last executing test programs: 45.118554089s ago: executing program 4 (id=1508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, @perf_config_ext={0x11f}, 0x0, 0x10003, 0x83, 0x1, 0x8, 0x20005, 0xb900, 0x0, 0xffffffff, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, 0x37, 0x9, 0x70bd2c, 0x0, {0x4}, [@typed={0x4}]}, 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) unshare(0x60600) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r5 = dup(r4) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x8000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_disconnect={0x8f7}) ftruncate(0xffffffffffffffff, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) syz_emit_ethernet(0x2a, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c200f1000000fc00000000029078ac1e0001e0000001167c9078ac1414306f9047b19e593b28fe6e099db8a8fc9f02fa66f1d6be39a5cc63dc444b0000e548884826c596a118c4b82676074846dcd109c742043cdc1719048ac9b7014b6db289dddbcb82581c79f5c17f2d67a6a49981bf5859993c75ac3b6100f9d24c2b6f63e8a6d0d21f5e6535425d24c8221fdc6f5b5e7ef63f69dcd75345c2e0d28ae1d477663a48"], 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYBLOB="20052abd7000fbdbdf250500000008000400030000000800030001000000080004000900000005000500080000000800030002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc041) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r8], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x20004800) 44.814013883s ago: executing program 4 (id=1511): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0xe68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x8001, 0x10000000, 0x8}, 0x92, 0x6}, [{0x4, 0xe, 0x8, 0xe42, 0x4, 0xec87}, {0x6, 0x40, 0x6, 0x458, 0x400, 0x7}, {0x40, 0xa6, 0x8, 0x0, 0x7, 0xf63}, {0x1, 0x2, 0xfc78, 0x3, 0x4, 0x7fff}, {0x0, 0x3c98, 0x1, 0x7fffffff, 0x9, 0xc}, {0x3, 0x7, 0x3, 0x0, 0x6, 0x4}, {0x1, 0x2, 0x0, 0x51, 0x6, 0x6}, {0xf, 0xfff, 0x9, 0x99, 0x6b2b}, {0x8c73, 0x3f8000, 0x1, 0x4, 0x7, 0x7}, {0x4, 0x3, 0x1, 0x4, 0x0, 0x400}, {0xec25, 0x60, 0xffffff00, 0xb45d, 0x552, 0x39f}, {0x100000, 0xfffff317, 0x2, 0x5, 0x974f, 0x17}, {0x4, 0x7, 0x100, 0x9, 0xfff, 0xffffffff}, {0xfffffff7, 0x101, 0x400, 0x6, 0x40, 0xb}, {0x0, 0x4, 0x5, 0x3, 0x81, 0x2}, {0xb2, 0x4c81440c, 0x8, 0x800, 0x2, 0xd66}, {0x4, 0x2bb, 0x80, 0xa, 0xfffffffa, 0x5}, {0xfffffffe, 0x5b92, 0x7, 0x4, 0x88f5, 0x9}, {0x6, 0xc, 0x200, 0x4, 0xfffffff1, 0x26}, {0x9, 0x56, 0x1, 0xd, 0x5, 0x1}, {0x5, 0x3, 0xc, 0xfffffff7, 0x2}, {0xfffffff7, 0xf9f5, 0x8, 0xfff, 0xe1, 0x2d5e}, {0x6, 0x10001, 0x2, 0xcb, 0x5, 0x4}, {0xe, 0x101, 0x80, 0xd, 0xfffffffc, 0x9}, {0x0, 0xb, 0xfffffff4, 0x9, 0xfff, 0x81}, {0x6, 0x4, 0x9, 0x38f5, 0xe, 0xb4}, {0x2, 0x6, 0x9, 0x3, 0xe5, 0x3800}, {0x9, 0x4, 0x1, 0x101, 0x49a, 0x40}, {0x100, 0xffffffff, 0x80000001, 0x3, 0x12ab, 0xbc}, {0xa4a9, 0x3, 0x9, 0x7, 0x9, 0xb}, {0x7fffffff, 0x4, 0x5, 0x3, 0x7fff, 0xc}, {0x5, 0x617, 0x75, 0xffff8001, 0x9, 0x6}, {0xb0, 0x4, 0xffffffff, 0x6d, 0x81, 0xfffffffa}, {0x100, 0x6, 0xffffffff, 0x0, 0x4, 0x9}, {0x6, 0x9, 0x9, 0x1, 0xffff, 0x2}, {0x800, 0x4, 0xfffffffe, 0x10001, 0x7fffffff, 0x100}, {0xb, 0x2, 0x4, 0xfffffff8, 0x6, 0xfffffff9}, {0x1, 0x9, 0x5, 0x6, 0x84, 0x7}, {0xa, 0x0, 0x909d, 0x1, 0x9}, {0xbe0, 0x3, 0x5, 0x2, 0x3, 0x80000001}, {0x6, 0x0, 0x8001, 0xce8, 0xc7f, 0x10001}, {0xcf4, 0xaad, 0x8, 0x6, 0x1, 0x3}, {0x6, 0x5, 0x5, 0x7, 0x7247, 0x2}, {0x80000000, 0xfe9, 0x32b2, 0x7, 0x5, 0x7ff}, {0x40, 0x9, 0x68, 0x0, 0x2, 0x98a}, {0x7, 0x0, 0x5b02, 0x6, 0x8001, 0x2}, {0x6, 0x4, 0x1ff, 0xd, 0x8, 0xfff}, {0x2, 0x9, 0x800, 0x0, 0xfffffff8, 0x3a}, {0x4, 0x9, 0x9, 0xfff, 0x3, 0xd4f}, {0xb44, 0x8, 0x9, 0x7f, 0x3, 0x3}, {0xc1, 0x6, 0x2, 0x6, 0x1, 0x5}, {0x40, 0x6be, 0x4d1, 0x5, 0x2, 0x7}, {0x1ff, 0xb25, 0x80000001, 0x1, 0xf}, {0x4, 0x6, 0x1, 0x32}, {0xe6e1, 0x5, 0xfffffff9, 0x2, 0x60, 0x1a0}, {0x401, 0x0, 0x8000, 0xffff65ca, 0xffffffc0, 0xf9}, {0xf, 0x2, 0x9, 0xa, 0x3, 0xffffffff}, {0x4, 0x3, 0x9, 0x6, 0x4, 0x7ff}, {0x7ff, 0xfffffffc, 0x15e5a53f, 0x67b, 0x1, 0x4}, {0x4, 0x7, 0x5, 0x10001, 0x8, 0x6}, {0x8f2, 0xfff, 0x6, 0x2, 0xc5, 0xfffffff8}, {0x8000, 0xc1, 0x8, 0x7fff, 0x7fff, 0x400}, {0x2900416, 0x10000, 0xe, 0x9, 0x1000, 0x9}, {0x10, 0xfffffff8, 0x0, 0x4, 0xe, 0x9}, {0x8, 0x8, 0x8000, 0x0, 0xd01, 0x3}, {0x800, 0x3, 0x0, 0x0, 0x4, 0xf87b}, {0x1, 0x1ff, 0x3, 0x3, 0x9, 0x3ff}, {0x7, 0xfffffff6, 0x0, 0xde, 0x3, 0x7}, {0x8, 0xaf00, 0x1, 0x1, 0x8, 0x1}, {0x4, 0x2, 0x9, 0xfd, 0x0, 0x7}, {0x0, 0x6, 0x8, 0xc, 0xf15f10b, 0x6}, {0x4d, 0x6, 0x8, 0x7, 0xe582, 0x6}, {0x4, 0x0, 0x40, 0x8, 0x0, 0xffff8000}, {0x9, 0x4, 0x6, 0x6, 0xa, 0x8}, {0x3, 0x401, 0x6, 0xe, 0x1ff000, 0x1}, {0xfffffb2a, 0x8, 0x0, 0xffff, 0x2, 0xffffff00}, {0x400, 0x6, 0x3, 0x9a, 0x1, 0x2000}, {0x5, 0x2, 0x81, 0xf, 0x5, 0x8}, {0x1, 0x4241, 0xfffffff8, 0x9, 0x400, 0xebed}, {0x5, 0x1ed, 0x2, 0x8, 0x707, 0xfc1a}, {0x1d, 0x33, 0xfffffff8, 0x2, 0x6, 0x9}, {0x9b, 0x6, 0x3a438d3b, 0x8000, 0x4}, {0x9, 0x81, 0x7fff, 0x800, 0x9}, {0x10, 0x4, 0x1, 0x622e, 0xd8, 0x9}, {0x33, 0x7, 0x9, 0x6, 0x1e, 0xd}, {0xd2, 0x7, 0x6, 0x2, 0x7, 0x1000}, {0x3, 0x0, 0x7, 0xab7, 0x5, 0x5}, {0xb, 0x7, 0xc, 0x1, 0x6, 0x80000000}, {0x3, 0x1, 0x2, 0x8, 0x2c, 0x10}, {0x50a49641, 0x2, 0x4, 0xef1, 0x8, 0x9a90}, {0x5e300141, 0x0, 0x7, 0x93, 0xa, 0x6e}, {0x36, 0x5, 0x6de, 0x80000001, 0x4}, {0x8, 0x2, 0x5, 0x4, 0x0, 0x57d}, {0x3, 0x6, 0x7fc, 0x6, 0x7, 0x8}, {0x5000, 0x7, 0x0, 0x4, 0x6, 0x4}, {0x4, 0x7fffffff, 0x7fff, 0xfffffffe, 0x100000, 0x5}, {0x7d, 0x343, 0x6, 0x1, 0xa19a, 0x5}, {0x1, 0x4, 0x9e2, 0xd, 0x1, 0x8}, {0x1a4, 0x2, 0xffff, 0xa, 0x0, 0x1}, {0x800, 0x81, 0x6, 0x3, 0xfffffff9, 0x8001}, {0x8000, 0x3, 0x0, 0x1, 0x2, 0x8}, {0x101, 0x4, 0x7f, 0x3b24, 0xc16, 0x1ff}, {0x80, 0x8, 0x3, 0x2, 0x34c, 0x2}, {0x9, 0x6, 0x2, 0x88, 0x4, 0x3ff}, {0x6, 0x4, 0xf, 0x5, 0xfffff157, 0x7}, {0x400000, 0xbefa, 0x9, 0x6, 0x4, 0xffffffff}, {0x2fd, 0x4, 0x8, 0x3, 0x6, 0x1}, {0xa1, 0x1, 0xd, 0x7, 0x4, 0xe1}, {0x6, 0x101, 0x7, 0x3, 0x0, 0x3}, {0x3, 0x6, 0x7, 0x9}, {0x2, 0xc, 0x23c, 0x8, 0x12, 0x80}, {0x0, 0x292, 0x2, 0x8, 0xffff, 0x2}, {0x9, 0x0, 0x3, 0x4, 0x40, 0xffffffff}, {0x80000000, 0x6f95, 0x23, 0xf9, 0x8, 0x7fff}, {0x5, 0x19de554e, 0xfffff4b2, 0xb97, 0x1, 0x7}, {0x9, 0x0, 0x521, 0x5, 0x3}, {0xffff, 0x4, 0xfb1, 0x3, 0x0, 0xfffffff8}, {0x6, 0x19c1, 0x7ff, 0xa, 0xda8b, 0x9b}, {0x3, 0x8, 0x7fff, 0x6, 0x7, 0x8}, {0x80, 0x5, 0x48, 0xce6, 0x3, 0x4}, {0x9, 0x3ae2, 0x1, 0x7, 0x7, 0xfff}, {0xb5, 0x7f, 0xffffacad, 0x0, 0x4}, {0x3, 0x0, 0x7455, 0xe, 0x8000, 0x4}, {0x8, 0x8, 0x10, 0x0, 0x0, 0x3}, {0x2, 0x8, 0x0, 0x5, 0x1ff, 0x6}, {0xd, 0x4, 0x73f57df3, 0x8, 0xffffff61, 0x8}, {0x7, 0x8, 0x5, 0x5, 0xb, 0x40}, {0x6f, 0x0, 0xffff, 0x81, 0xc, 0x10000}], [{0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {}, {}, {}, {0x5}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x5}, {}, {0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x5}, {0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @empty}], 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x15, 0x5, 0x0) lchown(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) pipe2(&(0x7f0000000f80)={0xffffffffffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r6, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r6, 0x625, 0x4c1, 0xc1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trus'], 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, 0x140b, 0x4, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x8c00) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt(r2, 0x200000000114, 0x271b, &(0x7f0000032580)=""/102376, &(0x7f0000000100)=0x18fe8) 44.202635052s ago: executing program 4 (id=1515): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000001100080002400000e6"], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x4000040) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x2f08, 0xe, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f52", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 44.045163393s ago: executing program 4 (id=1516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RAUTH(r1, &(0x7f0000000180)={0x14, 0x67, 0x2, {0x8, 0x0, 0x8}}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x6, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x7, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0x6}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x8, 0x1, 0x8, 0x1, 0xc, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xd, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002fffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3ff}, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0x12, &(0x7f00000008c0)=r13, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 43.843746246s ago: executing program 4 (id=1520): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$kcm(0x10, 0x2, 0x0) (async) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x800ce90, 0x10, 0x3, 0x40004333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r7 = epoll_create1(0x80000) (async) r8 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0xc000000b}) (async) r9 = signalfd4(r8, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) (async) r10 = gettid() process_vm_writev(r10, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async, rerun: 32) sched_getscheduler(r10) (rerun: 32) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x2, @private2, 0x401, 0x4}, 0x0, 0x0, 0x1}) (async) setitimer(0x2, &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) (async) getitimer(0x2, &(0x7f0000000000)) (async) io_uring_enter(r4, 0x5e82, 0x0, 0x10, 0x0, 0x0) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r11, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r12 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 32) ioctl$TCSETSW2(r12, 0x402c542c, &(0x7f00000000c0)={0x9, 0x0, 0x100d0, 0x4002, 0x5, "0c411be01fbcd2b7cb366b0200", 0x1004, 0xffffffff}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x3, 0xfffffffc, 0x2, 0x401, r9, 0x899, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) 43.650211821s ago: executing program 4 (id=1526): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1130, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x2, 0x3}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f00000000c0)) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) getpid() openat$cgroup_ro(r4, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) 43.650110041s ago: executing program 32 (id=1526): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1130, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x2, 0x3}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f00000000c0)) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) getpid() openat$cgroup_ro(r4, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) 8.257440184s ago: executing program 2 (id=1741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60843, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYRES16=r0], 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0xa, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x41cbded20664b7ab) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000017"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) rt_sigqueueinfo(r9, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0257000000440000000600000005004000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x14, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x9, r1, 0x0, 0x0, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x40, r7, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) io_setup(0x4, &(0x7f0000000000)=0x0) io_getevents(r11, 0x30000000, 0x3, &(0x7f0000000180)=[{}, {}, {}], &(0x7f0000000040)={0x77359400}) 7.037235832s ago: executing program 2 (id=1745): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=0xffffffffffffffff, 0x35, 0x1, 0x10, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0xa4}, @exit, @call={0x85, 0x0, 0x0, 0x93}]}, &(0x7f0000000200)='GPL\x00', 0x2b21, 0x2c, &(0x7f0000000240)=""/44, 0x41000, 0x5, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x6, 0x86, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xf}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x17, 0x10, 0x0, @void, @value=r2, @void, @void, r1}, 0x20) sendmsg$can_raw(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=@canfd={{0x3}, 0xe, 0x0, 0x0, 0x0, "5a3c5c2d57a7266ea1d129c2871de0f8d36b64c6f74f95b4628568eae844a82a1ccd17fbe07f26b92d70fcca25a27216b460d40bc66e8123c6ee7b75334752dc"}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) syz_io_uring_setup(0x22b5, &(0x7f0000000500)={0x0, 0x803c, 0x800, 0x3, 0x24d, 0x0, r0}, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x100, &(0x7f0000000600)=0xfff, 0x0, 0x4) r5 = syz_open_dev$evdev(&(0x7f0000000640), 0x1, 0x4c00) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {0xb}}, './file0\x00'}) fallocate(r0, 0xc, 0x2, 0x704) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000700)={0x6, 'netdevsim0\x00', {}, 0x8}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000880)=@IORING_OP_STATX={0x15, 0x20, 0x0, 0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000840)='./file0\x00', 0x588, 0x1000, 0x1, {0x0, r8}}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x402100, 0x0) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000900)={'gretap0\x00', 0x400}) newfstatat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setresuid(r9, r11, r9) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a40), r0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r12, 0x10, 0x70bd2d, 0x40, {}, [@GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x8810) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x50, r13, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008004}, 0x40) r14 = socket$can_bcm(0x1d, 0x2, 0x2) syncfs(r14) sendmsg$nl_route(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)=@newnexthop={0x5c, 0x68, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x4, 0x0, 0x5}, [@NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x2}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}]}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x3e}}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e00)=[r14, r5, r5, r2, r10, r0, r14, r5, r14, r0], 0xa) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000e40)={'icmp\x00'}, &(0x7f0000000e80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000ec0)={0x3, 'ip6_vti0\x00', 0x1}, 0x18) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f40), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r15, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x40, r16, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x440d0) 6.770544013s ago: executing program 2 (id=1747): syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0x1, 0x2e3, &(0x7f0000000d40)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socket(0xa, 0x5, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30006041) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 6.358324578s ago: executing program 2 (id=1750): getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0x5, 0x9, 0x2, 0x80000001}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) getresgid(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000240), 0x9}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r3, @ANYBLOB="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"], 0x25, 0x36f, &(0x7f0000000900)="$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") bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r8 = socket(0x40000000015, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000007000001140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 3.750149003s ago: executing program 0 (id=1760): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 3.628217861s ago: executing program 0 (id=1762): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x10, @private0, 0x8}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000002c0)={r2, 0x18f, 0xb0, 0x9, 0x8, 0x7, 0x61d, 0xfffffffc, {r1, @in={{0x2, 0x4e23, @multicast2}}, 0x1, 0x87c, 0x3, 0xfffff322, 0x8001}}, &(0x7f0000000040)=0xb0) rename(&(0x7f0000000580)='./file0\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.147045473s ago: executing program 5 (id=1767): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x4bc, &(0x7f0000000a40)="$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") socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.886123726s ago: executing program 5 (id=1768): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x20, 0x82, 0x0, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x8, 0x1, 0x6, 0x0, 0x0, 0x81, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x500, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x2b000000, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x20, 0x112, 0x40, 0xd89, 0x398, 0x10001, 0x7, 0x8, 0x40}, {0x92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r5 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x9820}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r0, 0x0, 0x5e, 0x12, &(0x7f00000001c0)="fa84eebc2903ea627da46c1b3da39ba134fc4d12264e7ad7d24b7616cc3c4676ff700bf6306672ef6d5d37af4f8b08836def26db528fa2f96be13a16d7267efe146e6765306b8a75edfbf8b23cdc757a45a5fff16ea6695b3a457cd30cce", &(0x7f0000000100)=""/18, 0x4706, 0x0, 0xfc0, 0xf8, &(0x7f0000001340)="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", &(0x7f0000000980)="1d761c13109f3483595c1de1e54afe1b774f2e6055fc16e6accd8f50019e7fe6098ccb7ef8884f32d2893187aef492aa54baeb653caf3b3dec4c10b049a2bfd51c5de933f3ea62d6787d9d76e9bf6c88a96b6e41ec98b58582b85cc1f39f011f107e0d399459b0aeaae7eba3562e2ffdcd13ef839a8c51544ec29002337ce199258951245a035aca587d00d2b359a03cac14763302e369d1b488b69390c1fa71d7498ec1f423fdfc2bd8797cba6137b1b786a2baa4adf41514d68fcab9813cc505860de8baf424dd942a1190722574bd593defeea4726146c57eb82a0120ae2f92cda70fbd6dbed5bbdc516535eca439389423739ac91408", 0x6, 0x0, 0x7}, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) 2.758138442s ago: executing program 0 (id=1769): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 2.554392085s ago: executing program 0 (id=1770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x3}}, 0x0, 0x0, 0x3, 0x0, "83e71587daa3f872a1ccdcf0af104621925ec0a9799b6f0ead574376cd25d003c0ba80f61d351c3ed158bb3b276c90a886cb046c8da7ece90069bdf19f44b3f8e4c1fe83c3cc384e0cc81b05c5ea68ba"}, 0xd8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}}, 0x40040) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x164, r7, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x88, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x34}}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x164}, 0x1, 0x0, 0x0, 0x40840}, 0x40000) 2.212523623s ago: executing program 0 (id=1772): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xdc560000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x10000000000000, 0x7fff, 0x9b}) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r5, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x41, 0x2c8, &(0x7f0000000580)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x4, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000f5ff00000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pwritev2(r4, &(0x7f0000000940), 0x0, 0x7fff, 0xc92, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000001c0)=0xe) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x23, 0x82, 0x0, 0x10042, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x9302, 0x0, 0x3, 0x0, 0x80000000b4c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000006}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 2.199683771s ago: executing program 1 (id=1773): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 2.08694755s ago: executing program 1 (id=1775): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value=0x18}, 0x48) 1.846469756s ago: executing program 5 (id=1777): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @empty, 0x15, 0x3, 'sh\x00', 0x21, 0x5, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xc, 0x2}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.826572012s ago: executing program 3 (id=1778): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$inet(0x2, 0x1, 0x0) pipe2(0x0, 0x800) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.803076158s ago: executing program 5 (id=1779): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x4bc, &(0x7f0000000a40)="$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") socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.795366437s ago: executing program 1 (id=1780): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB, @ANYBLOB="17"], 0x24}}, 0x20008030) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket(0x11, 0x800000003, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500006eb14f7c63af8c1000000000000050000070900010073797a3000000000300002002c000180140003002001000000000000000000000000000214000400200100"/80], 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000080) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x3, r3, 0x1, 0x7f}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x1ff}) r6 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.328678932s ago: executing program 5 (id=1781): r0 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$getown(r0, 0x9) unshare(0x62000000) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) read(r2, &(0x7f0000000140)=""/166, 0xa6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000200)="a300feb875eff556d7d385b7c4956d8c17658381ff87d1a6f3daac65b147360a13b902bd47b57419dcf83d99f01d5ca6dc8ac11bae5e35afcf59b7266c8cd691f8f4d3f25166b66aff17cb5446aa37b279448d6f85f06fd31158842ffb67470aecd77ad382d552452fe9b4846f5738b35bbcce7e0f642106d02a642e0aa75a639ce4f54cc52cb3953a5dc8a490dbf857998b1f06bd61916fa54a10dea6ae8ddb09", 0xa1) bpf$MAP_CREATE(0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1}], 0x1, 0x101) close_range(r3, 0xffffffffffffffff, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) socket$nl_route(0x10, 0x3, 0x0) 1.274535702s ago: executing program 1 (id=1782): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffe, @perf_config_ext={0x9}, 0x100100, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 766.302819ms ago: executing program 3 (id=1783): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB="240000001800010000000000", @ANYRES32=r1, @ANYBLOB, @ANYBLOB="17"], 0x24}}, 0x20008030) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket(0x11, 0x800000003, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500006eb14f7c63af8c1000000000000050000070900010073797a3000000000300002002c000180140003002001000000000000000000000000000214000400200100"/80], 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000080) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x3, r3, 0x1, 0x7f}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x1ff}) r6 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 410.470315ms ago: executing program 3 (id=1784): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x30, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @mcast1, @local}}}}}}}, 0x0) 410.022064ms ago: executing program 1 (id=1785): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) process_mrelease(r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x33c, 0x2b, 0x604, 0x70bd2c, 0x25dfdbfb, {0x15}, [@nested={0x18c, 0x130, 0x0, 0x1, [@generic="163998a7a27e02d756595bae1b0bcaa8e5e222d04d6981a6b2797e6745af8a922379baf4e0350223d22bac711d4640401bd7643fa8b14d6f81bd1b9bdaef83dfc0faada608c91225802db2ac111e6c59924420ed9418", @typed={0x4, 0x81}, @typed={0x8, 0x104, 0x0, 0x0, @u32=0x5}, @generic="b984a8ffa1287a59e99fcfc391266e2f29c9192e06cf2c63d02c4fe71fc07cbf885d28dcc256ffa5f258", @nested={0x4, 0x111}, @generic="9403620c715aeb0451c9010695108523e5030ce2eaa5e9efd1291bf4fac3d57ac58131604e636ba6", @generic="b566289141c0561b92352babcd017f2f911c6b2d5d5c06ce28129d6426917db099ed9bfa556a0f34f87c0018c3d5ff2550913a216e5c2a14e557262d2057574ffcd7f8388664bdc8421209e624c5d67e6a375069d9378d0c6856742f1aececb72c6c5602e648c59042123e85cb744ca3237934c04d239e6a54a78362e7096add4f27eb8a8796af69909acbadddc244ed7faa73a800d6ed7b174ed2328c359cbfc17baafac2625fc4e610c59c72b9187c1c9acb936dc89f5a3b064451b74510204cf9a48adbd1ab4648b26659", @nested={0x4, 0x60}]}, @nested={0x16b, 0x1a, 0x0, 0x1, [@nested={0x4, 0x9d}, @typed={0x8, 0x16, 0x0, 0x0, @u32=0x6}, @generic="b0beb9cd730ee7c785a98e319bda6a4cba9e4070709accbf92f98d878685de6fc4fb57dabc764b9b72f2f53ce13392ff738386e43860e2051c2bc16368ddbb8d519cfb00415937399a282b266a9131ea4bc040123d8d5e9bb21bd83a6bf1cddf970b2b7cfa6d0a04d3ab7ad8bc388f767d336639a6992887d1a2559d5a1ea93eaf520d077ab5a4ec4e25e1eae0c136abd60695523e944cb26a19165f69f666fe11b8578b6911f4d143b2688e596eea6dedc74003a27a9c4a4f6e4ebf2999393735a682", @typed={0x52, 0x105, 0x0, 0x0, @binary="ffa6b6a9482b3d8b68a0fb72ea4c291eac77da26a3a6e9844e44badca0492138466221adcb9b56949d2e371ef4e275cb8293f95b4d477bdd8933f8efbf9598655c92dd218af9c3f507870169178f"}, @generic="33c9004e1bf557e3b42eae9a1bf4ec905a3cc9e8a5867644be3ee8c9a28497688af01b4a88ef0cfceb7e5dd77e62cc627c32a2a79aa541d80bf21ff85a7c8c80962dd0c3"]}, @typed={0x14, 0x57, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x3b, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x14, 0x128, 0x0, 0x1, [@nested={0x4, 0xfb}, @typed={0x8, 0xdb, 0x0, 0x0, @u32=0x80}, @nested={0x4, 0x11d}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x4004002}, 0x81) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r3, r2, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040)=0x81, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000100)="cbf1454e45719c3680c090d6e1f683e075830ca447761b627f39c34573f822c2a16116142624cc7ea30884c23d0dc347bd5c713d97b4bb7147994f5a7a02df63e9f1de84c616ec2a9f1aabdcae0d3aceb6fbe452ae8cb5663745228beafa9e975476ae2faf44b12c5ccee1ba8406afdea7902a7d606f7d725f5590", 0x7b) 361.629036ms ago: executing program 3 (id=1786): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @empty, 0x15, 0x3, 'sh\x00', 0x21, 0x5, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xc, 0x2}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 277.717581ms ago: executing program 2 (id=1787): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000005000000000000000000000000000000f9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) preadv(r2, &(0x7f0000003840)=[{0x0}], 0x1, 0x6, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000002e40)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec00c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r9 = getpgrp(0x0) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1, r9}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r10, 0x0, 0x0}, 0x10) dup2(r0, r6) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYBLOB="02"], 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00'}, 0x94) 246.365755ms ago: executing program 5 (id=1788): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfefffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000200)="800034ca00000000", 0x8, 0x2004c080, &(0x7f0000000180)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1a) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x9, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000810000b0bfa30000000000000703000000feffff720a00fef8ffffff71a400fe000000007110100000000000e5000600000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0xc00000000000000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x100, 0x1, &(0x7f0000000800)=[{0x0, 0x0, 0x5, 0x869b}], 0x1) 204.415227ms ago: executing program 3 (id=1789): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x9, &(0x7f0000000180), 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) (async, rerun: 32) ioprio_set$uid(0x3, 0x0, 0x0) (async, rerun: 32) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001100)=""/4096, 0x1000}], 0x1, 0x5, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 64) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c805401"], 0x184}}, 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) (async) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x50) r8 = socket$kcm(0x2, 0x1, 0x84) r9 = fcntl$dupfd(r8, 0x406, r8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendto$packet(r9, 0x0, 0x0, 0x88c1, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 151.809247ms ago: executing program 0 (id=1790): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) tee(0xffffffffffffffff, r4, 0x8f5, 0x100000000000000) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, 0x0) write(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0xf5, r5, 0x1, 0x0, 0x6, @local}, 0xffffffffffffffe2) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f00011405a4002f0600ac141414e0000001808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) 85.264065ms ago: executing program 1 (id=1791): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x4bc, &(0x7f0000000a40)="$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") socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 945.89µs ago: executing program 3 (id=1792): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=1793): syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$eJzs3c9LFG0AB/DHVfHFF8XTy1uXHurUZVDPHZRQkBaKcoMKghHHWnbalZ097EoHO3cJOvYfRMduQfQP+F90k0A8ecqw8dcKXdI08PO5zJf5zjM8zww8c5zNW29eNFaKZCXthMrMQKjMhFDZGQgToRIOrIebb1+9e/3g0eM7s9Xq3P0Y52cXp6ZjjOPXPj95+eH6l86/Dz+OfxoJGxNPN7emv278t3Fl8/vi83oR60VstjoxjUutViddyrO4XC8aSYz38iwtslhvFlm7r1/JW6urvZg2l8dGV9tZUcS02YuNrBc7rdhp92L6LK03Y5IkcWw0cBq19zu7u2Frt3TRs+H8ef+X27FN/Z8Qtte7tW6tPJb9/EJ1bjL+NHw0arvbrQ0e9lNlH/v74TC630+f7A8+LTfKfq+7fbd6YvxIWP7DawcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODySuKhiaOz291ubbDsk1/1ZZpfqM5N7l/Q3w+Fq0PntgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJWit9ZI8zxrC78f9h7kXzANQTi7cNE7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJy//p/YAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFkVvbVGmudZ+6zCt//LGx+rLnqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBaPwIAAP//P3honA==") truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r4 = open(&(0x7f0000000000)='./file0\x00', 0x4142, 0x137) sendfile(r4, r4, 0x0, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, 0x0}, 0x20) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r5 = socket(0x6, 0x3, 0xfff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe0000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xed}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) write(r8, &(0x7f0000000080)="240000001e005f0214fffffffffffff80700000001000000000000000500f3ff01000000", 0x24) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r6, {0x0, 0x6}, {0xffe0, 0x6}, {0x1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) kernel console output (not intermixed with test programs): 180.861864][ T28] kauditd_printk_skb: 501 callbacks suppressed [ 180.861880][ T28] audit: type=1400 audit(1772912951.671:12598): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.948039][ T28] audit: type=1400 audit(1772912951.671:12599): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.978206][ T7797] loop3: detected capacity change from 0 to 512 [ 180.986693][ T28] audit: type=1400 audit(1772912951.671:12600): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.014048][ T28] audit: type=1400 audit(1772912951.701:12601): avc: denied { prog_load } for pid=7788 comm="syz.2.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 181.066728][ T28] audit: type=1400 audit(1772912951.701:12602): avc: denied { bpf } for pid=7788 comm="syz.2.1211" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 181.139668][ T7793] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.142903][ T7805] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.154894][ T7797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.167965][ T28] audit: type=1400 audit(1772912951.701:12603): avc: denied { prog_load } for pid=7788 comm="syz.2.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 181.190374][ T7808] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.196995][ T7808] audit: audit_lost=244 audit_rate_limit=0 audit_backlog_limit=64 [ 181.212838][ T7797] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.414940][ T7812] xt_TCPMSS: Only works on TCP SYN packets [ 181.534383][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.564468][ T7809] loop4: detected capacity change from 0 to 8192 [ 181.609010][ T7809] vfat: Unknown parameter '18446744073709551615' [ 182.302228][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1225'. [ 182.559688][ T7836] loop1: detected capacity change from 0 to 512 [ 182.580788][ T7836] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 182.589074][ T7836] EXT4-fs (loop1): orphan cleanup on readonly fs [ 182.598884][ T7836] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 182.622066][ T7836] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 182.929506][ T7836] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.1227: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 182.947594][ T7836] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 182.948019][ T7836] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1227: couldn't read orphan inode 13 (err -117) [ 182.958215][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 182.958378][ C1] EXT4-fs (loop1): last error at time 1772912953: ext4_ext_check_inode:521: inode 13 [ 182.986531][ T7836] loop1: lost filesystem error report for type 5 error -117 [ 182.987464][ T7836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.012675][ T7836] EXT4-fs error (device loop1): ext4_lookup:1785: comm syz.1.1227: inode #15: comm syz.1.1227: iget: illegal inode # [ 184.155189][ T3572] usb 1-1: enqueue for inactive port 0 [ 184.162947][ T3572] usb 1-1: enqueue for inactive port 0 [ 184.240401][ T3572] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 184.531648][ T7849] loop2: detected capacity change from 0 to 8192 [ 184.604305][ T7849] vfat: Unknown parameter '18446744073709551615' [ 184.641289][ T7858] loop4: detected capacity change from 0 to 128 [ 184.686098][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.715115][ T7858] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.787789][ T7858] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.901858][ T7857] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.1234: No space for directory leaf checksum. Please run e2fsck -D. [ 184.970555][ T7857] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz.4.1234: Directory block failed checksum [ 185.120880][ T5501] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.510220][ T7878] veth5: entered promiscuous mode [ 185.518252][ T7878] veth5: entered allmulticast mode [ 185.903620][ T28] kauditd_printk_skb: 555 callbacks suppressed [ 185.903668][ T28] audit: type=1400 audit(1772912956.711:13151): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 185.938604][ T7892] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1245'. [ 186.000767][ T28] audit: type=1400 audit(1772912956.711:13152): avc: denied { open } for pid=3317 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.036950][ T28] audit: type=1400 audit(1772912956.711:13153): avc: denied { ioctl } for pid=3317 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.196181][ T7915] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.197679][ T28] audit: type=1400 audit(1772912956.721:13154): avc: denied { override_creds } for pid=7888 comm="syz.0.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 186.228716][ T7915] audit: audit_lost=248 audit_rate_limit=0 audit_backlog_limit=64 [ 186.232961][ T3317] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.263143][ T7915] audit: backlog limit exceeded [ 186.268924][ T7915] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.278008][ T3317] audit: audit_lost=249 audit_rate_limit=0 audit_backlog_limit=64 [ 186.373708][ T7922] loop0: detected capacity change from 0 to 128 [ 186.406920][ T7917] loop1: detected capacity change from 0 to 8192 [ 186.441490][ T7922] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.441997][ T7917] vfat: Unknown parameter '18446744073709551615' [ 186.530726][ T7922] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.594089][ T7936] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1257'. [ 187.553852][ T7987] loop4: detected capacity change from 0 to 512 [ 187.571814][ T7987] EXT4-fs: Ignoring removed oldalloc option [ 187.578968][ T7987] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 187.617053][ T7987] EXT4-fs (loop4): 1 truncate cleaned up [ 187.658181][ T7991] FAULT_INJECTION: forcing a failure. [ 187.658181][ T7991] name failslab, interval 1, probability 0, space 0, times 0 [ 187.674509][ T7987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.694690][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.726933][ T7991] CPU: 0 UID: 0 PID: 7991 Comm: syz.3.1267 Tainted: G W syzkaller #0 PREEMPT(full) [ 187.726970][ T7991] Tainted: [W]=WARN [ 187.726978][ T7991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.727011][ T7991] Call Trace: [ 187.727036][ T7991] [ 187.727045][ T7991] __dump_stack+0x1d/0x30 [ 187.727072][ T7991] dump_stack_lvl+0x95/0xd0 [ 187.727093][ T7991] dump_stack+0x15/0x1b [ 187.727115][ T7991] should_fail_ex+0x263/0x280 [ 187.727137][ T7991] should_failslab+0x8c/0xb0 [ 187.727209][ T7991] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 187.727274][ T7991] ? __d_alloc+0x37/0x340 [ 187.727299][ T7991] __d_alloc+0x37/0x340 [ 187.727356][ T7991] d_alloc_pseudo+0x1e/0x80 [ 187.727383][ T7991] alloc_file_pseudo+0x91/0x190 [ 187.727407][ T7991] ? security_inode_alloc+0x69/0x100 [ 187.727438][ T7991] sock_alloc_file+0x9c/0x1e0 [ 187.727471][ T7991] do_accept+0x1e3/0x390 [ 187.727499][ T7991] __sys_accept4+0xbe/0x170 [ 187.727599][ T7991] __x64_sys_accept4+0x51/0x60 [ 187.727679][ T7991] x64_sys_call+0x48d/0x3020 [ 187.727707][ T7991] do_syscall_64+0x12c/0x370 [ 187.727733][ T7991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.727758][ T7991] RIP: 0033:0x7f07d852c799 [ 187.727812][ T7991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.727829][ T7991] RSP: 002b:00007f07d6f87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 187.727850][ T7991] RAX: ffffffffffffffda RBX: 00007f07d87a5fa0 RCX: 00007f07d852c799 [ 187.727866][ T7991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 187.727881][ T7991] RBP: 00007f07d6f87090 R08: 0000000000000000 R09: 0000000000000000 [ 187.727895][ T7991] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 187.727944][ T7991] R13: 00007f07d87a6038 R14: 00007f07d87a5fa0 R15: 00007ffd3f6ca3b8 [ 187.727965][ T7991] [ 188.073323][ T8002] loop0: detected capacity change from 0 to 128 [ 188.085076][ T8001] loop1: detected capacity change from 0 to 512 [ 188.188729][ T5501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.265144][ T8001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.392116][ T8001] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.480685][ T8016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1274'. [ 188.531281][ T8016] xt_recent: Unsupported userspace flags (000000b1) [ 189.678910][ T8078] loop4: detected capacity change from 0 to 512 [ 189.686626][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.702458][ T8078] EXT4-fs: Ignoring removed oldalloc option [ 189.732641][ T8078] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 189.787421][ T8084] futex_wake_op: syz.3.1286 tries to shift op by 32; fix this program [ 189.812528][ T8078] EXT4-fs (loop4): 1 truncate cleaned up [ 189.818799][ T8078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.860154][ T8084] loop3: detected capacity change from 0 to 512 [ 189.961512][ T8084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.988862][ T8084] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.028572][ T5501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.194158][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1289'. [ 190.355280][ T8105] loop2: detected capacity change from 0 to 512 [ 190.447657][ T8105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.467422][ T8105] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.989765][ T28] kauditd_printk_skb: 658 callbacks suppressed [ 190.989792][ T28] audit: type=1400 audit(1772912961.791:13810): avc: denied { prog_load } for pid=8104 comm="syz.1.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 191.038817][ T28] audit: type=1400 audit(1772912961.831:13811): avc: denied { bpf } for pid=8104 comm="syz.1.1292" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 191.063345][ T28] audit: type=1400 audit(1772912961.831:13812): avc: denied { prog_load } for pid=8104 comm="syz.1.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 191.085369][ T28] audit: type=1400 audit(1772912961.831:13813): avc: denied { bpf } for pid=8104 comm="syz.1.1292" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 191.108525][ T28] audit: type=1400 audit(1772912961.831:13814): avc: denied { perfmon } for pid=8104 comm="syz.1.1292" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 191.168159][ T28] audit: type=1400 audit(1772912961.831:13815): avc: denied { prog_run } for pid=8104 comm="syz.1.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 191.190564][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.206734][ T28] audit: type=1400 audit(1772912962.011:13816): avc: denied { perfmon } for pid=8119 comm="syz.4.1294" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 191.232078][ T28] audit: type=1400 audit(1772912962.011:13817): avc: denied { tracepoint } for pid=8119 comm="syz.4.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 191.299703][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.319126][ T28] audit: type=1400 audit(1772912962.071:13818): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.355129][ T28] audit: type=1400 audit(1772912962.071:13819): avc: denied { open } for pid=3309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.428446][ T8125] loop1: detected capacity change from 0 to 512 [ 191.475736][ T8125] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1295: inode has both inline data and extents flags [ 191.574499][ T8125] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.577392][ T8125] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1295: couldn't read orphan inode 15 (err -117) [ 191.586598][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 191.586616][ C0] EXT4-fs (loop1): initial error at time 1772912962: ext4_orphan_get:1391: inode 15 [ 191.586667][ C0] EXT4-fs (loop1): last error at time 1772912962: ext4_orphan_get:1391: inode 15 [ 191.698948][ T8134] loop2: detected capacity change from 0 to 512 [ 191.749538][ T8134] EXT4-fs: Ignoring removed oldalloc option [ 191.766540][ T8134] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.869280][ T8134] EXT4-fs (loop2): 1 truncate cleaned up [ 191.885280][ T8125] loop1: lost filesystem error report for type 5 error -117 [ 191.885934][ T8125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.911882][ T8134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.006894][ T8125] Invalid argument reading file caps for ./file0 [ 192.191811][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.210963][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.286146][ T8144] loop4: detected capacity change from 0 to 512 [ 192.311712][ T8144] EXT4-fs: test_dummy_encryption option not supported [ 192.366413][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1302'. [ 192.551283][ T8158] loop0: detected capacity change from 0 to 512 [ 192.671657][ T8143] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1304'. [ 192.697730][ T8168] loop0: detected capacity change from 0 to 512 [ 192.703701][ T8167] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1309'. [ 192.741990][ T8168] EXT4-fs: Ignoring removed nobh option [ 192.760409][ T8168] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.821711][ T8168] EXT4-fs (loop0): 1 truncate cleaned up [ 192.828032][ T8168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.881437][ T8168] ip_tunnel: non-ECT from 100.1.1.0 with TOS=0x3 [ 193.053750][ T8181] netlink: 'syz.3.1315': attribute type 3 has an invalid length. [ 193.125983][ T8182] tipc: Started in network mode [ 193.140543][ T8182] tipc: Node identity ac14140f, cluster identity 4711 [ 193.159953][ T8182] tipc: New replicast peer: 255.255.255.255 [ 193.190739][ T8182] tipc: Enabled bearer , priority 10 [ 193.239444][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1311'. [ 193.271852][ T8168] tipc: Disabling bearer [ 193.291356][ T8185] Q±6ã`Ò˜: renamed from lo (while UP) [ 193.425206][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.801776][ T8185] loop6: detected capacity change from 0 to 8 [ 193.880540][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.891410][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.917032][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.927831][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.940602][ T8185] loop6: unable to read partition table [ 193.967355][ T8185] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 194.004992][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.016037][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 194.025991][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.037126][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 194.045120][ T3888] loop6: unable to read partition table [ 194.058501][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.069275][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 194.077799][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.077908][ T8191] loop6: unable to read partition table [ 194.088642][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 194.105019][ T8191] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 194.105133][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.129595][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 194.180406][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.191202][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 194.202575][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.213467][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 194.227787][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.238545][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 194.634673][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 194.666264][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 195.670212][ T8287] FAULT_INJECTION: forcing a failure. [ 195.670212][ T8287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.692248][ T70] Bluetooth: hci0: Frame reassembly failed (-84) [ 195.704595][ T8287] CPU: 0 UID: 0 PID: 8287 Comm: syz.4.1334 Tainted: G W syzkaller #0 PREEMPT(full) [ 195.704626][ T8287] Tainted: [W]=WARN [ 195.704633][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.704702][ T8287] Call Trace: [ 195.704709][ T8287] [ 195.704715][ T8287] __dump_stack+0x1d/0x30 [ 195.704742][ T8287] dump_stack_lvl+0x95/0xd0 [ 195.704765][ T8287] dump_stack+0x15/0x1b [ 195.704789][ T8287] should_fail_ex+0x263/0x280 [ 195.704833][ T8287] should_fail+0xb/0x20 [ 195.704853][ T8287] should_fail_usercopy+0x1a/0x20 [ 195.704876][ T8287] _copy_from_user+0x1c/0xb0 [ 195.704921][ T8287] ___sys_sendmsg+0xc1/0x1e0 [ 195.704955][ T8287] __x64_sys_sendmsg+0xd4/0x160 [ 195.704982][ T8287] x64_sys_call+0x194c/0x3020 [ 195.705042][ T8287] do_syscall_64+0x12c/0x370 [ 195.705061][ T8287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.705080][ T8287] RIP: 0033:0x7ff83bdfc799 [ 195.705179][ T8287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.705196][ T8287] RSP: 002b:00007ff83a84f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.705217][ T8287] RAX: ffffffffffffffda RBX: 00007ff83c075fa0 RCX: 00007ff83bdfc799 [ 195.705229][ T8287] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 195.705287][ T8287] RBP: 00007ff83a84f090 R08: 0000000000000000 R09: 0000000000000000 [ 195.705297][ T8287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.705308][ T8287] R13: 00007ff83c076038 R14: 00007ff83c075fa0 R15: 00007ffdc3173ef8 [ 195.705324][ T8287] [ 195.996448][ T28] kauditd_printk_skb: 575 callbacks suppressed [ 195.996467][ T28] audit: type=1400 audit(1772912966.801:14395): avc: denied { module_request } for pid=8289 comm="syz.3.1336" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 196.045464][ T8288] loop1: detected capacity change from 0 to 8192 [ 196.076314][ T28] audit: type=1400 audit(1772912966.851:14396): avc: denied { write } for pid=8289 comm="syz.3.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.139585][ T8288] vfat: Unknown parameter '18446744073709551615' [ 196.170450][ T28] audit: type=1400 audit(1772912966.851:14397): avc: denied { read write } for pid=8284 comm="syz.1.1335" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 196.261882][ T28] audit: type=1400 audit(1772912966.851:14398): avc: denied { read write open } for pid=8284 comm="syz.1.1335" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 196.308074][ T8300] futex_wake_op: syz.0.1340 tries to shift op by 32; fix this program [ 196.358508][ T8300] loop0: detected capacity change from 0 to 512 [ 196.375024][ T28] audit: type=1400 audit(1772912966.851:14399): avc: denied { ioctl } for pid=8284 comm="syz.1.1335" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 196.480712][ T8300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.494237][ T8300] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.496355][ T28] audit: type=1400 audit(1772912966.851:14400): avc: denied { write } for pid=8289 comm="syz.3.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.590007][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.599173][ T8302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.634605][ T8302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.648263][ T8302] loop3: detected capacity change from 0 to 512 [ 196.660807][ T28] audit: type=1400 audit(1772912966.861:14401): avc: denied { write } for pid=8289 comm="syz.3.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.682131][ T28] audit: type=1400 audit(1772912966.861:14402): avc: denied { read } for pid=8289 comm="syz.3.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.703445][ T28] audit: type=1400 audit(1772912966.871:14403): avc: denied { write } for pid=8289 comm="syz.3.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.728834][ T8302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.742500][ T8302] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.753265][ T28] audit: type=1400 audit(1772912966.881:14404): avc: denied { sys_module } for pid=8289 comm="syz.3.1336" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 197.001260][ T8315] loop0: detected capacity change from 0 to 512 [ 197.009221][ T8315] EXT4-fs: Ignoring removed oldalloc option [ 197.051654][ T8315] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 197.087950][ T8315] EXT4-fs (loop0): 1 truncate cleaned up [ 197.095891][ T8315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.132516][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.462747][ T8328] loop0: detected capacity change from 0 to 8192 [ 197.490941][ T8328] vfat: Unknown parameter '18446744073709551615' [ 197.701311][ T3945] Bluetooth: hci0: command 0x1003 tx timeout [ 197.707455][ T3515] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 197.831214][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.968048][ T8333] loop1: detected capacity change from 0 to 8192 [ 197.985478][ T8333] vfat: Unknown parameter '18446744073709551615' [ 198.048068][ T8339] loop2: detected capacity change from 0 to 512 [ 198.078143][ T8340] loop3: detected capacity change from 0 to 128 [ 198.101256][ T8339] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 198.167930][ T8339] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 198.200664][ T8340] FAT-fs (loop3): bogus number of reserved sectors [ 198.207519][ T8340] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 198.233052][ T8339] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1350: bad orphan inode 4 [ 198.270447][ T8339] loop2: lost filesystem error report for type 5 error -117 [ 198.280382][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 198.281869][ T8340] FAT-fs (loop3): Can't find a valid FAT filesystem [ 198.287925][ C0] EXT4-fs (loop2): initial error at time 1772912969: ext4_orphan_get:1417 [ 198.310483][ C0] EXT4-fs (loop2): last error at time 1772912969: ext4_orphan_get:1417 [ 198.319109][ T8339] EXT4-fs (loop2): 1 orphan inode deleted [ 198.340723][ T8339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.883737][ T8354] netlink: 'syz.4.1353': attribute type 1 has an invalid length. [ 198.891590][ T8354] netlink: 'syz.4.1353': attribute type 2 has an invalid length. [ 198.899424][ T8354] netlink: 'syz.4.1353': attribute type 1 has an invalid length. [ 198.909816][ T8356] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 4: comm syz.2.1350: lblock 0 mapped to illegal pblock 4 (length 1) [ 199.014321][ T8354] loop4: detected capacity change from 0 to 1024 [ 199.025230][ T8354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.109752][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.219487][ T8369] loop3: detected capacity change from 0 to 512 [ 199.257287][ T8370] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1354'. [ 199.292394][ T8369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 199.310658][ T8370] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1354'. [ 199.321868][ T8369] ext4 filesystem being mounted at /283/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.417806][ T8369] EXT4-fs (loop3): resizing filesystem from 128 to 2 blocks [ 199.440325][ T8370] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1354'. [ 199.498103][ T8369] EXT4-fs warning (device loop3): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 199.508854][ T8370] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1354'. [ 199.550914][ T5501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.605901][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 200.018101][ T8370] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1354'. [ 200.049679][ T8370] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1354'. [ 201.043691][ T28] kauditd_printk_skb: 612 callbacks suppressed [ 201.043710][ T28] audit: type=1400 audit(1772912971.851:15017): avc: denied { prog_load } for pid=8397 comm="syz.3.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 201.099612][ T28] audit: type=1400 audit(1772912971.851:15018): avc: denied { bpf } for pid=8397 comm="syz.3.1362" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 201.155977][ T8405] set_capacity_and_notify: 1 callbacks suppressed [ 201.156260][ T8405] loop4: detected capacity change from 0 to 512 [ 201.172145][ T28] audit: type=1400 audit(1772912971.891:15020): avc: denied { open } for pid=8397 comm="syz.3.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 201.221158][ T28] audit: type=1400 audit(1772912971.901:15021): avc: denied { perfmon } for pid=8397 comm="syz.3.1362" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 201.295891][ T28] audit: type=1400 audit(1772912971.901:15022): avc: denied { kernel } for pid=8397 comm="syz.3.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 201.359080][ T8414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.366523][ T8414] IPv6: NLM_F_CREATE should be set when creating new route [ 201.374064][ T8414] IPv6: NLM_F_CREATE should be set when creating new route [ 201.385735][ T28] audit: type=1400 audit(1772912971.891:15019): avc: denied { read write } for pid=8402 comm="syz.4.1364" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.411032][ T28] audit: type=1400 audit(1772912971.901:15023): avc: denied { read write open } for pid=8402 comm="syz.4.1364" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.448219][ T28] audit: type=1400 audit(1772912971.941:15024): avc: denied { ioctl } for pid=8402 comm="syz.4.1364" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.512772][ T28] audit: type=1400 audit(1772912972.061:15025): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.538103][ T28] audit: type=1400 audit(1772912972.061:15026): avc: denied { open } for pid=3317 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.544180][ T8405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.563027][ T8422] loop3: detected capacity change from 0 to 512 [ 201.568558][ T8422] EXT4-fs: Ignoring removed oldalloc option [ 201.594304][ T8405] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.634903][ T8424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1368'. [ 201.655506][ T8422] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 201.671965][ T8424] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.733677][ T8422] EXT4-fs (loop3): 1 truncate cleaned up [ 201.765454][ T8422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.796579][ T8405] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 201.891627][ T8431] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 201.911817][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.031573][ T8432] loop0: detected capacity change from 0 to 8192 [ 202.116780][ T8432] vfat: Unknown parameter '18446744073709551615' [ 202.131294][ T5501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.372066][ T8446] netlink: 'syz.4.1375': attribute type 7 has an invalid length. [ 202.401432][ T8446] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1375'. [ 202.458421][ T8446] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1375'. [ 202.603719][ T8451] loop4: detected capacity change from 0 to 1024 [ 202.671801][ T8451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.694150][ T8453] FAULT_INJECTION: forcing a failure. [ 202.694150][ T8453] name failslab, interval 1, probability 0, space 0, times 0 [ 202.710555][ T8451] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.740819][ T8453] CPU: 0 UID: 0 PID: 8453 Comm: syz.3.1378 Tainted: G W syzkaller #0 PREEMPT(full) [ 202.740854][ T8453] Tainted: [W]=WARN [ 202.740884][ T8453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 202.740896][ T8453] Call Trace: [ 202.740903][ T8453] [ 202.740911][ T8453] __dump_stack+0x1d/0x30 [ 202.740936][ T8453] dump_stack_lvl+0x95/0xd0 [ 202.740957][ T8453] dump_stack+0x15/0x1b [ 202.741007][ T8453] should_fail_ex+0x263/0x280 [ 202.741033][ T8453] should_failslab+0x8c/0xb0 [ 202.741065][ T8453] __kmalloc_node_noprof+0xc8/0x560 [ 202.741090][ T8453] ? load_msg+0x41/0x2f0 [ 202.741112][ T8453] load_msg+0x41/0x2f0 [ 202.741128][ T8453] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 202.741152][ T8453] ? irqentry_exit+0x91/0x520 [ 202.741182][ T8453] do_msgsnd+0xe8/0xba0 [ 202.741227][ T8453] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 202.741261][ T8453] ? __x64_sys_msgsnd+0x52/0xc0 [ 202.741313][ T8453] __x64_sys_msgsnd+0xa8/0xc0 [ 202.741334][ T8453] x64_sys_call+0x15e7/0x3020 [ 202.741363][ T8453] do_syscall_64+0x12c/0x370 [ 202.741385][ T8453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.741410][ T8453] RIP: 0033:0x7f07d852c799 [ 202.741425][ T8453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.741445][ T8453] RSP: 002b:00007f07d6f87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 202.741468][ T8453] RAX: ffffffffffffffda RBX: 00007f07d87a5fa0 RCX: 00007f07d852c799 [ 202.741484][ T8453] RDX: 0000000000000008 RSI: 0000200000000280 RDI: 0000000000000000 [ 202.741576][ T8453] RBP: 00007f07d6f87090 R08: 0000000000000000 R09: 0000000000000000 [ 202.741588][ T8453] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 202.741601][ T8453] R13: 00007f07d87a6038 R14: 00007f07d87a5fa0 R15: 00007ffd3f6ca3b8 [ 202.741619][ T8453] [ 202.771123][ T8451] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.1377: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.955578][ T8451] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 202.968086][ T8451] EXT4-fs (loop4): This should not happen!! Data will be lost [ 202.968086][ T8451] [ 202.982670][ T8458] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.1377: lblock 0 mapped to illegal pblock 0 (length 1) [ 203.006870][ T8458] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 203.040113][ T8458] EXT4-fs (loop4): This should not happen!! Data will be lost [ 203.040113][ T8458] [ 203.159752][ T8466] loop1: detected capacity change from 0 to 512 [ 203.167664][ T70] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 1) [ 203.211398][ T70] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 203.227887][ T8466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.261761][ T70] EXT4-fs (loop4): This should not happen!! Data will be lost [ 203.261761][ T70] [ 203.272913][ T8466] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.291769][ T5501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 203.295242][ T8467] loop3: detected capacity change from 0 to 8192 [ 203.326156][ T8467] vfat: Unknown parameter '18446744073709551615' [ 203.450369][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.683803][ T8403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.739938][ T8481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51984 sclass=netlink_route_socket pid=8481 comm=syz.1.1385 [ 203.769812][ T8482] loop0: detected capacity change from 0 to 1024 [ 203.805911][ T8482] EXT4-fs: inline encryption not supported [ 203.806201][ T8482] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.837817][ T8482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.025953][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.429130][ T8510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1394'. [ 204.581428][ T8515] loop2: detected capacity change from 0 to 512 [ 205.032951][ T8514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.061137][ T28] kauditd_printk_skb: 501 callbacks suppressed [ 206.061157][ T28] audit: type=1400 audit(1772912976.871:15528): avc: denied { kernel } for pid=8534 comm="syz.1.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 206.160912][ T28] audit: type=1400 audit(1772912976.901:15529): avc: denied { write } for pid=8534 comm="syz.1.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 206.235583][ T28] audit: type=1400 audit(1772912976.921:15530): avc: denied { prog_load } for pid=8534 comm="syz.1.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 206.334317][ T28] audit: type=1400 audit(1772912976.921:15531): avc: denied { create } for pid=8537 comm="syz.0.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 206.415241][ T28] audit: type=1400 audit(1772912976.921:15532): avc: denied { prog_run } for pid=8534 comm="syz.1.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 206.474941][ T28] audit: type=1400 audit(1772912976.921:15533): avc: denied { open } for pid=8534 comm="syz.1.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 206.534354][ T28] audit: type=1400 audit(1772912976.921:15534): avc: denied { kernel } for pid=8534 comm="syz.1.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 206.586334][ T8553] audit: audit_backlog=65 > audit_backlog_limit=64 [ 206.598966][ T8555] audit: audit_backlog=65 > audit_backlog_limit=64 [ 206.606487][ T8553] audit: audit_lost=251 audit_rate_limit=0 audit_backlog_limit=64 [ 207.026505][ T8570] loop4: detected capacity change from 0 to 8192 [ 207.034701][ T8570] vfat: Unknown parameter '18446744073709551615' [ 207.053717][ T8573] loop2: detected capacity change from 0 to 8192 [ 207.071876][ T8573] vfat: Unknown parameter '18446744073709551615' [ 208.483324][ T8590] loop4: detected capacity change from 0 to 8192 [ 208.571130][ T8590] vfat: Unknown parameter '18446744073709551615' [ 209.521342][ T8633] loop2: detected capacity change from 0 to 8192 [ 209.529442][ T8633] vfat: Unknown parameter '18446744073709551615' [ 209.705686][ T8637] netlink: 'syz.3.1423': attribute type 13 has an invalid length. [ 210.189306][ T8630] syz.2.1419 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 210.220796][ T8630] CPU: 0 UID: 0 PID: 8630 Comm: syz.2.1419 Tainted: G W syzkaller #0 PREEMPT(full) [ 210.220880][ T8630] Tainted: [W]=WARN [ 210.220887][ T8630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 210.220898][ T8630] Call Trace: [ 210.220904][ T8630] [ 210.220912][ T8630] __dump_stack+0x1d/0x30 [ 210.220987][ T8630] dump_stack_lvl+0x95/0xd0 [ 210.221012][ T8630] dump_stack+0x15/0x1b [ 210.221039][ T8630] dump_header+0x80/0x240 [ 210.221062][ T8630] oom_kill_process+0x295/0x350 [ 210.221084][ T8630] out_of_memory+0x97d/0xb80 [ 210.221122][ T8630] try_charge_memcg+0x62e/0xa10 [ 210.221167][ T8630] obj_cgroup_charge_pages+0x23/0xc0 [ 210.221227][ T8630] __memcg_kmem_charge_page+0x9e/0x170 [ 210.221261][ T8630] __alloc_frozen_pages_noprof+0x18a/0x360 [ 210.221306][ T8630] alloc_pages_mpol+0xb3/0x260 [ 210.221339][ T8630] alloc_pages_noprof+0x8f/0x130 [ 210.221427][ T8630] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 210.221461][ T8630] __kvmalloc_node_noprof+0x3d4/0x650 [ 210.221561][ T8630] ? ip_set_alloc+0x24/0x30 [ 210.221587][ T8630] ? ip_set_alloc+0x24/0x30 [ 210.221610][ T8630] ? __kmalloc_cache_noprof+0x18a/0x410 [ 210.221684][ T8630] ip_set_alloc+0x24/0x30 [ 210.221713][ T8630] hash_netiface_create+0x282/0x740 [ 210.221744][ T8630] ? __pfx_hash_netiface_create+0x10/0x10 [ 210.221786][ T8630] ip_set_create+0x3cf/0x970 [ 210.221833][ T8630] ? __mutex_lock_slowpath+0xa/0x10 [ 210.221894][ T8630] nfnetlink_rcv_msg+0x509/0x5d0 [ 210.221929][ T8630] netlink_rcv_skb+0x123/0x220 [ 210.221953][ T8630] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 210.222043][ T8630] nfnetlink_rcv+0x167/0x1720 [ 210.222071][ T8630] ? __kfree_skb+0x109/0x150 [ 210.222094][ T8630] ? nlmon_xmit+0x4f/0x60 [ 210.222127][ T8630] ? consume_skb+0x4b/0x160 [ 210.222196][ T8630] ? nlmon_xmit+0x4f/0x60 [ 210.222224][ T8630] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 210.222255][ T8630] ? __dev_queue_xmit+0x136c/0x1f20 [ 210.222286][ T8630] ? __dev_queue_xmit+0x148/0x1f20 [ 210.222378][ T8630] ? ref_tracker_free+0x37d/0x3e0 [ 210.222449][ T8630] ? __netlink_deliver_tap+0x4dc/0x500 [ 210.222485][ T8630] netlink_unicast+0x5c0/0x690 [ 210.222536][ T8630] netlink_sendmsg+0x5c8/0x6f0 [ 210.222601][ T8630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.222664][ T8630] ____sys_sendmsg+0x563/0x5b0 [ 210.222743][ T8630] ___sys_sendmsg+0x195/0x1e0 [ 210.222786][ T8630] __x64_sys_sendmsg+0xd4/0x160 [ 210.222851][ T8630] x64_sys_call+0x194c/0x3020 [ 210.222965][ T8630] do_syscall_64+0x12c/0x370 [ 210.222987][ T8630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.223008][ T8630] RIP: 0033:0x7f13aba0c799 [ 210.223064][ T8630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.223087][ T8630] RSP: 002b:00007f13aa45f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.223130][ T8630] RAX: ffffffffffffffda RBX: 00007f13abc85fa0 RCX: 00007f13aba0c799 [ 210.223144][ T8630] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000004 [ 210.223156][ T8630] RBP: 00007f13abaa2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 210.223170][ T8630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.223185][ T8630] R13: 00007f13abc86038 R14: 00007f13abc85fa0 R15: 00007ffc668e9e38 [ 210.223272][ T8630] [ 210.281060][ T8630] memory: usage 121820kB, limit 307200kB, failcnt 3081 [ 210.580375][ T8630] memory+swap: usage 111472kB, limit 9007199254740988kB, failcnt 0 [ 210.588527][ T8630] kmem: usage 91320kB, limit 9007199254740988kB, failcnt 0 [ 210.600284][ T8630] Memory cgroup stats for /syz2: [ 210.600612][ T8630] cache 4096 [ 210.618931][ T8630] rss 118784 [ 210.626303][ T8630] shmem 0 [ 210.629276][ T8630] mapped_file 4096 [ 210.633056][ T8630] dirty 4096 [ 210.636275][ T8630] writeback 0 [ 210.639562][ T8630] workingset_refault_anon 1202 [ 210.644444][ T8630] workingset_refault_file 5782 [ 210.649217][ T8630] swap 937984 [ 210.652698][ T8630] swapcached 26783744 [ 210.656774][ T8630] pgpgin 178705 [ 210.660252][ T8630] pgpgout 178670 [ 210.664710][ T8630] pgfault 146877 [ 210.668552][ T8630] pgmajfault 782 [ 210.672232][ T8630] inactive_anon 8192 [ 210.676403][ T8630] active_anon 131072 [ 210.680553][ T8630] inactive_file 4096 [ 210.684694][ T8630] active_file 0 [ 210.688381][ T8630] unevictable 0 [ 210.691985][ T8630] hierarchical_memory_limit 314572800 [ 210.697684][ T8630] hierarchical_memsw_limit 9223372036854771712 [ 210.704199][ T8630] total_cache 4096 [ 210.707923][ T8630] total_rss 118784 [ 210.711707][ T8630] total_shmem 0 [ 210.715304][ T8630] total_mapped_file 4096 [ 210.719680][ T8630] total_dirty 4096 [ 210.723452][ T8630] total_writeback 0 [ 210.727266][ T8630] total_workingset_refault_anon 1202 [ 210.732609][ T8630] total_workingset_refault_file 5782 [ 210.737921][ T8630] total_swap 937984 [ 210.741820][ T8630] total_swapcached 26783744 [ 210.746378][ T8630] total_pgpgin 178705 [ 210.750582][ T8630] total_pgpgout 178670 [ 210.754754][ T8630] total_pgfault 146877 [ 210.758923][ T8630] total_pgmajfault 782 [ 210.763359][ T8630] total_inactive_anon 8192 [ 210.767786][ T8630] total_active_anon 131072 [ 210.772251][ T8630] total_inactive_file 4096 [ 210.776870][ T8630] total_active_file 0 [ 210.780982][ T8630] total_unevictable 0 [ 210.785056][ T8630] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1419,pid=8629,uid=0 [ 210.799990][ T8630] Memory cgroup out of memory: Killed process 8630 (syz.2.1419) total-vm:96208kB, anon-rss:1332kB, file-rss:22664kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 211.015213][ T8568] Set syz1 is full, maxelem 65536 reached [ 211.089224][ T28] kauditd_printk_skb: 419 callbacks suppressed [ 211.089258][ T28] audit: type=1400 audit(1772912981.891:15942): avc: denied { read write } for pid=8653 comm="syz.3.1429" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.089602][ T8655] loop3: detected capacity change from 0 to 512 [ 211.095874][ T28] audit: type=1400 audit(1772912981.891:15943): avc: denied { read write open } for pid=8653 comm="syz.3.1429" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.095910][ T28] audit: type=1400 audit(1772912981.891:15944): avc: denied { ioctl } for pid=8653 comm="syz.3.1429" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.422478][ T28] audit: type=1400 audit(1772912981.931:15945): avc: denied { mounton } for pid=8653 comm="syz.3.1429" path="/308/file1" dev="tmpfs" ino=1652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 211.514342][ T28] audit: type=1400 audit(1772912981.941:15946): avc: denied { read write } for pid=8653 comm="syz.3.1429" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.554240][ T8694] loop4: detected capacity change from 0 to 1024 [ 211.571819][ T8694] EXT4-fs: Ignoring removed orlov option [ 211.577603][ T8694] EXT4-fs: inline encryption not supported [ 211.601817][ T28] audit: type=1400 audit(1772912981.941:15947): avc: denied { open } for pid=8653 comm="syz.3.1429" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.637353][ T8694] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 211.800063][ T3309] audit: audit_backlog=65 > audit_backlog_limit=64 [ 211.870640][ T8694] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 211.881293][ T3309] audit: audit_lost=256 audit_rate_limit=0 audit_backlog_limit=64 [ 211.889285][ T3309] audit: backlog limit exceeded [ 211.894885][ T8694] EXT4-fs (loop4): invalid journal inode [ 211.904465][ T8694] EXT4-fs (loop4): can't get journal size [ 211.920717][ T3309] audit: audit_backlog=65 > audit_backlog_limit=64 [ 212.115152][ T8694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.241162][ T8705] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.333733][ T5501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.174191][ T8726] loop1: detected capacity change from 0 to 8192 [ 213.212841][ T8726] vfat: Unknown parameter '18446744073709551615' [ 213.255575][ T3317] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 213.343235][ T3317] CPU: 1 UID: 0 PID: 3317 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 213.343402][ T3317] Tainted: [W]=WARN [ 213.343411][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 213.343452][ T3317] Call Trace: [ 213.343461][ T3317] [ 213.343470][ T3317] __dump_stack+0x1d/0x30 [ 213.343540][ T3317] dump_stack_lvl+0x95/0xd0 [ 213.343568][ T3317] dump_stack+0x15/0x1b [ 213.343594][ T3317] dump_header+0x80/0x240 [ 213.343615][ T3317] oom_kill_process+0x295/0x350 [ 213.343646][ T3317] out_of_memory+0x97d/0xb80 [ 213.343673][ T3317] try_charge_memcg+0x62e/0xa10 [ 213.343713][ T3317] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 213.343790][ T3317] __swap_cache_prepare_and_add+0x386/0x530 [ 213.343895][ T3317] swap_cache_alloc_folio+0xa2/0x120 [ 213.343925][ T3317] swap_cluster_readahead+0x26e/0x3d0 [ 213.344037][ T3317] swapin_readahead+0xde/0x840 [ 213.344070][ T3317] ? mm_trace_rss_stat+0x1d/0xf0 [ 213.344093][ T3317] ? __rcu_read_unlock+0x33/0x70 [ 213.344112][ T3317] ? __rcu_read_unlock+0x4e/0x70 [ 213.344171][ T3317] ? swap_cache_get_folio+0x26f/0x280 [ 213.344232][ T3317] do_swap_page+0x30d/0x2220 [ 213.344261][ T3317] ? css_rstat_updated+0xbb/0x280 [ 213.344349][ T3317] ? __rcu_read_lock+0x36/0x50 [ 213.344368][ T3317] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 213.344396][ T3317] handle_mm_fault+0xb40/0x3020 [ 213.344424][ T3317] ? vma_start_read+0x1c7/0x2c0 [ 213.344509][ T3317] do_user_addr_fault+0x62f/0x1050 [ 213.344539][ T3317] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 213.344597][ T3317] ? trace_page_fault_user+0x1f/0xe0 [ 213.344633][ T3317] exc_page_fault+0x62/0xa0 [ 213.344697][ T3317] asm_exc_page_fault+0x26/0x30 [ 213.344715][ T3317] RIP: 0033:0x7f07d83fa7b7 [ 213.344778][ T3317] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 ae ed 00 48 01 d1 39 7c 24 [ 213.344836][ T3317] RSP: 002b:00007ffd3f6ca720 EFLAGS: 00010202 [ 213.344853][ T3317] RAX: 0000001b33724000 RBX: 000000000000040a RCX: 0000000000034008 [ 213.344866][ T3317] RDX: 0000000002ac6b77 RSI: 00007ffd3f6ca7b0 RDI: 0000000000000016 [ 213.344879][ T3317] RBP: 00007ffd3f6ca75c R08: 000000000a32dab3 R09: 7fffffffffffffff [ 213.344895][ T3317] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 213.344970][ T3317] R13: 00000000000927c0 R14: 0000000000033f24 R15: 00007ffd3f6ca7b0 [ 213.344993][ T3317] [ 213.345002][ T3317] memory: usage 307200kB, limit 307200kB, failcnt 2680 [ 213.600144][ T3317] memory+swap: usage 308072kB, limit 9007199254740988kB, failcnt 0 [ 213.608210][ T3317] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 213.615649][ T3317] Memory cgroup stats for /syz3: [ 213.615893][ T3317] cache 0 [ 213.624094][ T3317] rss 0 [ 213.628030][ T3317] shmem 0 [ 213.631130][ T3317] mapped_file 0 [ 213.634766][ T3317] dirty 0 [ 213.637708][ T3317] writeback 0 [ 213.641184][ T3317] workingset_refault_anon 657 [ 213.645890][ T3317] workingset_refault_file 4756 [ 213.650748][ T3317] swap 892928 [ 213.654187][ T3317] swapcached 14602240 [ 213.658366][ T3317] pgpgin 164104 [ 213.661958][ T3317] pgpgout 164104 [ 213.665511][ T3317] pgfault 153200 [ 213.669332][ T3317] pgmajfault 447 [ 213.672947][ T3317] inactive_anon 0 [ 213.676582][ T3317] active_anon 0 [ 213.680065][ T3317] inactive_file 0 [ 213.683852][ T3317] active_file 0 [ 213.687314][ T3317] unevictable 0 [ 213.690903][ T3317] hierarchical_memory_limit 314572800 [ 213.696284][ T3317] hierarchical_memsw_limit 9223372036854771712 [ 213.705777][ T3317] total_cache 0 [ 213.709441][ T3317] total_rss 0 [ 213.712770][ T3317] total_shmem 0 [ 213.716410][ T3317] total_mapped_file 0 [ 213.720422][ T3317] total_dirty 0 [ 213.723906][ T3317] total_writeback 0 [ 213.727764][ T3317] total_workingset_refault_anon 657 [ 213.733421][ T3317] total_workingset_refault_file 4756 [ 213.738768][ T3317] total_swap 892928 [ 213.750389][ T3317] total_swapcached 14602240 [ 213.754971][ T3317] total_pgpgin 164104 [ 213.758964][ T3317] total_pgpgout 164104 [ 213.765061][ T3317] total_pgfault 153200 [ 213.769163][ T3317] total_pgmajfault 447 [ 213.805274][ T3317] total_inactive_anon 0 [ 213.805635][ T8738] futex_wake_op: syz.2.1443 tries to shift op by 32; fix this program [ 213.818013][ T3317] total_active_anon 0 [ 213.832816][ T3317] total_inactive_file 0 [ 213.837115][ T3317] total_active_file 0 [ 213.852322][ T3317] total_unevictable 0 [ 213.856620][ T3317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1434,pid=8710,uid=0 [ 213.881188][ T3317] Memory cgroup out of memory: Killed process 8710 (syz.3.1434) total-vm:96340kB, anon-rss:1220kB, file-rss:22552kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 213.932742][ T8738] loop2: detected capacity change from 0 to 512 [ 214.004992][ T8738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.048603][ T8738] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.237036][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.007660][ T8805] futex_wake_op: syz.4.1452 tries to shift op by 32; fix this program [ 216.087428][ T8805] loop4: detected capacity change from 0 to 512 [ 216.096554][ T28] kauditd_printk_skb: 415 callbacks suppressed [ 216.096571][ T28] audit: type=1400 audit(1772912986.901:16344): avc: denied { open } for pid=8803 comm="syz.1.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 216.218670][ T28] audit: type=1400 audit(1772912986.901:16345): avc: denied { perfmon } for pid=8803 comm="syz.1.1451" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 216.243551][ T8805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.270742][ T8805] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.280843][ T28] audit: type=1400 audit(1772912986.901:16346): avc: denied { kernel } for pid=8803 comm="syz.1.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 216.300969][ T28] audit: type=1400 audit(1772912986.881:16340): avc: denied { bpf } for pid=8789 comm="syz.3.1448" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 216.322410][ T28] audit: type=1400 audit(1772912986.961:16347): avc: denied { allowed } for pid=8803 comm="syz.1.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 216.342283][ T28] audit: type=1400 audit(1772912986.961:16348): avc: denied { mounton } for pid=8804 comm="syz.4.1452" path="/164/file1" dev="tmpfs" ino=896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 216.365265][ T28] audit: type=1400 audit(1772912986.981:16349): avc: denied { sqpoll } for pid=8803 comm="syz.1.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 216.394994][ T28] audit: type=1400 audit(1772912986.981:16350): avc: denied { perfmon } for pid=8803 comm="syz.1.1451" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 216.457426][ T28] audit: type=1400 audit(1772912986.991:16351): avc: denied { create } for pid=8803 comm="syz.1.1451" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 216.513990][ T28] audit: type=1400 audit(1772912986.991:16352): avc: denied { map } for pid=8803 comm="syz.1.1451" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 216.570764][ T5501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.681725][ T8817] loop4: detected capacity change from 0 to 512 [ 216.720996][ T8817] EXT4-fs: Ignoring removed oldalloc option [ 216.740967][ T8817] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 216.787546][ T8817] EXT4-fs (loop4): 1 truncate cleaned up [ 216.806437][ T8817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.010678][ T5501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.806346][ T8834] loop2: detected capacity change from 0 to 8192 [ 217.916284][ T4987] loop2: p1 p2 p3 p4 [ 217.923643][ T4987] loop2: p1 start 17825536 is beyond EOD, truncated [ 217.961601][ T4987] loop2: p2 size 4294901964 extends beyond EOD, truncated [ 217.975047][ T4987] loop2: p3 start 458752 is beyond EOD, truncated [ 217.996162][ T4987] loop2: p4 size 8388352 extends beyond EOD, truncated [ 218.029249][ T8823] Set syz1 is full, maxelem 65536 reached [ 218.120407][ T8834] loop2: p1 p2 p3 p4 [ 218.124603][ T8834] loop2: p1 start 17825536 is beyond EOD, truncated [ 218.140472][ T8834] loop2: p2 size 4294901964 extends beyond EOD, truncated [ 218.152525][ T8834] loop2: p3 start 458752 is beyond EOD, truncated [ 218.174457][ T8846] loop4: detected capacity change from 0 to 8192 [ 218.181834][ T8834] loop2: p4 size 8388352 extends beyond EOD, truncated [ 218.192894][ T8846] vfat: Unknown parameter '18446744073709551615' [ 218.332444][ T8851] futex_wake_op: syz.2.1468 tries to shift op by 32; fix this program [ 218.388545][ T8851] loop2: detected capacity change from 0 to 512 [ 218.409481][ T8852] netlink: 'syz.0.1467': attribute type 5 has an invalid length. [ 218.429312][ T8851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.442549][ T8851] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.483630][ T3888] udevd[3888]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 218.488865][ T4987] udevd[4987]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 218.568202][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.738868][ T4987] udevd[4987]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 218.772908][ T3888] udevd[3888]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 218.815512][ T8860] loop1: detected capacity change from 0 to 1024 [ 218.828768][ T8859] tipc: Started in network mode [ 218.833851][ T8859] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 218.861433][ T8859] tipc: Enabled bearer , priority 0 [ 218.891129][ T8860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.057425][ T5501] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 219.102639][ T5501] CPU: 0 UID: 0 PID: 5501 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 219.102734][ T5501] Tainted: [W]=WARN [ 219.102741][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.102752][ T5501] Call Trace: [ 219.102758][ T5501] [ 219.102767][ T5501] __dump_stack+0x1d/0x30 [ 219.102824][ T5501] dump_stack_lvl+0x95/0xd0 [ 219.102920][ T5501] dump_stack+0x15/0x1b [ 219.102945][ T5501] dump_header+0x80/0x240 [ 219.102970][ T5501] oom_kill_process+0x295/0x350 [ 219.102994][ T5501] out_of_memory+0x97d/0xb80 [ 219.103089][ T5501] try_charge_memcg+0x62e/0xa10 [ 219.103189][ T5501] __mem_cgroup_charge+0x65/0x150 [ 219.103223][ T5501] filemap_add_folio+0x110/0x350 [ 219.103243][ T5501] __filemap_get_folio_mpol+0x326/0x680 [ 219.103305][ T5501] filemap_fault+0x486/0xb90 [ 219.103330][ T5501] __do_fault+0xbc/0x200 [ 219.103350][ T5501] handle_mm_fault+0x11d7/0x3020 [ 219.103385][ T5501] ? vma_start_read+0x1c7/0x2c0 [ 219.103472][ T5501] do_user_addr_fault+0x62f/0x1050 [ 219.103506][ T5501] ? trace_page_fault_user+0x1f/0xe0 [ 219.103535][ T5501] exc_page_fault+0x62/0xa0 [ 219.103561][ T5501] asm_exc_page_fault+0x26/0x30 [ 219.103648][ T5501] RIP: 0033:0x7ff83bcca7b4 [ 219.103665][ T5501] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 ae ed 00 48 01 d1 [ 219.103683][ T5501] RSP: 002b:00007ffdc3174260 EFLAGS: 00010206 [ 219.103700][ T5501] RAX: 0000001b34824000 RBX: 0000000000000238 RCX: 0000000000035778 [ 219.103714][ T5501] RDX: 0000000000285b1a RSI: 00007ffdc31742f0 RDI: 0000000000000001 [ 219.103729][ T5501] RBP: 00007ffdc317429c R08: 000000000099f209 R09: 7fffffffffffffff [ 219.103799][ T5501] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 219.103812][ T5501] R13: 00000000000927c0 R14: 000000000003570e R15: 00007ffdc31742f0 [ 219.103829][ T5501] [ 219.103836][ T5501] memory: usage 307200kB, limit 307200kB, failcnt 3726 [ 219.370436][ T5501] memory+swap: usage 307892kB, limit 9007199254740988kB, failcnt 0 [ 219.390468][ T5501] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 219.397807][ T5501] Memory cgroup stats for /syz4: [ 219.398018][ T5501] cache 0 [ 219.460480][ T5501] rss 0 [ 219.463291][ T5501] shmem 0 [ 219.466238][ T5501] mapped_file 0 [ 219.469786][ T5501] dirty 0 [ 219.510383][ T5501] writeback 0 [ 219.513804][ T5501] workingset_refault_anon 916 [ 219.518496][ T5501] workingset_refault_file 9794 [ 219.550699][ T5501] swap 708608 [ 219.600382][ T5501] swapcached 23470080 [ 219.604450][ T5501] pgpgin 210846 [ 219.609214][ T5501] pgpgout 210843 [ 219.630362][ T5501] pgfault 142426 [ 219.634101][ T5501] pgmajfault 633 [ 219.637650][ T5501] inactive_anon 0 [ 219.645372][ T5501] active_anon 12288 [ 219.649197][ T5501] inactive_file 0 [ 220.040756][ T1100] tipc: Node number set to 9611946 [ 220.048827][ T5501] active_file 0 [ 220.060361][ T5501] unevictable 0 [ 220.063845][ T5501] hierarchical_memory_limit 314572800 [ 220.069216][ T5501] hierarchical_memsw_limit 9223372036854771712 [ 220.108638][ T5501] total_cache 0 [ 220.119821][ T5501] total_rss 0 [ 220.135999][ T5501] total_shmem 0 [ 220.139734][ T5501] total_mapped_file 0 [ 220.172689][ T5501] total_dirty 0 [ 220.191473][ T5501] total_writeback 0 [ 220.195469][ T5501] total_workingset_refault_anon 916 [ 220.225451][ T5501] total_workingset_refault_file 9794 [ 220.265476][ T5501] total_swap 708608 [ 220.269427][ T5501] total_swapcached 23470080 [ 220.296528][ T5501] total_pgpgin 210846 [ 220.314460][ T5501] total_pgpgout 210843 [ 220.318808][ T5501] total_pgfault 142426 [ 220.345825][ T5501] total_pgmajfault 633 [ 220.349932][ T5501] total_inactive_anon 0 [ 220.382701][ T5501] total_active_anon 12288 [ 220.405814][ T5501] total_inactive_file 0 [ 220.423856][ T5501] total_active_file 0 [ 220.427974][ T5501] total_unevictable 0 [ 220.459693][ T5501] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1465,pid=8842,uid=0 [ 220.507782][ T5501] Memory cgroup out of memory: Killed process 8842 (syz.4.1465) total-vm:96340kB, anon-rss:1224kB, file-rss:22552kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 220.820241][ T8880] loop4: detected capacity change from 0 to 128 [ 220.868294][ T8877] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 220.884534][ T8882] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1476'. [ 220.894305][ T8880] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1476'. [ 221.131964][ T8877] SELinux: failed to load policy [ 221.147505][ T28] kauditd_printk_skb: 371 callbacks suppressed [ 221.147529][ T28] audit: type=1400 audit(1772912991.951:16724): avc: denied { prog_load } for pid=8879 comm="syz.4.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 222.127082][ T28] audit: type=1400 audit(1772912991.951:16725): avc: denied { bpf } for pid=8879 comm="syz.4.1476" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 222.505906][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.789577][ T8895] audit: audit_backlog=65 > audit_backlog_limit=64 [ 222.833865][ T28] audit: type=1400 audit(1772912991.951:16726): avc: denied { perfmon } for pid=8879 comm="syz.4.1476" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 222.836557][ T5501] audit: audit_backlog=65 > audit_backlog_limit=64 [ 222.855285][ T28] audit: type=1400 audit(1772912991.951:16727): avc: denied { prog_run } for pid=8879 comm="syz.4.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 222.855311][ T28] audit: type=1400 audit(1772912991.961:16728): avc: denied { open } for pid=8879 comm="syz.4.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 222.872801][ T3310] audit: audit_backlog=65 > audit_backlog_limit=64 [ 222.881702][ T28] audit: type=1400 audit(1772912991.961:16729): avc: denied { perfmon } for pid=8879 comm="syz.4.1476" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 222.909073][ T8898] futex_wake_op: syz.2.1481 tries to shift op by 32; fix this program [ 222.930668][ T8897] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.227061][ T8906] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.234348][ T8906] IPv6: NLM_F_CREATE should be set when creating new route [ 223.241852][ T8906] IPv6: NLM_F_CREATE should be set when creating new route [ 223.645619][ T8918] xt_hashlimit: size too large, truncated to 1048576 [ 223.719163][ T8921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1487'. [ 223.772395][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 224.443221][ T8937] loop2: detected capacity change from 0 to 8192 [ 224.531059][ T8937] vfat: Unknown parameter '18446744073709551615' [ 225.592146][ T8984] netlink: 336 bytes leftover after parsing attributes in process `syz.1.1502'. [ 225.646989][ T8984] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1502'. [ 225.693776][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1502'. [ 226.152336][ T28] kauditd_printk_skb: 365 callbacks suppressed [ 226.152355][ T28] audit: type=1400 audit(1772912996.961:17087): avc: denied { create } for pid=8987 comm="syz.4.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 226.206949][ T8986] loop1: detected capacity change from 0 to 8192 [ 226.240628][ T28] audit: type=1400 audit(1772912996.971:17088): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.256812][ T8986] vfat: Unknown parameter '18446744073709551615' [ 226.360451][ T28] audit: type=1400 audit(1772912996.971:17089): avc: denied { open } for pid=3309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.469896][ T8996] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1506'. [ 226.489593][ T28] audit: type=1400 audit(1772912996.971:17090): avc: denied { ioctl } for pid=3309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.556200][ T8996] audit: audit_backlog=65 > audit_backlog_limit=64 [ 226.563582][ T8996] audit: audit_lost=268 audit_rate_limit=0 audit_backlog_limit=64 [ 226.573086][ T8996] audit: backlog limit exceeded [ 226.582050][ T8998] audit: audit_backlog=65 > audit_backlog_limit=64 [ 226.590994][ T8992] audit: audit_backlog=65 > audit_backlog_limit=64 [ 226.597018][ T8998] audit: audit_lost=269 audit_rate_limit=0 audit_backlog_limit=64 [ 226.798552][ T8998] netlink: 'syz.3.1507': attribute type 10 has an invalid length. [ 226.863618][ T8998] team0: Device vxcan1 is of different type [ 226.901816][ T9000] x_tables: ip_tables: osf match: only valid for protocol 6 [ 227.252202][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1510'. [ 227.457155][ T9045] futex_wake_op: syz.0.1513 tries to shift op by 32; fix this program [ 227.512791][ T9045] loop0: detected capacity change from 0 to 512 [ 227.808424][ T9045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.828927][ T9045] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.935438][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.304592][ T6080] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.354784][ T6080] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.368970][ T9077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1527'. [ 228.431682][ T6080] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.467567][ T6080] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.585825][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 228.603216][ T35] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 228.637585][ T6080] bridge_slave_1: left allmulticast mode [ 228.665268][ T6080] bridge_slave_1: left promiscuous mode [ 228.687304][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.760568][ T6080] bridge_slave_0: left allmulticast mode [ 228.780023][ T9093] loop1: detected capacity change from 0 to 512 [ 228.786580][ T6080] bridge_slave_0: left promiscuous mode [ 228.804673][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.955185][ T9093] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.013934][ T9092] fido_id[9092]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 229.203053][ T6080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.215432][ T6080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.226431][ T6080] bond0 (unregistering): Released all slaves [ 229.367821][ T9101] IPVS: sh: FWM 3 0x00000003 - no destination available [ 229.390585][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 229.414793][ T6080] hsr_slave_0: left promiscuous mode [ 229.430287][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.445102][ T4309] Bluetooth: hci0: Frame reassembly failed (-84) [ 229.462527][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.486538][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.502067][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.514995][ T6080] veth1_macvtap: left promiscuous mode [ 229.524011][ T6080] veth0_macvtap: left promiscuous mode [ 229.539536][ T6080] veth1_vlan: left promiscuous mode [ 229.550285][ T6080] veth0_vlan: left promiscuous mode [ 229.598156][ T3310] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 229.725178][ T6080] team_slave_1 (unregistering): left allmulticast mode [ 229.741070][ T6080] team0 (unregistering): Port device team_slave_1 removed [ 229.771865][ T6080] team_slave_0 (unregistering): left allmulticast mode [ 229.799454][ T6080] team0 (unregistering): Port device team_slave_0 removed [ 229.814446][ T9129] loop2: detected capacity change from 0 to 128 [ 229.878326][ T9116] bond0: (slave veth1_macvtap): Error: Device is in use and cannot be enslaved [ 230.055201][ T9135] loop2: detected capacity change from 0 to 512 [ 230.160906][ T9135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.187686][ T9135] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.314626][ T9084] chnl_net:caif_netlink_parms(): no params data found [ 230.623300][ T9162] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1537'. [ 230.752176][ T9084] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.788452][ T9084] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.806248][ T9084] bridge_slave_0: entered allmulticast mode [ 230.816260][ T9084] bridge_slave_0: entered promiscuous mode [ 230.828436][ T9084] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.838807][ T9084] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.848978][ T9084] bridge_slave_1: entered allmulticast mode [ 230.901287][ T9084] bridge_slave_1: entered promiscuous mode [ 230.966203][ T9084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.978893][ T9084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.108197][ T9084] team0: Port device team_slave_0 added [ 231.174230][ T9084] team0: Port device team_slave_1 added [ 231.278051][ T9084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.310125][ T9084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.342873][ T28] kauditd_printk_skb: 841 callbacks suppressed [ 231.342893][ T28] audit: type=1400 audit(1772913002.151:17758): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 231.444684][ T9084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.471531][ T3515] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 231.529781][ T28] audit: type=1400 audit(1772913002.181:17759): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 231.573550][ T9084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.695295][ T9084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.748956][ T9174] loop1: detected capacity change from 0 to 128 [ 231.805674][ T28] audit: type=1400 audit(1772913002.181:17760): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 231.837982][ T9084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.888930][ T9174] FAT-fs (loop1): Directory bread(block 32) failed [ 231.895909][ T9174] FAT-fs (loop1): Directory bread(block 33) failed [ 231.916110][ T9174] FAT-fs (loop1): Directory bread(block 34) failed [ 231.932062][ T28] audit: type=1400 audit(1772913002.181:17761): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 231.974728][ T9174] FAT-fs (loop1): Directory bread(block 35) failed [ 231.995749][ T9174] FAT-fs (loop1): Directory bread(block 36) failed [ 232.004748][ T9174] FAT-fs (loop1): Directory bread(block 37) failed [ 232.013645][ T28] audit: type=1400 audit(1772913002.181:17762): avc: denied { open } for pid=3310 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.041992][ T9174] FAT-fs (loop1): Directory bread(block 38) failed [ 232.048650][ T9174] FAT-fs (loop1): Directory bread(block 39) failed [ 232.058036][ T9174] FAT-fs (loop1): Directory bread(block 40) failed [ 232.067258][ T9174] FAT-fs (loop1): Directory bread(block 41) failed [ 232.076547][ T28] audit: type=1400 audit(1772913002.181:17763): avc: denied { ioctl } for pid=3310 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.133161][ T28] audit: type=1400 audit(1772913002.441:17764): avc: denied { open } for pid=9170 comm="syz.0.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 232.155330][ T28] audit: type=1400 audit(1772913002.441:17765): avc: denied { perfmon } for pid=9170 comm="syz.0.1541" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 232.178542][ T28] audit: type=1400 audit(1772913002.441:17766): avc: denied { kernel } for pid=9170 comm="syz.0.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 232.203451][ T28] audit: type=1400 audit(1772913002.541:17767): avc: denied { create } for pid=9170 comm="syz.0.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 232.292232][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.292536][ T6080] IPVS: stop unused estimator thread 0... [ 232.476851][ T9084] hsr_slave_0: entered promiscuous mode [ 232.479432][ T9180] loop3: detected capacity change from 0 to 8192 [ 232.494608][ T9084] hsr_slave_1: entered promiscuous mode [ 232.522032][ T9180] vfat: Unknown parameter '18446744073709551615' [ 232.529030][ T9084] debugfs: 'hsr0' already exists in 'hsr' [ 232.546711][ T9084] Cannot create hsr debugfs directory [ 232.652689][ T9196] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1546'. [ 232.953419][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1546'. [ 233.066156][ T9196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1546'. [ 233.331216][ T9084] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 233.368434][ T9084] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 233.415366][ T9084] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 233.466477][ T9084] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 233.599286][ T9234] loop3: detected capacity change from 0 to 128 [ 233.879181][ T9084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.955218][ T9084] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.055195][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.062682][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.073515][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.080702][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.180577][ T9257] loop3: detected capacity change from 0 to 512 [ 234.209310][ T9258] loop0: detected capacity change from 0 to 256 [ 234.289954][ T9257] ext4: block size(65536) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 234.300871][ T9257] EXT4-fs (loop3): bad block size 65536 [ 234.337691][ T9258] FAT-fs (loop0): Directory bread(block 64) failed [ 234.344577][ T9258] FAT-fs (loop0): Directory bread(block 65) failed [ 234.351374][ T9258] FAT-fs (loop0): Directory bread(block 66) failed [ 234.358131][ T9258] FAT-fs (loop0): Directory bread(block 67) failed [ 234.364969][ T9258] FAT-fs (loop0): Directory bread(block 68) failed [ 234.371541][ T9258] FAT-fs (loop0): Directory bread(block 69) failed [ 234.378378][ T9258] FAT-fs (loop0): Directory bread(block 70) failed [ 234.384948][ T9258] FAT-fs (loop0): Directory bread(block 71) failed [ 234.391707][ T9258] FAT-fs (loop0): Directory bread(block 72) failed [ 234.398682][ T9258] FAT-fs (loop0): Directory bread(block 73) failed [ 234.568004][ T9258] bond5: option tlb_dynamic_lb: invalid value (32) [ 235.058280][ T9258] bond5 (unregistering): Released all slaves [ 236.353584][ T28] kauditd_printk_skb: 610 callbacks suppressed [ 236.353601][ T28] audit: type=1400 audit(1772913007.161:18378): avc: denied { module_request } for pid=9084 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 236.458911][ T28] audit: type=1400 audit(1772913007.191:18379): avc: denied { sys_module } for pid=9084 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 236.496206][ T28] audit: type=1400 audit(1772913007.191:18380): avc: denied { module_request } for pid=9084 comm="syz-executor" kmod="nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 236.520010][ T28] audit: type=1400 audit(1772913007.201:18381): avc: denied { perfmon } for pid=9268 comm="syz.0.1554" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 236.540818][ T9084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.625183][ T28] audit: type=1400 audit(1772913007.221:18382): avc: denied { read } for pid=9270 comm="syz.2.1556" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 236.648641][ T28] audit: type=1400 audit(1772913007.221:18383): avc: denied { read open } for pid=9270 comm="syz.2.1556" path="net:[4026532393]" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 236.675735][ T28] audit: type=1400 audit(1772913007.221:18384): avc: denied { create } for pid=9268 comm="syz.0.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 236.727015][ T9286] IPVS: sh: FWM 3 0x00000003 - no destination available [ 236.734931][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 236.746859][ T9279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 236.756595][ T3315] audit: audit_backlog=65 > audit_backlog_limit=64 [ 236.770388][ T28] audit: type=1400 audit(1772913007.231:18385): avc: denied { prog_load } for pid=9270 comm="syz.2.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 236.856904][ T9291] loop0: detected capacity change from 0 to 512 [ 236.931601][ T9291] EXT4-fs: Ignoring removed oldalloc option [ 236.981096][ T9291] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 237.060637][ T9291] EXT4-fs (loop0): 1 truncate cleaned up [ 237.083037][ T9291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.364902][ T9084] veth0_vlan: entered promiscuous mode [ 237.387897][ T9084] veth1_vlan: entered promiscuous mode [ 237.484133][ T9084] veth0_macvtap: entered promiscuous mode [ 237.511559][ T9084] veth1_macvtap: entered promiscuous mode [ 237.555126][ T9084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.613886][ T9084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.666610][ T70] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.681549][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.690380][ T70] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.765311][ T70] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.790426][ T70] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.820257][ T9321] netlink: 444 bytes leftover after parsing attributes in process `syz.0.1562'. [ 237.840635][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'. [ 238.355783][ T9330] loop2: detected capacity change from 0 to 1024 [ 238.363894][ T9330] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.370927][ T9330] ext4: Bad value for 'errors' [ 238.475241][ T9330] netlink: 'syz.2.1567': attribute type 11 has an invalid length. [ 239.548235][ T9348] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 239.644016][ T9351] loop5: detected capacity change from 0 to 128 [ 239.706960][ T9354] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1535'. [ 239.716838][ T9351] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1535'. [ 241.416746][ T28] kauditd_printk_skb: 405 callbacks suppressed [ 241.416761][ T28] audit: type=1400 audit(1772913012.221:18769): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 241.469506][ T3572] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 241.545253][ T3572] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 241.631120][ T28] audit: type=1400 audit(1772913012.261:18770): avc: denied { read write } for pid=9366 comm="syz.0.1579" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 241.655360][ T28] audit: type=1400 audit(1772913012.261:18771): avc: denied { open } for pid=9366 comm="syz.0.1579" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 241.735494][ T28] audit: type=1400 audit(1772913012.271:18772): avc: denied { map_create } for pid=9366 comm="syz.0.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 241.770985][ T9384] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1583'. [ 241.781340][ T9381] loop5: detected capacity change from 0 to 512 [ 241.936447][ T9381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.940058][ T9380] fido_id[9380]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 241.962523][ T28] audit: type=1400 audit(1772913012.271:18773): avc: denied { map_read map_write } for pid=9366 comm="syz.0.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 242.007761][ T9381] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.046468][ T28] audit: type=1400 audit(1772913012.281:18774): avc: denied { open } for pid=9363 comm="syz.3.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 242.086550][ T28] audit: type=1400 audit(1772913012.281:18775): avc: denied { perfmon } for pid=9363 comm="syz.3.1578" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 242.108909][ T28] audit: type=1400 audit(1772913012.281:18776): avc: denied { kernel } for pid=9363 comm="syz.3.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 242.148975][ T28] audit: type=1400 audit(1772913012.281:18777): avc: denied { perfmon } for pid=9363 comm="syz.3.1578" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 242.196227][ T28] audit: type=1400 audit(1772913012.281:18778): avc: denied { tracepoint } for pid=9363 comm="syz.3.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 242.244710][ T9397] loop2: detected capacity change from 0 to 512 [ 242.292248][ T9397] EXT4-fs: Ignoring removed oldalloc option [ 242.325858][ T9397] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 242.357824][ T9397] EXT4-fs (loop2): 1 truncate cleaned up [ 242.375521][ T9397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.523900][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.618768][ T9084] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.695711][ T9425] loop2: detected capacity change from 0 to 8192 [ 242.703660][ T9425] vfat: Unknown parameter '18446744073709551615' [ 243.439991][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'. [ 243.901477][ T9461] loop0: detected capacity change from 0 to 512 [ 243.939317][ T9461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.961532][ T9461] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.915556][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.063479][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1608'. [ 245.283055][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1610'. [ 245.297299][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1611'. [ 245.612042][ T9503] loop0: detected capacity change from 0 to 8192 [ 245.631153][ T9503] vfat: Unknown parameter '18446744073709551615' [ 246.187886][ T9518] loop1: detected capacity change from 0 to 256 [ 246.432750][ T28] kauditd_printk_skb: 698 callbacks suppressed [ 246.432765][ T28] audit: type=1400 audit(1772913017.241:19477): avc: denied { read write } for pid=9084 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.508910][ T28] audit: type=1400 audit(1772913017.281:19478): avc: denied { read write open } for pid=9084 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.580398][ T28] audit: type=1400 audit(1772913017.281:19479): avc: denied { ioctl } for pid=9084 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.615992][ T28] audit: type=1400 audit(1772913017.311:19480): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.641649][ T28] audit: type=1400 audit(1772913017.311:19481): avc: denied { open } for pid=3309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.646519][ T9523] loop2: detected capacity change from 0 to 512 [ 246.670191][ T28] audit: type=1400 audit(1772913017.311:19482): avc: denied { ioctl } for pid=3309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.699777][ T28] audit: type=1400 audit(1772913017.371:19483): avc: denied { create } for pid=9520 comm="syz.5.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.720614][ T28] audit: type=1400 audit(1772913017.381:19484): avc: denied { setopt } for pid=9520 comm="syz.5.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.780393][ T28] audit: type=1400 audit(1772913017.421:19485): avc: denied { create } for pid=9520 comm="syz.5.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 246.838978][ T9523] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.879693][ T28] audit: type=1400 audit(1772913017.451:19486): avc: denied { create } for pid=9520 comm="syz.5.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.357963][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 248.413149][ T9540] vlan3: entered allmulticast mode [ 248.440455][ T9540] bridge_slave_0: entered allmulticast mode [ 248.480621][ T9540] bridge0: port 1(vlan3) entered blocking state [ 248.497414][ T9540] bridge0: port 1(vlan3) entered disabled state [ 248.528383][ T9540] vlan3: entered promiscuous mode [ 248.550454][ T9540] bridge_slave_0: entered promiscuous mode [ 248.831848][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1624'. [ 249.143977][ T9574] loop5: detected capacity change from 0 to 512 [ 249.211875][ T9574] EXT4-fs: Ignoring removed oldalloc option [ 249.241794][ T9574] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 249.273143][ T9574] EXT4-fs (loop5): 1 truncate cleaned up [ 249.292225][ T9574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.620027][ T9598] loop0: detected capacity change from 0 to 128 [ 249.627658][ T9084] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.742141][ T9601] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=94 sclass=netlink_xfrm_socket pid=9601 comm=syz.2.1632 [ 249.808085][ T9598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.206701][ T9615] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1634'. [ 250.252072][ T9615] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1634'. [ 250.359484][ T9619] loop1: detected capacity change from 0 to 128 [ 250.399101][ T9619] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 250.847658][ T9630] xt_hashlimit: size too large, truncated to 1048576 [ 251.441456][ T28] kauditd_printk_skb: 902 callbacks suppressed [ 251.441473][ T28] audit: type=1400 audit(1772913022.251:20389): avc: denied { allowed } for pid=9647 comm="syz.5.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 251.442282][ T9634] Set syz1 is full, maxelem 65536 reached [ 251.459670][ T28] audit: type=1400 audit(1772913022.251:20390): avc: denied { create } for pid=9647 comm="syz.5.1647" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 251.526796][ T28] audit: type=1400 audit(1772913022.311:20391): avc: denied { map } for pid=9647 comm="syz.5.1647" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 251.580468][ T28] audit: type=1400 audit(1772913022.311:20392): avc: denied { read write } for pid=9647 comm="syz.5.1647" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 251.636354][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1649'. [ 251.643106][ T28] audit: type=1400 audit(1772913022.341:20393): avc: denied { name_bind } for pid=9650 comm="syz.1.1648" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 251.689623][ T28] audit: type=1400 audit(1772913022.341:20394): avc: denied { node_bind } for pid=9650 comm="syz.1.1648" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 251.734722][ T28] audit: type=1400 audit(1772913022.341:20395): avc: denied { map } for pid=9650 comm="syz.1.1648" path="socket:[23788]" dev="sockfs" ino=23788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 251.805365][ T28] audit: type=1400 audit(1772913022.341:20396): avc: denied { prog_load } for pid=9650 comm="syz.1.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 251.869537][ T28] audit: type=1400 audit(1772913022.341:20397): avc: denied { bpf } for pid=9650 comm="syz.1.1648" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 251.927706][ T9659] audit: audit_backlog=65 > audit_backlog_limit=64 [ 251.988956][ T9663] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1652'. [ 252.219308][ T9668] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1654'. [ 252.515319][ T9681] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1659'. [ 252.562915][ T9685] FAULT_INJECTION: forcing a failure. [ 252.562915][ T9685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.581189][ T9685] CPU: 1 UID: 0 PID: 9685 Comm: syz.0.1660 Tainted: G W syzkaller #0 PREEMPT(full) [ 252.581225][ T9685] Tainted: [W]=WARN [ 252.581306][ T9685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.581319][ T9685] Call Trace: [ 252.581325][ T9685] [ 252.581333][ T9685] __dump_stack+0x1d/0x30 [ 252.581377][ T9685] dump_stack_lvl+0x95/0xd0 [ 252.581398][ T9685] dump_stack+0x15/0x1b [ 252.581418][ T9685] should_fail_ex+0x263/0x280 [ 252.581514][ T9685] should_fail+0xb/0x20 [ 252.581536][ T9685] should_fail_usercopy+0x1a/0x20 [ 252.581574][ T9685] _copy_from_user+0x1c/0xb0 [ 252.581608][ T9685] ___sys_sendmsg+0xc1/0x1e0 [ 252.581708][ T9685] __x64_sys_sendmsg+0xd4/0x160 [ 252.581738][ T9685] x64_sys_call+0x194c/0x3020 [ 252.581768][ T9685] do_syscall_64+0x12c/0x370 [ 252.581788][ T9685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.581821][ T9685] RIP: 0033:0x7ffb3b4bc799 [ 252.581857][ T9685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.581886][ T9685] RSP: 002b:00007ffb39f0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.581909][ T9685] RAX: ffffffffffffffda RBX: 00007ffb3b735fa0 RCX: 00007ffb3b4bc799 [ 252.581923][ T9685] RDX: 0000000000004800 RSI: 0000200000000000 RDI: 0000000000000004 [ 252.581936][ T9685] RBP: 00007ffb39f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 252.581948][ T9685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.581959][ T9685] R13: 00007ffb3b736038 R14: 00007ffb3b735fa0 R15: 00007ffcfa2d1df8 [ 252.581976][ T9685] [ 252.923397][ T9690] loop0: detected capacity change from 0 to 512 [ 252.943870][ T9690] EXT4-fs: Ignoring removed oldalloc option [ 253.976116][ T9690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.091311][ T9690] ext4 filesystem being mounted at /356/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.189593][ T9690] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1662: bg 0: block 217: padding at end of block bitmap is not set [ 254.243284][ T9690] EXT4-fs (loop0): Remounting filesystem read-only [ 254.409608][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.624653][ T9701] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 254.651349][ T9701] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 254.676118][ T9703] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1666'. [ 254.960175][ T9703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.007947][ T9701] loop3: detected capacity change from 0 to 8192 [ 255.080226][ T9703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.142903][ T9703] bond0 (unregistering): Released all slaves [ 255.493343][ T9718] loop1: detected capacity change from 0 to 512 [ 255.546686][ T9718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.559864][ T9718] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.643392][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.753861][ T9724] loop5: detected capacity change from 0 to 512 [ 255.822369][ T9724] EXT4-fs: Ignoring removed i_version option [ 255.941703][ T9724] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 256.324823][ T9260] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 256.339102][ T9260] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 256.404522][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1682'. [ 256.439859][ T9751] netlink: 'syz.5.1682': attribute type 2 has an invalid length. [ 256.455217][ T28] kauditd_printk_skb: 529 callbacks suppressed [ 256.455235][ T28] audit: type=1400 audit(1772913027.261:20923): avc: denied { open } for pid=9757 comm="syz.3.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 256.460446][ T9755] fido_id[9755]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 256.474018][ T28] audit: type=1400 audit(1772913027.261:20924): avc: denied { perfmon } for pid=9757 comm="syz.3.1684" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 256.520385][ T9751] netlink: 'syz.5.1682': attribute type 2 has an invalid length. [ 256.543480][ T9760] loop2: detected capacity change from 0 to 512 [ 256.557134][ T28] audit: type=1400 audit(1772913027.261:20925): avc: denied { kernel } for pid=9757 comm="syz.3.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 256.577983][ T9751] netlink: 'syz.5.1682': attribute type 1 has an invalid length. [ 256.586780][ T9751] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1682'. [ 256.596618][ T28] audit: type=1400 audit(1772913027.271:20926): avc: denied { create } for pid=9757 comm="syz.3.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 256.618609][ T28] audit: type=1400 audit(1772913027.301:20927): avc: denied { create } for pid=9754 comm="syz.2.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 256.639338][ T28] audit: type=1400 audit(1772913027.311:20928): avc: denied { getopt } for pid=9754 comm="syz.2.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 256.659414][ T28] audit: type=1400 audit(1772913027.321:20929): avc: denied { ioctl } for pid=9757 comm="syz.3.1684" path="socket:[24770]" dev="sockfs" ino=24770 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 256.694236][ T28] audit: type=1400 audit(1772913027.321:20930): avc: denied { write } for pid=9750 comm="syz.5.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 256.716357][ T28] audit: type=1400 audit(1772913027.341:20931): avc: denied { bind } for pid=9757 comm="syz.3.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 256.762314][ T28] audit: type=1400 audit(1772913027.341:20932): avc: denied { write } for pid=9757 comm="syz.3.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 256.792721][ T9760] EXT4-fs (loop2): 1 orphan inode deleted [ 256.807017][ T9760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.949479][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.360369][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1696'. [ 257.431781][ T9794] veth3: entered promiscuous mode [ 257.473231][ T9798] FAULT_INJECTION: forcing a failure. [ 257.473231][ T9798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.521978][ T9798] CPU: 0 UID: 0 PID: 9798 Comm: syz.2.1697 Tainted: G W syzkaller #0 PREEMPT(full) [ 257.522050][ T9798] Tainted: [W]=WARN [ 257.522057][ T9798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.522068][ T9798] Call Trace: [ 257.522074][ T9798] [ 257.522081][ T9798] __dump_stack+0x1d/0x30 [ 257.522114][ T9798] dump_stack_lvl+0x95/0xd0 [ 257.522142][ T9798] dump_stack+0x15/0x1b [ 257.522196][ T9798] should_fail_ex+0x263/0x280 [ 257.522218][ T9798] should_fail+0xb/0x20 [ 257.522236][ T9798] should_fail_usercopy+0x1a/0x20 [ 257.522294][ T9798] _copy_from_user+0x1c/0xb0 [ 257.522325][ T9798] ___sys_sendmsg+0xc1/0x1e0 [ 257.522364][ T9798] __x64_sys_sendmsg+0xd4/0x160 [ 257.522468][ T9798] x64_sys_call+0x194c/0x3020 [ 257.522498][ T9798] do_syscall_64+0x12c/0x370 [ 257.522587][ T9798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.522610][ T9798] RIP: 0033:0x7f13aba0c799 [ 257.522626][ T9798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.522643][ T9798] RSP: 002b:00007f13aa45f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.522759][ T9798] RAX: ffffffffffffffda RBX: 00007f13abc85fa0 RCX: 00007f13aba0c799 [ 257.522774][ T9798] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 257.522789][ T9798] RBP: 00007f13aa45f090 R08: 0000000000000000 R09: 0000000000000000 [ 257.522803][ T9798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.522817][ T9798] R13: 00007f13abc86038 R14: 00007f13abc85fa0 R15: 00007ffc668e9e38 [ 257.522837][ T9798] [ 257.788670][ T9811] loop5: detected capacity change from 0 to 1024 [ 257.792235][ T9814] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1700'. [ 257.807955][ T9811] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 257.857722][ T9811] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 257.869561][ T9811] EXT4-fs (loop5): orphan cleanup on readonly fs [ 257.890553][ T9818] bridge_slave_1: left allmulticast mode [ 257.896320][ T9818] bridge_slave_1: left promiscuous mode [ 257.903457][ T9811] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.1703: Invalid inode table block 0 in block_group 0 [ 257.904485][ T9818] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.924130][ T9811] loop5: lost filesystem error report for type 5 error -117 [ 257.924262][ T9811] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 257.931728][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 257.931754][ C0] EXT4-fs (loop5): initial error at time 1772913028: __ext4_get_inode_loc:4782 [ 257.931775][ C0] EXT4-fs (loop5): last error at time 1772913028: __ext4_get_inode_loc:4782 [ 257.975162][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1701'. [ 258.024031][ T9818] bridge_slave_0: left allmulticast mode [ 258.034071][ T9818] bridge_slave_0: left promiscuous mode [ 258.043484][ T9811] loop5: lost filesystem error report for type 5 error -117 [ 258.043602][ T9811] EXT4-fs error (device loop5): ext4_quota_write:7390: inode #3: comm syz.5.1703: mark_inode_dirty error [ 258.072350][ T9818] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.111209][ T9811] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 258.111331][ T9811] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1703: Failed to acquire dquot type 0 [ 258.136671][ T9811] loop5: lost filesystem error report for type 5 error -117 [ 258.136872][ T9811] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.1703: Invalid inode table block 0 in block_group 0 [ 258.158566][ T9811] loop5: lost filesystem error report for type 5 error -117 [ 258.158834][ T9811] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 258.178119][ T9811] loop5: lost filesystem error report for type 5 error -117 [ 258.178229][ T9811] EXT4-fs error (device loop5): ext4_ext_truncate:4528: inode #15: comm syz.5.1703: mark_inode_dirty error [ 258.228007][ T9811] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 258.228124][ T9811] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.1703: Invalid inode table block 0 in block_group 0 [ 258.270631][ T9811] loop5: lost filesystem error report for type 5 error -117 [ 258.277655][ T9811] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 258.309810][ T9811] loop5: lost filesystem error report for type 5 error -117 [ 258.318891][ T9811] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 258.335424][ T9811] loop5: lost filesystem error report for type 5 error -117 [ 258.337601][ T9811] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.1703: Invalid inode table block 0 in block_group 0 [ 258.377894][ T9811] loop5: lost filesystem error report for type 5 error -117 [ 258.378054][ T9811] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 258.409770][ T9811] loop5: lost filesystem error report for type 5 error -117 [ 258.409893][ T9811] EXT4-fs error (device loop5): ext4_truncate:4587: inode #15: comm syz.5.1703: mark_inode_dirty error [ 258.439981][ T9811] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 258.440170][ T9811] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 258.462271][ T9811] EXT4-fs (loop5): 1 truncate cleaned up [ 258.477266][ T9811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 258.495381][ T9811] EXT4-fs (loop5): shut down requested (2) [ 258.642857][ T9813] bond0: option ad_actor_sys_prio: invalid value (0) [ 258.652302][ T9813] bond0: option ad_actor_sys_prio: allowed values 1 - 65535 [ 258.686377][ T9813] bond0 (unregistering): Released all slaves [ 259.533251][ T9084] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.999310][ T9854] dummy0: entered promiscuous mode [ 261.059325][ T9854] macsec1: entered allmulticast mode [ 261.110704][ T9858] loop3: detected capacity change from 0 to 512 [ 261.154042][ T9854] dummy0: entered allmulticast mode [ 261.179692][ T9858] EXT4-fs (loop3): bad s_want_extra_isize: 2336 [ 261.219742][ T9854] dummy0: left allmulticast mode [ 261.259403][ T9854] dummy0: left promiscuous mode [ 261.463277][ T28] kauditd_printk_skb: 389 callbacks suppressed [ 261.463296][ T28] audit: type=1400 audit(1772913032.271:21320): avc: denied { perfmon } for pid=9863 comm="syz.2.1717" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 261.561145][ T28] audit: type=1400 audit(1772913032.311:21321): avc: denied { bpf } for pid=9863 comm="syz.2.1717" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 261.617844][ T28] audit: type=1400 audit(1772913032.331:21322): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 261.643555][ T28] audit: type=1400 audit(1772913032.331:21323): avc: denied { open } for pid=3309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 261.673833][ T28] audit: type=1400 audit(1772913032.331:21324): avc: denied { ioctl } for pid=3309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 261.701663][ T28] audit: type=1400 audit(1772913032.411:21325): avc: denied { create } for pid=9866 comm="syz.2.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.739870][ T28] audit: type=1400 audit(1772913032.411:21326): avc: denied { prog_load } for pid=9866 comm="syz.2.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 261.760389][ T28] audit: type=1400 audit(1772913032.411:21327): avc: denied { bpf } for pid=9866 comm="syz.2.1718" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 261.782205][ T28] audit: type=1400 audit(1772913032.411:21328): avc: denied { setopt } for pid=9866 comm="syz.2.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.804382][ T28] audit: type=1400 audit(1772913032.411:21329): avc: denied { write } for pid=9866 comm="syz.2.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.066722][ T9874] netlink: 'syz.0.1720': attribute type 12 has an invalid length. [ 262.127579][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1719'. [ 262.304107][ T9887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1726'. [ 262.594773][ T9900] loop1: detected capacity change from 0 to 512 [ 262.602995][ T9900] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 262.628027][ T9903] veth1_to_bond: entered allmulticast mode [ 262.712816][ T9892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1727'. [ 262.927383][ T9914] loop1: detected capacity change from 0 to 512 [ 262.985063][ T9901] veth1_to_bond: left allmulticast mode [ 263.086579][ T9914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.110681][ T9914] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.305978][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.317614][ T9922] loop3: detected capacity change from 0 to 2048 [ 263.461441][ T9922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.488456][ T9935] loop2: detected capacity change from 0 to 512 [ 263.541977][ T9935] EXT4-fs: Ignoring removed oldalloc option [ 263.580451][ T9935] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 263.610834][ T9935] EXT4-fs (loop2): 1 truncate cleaned up [ 263.623270][ T9937] loop5: detected capacity change from 0 to 512 [ 263.648353][ T9935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.821530][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.130098][ T9946] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1740'. [ 264.140791][ T9946] netlink: zone id is out of range [ 264.146846][ T9946] netlink: zone id is out of range [ 264.156809][ T9946] netlink: zone id is out of range [ 264.324987][ T9946] netlink: set zone limit has 8 unknown bytes [ 264.672513][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.912868][ T9952] loop1: detected capacity change from 0 to 8192 [ 264.939674][ T9952] vfat: Unknown parameter '18446744073709551615' [ 265.019403][ T9920] Set syz1 is full, maxelem 65536 reached [ 265.184951][ T9965] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1746'. [ 265.403429][ T9968] loop2: detected capacity change from 0 to 256 [ 265.618468][ T9978] netlink: 'syz.0.1749': attribute type 3 has an invalid length. [ 266.951877][ T28] kauditd_printk_skb: 529 callbacks suppressed [ 266.951964][ T28] audit: type=1400 audit(1772913036.831:21859): avc: denied { map_create } for pid=9982 comm="syz.0.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 266.978676][ T28] audit: type=1400 audit(1772913036.841:21860): avc: denied { perfmon } for pid=9982 comm="syz.0.1751" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 267.078415][ T28] audit: type=1400 audit(1772913036.841:21861): avc: denied { map_create } for pid=9982 comm="syz.0.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 267.136470][ T9989] loop3: detected capacity change from 0 to 1764 [ 267.159065][ T9990] loop2: detected capacity change from 0 to 256 [ 267.199127][ T28] audit: type=1400 audit(1772913036.841:21862): avc: denied { map_read map_write } for pid=9982 comm="syz.0.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 267.241308][ T9989] veth1_to_bond: entered allmulticast mode [ 267.261723][ T9990] vfat: Unknown parameter '184467440737095516150xffffffffffffffff' [ 267.290433][ T9989] netlink: 'syz.3.1752': attribute type 83 has an invalid length. [ 267.304469][ T28] audit: type=1400 audit(1772913036.841:21863): avc: denied { prog_load } for pid=9982 comm="syz.0.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 267.356503][ T9988] veth1_to_bond: left allmulticast mode [ 267.402973][ T28] audit: type=1400 audit(1772913036.851:21864): avc: denied { bpf } for pid=9982 comm="syz.0.1751" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 267.452811][ T9993] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.470813][ T9992] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.477837][ T9992] audit: audit_lost=337 audit_rate_limit=0 audit_backlog_limit=64 [ 267.486760][ T9993] audit: audit_lost=338 audit_rate_limit=0 audit_backlog_limit=64 [ 267.598454][ T9997] tipc: Started in network mode [ 267.610397][ T9997] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 267.627760][ T9997] tipc: Enabled bearer , priority 28 [ 268.021308][T10010] syzkaller0: refused to change device tx_queue_len [ 268.058848][T10011] vlan3: left promiscuous mode [ 268.080420][T10011] bridge_slave_0: left promiscuous mode [ 268.086263][T10011] bridge0: port 1(vlan3) entered disabled state [ 268.212625][ T9993] SELinux: failed to load policy [ 268.398593][T10021] loop0: detected capacity change from 0 to 512 [ 268.480944][T10021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.520750][T10021] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.554018][T10030] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1765'. [ 268.564336][T10030] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1765'. [ 268.668490][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1764'. [ 268.687494][T10033] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1764'. [ 268.750765][ T3572] tipc: Node number set to 8432298 [ 268.770133][T10026] netlink: 'syz.5.1764': attribute type 1 has an invalid length. [ 268.917030][T10040] loop5: detected capacity change from 0 to 512 [ 268.957702][T10040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.986976][T10040] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.093910][ T9084] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.233736][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.367089][T10047] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 269.468797][T10049] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1770'. [ 270.123494][ T4879] IPVS: starting estimator thread 0... [ 270.230407][T10068] IPVS: using max 2784 ests per chain, 139200 per kthread [ 270.281579][T10073] loop5: detected capacity change from 0 to 512 [ 270.348627][T10073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.391760][T10073] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.447422][T10078] loop0: detected capacity change from 0 to 512 [ 270.573708][T10078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.610875][T10078] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.684232][ T9084] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.165050][ T4879] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 271.200619][ T4879] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 271.399322][T10090] fido_id[10090]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 271.642799][T10099] netlink: 'syz.1.1785': attribute type 9 has an invalid length. [ 271.650829][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1785'. [ 271.664070][ T30] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.665084][T10099] netlink: 'syz.1.1785': attribute type 9 has an invalid length. [ 271.688985][ T30] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.713526][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1785'. [ 271.728917][ T30] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.764313][ T30] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.866068][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.924431][T10114] loop1: detected capacity change from 0 to 512 [ 271.980526][ T30] ================================================================== [ 271.983074][ T28] kauditd_printk_skb: 705 callbacks suppressed [ 271.983091][ T28] audit: type=1400 audit(1772913042.791:22568): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 271.988753][ T30] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 272.010445][ T28] audit: type=1400 audit(1772913042.811:22569): avc: denied { create } for pid=10115 comm="syz.0.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 272.019752][ T30] [ 272.019763][ T30] read to 0xffff88818cd9fdf8 of 4 bytes by task 6109 on cpu 1: [ 272.019783][ T30] atime_needs_update+0x25f/0x3e0 [ 272.062411][ T30] touch_atime+0x4a/0x330 [ 272.066769][ T30] shmem_file_read_iter+0x477/0x540 [ 272.072151][ T30] lo_rw_aio+0x67d/0x730 [ 272.076507][ T30] loop_process_work+0x56c/0xac0 [ 272.081550][ T30] loop_rootcg_workfn+0x22/0x30 [ 272.086583][ T30] process_scheduled_works+0x4de/0x9e0 [ 272.092245][ T30] worker_thread+0x581/0x770 [ 272.096843][ T30] kthread+0x22a/0x280 [ 272.101089][ T30] ret_from_fork+0x150/0x360 [ 272.105864][ T30] ret_from_fork_asm+0x1a/0x30 [ 272.110676][ T30] [ 272.113000][ T30] write to 0xffff88818cd9fdf8 of 4 bytes by task 30 on cpu 0: [ 272.120542][ T30] touch_atime+0x1d7/0x330 [ 272.125054][ T30] shmem_file_read_iter+0x477/0x540 [ 272.130293][ T30] lo_rw_aio+0x67d/0x730 [ 272.134558][ T30] loop_process_work+0x56c/0xac0 [ 272.139623][ T30] loop_workfn+0x31/0x40 [ 272.143878][ T30] process_scheduled_works+0x4de/0x9e0 [ 272.149367][ T30] worker_thread+0x581/0x770 [ 272.153994][ T30] kthread+0x22a/0x280 [ 272.158520][ T30] ret_from_fork+0x150/0x360 [ 272.163127][ T30] ret_from_fork_asm+0x1a/0x30 [ 272.167899][ T30] [ 272.170221][ T30] value changed: 0x2e95ef9a -> 0x2f2e861b [ 272.176197][ T30] [ 272.178668][ T30] Reported by Kernel Concurrency Sanitizer on: [ 272.184995][ T30] CPU: 0 UID: 0 PID: 30 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(full) [ 272.196029][ T30] Tainted: [W]=WARN [ 272.199923][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.210396][ T30] Workqueue: loop1 loop_workfn [ 272.215277][ T30] ================================================================== [ 272.265682][ T28] audit: type=1400 audit(1772913042.811:22570): avc: denied { create } for pid=10115 comm="syz.0.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.300431][ T28] audit: type=1400 audit(1772913042.811:22571): avc: denied { read write open } for pid=3309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.345370][ T28] audit: type=1400 audit(1772913042.811:22572): avc: denied { ioctl } for pid=3309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.373472][ T28] audit: type=1400 audit(1772913043.041:22573): avc: denied { create } for pid=10116 comm="syz.3.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 272.383734][T10125] loop2: detected capacity change from 0 to 512 [ 272.397311][ T28] audit: type=1400 audit(1772913043.041:22574): avc: denied { setopt } for pid=10116 comm="syz.3.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 272.441918][ T28] audit: type=1400 audit(1772913043.041:22575): avc: denied { create } for pid=10116 comm="syz.3.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.463281][ T28] audit: type=1400 audit(1772913043.041:22576): avc: denied { write } for pid=10116 comm="syz.3.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.486531][ T28] audit: type=1400 audit(1772913043.051:22577): avc: denied { read } for pid=10116 comm="syz.3.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.501871][T10123] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 272.557558][T10123] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 272.602120][T10114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.615141][T10114] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.683118][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.