x12}) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async) write$binfmt_aout(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x13a) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c232000, 0xc, 0x4, @thr={&(0x7f0000000240)="eb032b645aa053b2f6f5088f0a2b00bb963ae19e5dc84f4032cbeda3d5b726fa48d60ee52c87056fc49d651373678b1c78faf497158b9c206ae973e0950ad78b968920fc797723ad0da441dafe1ee8e7a20f10a43d3f8fadbe1d0a11a5bf53b53a9b94783f7cc35c3607d1d6272a9d514de129a63f11f685f98d6c47ed1b2373b489774d3645d03dd2d4381f09b09eff1e7eb86141fc1413d4f557e2c8775e3a336ffcd1a7e49e69dcf51f3a848dd5b76fdb8ca889cfbb31da48990e185abaaa63804addd8746587eced76dc129f08ed20037bf61479be56905192f9955b150e6706621003e55de8", &(0x7f0000000180)="737e0d3534b75e42fbe050f1aa8c8b5d91b2084c1dcf75c24f41d191a26b882bf633dec24e6ce6ee3be0fde87eb1ffd7c6c44d64bb4e728fe961a22b0a0fbf9f32c5ca89430a00e1dc0e2934286d7adc942d35a3017f28b6ddc7200a72f7590ce0073af6ac8e0fc651"}}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x9, 0x80, 0xff, 0x80000002}]}) shutdown(r8, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x9, 0x440b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa27, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0xdffe, 0x0, 0x20000eb4, 0x0, 0x5}, 0x0, 0x0, r1, 0xa) 3.756056801s ago: executing program 2 (id=1077): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20040084) r6 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8408}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0x8000000000000000, 0x38, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 3.754114621s ago: executing program 32 (id=1077): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20040084) r6 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8408}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0x8000000000000000, 0x38, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1.624195076s ago: executing program 0 (id=1095): r0 = io_uring_setup(0x419e, &(0x7f0000000140)={0x0, 0x16ea, 0x18024, 0x2, 0x3d0}) r1 = syz_io_uring_setup(0x5c2, &(0x7f00000000c0)={0x0, 0x1954, 0x80, 0x4, 0x0, 0x0, r0}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) r4 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000200)=r4, 0x1) io_uring_enter(r1, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 1.527066251s ago: executing program 0 (id=1098): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, r1, 0x414, 0x5ff10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002ec0)=@deltfilter={0x24, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x13}, {0xa, 0x1}}}, 0x24}}, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x4) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x403, 0x70bd29, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r4}}}}]}, 0x38}}, 0x4000) (async) r5 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000280), 0x12) (async) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000280)=@ethtool_channels={0x1a, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) (async) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8704, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) close_range(r8, r8, 0x200000000000000) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/76, 0x4c}, {&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f0000000640)=""/252, 0xfc}, {&(0x7f0000000540)=""/88, 0x58}], 0x4, 0x8, 0x9) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 1.427223757s ago: executing program 0 (id=1101): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendmsg$inet6(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x8801) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0xe, 'veth0_to_batadv\x00'}) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0xc00) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x20, 0x8000, 0x9, 0x5, {{0x34, 0x4, 0x2, 0x3e, 0xd0, 0x67, 0x0, 0x10, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xc}, {[@cipso={0x86, 0x44, 0x2, [{0x2, 0x4, "e21b"}, {0x5, 0x3, '.'}, {0x0, 0xe, "8e29541d2e973cca47e606b7"}, {0x2, 0x9, "56dfea02220136"}, {0x6, 0x11, "1792f1d1e43d62b7cc9d1f2ae9063c"}, {0x2, 0xf, "0bc3ce8c9827937f560b127c28"}]}, @ssrr={0x89, 0xf, 0x54, [@loopback, @multicast1, @remote]}, @timestamp_prespec={0x44, 0x44, 0x70, 0x3, 0x1, [{@rand_addr=0x64010101, 0x10}, {@private=0xa010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x37c3a0a}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x8}, {@broadcast, 0xc}, {@private=0xa010101, 0x4}]}, @cipso={0x86, 0x25, 0x2, [{0x2, 0xf, "acdfa2d1454ebc14cb62593c89"}, {0x1, 0x10, "61d64e232559e49e69b72bfc0715"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl1\x00', r3, 0x4, 0x7, 0xff, 0x1, 0x1c, @private2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x8, 0x700, 0x64cce036, 0x9c97}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xf, 0x4}, {0xe, 0xfff3}, {0xe, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x4}, @TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 1.426228187s ago: executing program 4 (id=1102): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x620, 0x4, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x400, 0x0, 0x55, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x100d, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x9, 0xff}, 0x1e51, 0x1, 0x0, 0x7, 0x4, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x8) close(r1) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffc, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x2c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_PRIORITY={0x8, 0x6, 0x26}, @RTA_EXPIRES={0x8, 0x17, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000000000)='.\x00', &(0x7f0000000040)=@random={'btrfs.', 'iocharset'}, &(0x7f0000000340)=""/190, 0xbe) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r6, r5, 0x0, 0x1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) read(r4, &(0x7f0000000100)=""/182, 0xb6) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000b80)={[{@mode={'mode', 0x3d, 0x4}}, {@uid}, {@session={'session', 0x3d, 0x2d}}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x1, 0x566, &(0x7f0000000540)="$eJzs3M9uG8cZAPBZmbJVFXUDBI0dxYeN04MLNAxJ1zKEAAHY1VLahOISu6vAPhVBLQVCpbRIUqDxzRe3BfoSaW99gp76RkGPPaZYLuk4tkjLfxIaze8HSDPkfjvzzYrYD6QwDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAiJLtTqcbhWE22r8Vz5dsF/neguOz8f71rWbBvCFE9U9YWwuXm6cuv/rN4Z/Vv66GS82jS2GtbtbC3R+/9sq7r7ZWZucvSOh7sDpN9vjg08WBUfg6+r6S+m7snnapW/FOOsrKPNvr76RxVubx1uZm553dQRkPsmFa3i6rdC9OWqFf5UV8LflF3N3auh6n7dv5/mhnuz9MZ0/efLvX6WzG77fHab8o89E777fLZDcbDrPRziSmPlzH3KxfiB9kVXzhwbW//qTcD4+OD7pnCeo9KajX6fW63V6vu3lj68bNTqf12BOdR4THIpb9omXZXtCdG57frP4DAAAA/7+iyWfs9fv/1cnn8FEYRF83lp0aAAAA8IJM/vN/6R9R/f4/hHA5RINsmHaWnRYAAADwAv3liXvsyvGF6N//CUWxGt0b3/p5dNKv4/on55rzzj06YjVoRReng0yazdb0UZJeiV5vgl6fRX81bQ6flEf0FAlszEkg/C1sNDEbd5r2zuxIM8v6IBum7SQfvtsN/f7FlSq9Vf3xk6M/hcny/zrauxiFw6Pjg/Zvf398Z5LLvXqUeyfTDRSP7aNYkMvnD/Y9PrLiL5uhVutcoum86828nYfXv9KcvvIUc94PbzQxb6w37fq3179Wz9ltz1v9evSTyWa651z5/XClibly7a26eevaKVn0Tsvi/HTwyW69h7N4pmtxhiyuL7gW4fDoQgjhTFn8aF4WAMtyOK8KPaj/j9bd1jPca7+p7u99h9X9fniziXlzY3JjbW2cckfvtKOw4I4+q7H3zj9rdftnuNrEXJ0Fn1pj3/vpZN7wymzepqpOiv+Xc+cth72o/kOd+/zkD+G1z764+/bRyUcfH3x88Emvd32z86tO50YvrE6WMW0WZArAD1dafBWtV3+OiiIb/6a7tdXtV7tpXOTJB3GRbe+kcTaq0iLZ7Y920nhc5FWe5MO682G2nZZxuT8e50UVD/IiHudldmvyzS/x9KtfyjT8clRlSTkepv0yjZN8VPWTKt7OyiQe7/96mJW7aTE5uRynSTbIkn6V5aO4le//PUnbcVym6UOB2XY6qrJBVndH8bjI9vrF7fjDfLi/l8bbaZkU2bjKmwFnc2WjQV7s9avsXGgv+2IDwEvisy/u/u6j4+ODT8/Y+e90c+DTnPX4rOeXsVQAYGpRlQYAAAAAAAAAAAAAAF4OT7v/7wV2VqcpLGd2nbN1wtpLkcZyOivPPU7rJVjF3M7sJnBqzPLuSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwz/8CAAD//3bhnLY=") 1.282454506s ago: executing program 0 (id=1104): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x600000000000000, 0x8604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, @perf_config_ext={0xffffffffffffffff, 0x8000000000000000}, 0x0, 0x6, 0x4, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x3, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x0, 0xa}, {0x1}, @const={0x800, {0x0, 0x8, 0x2, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x44048) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x60}}}}}}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x1) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)="b8dcba", 0x3}, 0x1, 0x0, 0x0, 0xc041}, 0x40800) acct(&(0x7f00000001c0)='./file0\x00') 1.177200082s ago: executing program 3 (id=1106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_flash={0x33, 0x2f, './file0/../file0\x00'}}) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) 1.101195426s ago: executing program 3 (id=1107): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYRESDEC=r0], 0x44}}, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000863e0000000000000000000000000000000000040000001dd7d9fb"], &(0x7f00000001c0)=0x28) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000011c0)={r2, 0xffffffffffffffff}, 0x4) pipe(&(0x7f0000001240)={0xffffffffffffffff}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001200)=r3, 0x4) close(0x3) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f00000013c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r9, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$kcm(r9, &(0x7f00000006c0)={&(0x7f0000000740)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @loopback, 0x4}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000007c0)="058a629f08f068d08b246160313baef2fab5acc3d88407424fdf30a45b6f8c0dded0bbe9f8fe8381a30cd056537220b24e7a844a541f149c5323a9d4a94e15b55531501e7d4322d615d66c384f6a4e8257cc454c12d9390b1cef406a7e57e57e5e0443d7f744075bd67d9c0876794f18dfbccaf194586da99a3e3a8f6e1e8ca4a29725b2cd3e", 0x86}, {&(0x7f0000000880)="cc90ab06e5efcf65eb39d733304208c6f1199b986b7efb8af0a46b802b016252fe3898393020dadc5c0d19ba1a65fc5399218b3ad874e8afd7b85a0b72502d9e968eaf0bd84b132ffc53ad62294997eef81be3d90e4705a4f837b9ad45c967f4c86798b4272dc1c4420e92ab127e7c98cef34f406712e638a07a2cf518ae5dd6178414c705ded89816d50aa25298bee634aae7ec96d80f8b6706c3be26920b", 0x9f}, {&(0x7f0000000940)="5667371801751f076a04247a7ee20a3d7ee185524872d6b5e3a939b0115c496c3f8f9dd6a446a9367a018cb74e2877430cd89806f3e69b67d17d4f5835a26e348981971a3bc60b81b173", 0x4a}, {&(0x7f00000009c0)="3fd66592f8fe4c35343a2af6c8e1c9a370466cbb28ab18cc33fa7cb0f8583fb07518387ac5b2717e73d61c3b365ba8b4596bf27af3a4193eda36f110556476299c4ba490aba060f052a41278ddb33bae89a2c97bd80b4c53", 0x58}], 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="900000000000000016010000080000000b76a37fb015e1d21871485176f44e107955f9cc1b726f9201df57e45c06664e2c7ef07eca40aa0a355a4c76fa7940e0c8173ee780461233e57a54ff65b8601f9a9eec6fea4fd3028c8e98cc1c504f1eba2c6634b662e6b80bfb3a42105b72f3baa42520fb26488c47e2951625738af647720d8089ca96e165b20000000000008ad77548878b00a9935f3f568592a815d2138ff80da5f80c82f579aff68e0264102cb80418b09aafb8847f16dd7e1dc7191b16093e616dfe8318faf41a"], 0x90}, 0x40) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000400), &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=@deltaction={0x2d4, 0x31, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0xfffffffffffffc22, 0x3, 0xc864}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'nat\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x32}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x96}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff47}}, {0xfffffffffffffe5f, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x14}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000003}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40d3c}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x4}]}, 0x2d4}}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x2e8}}], 0x2, 0x0) io_submit(r8, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, &(0x7f0000000280)="7b1c320aea51136f6e0e660162b016b0f1522db6f3f1f4893b3f5a6776857ef8144f8cb78aa7abbde377641b774cb556bf3feb12e743cb2ae7fe4113603ce5aad6fcc4fbe71086c8668f48f45dc4b02fb8e8ab770d128f22a4cec8853e3b12e5", &(0x7f0000000040), 0x4}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="0300002d96000000f1d340847baf5ae32722b54ab85840b840aae3a9cefc3003da0674f0966683e415ded81500f19fbd2dc979a0ab1a59297e26067c2eda45eb09ff8afb7b87a48ac427a958cea33e905d38f7961fc24fad2262fa8d82028b049296f4832a0db7b89940b0ffb83aa79d4017e8304b724b028ab889a0f2bf"], 0xa) 929.980346ms ago: executing program 3 (id=1108): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/sysvipc/shm\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x6b394000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec5, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x6e, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x310, 0x4, 0x80, 0x10, 0xb, @broadcast}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/sysvipc/shm\x00', 0x0, 0x0) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x6b394000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec5, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x6e, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x310, 0x4, 0x80, 0x10, 0xb, @broadcast}, 0x10) (async) 843.956631ms ago: executing program 3 (id=1109): syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x40800) perf_event_open(&(0x7f0000000040)={0x2, 0xa5, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x2154, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1018658, &(0x7f0000000640)={[{@nodioread_nolock}, {@noblock_validity}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@debug}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x3, @remote, 'macvlan0\x00'}}, 0x1e) 773.615636ms ago: executing program 3 (id=1110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001", @ANYRES64=r1, @ANYRES16=r2, @ANYRES64=r1], 0x1f0}}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa882, 0x0) r4 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r4, 0x400000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) finit_module(r4, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x1406, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0xc8c1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001", @ANYRES64=r1, @ANYRES16=r2, @ANYRES64=r1], 0x1f0}}, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa882, 0x0) (async) memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) (async) ftruncate(r4, 0x400000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) finit_module(r4, 0x0, 0x0) (async) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x1406, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0xc8c1}, 0x0) (async) 649.267503ms ago: executing program 3 (id=1111): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4000}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}}, 0x20040000) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xffff, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x802}, 0x8080) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fchdir(0xffffffffffffffff) 567.758197ms ago: executing program 4 (id=1112): quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@sg0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x1000007, 0x810, r0, 0x506b2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r1, 0x2, 0x7, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) syz_clone(0x640c5000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1d2991aa9c2b0c63, 0x2010, r3, 0xe2485000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xa) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103040, 0x16) fcntl$setlease(r3, 0x400, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) capset(&(0x7f00000010c0)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0x7, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f00000005c0)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe4290", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x50) syz_open_dev$usbfs(&(0x7f0000000100), 0x7, 0x8000) r7 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x28101) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="5a2a21402ef12fb742f3f3b0fcc1741262fe965d401dbcf7206daadca0fe819ca258aa736a1507c6c1e913196192d66e333535ee0a979b037dfcf790f09ee0a0d1f7b5585642cadcbc64167e6beaa24123ac7ad97b3adbd65b735d49ec4bfcd52868244b649b198d88520d5133d36e318a704ea7bba4dbb39ce7d675b26a40d7f229fe21516b82988f7a97180e2f11db35470e9c185132c536a83c75b84164196ba02504c8f138", @ANYRES64=0x0], 0x20) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x85) 450.376324ms ago: executing program 5 (id=1079): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a50a00001800000061116c0000000000180000000000800000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 388.805938ms ago: executing program 5 (id=1113): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000104e95463160000000000000000000f0500010001"], 0x1c}}, 0x54) close(r2) write$binfmt_script(r1, &(0x7f0000001280)={'#! ', '', [], 0xa, "02ce00b26cd16126940cfac2"}, 0x10) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x10042, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x3, 0x0, 0x80000000b4c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000006}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x24, 0x0, &(0x7f0000000040)) r4 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0x4000, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000a00035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 272.093145ms ago: executing program 0 (id=1114): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x1010, 0xffffffffffffffff, 0x6a855000) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = getpid() r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0xffffffffffffffff, &(0x7f00000003c0)="18607651149d7b") ptrace$ARCH_GET_GS(0x1e, r3, &(0x7f0000000000), 0x1004) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xbf34}) madvise(&(0x7f00005ac000/0x3000)=nil, 0x3000, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x10, 0x4, [0x6, 0x4, 0x6, 0x800]}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0xa0471a, &(0x7f0000000280)={[{@dioread_lock}, {@bsdgroups}, {@mblk_io_submit}, {@errors_remount}, {@nomblk_io_submit}, {@errors_remount}, {@jqfmt_vfsv0}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") sendmsg$OSF_MSG_ADD(r4, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000000)=ANY=[@ANYBLOB="6802000000050104000000000000000007000002540201"], 0x268}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000200)='9', 0x1, 0x20008080, 0x0, 0x0) recvfrom(r6, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f00000000c0)=0xb40, 0x4) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20000, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080600180800060400"], 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000a00)=ANY=[@ANYRESDEC=r6, @ANYRESDEC=r1, @ANYBLOB="08000148ea72c200", @ANYBLOB="0db626317e8ea9b43c85179e540e6eebac395b9814cdac77be6fb0ebf4485ab8e4789f0d64947d", @ANYBLOB="227f1ea9ae4df677e8c4faeaf18d6b731727a7fc0f5b6bd33d2d96a037b9174363a9ceaefe02b70dea5ff328b67721d1caf546c18e34aa1b1238e449139e4957d1b7028e79a74ddc46a55a53764a126b19af6cb6cb4317486e97a4f274b0d692e2387798103332e9f1eb16ebc0244c944ca5077359a739762c544609c6a752016dbf46903f454b0e3bd6ec866eb52f0feb72f6730fa8b087ce5db6e4e37cb0a0a881ea9e2709c6b055ae57c618bc02"], 0x34, 0x3) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='security.apparmor\x00', &(0x7f00000051c0)=""/47, 0x2f) 239.597657ms ago: executing program 4 (id=1115): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000006c0), 0x0}, 0x20) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) poll(&(0x7f0000000380)=[{r1, 0x414e}], 0x1, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000000)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYBLOB='\t\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000053c0)={0x28, r4, 0x301, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x840) r6 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r6], 0x108}}], 0x1, 0xc040) 232.508027ms ago: executing program 0 (id=1116): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x55}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x8c0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') exit(0x5) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getpgid(0xffffffffffffffff) r4 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xa, 0x35}}}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0xad, 0x7}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x10}, @NL80211_ATTR_IE={0x78, 0x2a, [@preq={0x82, 0x4c, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x3, 0x3, 0x1000, @device_b, 0xa2b, @value=@broadcast, 0x5, 0x8, 0x4, [{{}, @device_b, 0xd}, {{0x0, 0x0, 0x1}, @device_b, 0x6}, {{0x1, 0x0, 0x1}, @broadcast, 0x2ab4}, {{0x1, 0x0, 0x1}, @device_a, 0x3d4b}]}}, @challenge={0x10, 0x1, 0x21}, @mic={0x8c, 0x10, {0xdb2, "37d767ef7bcb", @short="1c58d2464e51b3e4"}}, @dsss={0x3, 0x1, 0xe}, @mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x8, 0xff}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xb1d9}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x810) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x20000800}, 0x44000004) 164.159741ms ago: executing program 5 (id=1117): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe0]l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\x16\x82\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x050x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x1, 0x803, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x884) 77.065187ms ago: executing program 4 (id=1120): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000500)=@known='security.selinux\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f00000000c0)={0x4, 0x9, 0x5, 0x5560, 0x5, 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) recvmmsg(r0, &(0x7f0000003d80)=[{{&(0x7f0000000100)=@ax25={{0x3, @netrom}, [@default, @bcast, @netrom, @remote, @remote, @default, @bcast, @bcast]}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000200)=""/182, 0xb6}, {&(0x7f00000002c0)=""/166, 0xa6}, {&(0x7f0000001540)=""/240, 0xf0}], 0x4, &(0x7f0000000380)=""/139, 0x8b}, 0x1ff}, {{&(0x7f0000000480)=@x25={0x9, @remote}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001640)=""/244, 0xf4}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/192, 0xc0}, {&(0x7f0000002800)=""/240, 0xf0}, {&(0x7f0000002900)=""/146, 0x92}], 0x5, &(0x7f0000002a40)=""/16, 0x10}, 0x3}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002a80)=""/51, 0x33}, {&(0x7f0000002ac0)=""/221, 0xdd}, {&(0x7f0000002bc0)=""/103, 0x67}, {&(0x7f0000002c40)=""/211, 0xd3}], 0x4, &(0x7f0000002d80)=""/4096, 0x1000}, 0x401}], 0x3, 0x40000120, &(0x7f0000003e40)) 0s ago: executing program 5 (id=1121): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x28c0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1216, 0x10000, 0x5, 0x6, 0x2ed5, 0x7, 0x23, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000000200)="000bda", 0x3) sendfile(r5, r3, 0x0, 0x40001) sendfile(r5, r4, 0x0, 0x7ffff000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r8, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @multicast2}, 0x10) kernel console output (not intermixed with test programs): 76.311853][ T5033] RBP: 00007f85ad737090 R08: 0000000000000000 R09: 0000000000000000 [ 76.311951][ T5033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.311967][ T5033] R13: 00007f85aef56038 R14: 00007f85aef55fa0 R15: 00007ffd5e557aa8 [ 76.311987][ T5033] [ 76.596103][ T5045] loop3: detected capacity change from 0 to 512 [ 76.606684][ T5043] syzkaller0: entered promiscuous mode [ 76.613183][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.621779][ T5043] syzkaller0: entered allmulticast mode [ 76.635196][ T5047] netlink: 36 bytes leftover after parsing attributes in process `syz.1.500'. [ 76.660088][ T5045] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.498: iget: bad i_size value: 38620345925642 [ 76.677538][ T5045] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.498: couldn't read orphan inode 15 (err -117) [ 76.697362][ T5045] EXT4-fs mount: 39 callbacks suppressed [ 76.697381][ T5045] EXT4-fs (loop3): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.797120][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 76.870482][ T5066] netlink: 96 bytes leftover after parsing attributes in process `syz.3.504'. [ 76.908803][ T5074] FAULT_INJECTION: forcing a failure. [ 76.908803][ T5074] name failslab, interval 1, probability 0, space 0, times 0 [ 76.928035][ T5074] CPU: 0 UID: 0 PID: 5074 Comm: syz.0.507 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.928070][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.928089][ T5074] Call Trace: [ 76.928097][ T5074] [ 76.928106][ T5074] __dump_stack+0x1d/0x30 [ 76.928168][ T5074] dump_stack_lvl+0x95/0xd0 [ 76.928193][ T5074] dump_stack+0x15/0x1b [ 76.928214][ T5074] should_fail_ex+0x263/0x280 [ 76.928249][ T5074] should_failslab+0x8c/0xb0 [ 76.928305][ T5074] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 76.928336][ T5074] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 76.928404][ T5074] kmemdup_nul+0x36/0xc0 [ 76.928425][ T5074] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 76.928494][ T5074] vfs_parse_monolithic_sep+0x16a/0x270 [ 76.928521][ T5074] generic_parse_monolithic+0x24/0x30 [ 76.928675][ T5074] parse_monolithic_mount_data+0x46/0x60 [ 76.928724][ T5074] do_new_mount+0x251/0x700 [ 76.928749][ T5074] path_mount+0x4d0/0xbc0 [ 76.928770][ T5074] ? user_path_at+0xbf/0x130 [ 76.928839][ T5074] __se_sys_mount+0x28c/0x2e0 [ 76.928861][ T5074] ? fput+0x8f/0xc0 [ 76.928942][ T5074] __x64_sys_mount+0x67/0x80 [ 76.929028][ T5074] x64_sys_call+0x2cca/0x3000 [ 76.929055][ T5074] do_syscall_64+0xc0/0x2a0 [ 76.929090][ T5074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.929160][ T5074] RIP: 0033:0x7f6faa61aeb9 [ 76.929178][ T5074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.929198][ T5074] RSP: 002b:00007f6fa9077028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.929219][ T5074] RAX: ffffffffffffffda RBX: 00007f6faa895fa0 RCX: 00007f6faa61aeb9 [ 76.929234][ T5074] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 76.929249][ T5074] RBP: 00007f6fa9077090 R08: 0000200000000300 R09: 0000000000000000 [ 76.929292][ T5074] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000002 [ 76.929306][ T5074] R13: 00007f6faa896038 R14: 00007f6faa895fa0 R15: 00007ffc5bcaf308 [ 76.929340][ T5074] [ 77.202451][ T5077] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 77.215941][ T5077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 77.251336][ T5078] loop2: detected capacity change from 0 to 1024 [ 77.269066][ T5083] 9pnet_virtio: no channels available for device #! ./file0 [ 77.269066][ T5083] . [ 77.300348][ T5087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 77.314138][ T5078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.315054][ T5087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.354568][ T5087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.421164][ T5098] netlink: 'syz.0.512': attribute type 1 has an invalid length. [ 77.430450][ T5098] netlink: 668 bytes leftover after parsing attributes in process `syz.0.512'. [ 77.454572][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.497818][ T5106] loop2: detected capacity change from 0 to 512 [ 77.512091][ T5077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 77.527926][ T5106] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.568945][ T5106] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.513: bg 0: block 384: padding at end of block bitmap is not set [ 77.589270][ T5106] EXT4-fs (loop2): Remounting filesystem read-only [ 77.598417][ T5106] EXT4-fs (loop2): 1 truncate cleaned up [ 77.607634][ T5106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.656807][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.670825][ T5121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.515'. [ 77.721279][ T5127] FAULT_INJECTION: forcing a failure. [ 77.721279][ T5127] name failslab, interval 1, probability 0, space 0, times 0 [ 77.736248][ T5127] CPU: 0 UID: 0 PID: 5127 Comm: syz.2.519 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.736282][ T5127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.736371][ T5127] Call Trace: [ 77.736379][ T5127] [ 77.736389][ T5127] __dump_stack+0x1d/0x30 [ 77.736489][ T5127] dump_stack_lvl+0x95/0xd0 [ 77.736512][ T5127] dump_stack+0x15/0x1b [ 77.736533][ T5127] should_fail_ex+0x263/0x280 [ 77.736642][ T5127] should_failslab+0x8c/0xb0 [ 77.736673][ T5127] __kmalloc_cache_noprof+0x64/0x4a0 [ 77.736705][ T5127] ? v9fs_get_tree+0x49/0x5e0 [ 77.736725][ T5127] v9fs_get_tree+0x49/0x5e0 [ 77.736826][ T5127] ? security_capable+0x7b/0x90 [ 77.736905][ T5127] vfs_get_tree+0x57/0x1d0 [ 77.736926][ T5127] do_new_mount+0x288/0x700 [ 77.736955][ T5127] path_mount+0x4d0/0xbc0 [ 77.737043][ T5127] ? user_path_at+0xbf/0x130 [ 77.737080][ T5127] __se_sys_mount+0x28c/0x2e0 [ 77.737105][ T5127] ? fput+0x8f/0xc0 [ 77.737145][ T5127] __x64_sys_mount+0x67/0x80 [ 77.737166][ T5127] x64_sys_call+0x2cca/0x3000 [ 77.737193][ T5127] do_syscall_64+0xc0/0x2a0 [ 77.737289][ T5127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.737359][ T5127] RIP: 0033:0x7fc29510aeb9 [ 77.737377][ T5127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.737397][ T5127] RSP: 002b:00007fc293b67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.737420][ T5127] RAX: ffffffffffffffda RBX: 00007fc295385fa0 RCX: 00007fc29510aeb9 [ 77.737439][ T5127] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 77.737494][ T5127] RBP: 00007fc293b67090 R08: 0000200000000300 R09: 0000000000000000 [ 77.737512][ T5127] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000002 [ 77.737530][ T5127] R13: 00007fc295386038 R14: 00007fc295385fa0 R15: 00007fff07596be8 [ 77.737587][ T5127] [ 77.757825][ T5128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'. [ 78.083893][ T5147] loop2: detected capacity change from 0 to 128 [ 78.096543][ T5147] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.111237][ T5147] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.166394][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.189479][ T5152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.526'. [ 78.201492][ T5152] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 78.234656][ T5155] loop2: detected capacity change from 0 to 512 [ 78.247988][ T5155] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.264964][ T5155] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.527: corrupted xattr entries [ 78.278197][ T5155] EXT4-fs (loop2): 1 orphan inode deleted [ 78.286612][ T5155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.906264][ T5076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 79.962195][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 79.962215][ T30] audit: type=1400 audit(1769812616.180:697): avc: denied { connect } for pid=5165 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.995288][ T30] audit: type=1400 audit(1769812616.180:698): avc: denied { ioctl } for pid=5165 comm="syz.3.529" path="socket:[10397]" dev="sockfs" ino=10397 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.039558][ T5172] netlink: 'syz.0.532': attribute type 11 has an invalid length. [ 80.048354][ T5172] netlink: 140 bytes leftover after parsing attributes in process `syz.0.532'. [ 80.086222][ T5181] loop5: detected capacity change from 0 to 1495 [ 80.097539][ T5179] FAULT_INJECTION: forcing a failure. [ 80.097539][ T5179] name failslab, interval 1, probability 0, space 0, times 0 [ 80.101021][ T30] audit: type=1400 audit(1769812616.320:699): avc: denied { read } for pid=5182 comm="syz.0.533" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.111247][ T5179] CPU: 0 UID: 0 PID: 5179 Comm: syz.1.531 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.111305][ T5179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.111387][ T5179] Call Trace: [ 80.111421][ T5179] [ 80.111459][ T5179] __dump_stack+0x1d/0x30 [ 80.111618][ T5179] dump_stack_lvl+0x95/0xd0 [ 80.111692][ T5179] dump_stack+0x15/0x1b [ 80.111758][ T5179] should_fail_ex+0x263/0x280 [ 80.111877][ T5179] should_failslab+0x8c/0xb0 [ 80.111962][ T5179] __kmalloc_cache_noprof+0x64/0x4a0 [ 80.112054][ T5179] ? p9_client_create+0x49/0x780 [ 80.112143][ T5179] p9_client_create+0x49/0x780 [ 80.112224][ T5179] ? v9fs_get_tree+0x49/0x5e0 [ 80.112290][ T5179] v9fs_session_init+0x3c/0x4a0 [ 80.112401][ T5179] ? v9fs_get_tree+0x49/0x5e0 [ 80.112529][ T5179] v9fs_get_tree+0x5c/0x5e0 [ 80.112584][ T5179] ? security_capable+0x7b/0x90 [ 80.112844][ T5179] vfs_get_tree+0x57/0x1d0 [ 80.112902][ T5179] do_new_mount+0x288/0x700 [ 80.112932][ T5179] path_mount+0x4d0/0xbc0 [ 80.112957][ T5179] ? user_path_at+0xbf/0x130 [ 80.113159][ T5179] __se_sys_mount+0x28c/0x2e0 [ 80.113244][ T5179] ? fput+0x8f/0xc0 [ 80.113372][ T5179] __x64_sys_mount+0x67/0x80 [ 80.113478][ T5179] x64_sys_call+0x2cca/0x3000 [ 80.113589][ T5179] do_syscall_64+0xc0/0x2a0 [ 80.113752][ T5179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.113908][ T5179] RIP: 0033:0x7f055314aeb9 [ 80.113971][ T5179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.114052][ T5179] RSP: 002b:00007f0551ba7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.114189][ T5179] RAX: ffffffffffffffda RBX: 00007f05533c5fa0 RCX: 00007f055314aeb9 [ 80.114249][ T5179] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 80.114345][ T5179] RBP: 00007f0551ba7090 R08: 0000200000000300 R09: 0000000000000000 [ 80.114404][ T5179] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000002 [ 80.114453][ T5179] R13: 00007f05533c6038 R14: 00007f05533c5fa0 R15: 00007ffcc89af438 [ 80.114531][ T5179] [ 80.396277][ T30] audit: type=1400 audit(1769812616.400:700): avc: denied { ioctl } for pid=5182 comm="syz.0.533" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.397541][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.482361][ T5195] loop1: detected capacity change from 0 to 1024 [ 80.500162][ T30] audit: type=1400 audit(1769812616.720:701): avc: denied { append } for pid=5197 comm="syz.3.538" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.537846][ T5181] loop5: detected capacity change from 1495 to 5999 [ 80.568245][ T5195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.626823][ T5194] sctp: [Deprecated]: syz.0.537 (pid 5194) Use of int in max_burst socket option. [ 80.626823][ T5194] Use struct sctp_assoc_value instead [ 80.644135][ T5194] mmap: syz.0.537 (5194) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.683612][ T5202] loop2: detected capacity change from 0 to 128 [ 80.697097][ T5202] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 80.704046][ T3305] Buffer I/O error on dev loop5, logical block 749, async page read [ 80.726699][ T30] audit: type=1400 audit(1769812616.720:702): avc: denied { open } for pid=5197 comm="syz.3.538" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.753931][ T30] audit: type=1400 audit(1769812616.720:703): avc: denied { ioctl } for pid=5197 comm="syz.3.538" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.799144][ T5202] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.823363][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.843215][ T5202] ext2 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.899928][ T5209] 9p: Bad value for 'source' [ 80.916155][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.951408][ T5218] netlink: 'syz.2.543': attribute type 25 has an invalid length. [ 80.978122][ T5220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.004863][ T3303] Buffer I/O error on dev loop5, logical block 749, async page read [ 81.018830][ T5220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.046109][ T5224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5224 comm=syz.0.542 [ 81.060921][ T5220] bond0 (unregistering): Released all slaves [ 81.069523][ T5224] netlink: 'syz.0.542': attribute type 1 has an invalid length. [ 81.084199][ T5226] FAULT_INJECTION: forcing a failure. [ 81.084199][ T5226] name failslab, interval 1, probability 0, space 0, times 0 [ 81.099944][ T5226] CPU: 1 UID: 0 PID: 5226 Comm: syz.2.546 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.099976][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.099997][ T5226] Call Trace: [ 81.100013][ T5226] [ 81.100067][ T5226] __dump_stack+0x1d/0x30 [ 81.100101][ T5226] dump_stack_lvl+0x95/0xd0 [ 81.100127][ T5226] dump_stack+0x15/0x1b [ 81.100147][ T5226] should_fail_ex+0x263/0x280 [ 81.100249][ T5226] should_failslab+0x8c/0xb0 [ 81.100347][ T5226] __kmalloc_cache_noprof+0x64/0x4a0 [ 81.100377][ T5226] ? rdma_create_trans+0xf7/0x7d0 [ 81.100399][ T5226] rdma_create_trans+0xf7/0x7d0 [ 81.100419][ T5226] ? security_inode_permission+0x4a/0xa0 [ 81.100529][ T5226] ? p9_client_create+0x49/0x780 [ 81.100566][ T5226] p9_client_create+0x231/0x780 [ 81.100654][ T5226] ? should_fail_ex+0xd9/0x280 [ 81.100696][ T5226] v9fs_session_init+0x3c/0x4a0 [ 81.100727][ T5226] ? v9fs_get_tree+0x49/0x5e0 [ 81.100799][ T5226] v9fs_get_tree+0x5c/0x5e0 [ 81.100822][ T5226] ? security_capable+0x7b/0x90 [ 81.100862][ T5226] vfs_get_tree+0x57/0x1d0 [ 81.100884][ T5226] do_new_mount+0x288/0x700 [ 81.100914][ T5226] path_mount+0x4d0/0xbc0 [ 81.100945][ T5226] ? user_path_at+0xbf/0x130 [ 81.101038][ T5226] __se_sys_mount+0x28c/0x2e0 [ 81.101065][ T5226] ? fput+0x8f/0xc0 [ 81.101103][ T5226] __x64_sys_mount+0x67/0x80 [ 81.101130][ T5226] x64_sys_call+0x2cca/0x3000 [ 81.101195][ T5226] do_syscall_64+0xc0/0x2a0 [ 81.101227][ T5226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.101257][ T5226] RIP: 0033:0x7fc29510aeb9 [ 81.101278][ T5226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.101360][ T5226] RSP: 002b:00007fc293b67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.101450][ T5226] RAX: ffffffffffffffda RBX: 00007fc295385fa0 RCX: 00007fc29510aeb9 [ 81.101464][ T5226] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 81.101480][ T5226] RBP: 00007fc293b67090 R08: 0000200000000300 R09: 0000000000000000 [ 81.101499][ T5226] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000002 [ 81.101516][ T5226] R13: 00007fc295386038 R14: 00007fc295385fa0 R15: 00007fff07596be8 [ 81.101597][ T5226] [ 81.408995][ T5221] bond2: (slave bridge1): making interface the new active one [ 81.421317][ T5221] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 81.436715][ T5221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5221 comm=syz.0.542 [ 81.465934][ T5229] loop2: detected capacity change from 0 to 128 [ 81.495895][ T5229] FAT-fs (loop2): bogus number of reserved sectors [ 81.503889][ T5229] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 81.514735][ T5229] FAT-fs (loop2): Can't find a valid FAT filesystem [ 81.518943][ T5233] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.543686][ T5233] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.547: bad orphan inode 11 [ 81.581317][ T5231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.622987][ T30] audit: type=1400 audit(1769812617.830:704): avc: denied { execute_no_trans } for pid=5235 comm="syz.2.550" path="/104/file0" dev="tmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.672907][ T5233] ext4_test_bit(bit=10, block=4) = 1 [ 81.679248][ T5233] is_bad_inode(inode)=0 [ 81.685489][ T5233] NEXT_ORPHAN(inode)=3254779904 [ 81.690905][ T5233] max_ino=32 [ 81.694614][ T5233] i_nlink=0 [ 81.703622][ T5241] set_capacity_and_notify: 2 callbacks suppressed [ 81.703642][ T5241] loop2: detected capacity change from 0 to 128 [ 81.721855][ T30] audit: type=1400 audit(1769812617.930:705): avc: denied { mount } for pid=5240 comm="syz.3.551" name="/" dev="ramfs" ino=9936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 81.729164][ T5242] loop3: detected capacity change from 0 to 1024 [ 81.756560][ T5233] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #3: block 1: comm syz.4.547: lblock 1 mapped to illegal pblock 1 (length 1) [ 81.780162][ T5233] Quota error (device loop4): write_blk: dquota write failed [ 81.784129][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.789809][ T5233] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.547: Failed to acquire dquot type 0 [ 81.816176][ T5242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.850103][ T5241] Process accounting resumed [ 81.856868][ T5241] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 81.865096][ T5241] FAT-fs (loop2): Filesystem has been set read-only [ 81.881540][ T5242] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.893953][ T5247] __nla_validate_parse: 2 callbacks suppressed [ 81.893971][ T5247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.553'. [ 81.894129][ T5233] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.547: Invalid inode bitmap blk 0 in block_group 0 [ 81.930914][ T3416] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 81.946449][ T12] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 81.980807][ T5233] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 81.984420][ T5248] tipc: Started in network mode [ 81.995997][ T5248] tipc: Node identity 8a8c00525339, cluster identity 4711 [ 82.007706][ T5248] tipc: Enabled bearer , priority 0 [ 82.016066][ T5233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.038410][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 82.076674][ T5252] netlink: 'syz.0.555': attribute type 11 has an invalid length. [ 82.086154][ T5252] netlink: 132 bytes leftover after parsing attributes in process `syz.0.555'. [ 82.105273][ T5248] syzkaller0: entered promiscuous mode [ 82.111600][ T5248] syzkaller0: entered allmulticast mode [ 82.120664][ T5248] tipc: Resetting bearer [ 82.136859][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.208031][ T5268] FAULT_INJECTION: forcing a failure. [ 82.208031][ T5268] name failslab, interval 1, probability 0, space 0, times 0 [ 82.223226][ T5268] CPU: 0 UID: 0 PID: 5268 Comm: syz.2.560 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.223259][ T5268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.223276][ T5268] Call Trace: [ 82.223285][ T5268] [ 82.223311][ T5268] __dump_stack+0x1d/0x30 [ 82.223339][ T5268] dump_stack_lvl+0x95/0xd0 [ 82.223371][ T5268] dump_stack+0x15/0x1b [ 82.223440][ T5268] should_fail_ex+0x263/0x280 [ 82.223479][ T5268] should_failslab+0x8c/0xb0 [ 82.223555][ T5268] __kmalloc_cache_noprof+0x64/0x4a0 [ 82.223591][ T5268] ? __rdma_create_id+0x49/0x3b0 [ 82.223618][ T5268] ? avc_has_perm+0x101/0x190 [ 82.223726][ T5268] ? __pfx_p9_cm_event_handler+0x10/0x10 [ 82.223751][ T5268] __rdma_create_id+0x49/0x3b0 [ 82.223772][ T5268] ? should_failslab+0x8c/0xb0 [ 82.223799][ T5268] ? __pfx_p9_cm_event_handler+0x10/0x10 [ 82.223855][ T5268] __rdma_create_kernel_id+0x3c/0x80 [ 82.223921][ T5268] rdma_create_trans+0x286/0x7d0 [ 82.223965][ T5268] ? p9_client_create+0x49/0x780 [ 82.223998][ T5268] p9_client_create+0x231/0x780 [ 82.224023][ T5268] ? should_fail_ex+0xd9/0x280 [ 82.224140][ T5268] v9fs_session_init+0x3c/0x4a0 [ 82.224177][ T5268] ? v9fs_get_tree+0x49/0x5e0 [ 82.224202][ T5268] v9fs_get_tree+0x5c/0x5e0 [ 82.224224][ T5268] ? security_capable+0x7b/0x90 [ 82.224296][ T5268] vfs_get_tree+0x57/0x1d0 [ 82.224322][ T5268] do_new_mount+0x288/0x700 [ 82.224352][ T5268] path_mount+0x4d0/0xbc0 [ 82.224371][ T5268] ? user_path_at+0xbf/0x130 [ 82.224448][ T5268] __se_sys_mount+0x28c/0x2e0 [ 82.224475][ T5268] ? fput+0x8f/0xc0 [ 82.224512][ T5268] __x64_sys_mount+0x67/0x80 [ 82.224537][ T5268] x64_sys_call+0x2cca/0x3000 [ 82.224583][ T5268] do_syscall_64+0xc0/0x2a0 [ 82.224625][ T5268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.224654][ T5268] RIP: 0033:0x7fc29510aeb9 [ 82.224671][ T5268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.224758][ T5268] RSP: 002b:00007fc293b67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 82.224781][ T5268] RAX: ffffffffffffffda RBX: 00007fc295385fa0 RCX: 00007fc29510aeb9 [ 82.224841][ T5268] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 82.224858][ T5268] RBP: 00007fc293b67090 R08: 0000200000000300 R09: 0000000000000000 [ 82.224874][ T5268] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000002 [ 82.224888][ T5268] R13: 00007fc295386038 R14: 00007fc295385fa0 R15: 00007fff07596be8 [ 82.224914][ T5268] [ 82.344148][ T5274] loop4: detected capacity change from 0 to 128 [ 82.590996][ T5276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.562'. [ 82.685128][ T5284] loop4: detected capacity change from 0 to 2048 [ 82.699725][ T5293] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5293 comm=syz.2.566 [ 82.723509][ T5284] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.774054][ T5246] tipc: Resetting bearer [ 82.801881][ T5284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.847823][ T5246] tipc: Disabling bearer [ 82.884209][ T5284] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.003229][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.080619][ T5322] loop4: detected capacity change from 0 to 512 [ 83.106175][ T5325] bridge1: entered promiscuous mode [ 83.134928][ T5322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.160514][ T5332] FAULT_INJECTION: forcing a failure. [ 83.160514][ T5332] name failslab, interval 1, probability 0, space 0, times 0 [ 83.177098][ T5332] CPU: 1 UID: 0 PID: 5332 Comm: syz.0.574 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.177143][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.177159][ T5332] Call Trace: [ 83.177167][ T5332] [ 83.177178][ T5332] __dump_stack+0x1d/0x30 [ 83.177244][ T5332] dump_stack_lvl+0x95/0xd0 [ 83.177269][ T5332] dump_stack+0x15/0x1b [ 83.177290][ T5332] should_fail_ex+0x263/0x280 [ 83.177383][ T5332] should_failslab+0x8c/0xb0 [ 83.177427][ T5332] __kmalloc_cache_noprof+0x64/0x4a0 [ 83.177528][ T5332] ? cma_alloc_port+0x3d/0x320 [ 83.177565][ T5332] cma_alloc_port+0x3d/0x320 [ 83.177606][ T5332] rdma_bind_addr_dst+0xa98/0x2290 [ 83.177648][ T5332] rdma_resolve_addr+0x43a/0x1350 [ 83.177741][ T5332] ? __kmalloc_cache_noprof+0x245/0x4a0 [ 83.177783][ T5332] rdma_create_trans+0x3fc/0x7d0 [ 83.177840][ T5332] ? p9_client_create+0x49/0x780 [ 83.177873][ T5332] p9_client_create+0x231/0x780 [ 83.177982][ T5332] ? v9fs_get_tree+0x49/0x5e0 [ 83.178011][ T5332] v9fs_session_init+0x3c/0x4a0 [ 83.178046][ T5332] ? v9fs_get_tree+0x49/0x5e0 [ 83.178138][ T5332] v9fs_get_tree+0x5c/0x5e0 [ 83.178160][ T5332] ? security_capable+0x7b/0x90 [ 83.178196][ T5332] vfs_get_tree+0x57/0x1d0 [ 83.178278][ T5332] do_new_mount+0x288/0x700 [ 83.178365][ T5332] path_mount+0x4d0/0xbc0 [ 83.178458][ T5332] ? user_path_at+0xbf/0x130 [ 83.178497][ T5332] __se_sys_mount+0x28c/0x2e0 [ 83.178524][ T5332] ? fput+0x8f/0xc0 [ 83.178562][ T5332] __x64_sys_mount+0x67/0x80 [ 83.178599][ T5332] x64_sys_call+0x2cca/0x3000 [ 83.178625][ T5332] do_syscall_64+0xc0/0x2a0 [ 83.178717][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.178740][ T5332] RIP: 0033:0x7f6faa61aeb9 [ 83.178828][ T5332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.178929][ T5332] RSP: 002b:00007f6fa9077028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 83.178951][ T5332] RAX: ffffffffffffffda RBX: 00007f6faa895fa0 RCX: 00007f6faa61aeb9 [ 83.178971][ T5332] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 83.178990][ T5332] RBP: 00007f6fa9077090 R08: 0000200000000300 R09: 0000000000000000 [ 83.179016][ T5332] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000002 [ 83.179033][ T5332] R13: 00007f6faa896038 R14: 00007f6faa895fa0 R15: 00007ffc5bcaf308 [ 83.179060][ T5332] [ 83.484119][ T5322] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.494678][ T5326] loop2: detected capacity change from 0 to 8192 [ 83.539233][ T5322] EXT4-fs: Ignoring removed orlov option [ 83.548859][ T5340] tipc: Started in network mode [ 83.555162][ T5340] tipc: Node identity ac14140f, cluster identity 4711 [ 83.561728][ T5322] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 83.576533][ T5322] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.587895][ T5340] tipc: New replicast peer: 255.255.255.255 [ 83.604132][ T5340] tipc: Enabled bearer , priority 10 [ 83.617630][ T3303] loop2: p2 p3 [ 83.622411][ T3303] loop2: p3 start 331777 is beyond EOD, truncated [ 83.649745][ T5326] loop2: p2 p3 [ 83.664247][ T5322] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 83.682077][ T5326] loop2: p3 start 331777 is beyond EOD, truncated [ 83.702074][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.757160][ T5351] 9p: Bad value for 'rfdno' [ 83.967189][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 84.001185][ T5359] netlink: 60 bytes leftover after parsing attributes in process `syz.3.558'. [ 84.065016][ T5379] loop2: detected capacity change from 0 to 512 [ 84.090789][ T5379] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.584: iget: bad i_size value: 38620345925642 [ 84.098076][ T5382] loop1: detected capacity change from 0 to 2048 [ 84.118563][ T5359] bridge1: entered promiscuous mode [ 84.124633][ T5359] bridge1: entered allmulticast mode [ 84.134327][ T5379] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.584: couldn't read orphan inode 15 (err -117) [ 84.183650][ T5379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.412189][ T5415] netlink: 'syz.1.590': attribute type 83 has an invalid length. [ 84.433798][ T5415] loop1: detected capacity change from 0 to 2048 [ 84.532108][ T5421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 84.621173][ T5421] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.629198][ T5421] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.641075][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 84.668444][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.797270][ T5436] xt_hashlimit: size too large, truncated to 1048576 [ 84.805956][ T5436] xt_hashlimit: overflow, try lower: 18446744073709551610/3 [ 84.845071][ T5436] loop2: detected capacity change from 0 to 164 [ 84.882843][ T5436] iso9660: Unknown parameter 'H' [ 84.903912][ T5421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.924634][ T5436] netlink: 'syz.2.594': attribute type 10 has an invalid length. [ 84.987998][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 84.988017][ T30] audit: type=1400 audit(1769812621.210:836): avc: denied { create } for pid=5435 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 85.032057][ T5421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.045140][ T5447] netlink: 'syz.2.594': attribute type 10 has an invalid length. [ 85.126369][ T3395] tipc: Node number set to 2886997007 [ 85.137095][ T5436] dummy0: entered promiscuous mode [ 85.145810][ T5436] team0: Port device dummy0 added [ 85.153928][ T30] audit: type=1326 audit(1769812621.350:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5420 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055314aeb9 code=0x7ffc0000 [ 85.186038][ T30] audit: type=1326 audit(1769812621.410:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5420 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055314aeb9 code=0x7ffc0000 [ 85.223249][ T5447] dummy0: left promiscuous mode [ 85.249910][ T5447] team0: Port device dummy0 removed [ 85.257297][ T30] audit: type=1400 audit(1769812621.480:839): avc: denied { kexec_image_load } for pid=5456 comm="syz.3.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 85.284555][ T5447] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 85.305346][ T41] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.324686][ T30] audit: type=1400 audit(1769812621.550:840): avc: denied { firmware_load } for pid=5435 comm="syz.2.594" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 85.372678][ T41] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.399546][ T41] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.426318][ T5462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.441503][ T41] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.483322][ T30] audit: type=1400 audit(1769812621.680:841): avc: denied { write } for pid=5461 comm="syz.3.597" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.507969][ T30] audit: type=1400 audit(1769812621.680:842): avc: denied { setattr } for pid=5461 comm="syz.3.597" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.534262][ T30] audit: type=1326 audit(1769812621.680:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.3.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cccaeb9 code=0x7ffc0000 [ 85.562352][ T30] audit: type=1326 audit(1769812621.680:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.3.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cccaeb9 code=0x7ffc0000 [ 85.589229][ T30] audit: type=1326 audit(1769812621.680:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.3.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cccaeb9 code=0x7ffc0000 [ 85.625439][ T5467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.686746][ T5467] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.849996][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.979030][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.083461][ T5509] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.608: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 86.125801][ T5512] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.194531][ T5512] EXT4-fs (loop1): orphan cleanup on readonly fs [ 86.215185][ T5509] EXT4-fs (loop3): get root inode failed [ 86.223261][ T5509] EXT4-fs (loop3): mount failed [ 86.225838][ T5512] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.610: Allocating blocks 41-42 which overlap fs metadata [ 86.250646][ T5512] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.610: Allocating blocks 41-42 which overlap fs metadata [ 86.266994][ T5512] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.610: Failed to acquire dquot type 1 [ 86.281882][ T5512] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 86.300459][ T5512] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.610: corrupted inode contents [ 86.315639][ T5512] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.610: mark_inode_dirty error [ 86.333753][ T5512] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.610: corrupted inode contents [ 86.354857][ T5512] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.610: mark_inode_dirty error [ 86.372198][ T5518] FAULT_INJECTION: forcing a failure. [ 86.372198][ T5518] name failslab, interval 1, probability 0, space 0, times 0 [ 86.387664][ T5518] CPU: 1 UID: 0 PID: 5518 Comm: syz.4.611 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.387746][ T5518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.387835][ T5518] Call Trace: [ 86.387843][ T5518] [ 86.387853][ T5518] __dump_stack+0x1d/0x30 [ 86.387886][ T5518] dump_stack_lvl+0x95/0xd0 [ 86.387912][ T5518] dump_stack+0x15/0x1b [ 86.387937][ T5518] should_fail_ex+0x263/0x280 [ 86.388003][ T5518] ? __pfx_addr_handler+0x10/0x10 [ 86.388097][ T5518] should_failslab+0x8c/0xb0 [ 86.388121][ T5518] __kmalloc_cache_noprof+0x64/0x4a0 [ 86.388153][ T5518] ? rdma_resolve_ip+0x4d/0x4b0 [ 86.388189][ T5518] ? __pfx_addr_handler+0x10/0x10 [ 86.388298][ T5518] rdma_resolve_ip+0x4d/0x4b0 [ 86.388336][ T5518] rdma_resolve_addr+0x544/0x1350 [ 86.388440][ T5518] ? __kmalloc_cache_noprof+0x245/0x4a0 [ 86.388486][ T5518] rdma_create_trans+0x3fc/0x7d0 [ 86.388523][ T5518] ? p9_client_create+0x49/0x780 [ 86.388601][ T5518] p9_client_create+0x231/0x780 [ 86.388653][ T5518] ? should_fail_ex+0xd9/0x280 [ 86.388696][ T5518] v9fs_session_init+0x3c/0x4a0 [ 86.388748][ T5518] ? v9fs_get_tree+0x49/0x5e0 [ 86.388779][ T5518] v9fs_get_tree+0x5c/0x5e0 [ 86.388802][ T5518] ? security_capable+0x7b/0x90 [ 86.388888][ T5518] vfs_get_tree+0x57/0x1d0 [ 86.388912][ T5518] do_new_mount+0x288/0x700 [ 86.388955][ T5518] path_mount+0x4d0/0xbc0 [ 86.388976][ T5518] ? user_path_at+0xbf/0x130 [ 86.389042][ T5518] __se_sys_mount+0x28c/0x2e0 [ 86.389070][ T5518] ? fput+0x8f/0xc0 [ 86.389108][ T5518] __x64_sys_mount+0x67/0x80 [ 86.389137][ T5518] x64_sys_call+0x2cca/0x3000 [ 86.389229][ T5518] do_syscall_64+0xc0/0x2a0 [ 86.389272][ T5518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.389301][ T5518] RIP: 0033:0x7f85aecdaeb9 [ 86.389323][ T5518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.389349][ T5518] RSP: 002b:00007f85ad737028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.389446][ T5518] RAX: ffffffffffffffda RBX: 00007f85aef55fa0 RCX: 00007f85aecdaeb9 [ 86.389465][ T5518] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 86.389484][ T5518] RBP: 00007f85ad737090 R08: 0000200000000300 R09: 0000000000000000 [ 86.389502][ T5518] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000002 [ 86.389594][ T5518] R13: 00007f85aef56038 R14: 00007f85aef55fa0 R15: 00007ffd5e557aa8 [ 86.389620][ T5518] [ 86.695364][ T5512] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.610: corrupted inode contents [ 86.758958][ T5512] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 86.782848][ T5512] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.610: corrupted inode contents [ 86.814636][ T5512] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.610: mark_inode_dirty error [ 86.864205][ T5530] set_capacity_and_notify: 4 callbacks suppressed [ 86.864226][ T5530] loop4: detected capacity change from 0 to 128 [ 86.889931][ T5512] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 86.902406][ T5480] loop2: detected capacity change from 0 to 512 [ 86.915129][ T5512] EXT4-fs (loop1): 1 truncate cleaned up [ 86.931891][ T5512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.975093][ T5480] EXT4-fs (loop2): 1 truncate cleaned up [ 86.975138][ T5512] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.988836][ T5530] syz.4.614: attempt to access beyond end of device [ 86.988836][ T5530] loop4: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 87.052184][ T5480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.067695][ T5536] syz.4.614: attempt to access beyond end of device [ 87.067695][ T5536] loop4: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 87.130517][ T5480] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 87.378934][ T5545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.619'. [ 87.389409][ T5545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.619'. [ 87.657166][ T5479] syz.2.602 (5479) used greatest stack depth: 6400 bytes left [ 87.755307][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.825766][ T5557] FAULT_INJECTION: forcing a failure. [ 87.825766][ T5557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.840321][ T5557] CPU: 0 UID: 0 PID: 5557 Comm: syz.2.622 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.840412][ T5557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.840429][ T5557] Call Trace: [ 87.840439][ T5557] [ 87.840450][ T5557] __dump_stack+0x1d/0x30 [ 87.840554][ T5557] dump_stack_lvl+0x95/0xd0 [ 87.840580][ T5557] dump_stack+0x15/0x1b [ 87.840607][ T5557] should_fail_ex+0x263/0x280 [ 87.840685][ T5557] should_fail+0xb/0x20 [ 87.840760][ T5557] should_fail_usercopy+0x1a/0x20 [ 87.840797][ T5557] _copy_to_user+0x20/0xa0 [ 87.840855][ T5557] simple_read_from_buffer+0xb5/0x130 [ 87.840903][ T5557] proc_fail_nth_read+0x10e/0x150 [ 87.840941][ T5557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.841035][ T5557] vfs_read+0x1ab/0x7f0 [ 87.841059][ T5557] ? __rcu_read_unlock+0x4e/0x70 [ 87.841100][ T5557] ? __fget_files+0x184/0x1c0 [ 87.841204][ T5557] ? mutex_lock+0x57/0x90 [ 87.841228][ T5557] ksys_read+0xdc/0x1a0 [ 87.841249][ T5557] __x64_sys_read+0x40/0x50 [ 87.841274][ T5557] x64_sys_call+0x2889/0x3000 [ 87.841377][ T5557] do_syscall_64+0xc0/0x2a0 [ 87.841425][ T5557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.841524][ T5557] RIP: 0033:0x7fc2950cb78e [ 87.841543][ T5557] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.841562][ T5557] RSP: 002b:00007fc293b66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.841659][ T5557] RAX: ffffffffffffffda RBX: 00007fc293b676c0 RCX: 00007fc2950cb78e [ 87.841679][ T5557] RDX: 000000000000000f RSI: 00007fc293b670a0 RDI: 0000000000000004 [ 87.841696][ T5557] RBP: 00007fc293b67090 R08: 0000000000000000 R09: 0000000000000000 [ 87.841714][ T5557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.841764][ T5557] R13: 00007fc295386038 R14: 00007fc295385fa0 R15: 00007fff07596be8 [ 87.841872][ T5557] [ 88.155277][ T5565] ALSA: seq fatal error: cannot create timer (-22) [ 88.191280][ T5568] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 88.331163][ T5588] loop4: detected capacity change from 0 to 512 [ 88.370337][ T5593] netlink: 128 bytes leftover after parsing attributes in process `syz.1.635'. [ 88.383126][ T5588] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 88.394941][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.402815][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.443556][ T5597] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5597 comm=syz.1.637 [ 88.462637][ T5597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 88.473928][ T5597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 88.508485][ T5601] loop3: detected capacity change from 0 to 512 [ 88.553841][ T5601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.587794][ T5601] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.636: bg 0: block 458: padding at end of block bitmap is not set [ 88.633124][ T5614] loop1: detected capacity change from 0 to 256 [ 88.633118][ T5612] loop2: detected capacity change from 0 to 1024 [ 88.638135][ T5612] EXT4-fs (loop2): Invalid log block size: 196608 [ 88.654005][ T5614] vfat: Unknown parameter 'âÛˆÄ#§{û°ò7œ°fíõžd!¤°îJíMÜ1¨j[eZ•("‡g¥)—2Qû–KáelŒzKGvo¸A["±ÇŽ‚¶¤Ì' [ 88.677552][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.739652][ T5619] loop2: detected capacity change from 0 to 512 [ 88.748464][ T5619] EXT4-fs: Ignoring removed i_version option [ 88.785907][ T5616] netlink: 'syz.3.641': attribute type 6 has an invalid length. [ 88.800285][ T5619] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.828836][ T5619] EXT4-fs (loop2): 1 truncate cleaned up [ 88.837418][ T5619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.963720][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.011616][ T5629] loop3: detected capacity change from 0 to 128 [ 89.027750][ T5629] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.055677][ T5629] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.100699][ T5639] EXT4-fs (loop3): shut down requested (0) [ 89.108383][ T5629] EXT4-fs (loop3): shut down requested (0) [ 89.148642][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.205413][ T5643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 89.258680][ T5656] netlink: 84 bytes leftover after parsing attributes in process `syz.0.651'. [ 89.270422][ T5656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 89.314794][ T5654] netlink: 'syz.3.650': attribute type 30 has an invalid length. [ 89.334582][ T5662] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 89.458953][ T5674] loop1: detected capacity change from 0 to 128 [ 89.608892][ T5689] loop4: detected capacity change from 0 to 512 [ 89.664902][ T5689] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.661: EA inode hash validation failed [ 89.691970][ T5689] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.661: corrupted inode contents [ 89.707738][ T5689] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.661: mark_inode_dirty error [ 89.720387][ T5689] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.661: corrupted inode contents [ 89.735259][ T5689] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.661: mark_inode_dirty error [ 89.748859][ T5689] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.661: mark inode dirty (error -117) [ 89.765356][ T5689] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 89.777332][ T5689] EXT4-fs (loop4): 1 orphan inode deleted [ 89.785112][ T5689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.815666][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.854463][ T5701] bridge0: entered promiscuous mode [ 89.861579][ T5701] macvlan0: entered promiscuous mode [ 89.905950][ T5667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.162944][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 90.162967][ T30] audit: type=1326 audit(1769812626.370:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055314aeb9 code=0x7ffc0000 [ 90.196396][ T30] audit: type=1326 audit(1769812626.370:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055314aeb9 code=0x7ffc0000 [ 90.258058][ T5726] EXT4-fs: Ignoring removed nobh option [ 90.270559][ T5726] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.327006][ T5726] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.414378][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.430316][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.477394][ T5737] netlink: 'syz.3.675': attribute type 2 has an invalid length. [ 90.557226][ T30] audit: type=1326 audit(1769812626.770:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29510aeb9 code=0x7ffc0000 [ 90.585981][ T30] audit: type=1326 audit(1769812626.770:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29510aeb9 code=0x7ffc0000 [ 90.614604][ T30] audit: type=1326 audit(1769812626.770:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc29510aeb9 code=0x7ffc0000 [ 90.641299][ T30] audit: type=1326 audit(1769812626.770:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29510aeb9 code=0x7ffc0000 [ 90.670245][ T30] audit: type=1326 audit(1769812626.780:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc29510aeb9 code=0x7ffc0000 [ 90.698316][ T30] audit: type=1326 audit(1769812626.780:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29510aeb9 code=0x7ffc0000 [ 90.728383][ T30] audit: type=1326 audit(1769812626.780:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc29510aeb9 code=0x7ffc0000 [ 90.760583][ T30] audit: type=1326 audit(1769812626.780:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29510aeb9 code=0x7ffc0000 [ 91.127102][ T5757] geneve2: entered promiscuous mode [ 91.163561][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.195616][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.216059][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.247576][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.647844][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'. [ 91.659370][ T5773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 91.676575][ T5773] vxcan0: Master is either lo or non-ether device [ 91.814808][ T5780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.839123][ T5780] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.875245][ T5780] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c11c, mo2=0102] [ 91.893151][ T5780] System zones: 0-2, 18-18, 34-34 [ 91.903237][ T5780] EXT4-fs error (device loop1): ext4_quota_enable:7177: inode #4: comm syz.1.686: iget: immutable or append flags not allowed on symlinks [ 91.974997][ T5780] EXT4-fs error (device loop1): ext4_quota_enable:7180: comm syz.1.686: Bad quota inode: 4, type: 1 [ 91.988544][ T5780] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.005722][ T5780] EXT4-fs (loop1): mount failed [ 92.310391][ T5805] Cannot find del_set index 0 as target [ 92.402513][ T5803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5803 comm=syz.0.693 [ 92.492720][ T5808] set_capacity_and_notify: 3 callbacks suppressed [ 92.492737][ T5808] loop3: detected capacity change from 0 to 4096 [ 92.556269][ T5808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.651664][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.719705][ T5817] __nla_validate_parse: 2 callbacks suppressed [ 92.719720][ T5817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.696'. [ 92.773062][ T5828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.699'. [ 92.792957][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.827133][ T5810] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 92.856275][ T58] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.973889][ T5833] netlink: 256 bytes leftover after parsing attributes in process `syz.1.702'. [ 93.084024][ T5841] bridge_slave_0: left allmulticast mode [ 93.090787][ T5841] bridge_slave_0: left promiscuous mode [ 93.097598][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.109604][ T5841] bridge_slave_1: left allmulticast mode [ 93.115970][ T5841] bridge_slave_1: left promiscuous mode [ 93.122673][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.135903][ T5841] team0: Port device team_slave_0 removed [ 93.144206][ T5841] team0: Port device team_slave_1 removed [ 93.151422][ T5841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.164076][ T5841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.172173][ T5841] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.337307][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'. [ 93.695458][ T5851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.706'. [ 93.755973][ T5853] ref_ctr increment failed for inode: 0x33b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810a7eec00 [ 94.254602][ T5857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.262869][ T5857] IPv6: NLM_F_CREATE should be set when creating new route [ 94.567002][ T5874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.713'. [ 94.922973][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 94.929604][ T3536] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.029480][ T5880] block device autoloading is deprecated and will be removed. [ 95.160529][ T5891] loop2: detected capacity change from 0 to 512 [ 95.175393][ T30] kauditd_printk_skb: 195 callbacks suppressed [ 95.175411][ T30] audit: type=1326 audit(1769812631.400:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe60cc8b78e code=0x7ffc0000 [ 95.175698][ T30] audit: type=1326 audit(1769812631.400:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cccaeb9 code=0x7ffc0000 [ 95.176395][ T30] audit: type=1326 audit(1769812631.400:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cccaeb9 code=0x7ffc0000 [ 95.220281][ T5891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.220355][ T5891] ext4 filesystem being mounted at /140/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.244785][ T30] audit: type=1326 audit(1769812631.440:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe60cccaeb9 code=0x7ffc0000 [ 95.377407][ T30] audit: type=1326 audit(1769812631.440:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cccaeb9 code=0x7ffc0000 [ 95.411890][ T30] audit: type=1326 audit(1769812631.440:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cccaeb9 code=0x7ffc0000 [ 95.446781][ T30] audit: type=1326 audit(1769812631.440:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fe60cccaeb9 code=0x7ffc0000 [ 95.482558][ T30] audit: type=1326 audit(1769812631.440:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cccaeb9 code=0x7ffc0000 [ 95.514063][ T30] audit: type=1326 audit(1769812631.440:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60cccaeb9 code=0x7ffc0000 [ 95.545739][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.662410][ T5906] loop3: detected capacity change from 0 to 1024 [ 95.702329][ T5909] loop1: detected capacity change from 0 to 512 [ 95.724601][ T5906] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 95.738253][ T5906] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 95.757000][ T30] audit: type=1400 audit(1769812631.980:1247): avc: denied { ioctl } for pid=5910 comm="syz.2.722" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 95.797039][ T5906] JBD2: no valid journal superblock found [ 95.804643][ T5906] EXT4-fs (loop3): Could not load journal inode [ 95.844769][ T5909] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #2: block 3: comm syz.1.721: lblock 0 mapped to illegal pblock 3 (length 1) [ 95.883192][ T5909] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.721: error -117 reading directory block [ 95.927426][ T5909] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 95.939341][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 95.976506][ T5909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.020200][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.720'. [ 96.034455][ T5909] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #2: comm syz.1.721: corrupted xattr block 255: invalid header [ 96.064913][ T5909] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 96.087102][ T5909] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.225587][ T5929] loop2: detected capacity change from 0 to 1024 [ 96.266849][ T5929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.337098][ T5940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5940 comm=syz.3.730 [ 96.359655][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.428847][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'. [ 96.473199][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.733'. [ 96.527322][ T5962] loop2: detected capacity change from 0 to 1024 [ 96.543099][ T5962] EXT4-fs: Ignoring removed oldalloc option [ 96.551765][ T5962] EXT4-fs: inline encryption not supported [ 96.567336][ T5962] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.578357][ T5962] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.614157][ T5962] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #3: block 1: comm syz.2.736: lblock 1 mapped to illegal pblock 1 (length 1) [ 96.634149][ T5962] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.736: Failed to acquire dquot type 0 [ 96.649423][ T5964] loop3: detected capacity change from 0 to 1024 [ 96.660763][ T5962] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.736: Freeing blocks not in datazone - block = 0, count = 4096 [ 96.678970][ T5964] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 96.689719][ T5962] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.736: Invalid inode bitmap blk 0 in block_group 0 [ 96.705640][ T58] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 96.705771][ T58] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 96.742269][ T5962] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 96.758347][ T5962] EXT4-fs (loop2): 1 orphan inode deleted [ 96.765697][ T5964] loop3: detected capacity change from 0 to 512 [ 96.774240][ T5962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.801530][ T5964] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.737: bg 0: block 248: padding at end of block bitmap is not set [ 96.829158][ T5975] syzkaller0: entered promiscuous mode [ 96.838772][ T5975] syzkaller0: entered allmulticast mode [ 96.853072][ T5964] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.737: Failed to acquire dquot type 1 [ 96.881148][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.883636][ T5968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29518 sclass=netlink_route_socket pid=5968 comm=syz.0.738 [ 96.895996][ T5964] EXT4-fs (loop3): 1 truncate cleaned up [ 96.923174][ T5964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.960562][ T5964] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.982430][ T5977] loop2: detected capacity change from 0 to 512 [ 97.014391][ T5981] bond3: (slave bond_slave_1): Device is not our slave [ 97.026216][ T5981] bond3: option active_slave: invalid value (bond_slave_1) [ 97.034907][ T5977] EXT4-fs warning (device loop2): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop2. [ 97.064232][ T5981] bond3 (unregistering): Released all slaves [ 97.459509][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.471635][ T58] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 97.588808][ T6016] program syz.1.754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.615431][ T6016] loop1: detected capacity change from 0 to 128 [ 98.251480][ T6040] bond1: (slave syz_tun): Releasing backup interface [ 98.569304][ T6040] bond0: (slave dummy0): Releasing backup interface [ 98.616854][ T6054] loop3: detected capacity change from 0 to 256 [ 98.721979][ T6059] IPv6: addrconf: prefix option has invalid lifetime [ 98.834422][ T6040] bridge_slave_0: left allmulticast mode [ 98.842455][ T6040] bridge_slave_0: left promiscuous mode [ 98.849883][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.879480][ T6040] bridge_slave_1: left allmulticast mode [ 98.886372][ T6040] bridge_slave_1: left promiscuous mode [ 98.893088][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.939858][ T6040] bond0: (slave bond_slave_0): Releasing backup interface [ 98.986131][ T6040] bond0: (slave bond_slave_1): Releasing backup interface [ 99.020469][ T6040] team_slave_0: left promiscuous mode [ 99.041857][ T6040] team0: Port device team_slave_0 removed [ 99.059204][ T6040] team_slave_1: left promiscuous mode [ 99.080698][ T6040] team0: Port device team_slave_1 removed [ 99.090203][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.104487][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.113225][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.141054][ T6040] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.229420][ T6071] __nla_validate_parse: 2 callbacks suppressed [ 99.229442][ T6071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.774'. [ 99.286205][ T6071] loop3: detected capacity change from 0 to 128 [ 99.318248][ T6071] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61410000 (sector = 1) [ 99.504445][ T6087] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 99.524685][ T6045] loop1: detected capacity change from 0 to 512 [ 99.703111][ T6045] EXT4-fs (loop1): 1 truncate cleaned up [ 99.710621][ T6045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.790615][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.783'. [ 99.839000][ T6109] loop2: detected capacity change from 0 to 128 [ 99.861408][ T6045] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 99.878776][ T6113] loop3: detected capacity change from 0 to 512 [ 99.916725][ T6113] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 99.948248][ T6113] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 99.962922][ T6113] EXT4-fs (loop3): group descriptors corrupted! [ 99.994642][ T6116] vxcan0: tx address claim with different name [ 100.007003][ T6116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.785'. [ 100.026455][ T6113] loop3: detected capacity change from 0 to 512 [ 100.046097][ T6116] bond0: entered promiscuous mode [ 100.051404][ T6116] bond_slave_0: entered promiscuous mode [ 100.058752][ T6116] bond_slave_1: entered promiscuous mode [ 100.069196][ T6116] gretap0: entered promiscuous mode [ 100.099537][ T6113] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 100.105832][ T6116] debugfs: 'hsr1' already exists in 'hsr' [ 100.125255][ T6116] Cannot create hsr debugfs directory [ 100.131402][ T6116] hsr1: entered promiscuous mode [ 100.173024][ T6113] EXT4-fs (loop3): Remounting filesystem read-only [ 100.191847][ T6113] EXT4-fs (loop3): 1 truncate cleaned up [ 100.203420][ T6113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.286091][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.337764][ T6123] loop2: detected capacity change from 0 to 512 [ 100.369103][ T6123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.424450][ T6044] syz.1.763 (6044) used greatest stack depth: 6296 bytes left [ 100.436003][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.471090][ T6123] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.570813][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 100.575967][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 100.576023][ T30] audit: type=1400 audit(1769812636.790:1295): avc: denied { rename } for pid=6122 comm="syz.2.788" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 100.636427][ T6123] EXT4-fs error (device loop2): ext4_empty_dir:3078: inode #12: comm syz.2.788: Directory hole found for htree leaf block 0 [ 100.670186][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 100.731282][ T6149] loop1: detected capacity change from 0 to 2048 [ 100.769343][ T6153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.798'. [ 100.791105][ T6149] loop1: p1 < > [ 100.810602][ T6153] 8021q: adding VLAN 0 to HW filter on device bond3 [ 100.833608][ T6149] netlink: 76 bytes leftover after parsing attributes in process `syz.1.796'. [ 100.863819][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.140351][ T6143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6143 comm=syz.3.794 [ 101.160888][ T30] audit: type=1400 audit(1769812637.360:1296): avc: denied { read } for pid=6142 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.162693][ T6171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.804'. [ 101.358069][ T6158] macvlan1: entered promiscuous mode [ 101.374402][ T6176] loop1: detected capacity change from 0 to 4096 [ 101.428919][ T30] audit: type=1400 audit(1769812637.650:1297): avc: denied { create } for pid=6175 comm="syz.1.806" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.481818][ T6182] netlink: 44 bytes leftover after parsing attributes in process `syz.1.806'. [ 101.481847][ T6182] netlink: 43 bytes leftover after parsing attributes in process `syz.1.806'. [ 101.482260][ T6182] netlink: 'syz.1.806': attribute type 2 has an invalid length. [ 101.557048][ T30] audit: type=1400 audit(1769812637.770:1298): avc: denied { bind } for pid=6175 comm="syz.1.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 101.656952][ T6191] EXT4-fs (loop2): orphan cleanup on readonly fs [ 101.667049][ T6191] Quota error (device loop2): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 101.693360][ T6191] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.711513][ T6191] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 101.731447][ T30] audit: type=1400 audit(1769812637.950:1299): avc: denied { setopt } for pid=6197 comm="syz.3.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.766227][ T6191] EXT4-fs error (device loop2): __ext4_iget:5426: inode #14: block 1886221359: comm syz.2.809: invalid block [ 101.800184][ T6191] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.809: couldn't read orphan inode 14 (err -117) [ 101.826942][ T6191] EXT4-fs (loop2): 1 truncate cleaned up [ 101.908405][ T30] audit: type=1400 audit(1769812638.130:1300): avc: denied { read } for pid=6217 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 101.962192][ T30] audit: type=1400 audit(1769812638.130:1301): avc: denied { mount } for pid=6217 comm="syz.0.817" name="/" dev="hugetlbfs" ino=13053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 102.013440][ T30] audit: type=1400 audit(1769812638.230:1302): avc: denied { name_connect } for pid=6222 comm="syz.2.818" dest=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 102.013475][ T30] audit: type=1400 audit(1769812638.230:1303): avc: denied { read } for pid=6222 comm="syz.2.818" path="socket:[13692]" dev="sockfs" ino=13692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.129822][ T6235] bridge0: entered allmulticast mode [ 103.042033][ T6260] 9p: Bad value for 'rfdno' [ 103.401152][ T6285] set_capacity_and_notify: 2 callbacks suppressed [ 103.401176][ T6285] loop2: detected capacity change from 0 to 512 [ 103.437868][ T6285] EXT4-fs: Ignoring removed bh option [ 103.466586][ T6289] loop1: detected capacity change from 0 to 512 [ 103.475119][ T6285] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 103.523968][ T6285] EXT4-fs (loop2): 1 truncate cleaned up [ 103.651357][ T6299] netlink: 'syz.1.842': attribute type 16 has an invalid length. [ 103.660023][ T6299] netlink: 'syz.1.842': attribute type 2 has an invalid length. [ 103.684518][ T6285] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 217 vs 2012 free clusters [ 103.746833][ T6305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.762584][ T6305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.873531][ T6318] loop3: detected capacity change from 0 to 512 [ 103.889599][ T6321] loop1: detected capacity change from 0 to 128 [ 103.899795][ T6321] vfat: Unknown parameter 'nonumir' [ 103.927252][ T6318] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 103.958655][ T6318] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 103.987868][ T6318] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #11: comm syz.3.846: corrupted inode contents [ 104.005516][ T6318] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #11: comm syz.3.846: mark_inode_dirty error [ 104.021142][ T6318] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.846: invalid indirect mapped block 1 (level 1) [ 104.055056][ T6318] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #11: comm syz.3.846: corrupted inode contents [ 104.077318][ T6337] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 104.091869][ T6318] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 104.107892][ T6318] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #11: comm syz.3.846: corrupted inode contents [ 104.122779][ T6318] EXT4-fs error (device loop3): ext4_truncate:4635: inode #11: comm syz.3.846: mark_inode_dirty error [ 104.141888][ T6318] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 104.153969][ T6318] EXT4-fs (loop3): 1 truncate cleaned up [ 104.293531][ T6346] __nla_validate_parse: 19 callbacks suppressed [ 104.293554][ T6346] netlink: 104 bytes leftover after parsing attributes in process `syz.0.852'. [ 104.339318][ T6352] loop1: detected capacity change from 0 to 1024 [ 104.372349][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 104.409382][ T6352] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 104.488455][ T6318] EXT4-fs error (device loop3): __ext4_iget:5426: inode #13: block 7962: comm syz.3.846: invalid block [ 104.511522][ T6318] EXT4-fs error (device loop3): __ext4_iget:5426: inode #13: block 7962: comm syz.3.846: invalid block [ 104.904563][ T6386] loop1: detected capacity change from 0 to 128 [ 104.964053][ T6386] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.119021][ T6421] loop4: detected capacity change from 0 to 512 [ 105.136512][ T6428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.871'. [ 105.169489][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.872'. [ 105.277456][ T6443] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.876'. [ 105.328675][ T6446] loop4: detected capacity change from 0 to 512 [ 105.340527][ T6446] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.397363][ T6446] EXT4-fs (loop4): 1 orphan inode deleted [ 105.406425][ T6446] EXT4-fs (loop4): 1 truncate cleaned up [ 105.585225][ T30] kauditd_printk_skb: 141 callbacks suppressed [ 105.585245][ T30] audit: type=1400 audit(1769812641.810:1445): avc: denied { load_policy } for pid=6445 comm="syz.4.877" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 105.622830][ T6459] SELinux: failed to load policy [ 105.634886][ T6459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.877'. [ 105.666910][ T6462] netlink: 48 bytes leftover after parsing attributes in process `syz.3.881'. [ 105.730140][ T6470] loop4: detected capacity change from 0 to 512 [ 105.737754][ T6470] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 105.893762][ T6497] loop4: detected capacity change from 0 to 128 [ 105.918982][ T6498] netlink: 1304 bytes leftover after parsing attributes in process `syz.3.888'. [ 105.924675][ T30] audit: type=1400 audit(1769813410.143:1446): avc: denied { getopt } for pid=6496 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.962369][ T6498] tmpfs: Bad value for 'mpol' [ 105.975512][ T30] audit: type=1400 audit(1769813410.174:1447): avc: denied { ioctl } for pid=6496 comm="syz.4.891" path="socket:[14574]" dev="sockfs" ino=14574 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.087036][ T30] audit: type=1400 audit(1769813410.300:1448): avc: denied { accept } for pid=6506 comm="syz.2.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.098492][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 106.117107][ T30] audit: type=1326 audit(1769813410.321:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6510 comm="syz.4.895" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f85aecdaeb9 code=0x0 [ 106.161516][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'. [ 106.207100][ T30] audit: type=1400 audit(1769813410.447:1450): avc: denied { listen } for pid=6515 comm="syz.2.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.256734][ T6518] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.421574][ T6530] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.447620][ T6530] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 106.466492][ T6530] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.900: bg 0: block 248: padding at end of block bitmap is not set [ 106.491598][ T6530] Quota error (device loop1): write_blk: dquota write failed [ 106.502925][ T6530] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 106.514455][ T6530] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.900: Failed to acquire dquot type 1 [ 106.535430][ T6530] EXT4-fs (loop1): 1 truncate cleaned up [ 106.550208][ T30] audit: type=1326 audit(1769813410.804:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6534 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29510aeb9 code=0x7ffc0000 [ 106.590708][ T30] audit: type=1326 audit(1769813410.804:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6534 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29510aeb9 code=0x7ffc0000 [ 106.802531][ T6545] syz.1.903: attempt to access beyond end of device [ 106.802531][ T6545] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 106.818342][ T6545] Buffer I/O error on dev loop1, logical block 57847, async page read [ 106.845950][ T6545] syz.1.903: attempt to access beyond end of device [ 106.845950][ T6545] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 106.863881][ T6545] Buffer I/O error on dev loop1, logical block 57847, async page read [ 106.874900][ T6545] syz.1.903: attempt to access beyond end of device [ 106.874900][ T6545] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 106.891487][ T6545] Buffer I/O error on dev loop1, logical block 57847, async page read [ 107.231569][ T6552] xt_hashlimit: max too large, truncated to 1048576 [ 107.241853][ T6552] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.666221][ T6585] netlink: 'syz.3.916': attribute type 1 has an invalid length. [ 107.666377][ T6581] EXT4-fs (loop1): 1 orphan inode deleted [ 107.709781][ T6581] EXT4-fs mount: 18 callbacks suppressed [ 107.709796][ T6581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.767352][ T6592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6592 comm=syz.4.917 [ 107.785722][ T6581] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.826563][ T6585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.836552][ T6585] bond2: (slave bond3): making interface the new active one [ 107.847020][ T6585] bond2: (slave bond3): Enslaving as an active interface with an up link [ 107.864749][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.867077][ T6596] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 107.891182][ T6596] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 108.081217][ T6611] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 108.122484][ T10] hid-generic 0009:0004:0000.0001: unknown main item tag 0x0 [ 108.131079][ T10] hid-generic 0009:0004:0000.0001: unknown main item tag 0x7 [ 108.140167][ T10] hid-generic 0009:0004:0000.0001: unknown main item tag 0x0 [ 108.149665][ T10] hid-generic 0009:0004:0000.0001: unknown main item tag 0x0 [ 108.160552][ T10] hid-generic 0009:0004:0000.0001: unknown main item tag 0x0 [ 108.203685][ T10] hid-generic 0009:0004:0000.0001: hidraw0: HID vffffff.ff Device [syz0] on syz1 [ 108.260969][ T6617] fido_id[6617]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.428434][ T6640] netlink: 'syz.3.931': attribute type 5 has an invalid length. [ 108.512561][ T6645] set_capacity_and_notify: 7 callbacks suppressed [ 108.512583][ T6645] loop1: detected capacity change from 0 to 512 [ 108.716751][ T6644] macvtap1: entered promiscuous mode [ 108.726378][ T6644] macvtap1: entered allmulticast mode [ 108.733742][ T6644] bridge0: entered allmulticast mode [ 108.882583][ T6645] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.932: inode has both inline data and extents flags [ 108.962684][ T6645] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.932: couldn't read orphan inode 15 (err -117) [ 108.983547][ T6644] bridge0: port 3(macvtap1) entered blocking state [ 108.996107][ T6644] bridge0: port 3(macvtap1) entered disabled state [ 109.005604][ T6645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 109.048899][ T6644] bridge0: left allmulticast mode [ 109.165569][ T6645] __nla_validate_parse: 3 callbacks suppressed [ 109.165592][ T6645] netlink: 100 bytes leftover after parsing attributes in process `syz.1.932'. [ 109.254531][ T6672] 9p: Bad value for 'rfdno' [ 109.276983][ T6653] netlink: 1392 bytes leftover after parsing attributes in process `syz.3.934'. [ 109.488639][ T6690] ------------[ cut here ]------------ [ 109.494726][ T6690] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x0, 0x0] s64=[0x0, 0x0] u32=[0x80632f4, 0x0] s32=[0x0, 0x0] var_off=(0x0, 0x0) [ 109.512991][ T6690] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.0.941/6690 [ 109.527108][ T6690] Modules linked in: [ 109.531377][ T6690] CPU: 0 UID: 0 PID: 6690 Comm: syz.0.941 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.543014][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.555377][ T6690] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 109.562658][ T6690] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 109.587182][ T6690] RSP: 0018:ffffc9000fe4f388 EFLAGS: 00010246 [ 109.595212][ T6690] RAX: ffff888104201b10 RBX: 0000000000000000 RCX: 0000000000000000 [ 109.605589][ T6690] RDX: ffffffff867f0723 RSI: ffffffff866bb4e7 RDI: ffffffff86fb97b0 [ 109.605662][ T6690] RBP: ffff88811d5e62e0 R08: 0000000000000000 R09: 0000000000000000 [ 109.605693][ T6690] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88811d5e62a0 [ 109.605722][ T6690] R13: 0000000000000000 R14: ffff88811d5e62ec R15: ffff88811d5e62d8 [ 109.605737][ T6690] FS: 00007f6fa90566c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 109.605755][ T6690] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.605770][ T6690] CR2: 0000555592892908 CR3: 000000012cca0000 CR4: 00000000003506f0 [ 109.605790][ T6690] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.605809][ T6690] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 109.605884][ T6690] Call Trace: [ 109.605894][ T6690] [ 109.605918][ T6690] reg_set_min_max+0x1c8/0x260 [ 109.606055][ T6690] check_cond_jmp_op+0x13bd/0x1a80 [ 109.606220][ T6690] do_check+0x440c/0x9060 [ 109.606356][ T6690] do_check_common+0xd0f/0x1630 [ 109.606416][ T6690] bpf_check+0x2f6d/0xc7e0 [ 109.606450][ T6690] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 109.606500][ T6690] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 109.606657][ T6690] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 109.606728][ T6690] ? _find_next_zero_bit+0x29/0xa0 [ 109.606768][ T6690] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 109.606850][ T6690] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 109.606919][ T6690] ? css_rstat_updated+0xbb/0x280 [ 109.606952][ T6690] ? mod_memcg_state+0x182/0x260 [ 109.606987][ T6690] ? __rcu_read_unlock+0x4e/0x70 [ 109.607084][ T6690] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 109.607127][ T6690] ? pcpu_alloc_noprof+0xb08/0x1010 [ 109.607232][ T6690] ? __kmalloc_noprof+0x4a3/0x580 [ 109.607258][ T6690] ? security_bpf_prog_load+0x60/0x140 [ 109.607342][ T6690] ? selinux_bpf_prog_load+0xac/0xd0 [ 109.607460][ T6690] ? security_bpf_prog_load+0x9e/0x140 [ 109.607512][ T6690] bpf_prog_load+0xf76/0x1140 [ 109.607564][ T6690] ? security_bpf+0x2b/0x90 [ 109.607599][ T6690] __sys_bpf+0x469/0x7b0 [ 109.607684][ T6690] __x64_sys_bpf+0x41/0x50 [ 109.607709][ T6690] x64_sys_call+0x28e1/0x3000 [ 109.607736][ T6690] do_syscall_64+0xc0/0x2a0 [ 109.722177][ T6696] loop3: detected capacity change from 0 to 512 [ 109.726166][ T6690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.858987][ T6695] loop2: detected capacity change from 0 to 2048 [ 109.861640][ T6690] RIP: 0033:0x7f6faa61aeb9 [ 109.909193][ T6690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.932797][ T6690] RSP: 002b:00007f6fa9056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 109.943156][ T6690] RAX: ffffffffffffffda RBX: 00007f6faa896090 RCX: 00007f6faa61aeb9 [ 109.952407][ T6690] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 109.963515][ T6690] RBP: 00007f6faa688c1f R08: 0000000000000000 R09: 0000000000000000 [ 109.974275][ T6690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.983339][ T6690] R13: 00007f6faa896128 R14: 00007f6faa896090 R15: 00007ffc5bcaf308 [ 109.994864][ T6690] [ 109.998908][ T6690] ---[ end trace 0000000000000000 ]--- [ 110.043715][ T3303] loop2: p3 p4 < > [ 110.048549][ T3303] loop2: p3 start 11362048 is beyond EOD, truncated [ 110.070667][ T6695] loop2: p3 p4 < > [ 110.080788][ T6695] loop2: p3 start 11362048 is beyond EOD, truncated [ 110.112465][ T3002] loop2: p3 p4 < > [ 110.116944][ T3002] loop2: p3 start 11362048 is beyond EOD, truncated [ 110.178005][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 110.209210][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 110.244546][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 110.300225][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.328330][ T6701] loop2: detected capacity change from 0 to 8192 [ 110.397342][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 110.647674][ T6723] loop3: detected capacity change from 0 to 1024 [ 110.719656][ T6723] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.853996][ T6723] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 110.882207][ T6723] EXT4-fs (loop3): orphan cleanup on readonly fs [ 110.890197][ T6723] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.951: Freeing blocks not in datazone - block = 0, count = 4096 [ 111.034230][ T6723] EXT4-fs (loop3): 1 orphan inode deleted [ 111.053162][ T6723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.129447][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 111.149007][ T6723] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.951: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 111.197216][ T6723] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.951: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 111.358139][ T6723] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.951: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 111.628730][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.276028][ T6744] bridge0: left allmulticast mode [ 150.285584][ T6756] loop4: detected capacity change from 0 to 512 [ 150.292721][ T30] kauditd_printk_skb: 261 callbacks suppressed [ 150.292740][ T30] audit: type=1400 audit(1769813456.728:1714): avc: denied { setopt } for pid=6743 comm="syz.3.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.320583][ T6755] netlink: 399 bytes leftover after parsing attributes in process `syz.3.955'. [ 150.324011][ T6756] EXT4-fs (loop4): orphan cleanup on readonly fs [ 150.329764][ T6755] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 150.337512][ T6756] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 150.359166][ T6744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.360943][ T6756] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 150.398422][ T6756] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.958: attempt to clear invalid blocks 2 len 1 [ 150.428734][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.431494][ T6756] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.958: invalid indirect mapped block 1819239214 (level 0) [ 150.450599][ T6756] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.958: invalid indirect mapped block 1819239214 (level 1) [ 150.451778][ T6755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.482490][ T6745] ip6tnl0: entered promiscuous mode [ 150.489826][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 150.508633][ T6756] EXT4-fs (loop4): 1 truncate cleaned up [ 150.516091][ T6756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.534227][ T6756] EXT4-fs error (device loop4): __ext4_remount:6789: comm syz.4.958: Abort forced by user [ 150.555490][ T6756] EXT4-fs (loop4): Remounting filesystem read-only [ 150.562291][ T6756] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 150.592761][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.619901][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 150.628290][ T6776] loop3: detected capacity change from 0 to 164 [ 150.654562][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 150.695454][ T30] audit: type=1400 audit(1769813457.158:1715): avc: denied { mount } for pid=6775 comm="syz.3.963" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 150.781403][ T6794] netlink: 104 bytes leftover after parsing attributes in process `syz.4.969'. [ 150.814842][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'. [ 150.906987][ T30] audit: type=1400 audit(1769813457.379:1716): avc: denied { connect } for pid=6800 comm="syz.2.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.954364][ T30] audit: type=1400 audit(1769813457.421:1717): avc: denied { mount } for pid=6801 comm="syz.4.972" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 150.979168][ T6810] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 151.005459][ T6814] netlink: 'syz.0.975': attribute type 8 has an invalid length. [ 151.037500][ T6810] loop2: detected capacity change from 0 to 1024 [ 151.067804][ T6810] EXT4-fs: Ignoring removed orlov option [ 151.087825][ T6810] ext4: Unknown parameter 'obj_user' [ 151.192600][ T30] audit: type=1400 audit(1769813457.673:1718): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 151.202624][ T6838] netlink: 32 bytes leftover after parsing attributes in process `syz.0.981'. [ 151.221853][ T6838] netlink: 32 bytes leftover after parsing attributes in process `syz.0.981'. [ 151.285254][ T6848] netlink: 'syz.2.984': attribute type 1 has an invalid length. [ 151.317206][ T6848] geneve3: entered promiscuous mode [ 151.322825][ T6848] geneve3: entered allmulticast mode [ 151.332233][ T6848] bond2: (slave geneve3): making interface the new active one [ 151.344593][ T6848] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 151.393704][ T6852] netlink: 'syz.1.985': attribute type 3 has an invalid length. [ 151.424403][ T30] audit: type=1400 audit(1769813457.914:1719): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 151.475112][ T6853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.508700][ T6860] netlink: 'syz.3.986': attribute type 1 has an invalid length. [ 151.535319][ T6860] bond4: entered promiscuous mode [ 151.540456][ T6860] bond4: entered allmulticast mode [ 151.551852][ T6860] 8021q: adding VLAN 0 to HW filter on device bond4 [ 151.568856][ T6863] xt_TPROXY: Can be used only with -p tcp or -p udp [ 151.700365][ T6866] loop2: detected capacity change from 0 to 2048 [ 151.770344][ T30] audit: type=1400 audit(1769813458.261:1720): avc: denied { read } for pid=6868 comm="syz.4.990" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 151.794239][ T30] audit: type=1400 audit(1769813458.261:1721): avc: denied { open } for pid=6868 comm="syz.4.990" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 151.834845][ T6866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.854655][ T6866] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.929078][ T6886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.989'. [ 151.948591][ T6885] loop4: detected capacity change from 0 to 1024 [ 151.966696][ T6885] ext4: Bad value for 'resgid' [ 151.971636][ T6885] ext4: Bad value for 'resgid' [ 152.088460][ T6878] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 152.131494][ T3472] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1268 with error 117 [ 152.145004][ T3472] EXT4-fs (loop2): This should not happen!! Data will be lost [ 152.145004][ T3472] [ 152.167950][ T3472] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1284 with max blocks 1 with error 28 [ 152.181572][ T3472] EXT4-fs (loop2): This should not happen!! Data will be lost [ 152.181572][ T3472] [ 152.191285][ T3472] EXT4-fs (loop2): Total free blocks count 0 [ 152.197296][ T3472] EXT4-fs (loop2): Free/Dirty block details [ 152.203310][ T3472] EXT4-fs (loop2): free_blocks=0 [ 152.208980][ T3472] EXT4-fs (loop2): dirty_blocks=16 [ 152.214200][ T3472] EXT4-fs (loop2): Block reservation details [ 152.577702][ T30] audit: type=1400 audit(1769813459.111:1722): avc: denied { read } for pid=6929 comm="syz.4.997" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 152.601807][ T30] audit: type=1400 audit(1769813459.111:1723): avc: denied { open } for pid=6929 comm="syz.4.997" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 152.921182][ T10] hid (null): unknown global tag 0xd [ 152.944943][ T10] hid-generic 0000:0003:FFFFFFFA.0002: unknown global tag 0xd [ 152.952897][ T10] hid-generic 0000:0003:FFFFFFFA.0002: item 0 1 1 13 parsing failed [ 152.979313][ T10] hid-generic 0000:0003:FFFFFFFA.0002: probe with driver hid-generic failed with error -22 [ 153.179445][ T6974] veth3: entered promiscuous mode [ 153.870911][ T6993] netlink: 'syz.4.1009': attribute type 28 has an invalid length. [ 153.878830][ T6993] netlink: 'syz.4.1009': attribute type 3 has an invalid length. [ 153.886688][ T6993] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1009'. [ 153.922265][ T6996] loop4: detected capacity change from 0 to 256 [ 153.929215][ T6996] msdos: Unknown parameter '' [ 153.981993][ T7003] loop4: detected capacity change from 0 to 512 [ 153.990404][ T7003] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 154.003673][ T7003] EXT4-fs (loop4): 1 truncate cleaned up [ 154.010431][ T7003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.087356][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.185564][ T7019] loop4: detected capacity change from 0 to 1024 [ 154.252348][ T7028] netlink: 'syz.4.1020': attribute type 1 has an invalid length. [ 154.261061][ T7028] netlink: 'syz.4.1020': attribute type 2 has an invalid length. [ 154.517993][ T7038] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7038 comm=syz.2.1023 [ 154.776170][ T7042] xt_hashlimit: size too large, truncated to 1048576 [ 155.319241][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 155.319262][ T30] audit: type=1400 audit(1769813462.009:1811): avc: denied { setopt } for pid=7047 comm="syz.4.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.498661][ T30] audit: type=1400 audit(1769813462.198:1812): avc: denied { ioctl } for pid=7053 comm="syz.0.1027" path="socket:[16480]" dev="sockfs" ino=16480 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 155.774431][ T7070] __nla_validate_parse: 4 callbacks suppressed [ 155.774452][ T7070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1033'. [ 155.831264][ T7072] netlink: 'syz.4.1034': attribute type 29 has an invalid length. [ 156.139639][ T7090] tipc: Enabling of bearer rejected, failed to enable media [ 156.468792][ T7104] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1041'. [ 156.507410][ T30] audit: type=1400 audit(1769813463.258:1813): avc: denied { ioctl } for pid=7108 comm="syz.0.1043" path="socket:[16162]" dev="sockfs" ino=16162 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 156.535239][ T7104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.546125][ T7106] netlink: 'syz.3.1042': attribute type 1 has an invalid length. [ 156.564651][ T7104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.587630][ T7106] loop3: detected capacity change from 0 to 1024 [ 156.594023][ T30] audit: type=1400 audit(1769813463.258:1814): avc: denied { write } for pid=7108 comm="syz.0.1043" path="socket:[16162]" dev="sockfs" ino=16162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 156.594066][ T30] audit: type=1400 audit(1769813463.332:1815): avc: denied { write } for pid=7103 comm="syz.2.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 156.650419][ T7104] loop2: detected capacity change from 0 to 2048 [ 156.667175][ T7104] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 156.679113][ T7104] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 156.691555][ T7104] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 156.703245][ T7104] EXT4-fs (loop2): group descriptors corrupted! [ 156.711145][ T7106] EXT4-fs: inline encryption not supported [ 156.728322][ T7106] EXT4-fs: Ignoring removed oldalloc option [ 156.773790][ T7106] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a856c018, mo2=0082] [ 156.782222][ T7106] System zones: 1-12 [ 156.787313][ T7106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.829412][ T7106] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 157.020268][ T7131] loop4: detected capacity change from 0 to 2048 [ 157.050877][ T7131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.127184][ T7131] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.1049: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 157.168754][ T7136] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.1049: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 157.244563][ T30] audit: type=1400 audit(1769813464.025:1816): avc: denied { getopt } for pid=7142 comm="syz.2.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.307397][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.360630][ T7153] loop2: detected capacity change from 0 to 512 [ 157.396921][ T7153] EXT4-fs: Mount option(s) incompatible with ext3 [ 157.419900][ T30] audit: type=1400 audit(1769813464.214:1817): avc: denied { connect } for pid=7154 comm="syz.4.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.572487][ T7174] netlink: 'syz.3.1055': attribute type 12 has an invalid length. [ 157.580550][ T7174] netlink: 'syz.3.1055': attribute type 29 has an invalid length. [ 157.588492][ T7174] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1055'. [ 157.597705][ T7174] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1055'. [ 157.650338][ T30] audit: type=1400 audit(1769813464.455:1818): avc: denied { connect } for pid=7172 comm="syz.3.1055" lport=45936 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 157.698576][ T7179] tmpfs: Bad value for 'size' [ 157.916993][ T7190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1059'. [ 158.000929][ T7199] openvswitch: netlink: Missing key (keys=40, expected=80) [ 158.012237][ T30] audit: type=1400 audit(1769813464.833:1819): avc: denied { map } for pid=7196 comm="syz.2.1060" path="socket:[16260]" dev="sockfs" ino=16260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.038106][ T30] audit: type=1400 audit(1769813464.833:1820): avc: denied { read accept } for pid=7196 comm="syz.2.1060" path="socket:[16260]" dev="sockfs" ino=16260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.101241][ T7201] loop2: detected capacity change from 0 to 1024 [ 158.109067][ T7199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1062'. [ 158.132081][ T7201] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 158.166226][ T7201] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 158.175923][ T7201] EXT4-fs (loop2): orphan cleanup on readonly fs [ 158.182441][ T7201] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.1063: Freeing blocks not in datazone - block = 0, count = 4096 [ 158.196224][ T7201] EXT4-fs (loop2): 1 orphan inode deleted [ 158.202627][ T7201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.226146][ T3317] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /213/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 158.355714][ T3317] EXT4-fs error (device loop2): ext4_lookup:1782: inode #2: comm syz-executor: '. ' linked to parent dir [ 158.371933][ T7214] ref_ctr_offset mismatch. inode: 0x3ff offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 158.391129][ T3317] EXT4-fs error (device loop2): ext4_lookup:1782: inode #2: comm syz-executor: '. ' linked to parent dir [ 158.547338][ T7222] loop4: detected capacity change from 0 to 8192 [ 158.576062][ T7225] 8021q: VLANs not supported on wg2 [ 158.595146][ T6747] loop4: p1 p2 p3 [ 158.599154][ T6747] loop4: p1 size 67111168 extends beyond EOD, truncated [ 158.607064][ T6747] loop4: p2 size 8388608 extends beyond EOD, truncated [ 158.618529][ T6747] loop4: p3 start 4294901760 is beyond EOD, truncated [ 158.627839][ T7222] loop4: p1 p2 p3 [ 158.631929][ T7222] loop4: p1 size 67111168 extends beyond EOD, truncated [ 158.641802][ T7222] loop4: p2 size 8388608 extends beyond EOD, truncated [ 158.649387][ T7222] loop4: p3 start 4294901760 is beyond EOD, truncated [ 158.727479][ T7230] policy can only be matched on NF_INET_PRE_ROUTING [ 158.727494][ T7230] unable to load match [ 158.741361][ T6747] udevd[6747]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 158.753261][ T6781] udevd[6781]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 158.772821][ T6781] udevd[6781]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 158.783153][ T6747] udevd[6747]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 158.845923][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 158.856477][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 158.865465][ T7238] netlink: 'syz.3.1076': attribute type 14 has an invalid length. [ 158.946116][ T5145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.988550][ T3472] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.042699][ T3472] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.099522][ T3472] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.147863][ T3472] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.266852][ T7240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.294423][ T7240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.310954][ T3472] bond2 (unregistering): (slave geneve3): Releasing active interface [ 159.376770][ T3472] bond0 (unregistering): Released all slaves [ 159.385903][ T3472] bond1 (unregistering): Released all slaves [ 159.394939][ T3472] bond2 (unregistering): Released all slaves [ 159.436697][ T3472] hsr_slave_0: left promiscuous mode [ 159.445293][ T3472] hsr_slave_1: left promiscuous mode [ 159.467879][ T3472] veth1_macvtap: left promiscuous mode [ 159.473694][ T3472] veth0_macvtap: left promiscuous mode [ 159.479778][ T3472] veth1_vlan: left promiscuous mode [ 159.485874][ T3472] veth0_vlan: left promiscuous mode [ 159.638458][ T7243] chnl_net:caif_netlink_parms(): no params data found [ 159.652794][ T7278] lo speed is unknown, defaulting to 1000 [ 159.677358][ T7278] lo speed is unknown, defaulting to 1000 [ 159.687419][ T7278] lo speed is unknown, defaulting to 1000 [ 159.694539][ T7278] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 159.704121][ T7278] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 159.732317][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.739652][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.748859][ T7243] bridge_slave_0: entered allmulticast mode [ 159.756419][ T7243] bridge_slave_0: entered promiscuous mode [ 159.764316][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.771680][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.779045][ T7243] bridge_slave_1: entered allmulticast mode [ 159.787832][ T7243] bridge_slave_1: entered promiscuous mode [ 159.796692][ T7278] lo speed is unknown, defaulting to 1000 [ 159.831213][ T7243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.850750][ T7278] lo speed is unknown, defaulting to 1000 [ 159.859679][ T7243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.876782][ T7278] lo speed is unknown, defaulting to 1000 [ 159.904972][ T7278] lo speed is unknown, defaulting to 1000 [ 159.931450][ T7243] team0: Port device team_slave_0 added [ 159.937859][ T7278] lo speed is unknown, defaulting to 1000 [ 159.948777][ T7243] team0: Port device team_slave_1 added [ 159.992863][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.000002][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.026533][ T7243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.085602][ T3472] IPVS: stop unused estimator thread 0... [ 160.092114][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.099669][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.127383][ T7243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.267651][ T7243] hsr_slave_0: entered promiscuous mode [ 160.287303][ T7243] hsr_slave_1: entered promiscuous mode [ 160.287961][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 160.288003][ T30] audit: type=1400 audit(1769813467.227:1900): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 160.317539][ T7243] debugfs: 'hsr0' already exists in 'hsr' [ 160.324360][ T30] audit: type=1400 audit(1769813467.227:1901): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 160.356649][ T7243] Cannot create hsr debugfs directory [ 160.512162][ T7326] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1090'. [ 160.576069][ T7330] loop4: detected capacity change from 0 to 512 [ 160.586866][ T7330] EXT4-fs: Ignoring removed nobh option [ 160.608528][ T7334] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 160.632290][ T7330] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 160.658496][ T7334] tipc: Started in network mode [ 160.663654][ T7334] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 160.673670][ T7334] tipc: Enabled bearer , priority 10 [ 160.686740][ T7330] ------------[ cut here ]------------ [ 160.692298][ T7330] EA inode 11 i_nlink=1026 [ 160.692333][ T7330] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.4.1091/7330 [ 160.707696][ T7330] Modules linked in: [ 160.711910][ T7330] CPU: 0 UID: 0 PID: 7330 Comm: syz.4.1091 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.723341][ T7330] Tainted: [W]=WARN [ 160.727186][ T7330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.737383][ T7330] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 160.744282][ T7330] Code: 74 e6 9a ff 4c 8d 2d cd 21 3e 05 49 8d 7e 40 e8 84 d0 b6 ff 49 8b 6e 40 4c 89 e7 e8 b8 cb b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ef e1 d0 03 66 66 66 66 66 66 2e [ 160.764798][ T7330] RSP: 0018:ffffc9000166f778 EFLAGS: 00010246 [ 160.772422][ T7330] RAX: ffff88810a4c0a90 RBX: ffff88811b4d1c18 RCX: ffffffff81be1958 [ 160.780792][ T7330] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff86fc3b10 [ 160.788816][ T7330] RBP: 000000000000000b R08: 000188811b4d1bcb R09: 0000000000000000 [ 160.796968][ T7330] R10: ffffc9000166f6a8 R11: 0001c9000166f6a8 R12: ffff88811b4d1bc8 [ 160.805435][ T7330] R13: ffffffff86fc3b10 R14: ffff88811b4d1b80 R15: 0000000000000001 [ 160.813569][ T7330] FS: 00007f85ad7376c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 160.822772][ T7330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.829531][ T7330] CR2: 00007f4665a60d80 CR3: 000000012d5f2000 CR4: 00000000003506f0 [ 160.837743][ T7330] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.846134][ T7330] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 160.854283][ T7330] Call Trace: [ 160.857701][ T7330] [ 160.860914][ T7330] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 160.862699][ T7343] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1093'. [ 160.867200][ T7330] ? errseq_check+0x2c/0x50 [ 160.867242][ T7330] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 160.867288][ T7330] ? ext4_truncate+0x92b/0xad0 [ 160.867325][ T7330] ext4_evict_inode+0xa1f/0xd40 [ 160.867406][ T7330] ? __pfx_ext4_evict_inode+0x10/0x10 [ 160.867476][ T7330] evict+0x2af/0x510 [ 160.867516][ T7330] ? __dquot_initialize+0x146/0x7c0 [ 160.867557][ T7330] iput+0x4b9/0x650 [ 160.867596][ T7330] ext4_process_orphan+0x1a9/0x1c0 [ 160.867630][ T7330] ext4_orphan_cleanup+0x6a8/0xa00 [ 160.867738][ T7330] ext4_fill_super+0x3476/0x3800 [ 160.867774][ T7330] ? set_blocksize+0x1a3/0x310 [ 160.867819][ T7330] ? setup_bdev_super+0x30e/0x370 [ 160.867843][ T7330] ? __pfx_ext4_fill_super+0x10/0x10 [ 160.867867][ T7330] get_tree_bdev_flags+0x291/0x300 [ 160.867960][ T7330] ? __pfx_ext4_fill_super+0x10/0x10 [ 160.867985][ T7330] get_tree_bdev+0x1f/0x30 [ 160.868010][ T7330] ext4_get_tree+0x1c/0x30 [ 160.868184][ T7330] vfs_get_tree+0x57/0x1d0 [ 160.868210][ T7330] do_new_mount+0x288/0x700 [ 160.868272][ T7330] path_mount+0x4d0/0xbc0 [ 160.868298][ T7330] ? user_path_at+0xbf/0x130 [ 160.868338][ T7330] __se_sys_mount+0x28c/0x2e0 [ 160.868370][ T7330] __x64_sys_mount+0x67/0x80 [ 160.868476][ T7330] x64_sys_call+0x2cca/0x3000 [ 160.889029][ T30] audit: type=1400 audit(1769813467.825:1902): avc: denied { getopt } for pid=7342 comm="syz.3.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 160.892732][ T7330] do_syscall_64+0xc0/0x2a0 [ 161.028182][ T7330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.034172][ T7330] RIP: 0033:0x7f85aecdc14a [ 161.038680][ T7330] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.043484][ T7348] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1094'. [ 161.058674][ T7330] RSP: 002b:00007f85ad736e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 161.058773][ T7330] RAX: ffffffffffffffda RBX: 00007f85ad736ee0 RCX: 00007f85aecdc14a [ 161.058791][ T7330] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f85ad736ea0 [ 161.058811][ T7330] RBP: 0000200000000180 R08: 00007f85ad736ee0 R09: 0000000000800718 [ 161.058831][ T7330] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 161.058849][ T7330] R13: 00007f85ad736ea0 R14: 00000000000004ab R15: 00002000000003c0 [ 161.058887][ T7330] [ 161.058906][ T7330] ---[ end trace 0000000000000000 ]--- [ 161.059275][ T7330] EXT4-fs (loop4): 1 orphan inode deleted [ 161.059781][ T7330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.155916][ T7243] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 161.169594][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.193272][ T7243] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 161.204508][ T7243] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 161.217612][ T7243] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 161.296741][ T7371] bond0: option min_links: invalid value (18446744073709551613) [ 161.306118][ T7371] bond0: option min_links: allowed values 0 - 2147483647 [ 161.391576][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'. [ 161.401452][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1101'. [ 161.410681][ T7384] netlink: 'syz.0.1101': attribute type 12 has an invalid length. [ 161.418671][ T7384] netlink: 'syz.0.1101': attribute type 11 has an invalid length. [ 161.428924][ T7243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.431531][ T7383] IPv6: Can't replace route, no match found [ 161.451521][ T7243] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.481087][ T2191] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.490096][ T2191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.527395][ T7243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.539765][ T7243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.623572][ T7407] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 161.642611][ T2191] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.650158][ T2191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.691370][ T7394] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.1104'. [ 161.701569][ T7394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1104'. [ 161.741811][ T10] tipc: Node number set to 4269801494 [ 161.748505][ T7410] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1107'. [ 161.786897][ T7243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.790716][ T7383] loop4: detected capacity change from 0 to 736 [ 162.037627][ T7435] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1110'. [ 162.047791][ T7435] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1110'. [ 162.057816][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 162.068408][ T30] audit: type=1400 audit(1769813469.096:1903): avc: denied { module_load } for pid=7434 comm="syz.3.1110" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=18013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 162.072629][ T7435] Invalid ELF header magic: != ELF [ 162.113376][ T7243] veth0_vlan: entered promiscuous mode [ 162.126136][ T7243] veth1_vlan: entered promiscuous mode [ 162.149863][ T7243] veth0_macvtap: entered promiscuous mode [ 162.159860][ T7243] veth1_macvtap: entered promiscuous mode [ 162.175073][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.188825][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.203927][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.233515][ T2072] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.244715][ T2072] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.256659][ T2072] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.277600][ T30] audit: type=1400 audit(1769813469.316:1904): avc: denied { mounton } for pid=7243 comm="syz-executor" path="/root/syzkaller.U9Z6OJ/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 162.331332][ T7394] Process accounting resumed [ 162.337355][ T30] audit: type=1400 audit(1769813469.337:1905): avc: denied { mount } for pid=7243 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 162.337483][ T30] audit: type=1400 audit(1769813469.348:1906): avc: denied { mounton } for pid=7243 comm="syz-executor" path="/root/syzkaller.U9Z6OJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 162.337572][ T30] audit: type=1400 audit(1769813469.348:1907): avc: denied { mounton } for pid=7243 comm="syz-executor" path="/root/syzkaller.U9Z6OJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 162.337609][ T30] audit: type=1400 audit(1769813469.348:1908): avc: denied { mounton } for pid=7243 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 162.337643][ T30] audit: type=1400 audit(1769813469.348:1909): avc: denied { mount } for pid=7243 comm="syz-executor" name="/" dev="gadgetfs" ino=3799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 162.405716][ T7445] lo speed is unknown, defaulting to 1000 [ 162.693758][ T7473] bond1: entered promiscuous mode [ 162.816048][ T7479] loop5: detected capacity change from 0 to 128 [ 162.910971][ T7480] ================================================================== [ 162.919120][ T7480] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 162.927250][ T7480] [ 162.929787][ T7480] write to 0xffff88811b4cf514 of 4 bytes by task 7479 on cpu 1: [ 162.937547][ T7480] xas_set_mark+0x12b/0x140 [ 162.942113][ T7480] tag_pages_for_writeback+0xe3/0x2e0 [ 162.947652][ T7480] writeback_iter+0x340/0x810 [ 162.952918][ T7480] mpage_writepages+0x87/0x1310 [ 162.958535][ T7480] fat_writepages+0x24/0x30 [ 162.963179][ T7480] do_writepages+0x1c6/0x310 [ 162.968182][ T7480] file_write_and_wait_range+0x178/0x2f0 [ 162.974206][ T7480] __generic_file_fsync+0x46/0x160 [ 162.979553][ T7480] fat_file_fsync+0x49/0x100 [ 162.984367][ T7480] vfs_fsync_range+0x10d/0x130 [ 162.989725][ T7480] generic_file_write_iter+0x1ba/0x310 [ 162.995241][ T7480] iter_file_splice_write+0x6bc/0xa80 [ 163.000829][ T7480] direct_splice_actor+0x156/0x2a0 [ 163.006076][ T7480] splice_direct_to_actor+0x311/0x670 [ 163.011575][ T7480] do_splice_direct+0x119/0x1a0 [ 163.017000][ T7480] do_sendfile+0x382/0x650 [ 163.021457][ T7480] __x64_sys_sendfile64+0x105/0x150 [ 163.026719][ T7480] x64_sys_call+0x2db1/0x3000 [ 163.031867][ T7480] do_syscall_64+0xc0/0x2a0 [ 163.037213][ T7480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.043399][ T7480] [ 163.045957][ T7480] read to 0xffff88811b4cf514 of 4 bytes by task 7480 on cpu 0: [ 163.053786][ T7480] file_write_and_wait_range+0x130/0x2f0 [ 163.059454][ T7480] __generic_file_fsync+0x46/0x160 [ 163.064603][ T7480] fat_file_fsync+0x49/0x100 [ 163.069312][ T7480] vfs_fsync_range+0x10d/0x130 [ 163.074282][ T7480] generic_file_write_iter+0x1ba/0x310 [ 163.079811][ T7480] iter_file_splice_write+0x6bc/0xa80 [ 163.085304][ T7480] direct_splice_actor+0x156/0x2a0 [ 163.090458][ T7480] splice_direct_to_actor+0x311/0x670 [ 163.095951][ T7480] do_splice_direct+0x119/0x1a0 [ 163.100938][ T7480] do_sendfile+0x382/0x650 [ 163.105759][ T7480] __x64_sys_sendfile64+0x105/0x150 [ 163.111528][ T7480] x64_sys_call+0x2db1/0x3000 [ 163.116440][ T7480] do_syscall_64+0xc0/0x2a0 [ 163.122047][ T7480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.128160][ T7480] [ 163.130613][ T7480] value changed: 0x02000021 -> 0x04000021 [ 163.136711][ T7480] [ 163.139062][ T7480] Reported by Kernel Concurrency Sanitizer on: [ 163.145242][ T7480] CPU: 0 UID: 0 PID: 7480 Comm: syz.5.1121 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.156606][ T7480] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 163.160480][ T7480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.170738][ T7480] ================================================================== [ 163.585819][ T4067] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.825021][ T2191] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.918753][ T2191] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.013069][ T2191] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.060887][ T2191] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.128445][ T2191] bridge_slave_1: left allmulticast mode [ 164.134199][ T2191] bridge_slave_1: left promiscuous mode [ 164.140021][ T2191] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.150090][ T2191] bridge_slave_0: left allmulticast mode [ 164.156067][ T2191] bridge_slave_0: left promiscuous mode [ 164.162942][ T2191] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.222505][ T2191] gretap0 (unregistering): left promiscuous mode [ 164.280132][ T2191] bond0 (unregistering): left promiscuous mode [ 164.286825][ T2191] bond_slave_0: left promiscuous mode [ 164.292533][ T2191] bond_slave_1: left promiscuous mode [ 164.301049][ T2191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.311505][ T2191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.321402][ T2191] bond0 (unregistering): Released all slaves [ 164.330947][ T2191] team0: Port device bond1 removed [ 164.338076][ T2191] bond1 (unregistering): Released all slaves [ 164.347452][ T2191] bond2 (unregistering): (slave bond3): Releasing backup interface [ 164.356051][ T2191] bond2 (unregistering): Released all slaves [ 164.365215][ T2191] bond3 (unregistering): Released all slaves [ 164.374459][ T2191] bond4 (unregistering): Released all slaves [ 164.423660][ T2191] tipc: Disabling bearer [ 164.430937][ T2191] tipc: Left network mode [ 164.442999][ T2191] hsr_slave_0: left promiscuous mode [ 164.452602][ T2191] hsr_slave_1: left promiscuous mode [ 164.464573][ T2191] veth1_macvtap: left promiscuous mode [ 164.474792][ T2191] veth0_macvtap: left promiscuous mode [ 164.484588][ T2191] veth1_vlan: left promiscuous mode [ 164.492055][ T2191] veth0_vlan: left promiscuous mode [ 164.594270][ T2191] team0 (unregistering): Port device team_slave_1 removed [ 164.605097][ T2191] team0 (unregistering): Port device team_slave_0 removed [ 164.636781][ T2191] team0 (unregistering): Port device dummy0 removed [ 164.974963][ T2191] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.987177][ T2191] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.043173][ T2191] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.054361][ T2191] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.109212][ T2191] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.121156][ T2191] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.174850][ T2191] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.186823][ T2191] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.270010][ T2191] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.321772][ T2191] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.403660][ T2191] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.462929][ T2191] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.550088][ T2191] bridge_slave_1: left allmulticast mode [ 165.557630][ T2191] bridge_slave_1: left promiscuous mode [ 165.565452][ T2191] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.575597][ T2191] bridge_slave_0: left allmulticast mode [ 165.583373][ T2191] bridge_slave_0: left promiscuous mode [ 165.589303][ T2191] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.603287][ T2191] bridge_slave_1: left promiscuous mode [ 165.611072][ T2191] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.621722][ T2191] bridge_slave_0: left allmulticast mode [ 165.629877][ T2191] bridge_slave_0: left promiscuous mode [ 165.635881][ T2191] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.935743][ T2191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.946825][ T2191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.957210][ T2191] bond0 (unregistering): Released all slaves [ 165.968059][ T2191] bond1 (unregistering): Released all slaves [ 165.994387][ T2191] gretap0 (unregistering): left promiscuous mode [ 166.004130][ T2191] bond1 (unregistering): (slave gretap1): Releasing active interface [ 166.014045][ T2191] gretap1 (unregistering): left allmulticast mode [ 166.105810][ T2191] bond2 (unregistering): (slave bridge1): Releasing active interface [ 166.172980][ T2191] bond0 (unregistering): left promiscuous mode [ 166.179932][ T2191] bond_slave_0: left promiscuous mode [ 166.185714][ T2191] bond_slave_1: left promiscuous mode [ 166.194038][ T2191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.204224][ T2191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.214511][ T2191] bond0 (unregistering): Released all slaves [ 166.222693][ T2191] bond1 (unregistering): Released all slaves [ 166.231868][ T2191] bond2 (unregistering): Released all slaves [ 166.241182][ T2191] bond3 (unregistering): Released all slaves [ 166.304065][ T2191] tipc: Disabling bearer [ 166.309689][ T2191] tipc: Left network mode [ 166.319435][ T2191] hsr_slave_0: left promiscuous mode [ 166.325212][ T2191] hsr_slave_1: left promiscuous mode [ 166.330915][ T2191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.338489][ T2191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.347036][ T2191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.354549][ T2191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.364725][ T2191] hsr_slave_0: left promiscuous mode [ 166.371403][ T2191] hsr_slave_1: left promiscuous mode [ 166.377488][ T2191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.385051][ T2191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.394856][ T2191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.404421][ T2191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.422404][ T2191] veth1_macvtap: left promiscuous mode [ 166.429987][ T2191] veth0_macvtap: left promiscuous mode [ 166.436498][ T2191] veth1_vlan: left promiscuous mode [ 166.442843][ T2191] veth0_vlan: left promiscuous mode [ 166.449496][ T2191] veth1_macvtap: left promiscuous mode [ 166.456316][ T2191] veth0_macvtap: left promiscuous mode [ 166.583613][ T2191] team0 (unregistering): Port device team_slave_1 removed [ 166.593649][ T2191] team0 (unregistering): Port device team_slave_0 removed [ 166.653756][ T2191] team0 (unregistering): Port device team_slave_1 removed [ 166.664712][ T2191] team0 (unregistering): Port device team_slave_0 removed [ 166.702565][ T1029] lo speed is unknown, defaulting to 1000 [ 166.708425][ T1029] infiniband syz2: ib_query_port failed (-19) [ 167.188206][ T2191] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.250571][ T2191] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.307941][ T2191] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.364724][ T2191] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.446085][ T2191] bridge_slave_1: left allmulticast mode [ 167.452373][ T2191] bridge_slave_1: left promiscuous mode [ 167.458111][ T2191] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.466970][ T2191] bridge_slave_0: left allmulticast mode [ 167.472721][ T2191] bridge_slave_0: left promiscuous mode [ 167.478687][ T2191] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.573364][ T2191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.583541][ T2191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.593794][ T2191] bond0 (unregistering): Released all slaves [ 167.633841][ T2191] hsr_slave_0: left promiscuous mode [ 167.639929][ T2191] hsr_slave_1: left promiscuous mode [ 167.645736][ T2191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.653267][ T2191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.661626][ T2191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.669184][ T2191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.680291][ T2191] veth1_macvtap: left promiscuous mode [ 167.686055][ T2191] veth0_macvtap: left promiscuous mode [ 167.691760][ T2191] veth1_vlan: left promiscuous mode [ 167.697324][ T2191] veth0_vlan: left promiscuous mode [ 167.784536][ T2191] team0 (unregistering): Port device team_slave_1 removed [ 167.795218][ T2191] team0 (unregistering): Port device team_slave_0 removed