last executing test programs: 4m16.198341371s ago: executing program 32 (id=525): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x20d}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x0, 0xff, 0x9, 0x0, 0x100}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x700, 0x7, 0xb6, 0x6, {{0x22, 0x4, 0x1, 0x3a, 0x88, 0x68, 0x0, 0x8, 0x2f, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x20, 0x25, 0x0, 0x3, [0x1e4, 0x6, 0x6, 0x3, 0x7f, 0x200, 0x5]}, @cipso={0x86, 0x26, 0x1, [{0x6, 0xd, "cda4cc0f0c1fc805f6a557"}, {0x0, 0x6, "2e80b8cb"}, {0x5, 0x2}, {0x2, 0xb, "a81368d454845faf49"}]}, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0xf, 0x23, [@loopback, @private=0xa010102, @empty]}, @ssrr={0x89, 0xf, 0xe7, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp={0x44, 0x8, 0x5a, 0x0, 0x1, [0x5]}]}}}}}) statx(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x100, 0x40, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@mcast1, @in=@multicast1, 0x4e22, 0x0, 0x4e20, 0xfff, 0xa, 0x0, 0x0, 0x73, r3, r4}, {0x30, 0x9, 0x3, 0x0, 0xffffffff00000001, 0xd5, 0x7, 0xffffffffffffff38}, {0x0, 0x2, 0x5, 0x4}, 0x0, 0x6e6bb9, 0x2, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x33}, 0x2, @in=@empty, 0x3502, 0x2, 0x1, 0x0, 0x3, 0x5, 0x2a70}}, 0xe8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10005, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) shutdown(r2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000010080)={r7, 0x0, 0xe, 0x0, &(0x7f00000101c0)="177bcfe8dce6e3330432a463b8b9", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x30}, 0x3}]}, &(0x7f0000000440)=0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000090601080000000000000002070000130900020073797a300000000005000100070000000900020073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r10 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r10, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000640)={r8, 0x2e5, 0x20, 0x7, 0x8}, &(0x7f0000000840)=0x18) 3m54.478041417s ago: executing program 33 (id=724): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2014c00, &(0x7f0000000200)={[{@errors_remount}]}, 0x1, 0x4fc, &(0x7f00000003c0)="$eJzs3WFrHGkdAPD/TLKXtM25ORQ5C94dNpIe2t3k4t0FkfME0VcH6vk+xmQTQjbZkN3UJhRN8QMIIir4yle+EfwAgvQjiFDQ96JFEW1VENGO7OyENu1usjZptrf5/eDpPs88M/N/nmn22Z2dh5kAzq3XIuLdiBiJiNcjolwsT4u0UKT2evfv3VxqpySy7P2/JpEUyw721S6PRsSliNiPiPGI+NqXI76ZPBm3ubu3vliv17aLcrW1sVVt7u5dW9tYXK2t1jbn5mbfmn97/s35maxwon5ejoh3vnj3h9/72Zfe+dWnv/X7hT9f/Xa7WZ/7aKfdEbF0ogBt/35yUWffpfxYHGgfo+0TB3s+jBT9KQ26IQAA9GUqIq5ExCfy7//lGMm/zQEAAADDJPv8RPwnicgAAACAoZVGxEQkaaWY7zsRaVqpdObwfiQupvVGs/WplcbO5nK7LmIySunKWr02U8wVnoxS0i7P5vmH5TceK89FxEsR8YPyhbxcWWrUlwf94wcAAACcE5dePXz+/49ymucBAACAITPZswAAAAAMC6f8AAAAMPyc/wMAAMBQ+8p777VTdvAc7+XruzvrjevXlmvN9crGzlJlqbG9VVltNFbze/ZtHLe/eqOx9ZnY3LlRbdWarWpzd29ho7Gz2VpYO/QIbAAAAOAMvfTq7d8lEbH/2Qt5iuI+gACH/HHQDQBO08igGwAMzOigGwAMTOnYNYwQMOySY+p7Tt759em3BQAAeDamP/bk9f8XirrjfxsAPsjM9QGA88fVPTi/SmYAwrk31XkZ61U/Hj0mAfR9/T/LnqphAADAqZnIU5JWimuBE5GmlUrEi/ljAUrJylq9NhMRH4qI35ZLY+3ybL5lcuycYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAIChFpH+Kcnv5h8xXZ6aePz3gReSf5XjblH4yfs/urHYam3Ptpf/rZzXR0Trx8XyNzKPBAAAAIDnQOc8vXidHXRrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg29+/dXDpIZxn3L1+IiMlu8UdjPH8dj1JEXPx7EqOPbJdExMgpxN+/FREvd4ufxIMsyyaLVnSLf+EZx5/MD033+GlEXDqF+HCe3W6PP+92e/+l8Vr+2v39N1qkk+o9/qV55H/GeD7OdRt/Xuwrwq24fOcX1Z7xb0VcHu0+/hyMv0mP+Ff67OM3vr6316su+2nEdNfPn+RQrGprY6va3N27traxuFpbrW3Ozc2+Nf/2/JvzM9WVtXqt+LdrjO9//JcPjur/xR7xJ4/p/1Sf/f/vnRv3PtzJlrrFv3ql++fvyz3ip8Vn3yeLfLt++iC/38k/6pWf/+aVo/q/3KP/x/3/X+2z/69/9bt/6HNVAOAMNHf31hfr9dr2EZnxPtaRkTmcGYuI/rfKvtP5ezxZ0J6bp0+3w+x5OZj/fybihPvpMWCMneXoBAAAnKaHX/oH3RIAAAAAAAAAAAAAAAAAAAA4v87ibmSPx9wfTFcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI70vwAAAP//7j7dxQ==") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000003800070127bd7000fedb9f25037c000010000180090001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000008c0)={{r0, &(0x7f0000000040)='[+\x00', 0x101080, &(0x7f0000000080)={@align=0x4, {0x1, 0x9, 0x7, 0xfc}}, 0x4, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xdd3}, 0x2, &(0x7f0000000300)=[{0x2, 0x40, &(0x7f0000000140)='ext4\x00', &(0x7f0000000240)="1d7e8c7b01c1e3e8aedb4164ef793f418c96e9eba630da0802b15514c3405123fdd1a15b36a229", 0x27, 0x10}, {0x0, 0x37cb, &(0x7f0000000280)='\'&&z\xad\x00', &(0x7f00000002c0)}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'vxcan0\x00', 0x0}) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000dc0)=@o_path={&(0x7f0000000d80)='./file1\x00', 0x0, 0x10, r0}, 0x18) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={0x0, 0x3, 0x10}, 0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0xfffffff7}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x18) pwrite64(r9, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r10 = getpid() r11 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x7ff}, 0x8386}, r10, 0x1, 0xffffffffffffffff, 0x3) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r12}, &(0x7f0000000180), &(0x7f00000001c0)=r11}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f00)}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffff2a7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) r15 = fcntl$dupfd(r0, 0x406, r0) r16 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r17 = fcntl$dupfd(r16, 0x0, r16) ioctl$USBDEVFS_SUBMITURB(r17, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x0, 0x1}, 0x3f, 0x4, &(0x7f0000000240)={0xa2, 0x9, 0x0, 0x2001}, 0x8, 0x8, 0x0, 0x0, 0xffff8000, 0x200001, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x4, 0x38, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0xfd, 0x0, 0x2, 0x0, 0x5}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @alu={0x7, 0x0, 0x0, 0x2, 0x4, 0x30}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @generic={0x8, 0xa, 0x8, 0x5, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x1, 0xa, 0x4, 0x3, 0x30, 0xfffffffffffffff0}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0xc7}}}, &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x2b, &(0x7f0000000c80)=""/43, 0x41100, 0x22, '\x00', r5, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000d40)={0x0, 0x8, 0xec8, 0x8}, 0x10, 0xffffffffffffffff, r6, 0x1, &(0x7f0000001000)=[r7, r8, r9, r12, r13, r14, r15, r17], &(0x7f0000001040)=[{0x4, 0x2, 0x0, 0x8}], 0x10, 0x6}, 0x94) 3m47.699560459s ago: executing program 34 (id=803): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) recvfrom(r0, &(0x7f0000000080)=""/4096, 0x1000, 0x2, &(0x7f0000001080)=@hci={0x1f, 0x1, 0x4}, 0x80) clock_getres(0x2, &(0x7f0000001100)) r1 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001140)=""/64, 0x40}, {&(0x7f0000001180)=""/14, 0xe}, {&(0x7f00000011c0)}, {&(0x7f0000001200)=""/46, 0x2e}], 0x4}}], 0x1, 0x0, &(0x7f00000012c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$tipc(r2, &(0x7f0000001340)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x2}}, 0x10) (async) connect$tipc(r2, &(0x7f0000001340)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x2}}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000001380)) unshare(0x40000c00) (async) unshare(0x40000c00) newfstatat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000013c0)=@sr0, r3, &(0x7f00000014c0)) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000001500)) write(r0, &(0x7f0000001540)="c06bdf13a2415a910115faa678e19a9ab80190a40aab6d48a6d122584df7a96b0a4eac2857811db120605bacb8e2ef8875de1d21d4ad438d368ddf85f91dde0ccebbc70637458bc59d498cf30b2365a30a1bc6700cc0313cb7770516b82e408e14f5ddc6b58bd95e0ccd3f5b39d4b8262d031eb6", 0x74) (async) write(r0, &(0x7f0000001540)="c06bdf13a2415a910115faa678e19a9ab80190a40aab6d48a6d122584df7a96b0a4eac2857811db120605bacb8e2ef8875de1d21d4ad438d368ddf85f91dde0ccebbc70637458bc59d498cf30b2365a30a1bc6700cc0313cb7770516b82e408e14f5ddc6b58bd95e0ccd3f5b39d4b8262d031eb6", 0x74) sendmmsg(r2, &(0x7f0000004140)=[{{&(0x7f00000015c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001640)="6017d9475d9ac93f1b745c1c14955ca560a3a8fa2b92", 0x16}, {&(0x7f0000001680)="682f2789a835710ba5de84e4d5e75bb3529819c3c341bc260653db71c2cb47039fd5a967e02eaf3399b61c58996994695578126db7befc1a4c9e0076bb6fc0f44638b36f1208390a435e2c5cde19b173fff2df905781d269d01f632ec8db4147f12838ff6956cf65", 0x68}, {&(0x7f0000001700)="b35b4fabe29385fddab78a8faf7fd18b7481b0b5bc53e4932eb78222e2668eafbd9fdf1aed0fc9598adfa48e1a340b4b8a9aa71075e9333d8d8fd065019d246f937eab2d45cb9574e013464a36e55f3b03e67105b3842dfc3d0056baeb958d2a9b61dc9a9bb7c9f6278c2e3c9652b5b39e716ce8d4cd7d9947a84a46b2b6cf60a1fc", 0x82}, {&(0x7f00000017c0)="a72560d09100893c889d11865abb6d48c5fb96aeb937dfbe8bd3898f2210724e922458464350afaa773162bff2812717ed610cf0c394ccebfcfcf31f1302bb50aa25113257e00e834f3d521d051640bac669430fb2329cf2ad7c075225943c2de155baa8067e309fec511040a705b785f297c76bb42bb28ee3059f168abf0d9f3c37aba12601a2669ce5c4b6783fe8b37130fce85ebfeba98e6f9e7217e1abe87e47afe9c7552a3f665a7a6558b1ce8927765ed97fb7a96208c9bf431ff836ed9fdc59b97ec245256c7c3711d5d83c2e5bc63cedc1ade00338750445af53b9ac85a785", 0xe3}, {&(0x7f00000018c0)="c1c53a42b6821d7f8dbbfc1276af097bb6b1746fd7884cb5fa1f62ad0393648656146d7ed598e7880e1e2c33196cf3f7a394584f0e1d478cf825c0ca114fddfac6f4b468993e1bfb6e7e1bd280911bfc77dcad96e8ba04c1d09b6c4496ac087328c7e0ff93f51a21940062f6174ab06d40265d979aede64532b417e27dd96c5892409aa7a79a0139fca45d08df62de7789d67e7136e52803b9091d0c5a8bad7051b9e1be7762e2d2c3ad75e59e8bd0d6343b1cb93e5e1f0da83d2b839db4a65ad938488ee559e1d7d6f12032b6c2f100606e9d92b7597f0925ce7b0706b55b512179816bf8871f613f2816d8dcc3104e289e6aef30936180bbd0b459a1f477505d60d4c4ea86f664100d9118d53dcc568c2853eaff5561376d9c84559c55539896eabdc0fa722f5d2ae352a03b9263c988f339dd12544314cddab4a1132cb23d2d88f49353f48f4d407c52bc0711a597e65c82de04fa1ab597264812f90cbf5793c99261345a27ed959e19068b3ef74e25df9641a0903e9c053b26c2c6a84a39aac9c46f1df5a9548ef7afad9037114c161d132437c9ab73878fc9b54f23b38d210108e1312867501aa76a2afc1e1f7a5b4eb6d5dd8b649d226dd38718f66cdf5a84786fd6437560c86fa76f9350e6434d86b450e10bee1e05b747dadabc4022a04dbfaed35e5e368e17654373bae00edf047f218282472c017c60c17a03c4b3b4c5842fa5a9d249342c01b041ffb363faeccf73360168a14c8e5540019c92f796f383cd4f57072fc09512e22f1b0cfdfa9eb37c04196a664acac0ab59ba55a8eff57070efe72c804228a0f08ed5da934166fef9d9024849fac524d8063cbb665d209e3960217aa8709338bec20388760808386ae9800f210cf84c1c9af0c54e63925d6cd988184dba326e3f2eb99fedcd0219d38c6581a1794ec1c0fc6e31d841cb86ac6252c51af2a36149476a1f2a6acf97f19c35e937eb86eb01d7049148413c4d49cbf8acf89e8463ead1c863ad06b81b135cbd89a714df52254800a87984e82e5cebe244ebc362c0263db933caf91fbef694fb61183fac23c0ce212b32c7c1c2f68364540ada7662fe4d4ad9f8efd17ec28dc5b67b875fb09e64e85a8d9b427bb5cd17d93e936cc00b03f39df36633863a26cf602cfe3c9d19978a6d2d767c09ab04237aaa8e60a29c6e6a087e4759e4a0045167e751f78142e4062538f3152ae87fcf6658568bddf915d393488fb00a9d8ec158e845f4e8d513159b1f60c5c833dd18de39055f9887affdba4d419c6f6fc01d9de5276fd3826ce1f7cd76c1966cc81cb2c11ecc0bc9d2a2051834c3a98aa77d085d403ab65b5607c1b3f4fd30cb4bc3237fd6058d773fce52b627d87deeda0a94b234c4462a921c020d77cb2738080612179fc38de25c594cbf97970c66269656cc7b8c170f49f14755cb0100ef1efb4b7bbfaad620dfee9b87807d979f81e8017677adfe7bf4b929347d6841540603257eeb2fce43ef4b2ba7144f925cc0bc36def5da479bc843153e4026e259988505ef44637f11d378984c31f69e8c2e4b507b27ee221d9f331dbd43cb888a49d79b9b1453a7c34197692024c38960eae771b3e7acccdf96a8cb293b127e5af596f1197d58d618f0201296bd1442cc4c487f2804c50af24104a6a942b20d5f56ed9ee00ec85f62574774383375ba706f1065ac8742a412058d096238d2fd0aac222578f078f9785edf7dcabb2c681a4c5ae52f7722212768041cb64984455776f2574fe4a30475e3320acf10909eb49d8aa78c66608489518e328e8a1d436fb9ebb1496fddd65e7a691bb22562f29c2508333702aaabad247036dcc3cdc762982ee1a0fbdb97cf44586630ec987b9e1190ab3a5d3d54174497c4af8f42ab7e3f05a7f940b5018555fc0d0e5dff1c7654fa9d459c68244e32ffaa600ef4ec21f083552af289ed6f67792c0d8fc18e164f005322fbc4f10cab9b2505629f785678c3250520a8b7cfd2349b315dc24da52956c3ef561a716ea25e4e8913c7c046f0c7f20d89a761795c4a82ee02275211b0bed5efd7900a43697d7f684e5e5d3a3fd669bc38643cb9e698d6981343708bcc040a6a6dd94e0d8dfafedd90835f46332a94ea8f10a9d02522525e52b9f4057413d87fbeb8257057db008091a6fd67d0504cc558712a562c56a6665234a8ebecc148f18325382d653b1c0fb0552e3d604888093c8f22eb7c77275eb540bba26c2ce0156442052aeb4666ddfb14d184a423a74afdea20b07191565b479ca9d11495d1238657c54a769d52d9105def3b719f755cf07388033ccd862adea5946e0af2f9cdd7f004e22891ada975d016951a757e3e52ca08e057d7433955f5fc3813aea11bdf67448013e872dc583f1be52a2f460853d62c45e63bab8080b153ee92404319fcacc401ad7a08c6ba8bb29be84b59e9437e534cdbd29da32bd8be4722b18951680443d261b1c112ab919e6522be1e87c243f13e2da091bcf2d250ac8eb25398b09902ebd5cccb95105f184af312f3e7481e1a7db7cb1334f54c176d7836fdd308fc8430e435b9df394f3f540d123a396a7d9e970de206d73c18707a984578002b5eb68aef982d71e3fa983294c37cc5b969b7e95df516766e99c86e0e4baf0eab8274713fa31fe0798a0b62bdc6de41005db53fb4914f773b03fa1444a5d677079c21ad7473aa49f8a5072c9ceb92f5a96ec0483a8fc19a41f06e2825c5afdc7ba6e14c781c87d27c01733b3dbba8e1d1e0ec9a7c20f7cfdb75b56fdfc875e27078245e44909bb9746cd34471e76a36a3e91b2c7ad987978849a2029b3b6e55ad348bffe800d80043a42e360a48b6aaf920d41606fde31fd4f836c8bce5ae74a234b2949d7c2aa483b219407480bfdd4011135f3658bacebc6270c808c902cb78526183fa3734629253875643e1f2353844b56ac8bbcdcd22a9db0b59177da712b88a2c920cc0965b9c5fa3a52c300710d52edcad42f77f2bd7000c466d433b7ddeda0ec45d76a81d6c0199bf5b11077fd5d9a0c8e50a71152175f72306b86267398b1b7bd0a1ffcd69415b5dccae12072a879d249cd15f8ab44874597d01f737af99ac8fa16dbdae1275134ccd0fadc79b5753dece78ce6e25d288d10fde2e39962b6237cff9072dcab0270f55246555f97c612bcabb795e08dbdd376bb54127a8cc44bd2782fd679edebc771a7ac01fb515e3d62b392df640dc42e5ac6396113da0e7fe79d93c5eefdd61f702ee024ace7998cf48fcaa56d7a0ab81b79abc890513c0d93e1e755a6ffe591462b2454acc9f3c5698da603a509aa908cd325a3a7c17171b8acd795fc00ffdca779f40eb04f7b8cc23c8b269ac49ed55f8c5e0a112c104a879d708df4321f31f3a548b59975b92dad8916cf434d979cfbc2f19040405bed681c443c0547683095d3f22df05d098fd82a8de183de4d9a0d6ccda70bdb47736520eb45922e6dc38d542ba60ef98f6a2a518dc577781845ffcdbba303c0c96f7fdaff2597987904eb050de8cefd6dff48746350a28dff4cde6cd2c0277a6f0d4d614b41f663477c9ca605eb0e7f006d47fc1c4edd6c6038127f7f56601028eff5dfeb52e697c1afd8e8e3577fed81d08f549b5b1145fbd296de55e7a6f2dbe296b017017291b1293ebee3da6a4318d9a61d5a6befc719a9582b7607ad5cb873d2e981e046987a5f2bf772c7b0e921e14ffa9a2719588cbe378ec41749d989434f7c84b6582edbd6e15d606f2b572f75c6247946b500c2abc2105cddeba1b56c90f3b24bf7c8b1c5bc2f1675eb96ece79a44fe7ec9b60cf9a870452db6a3163a4be18037b77e08906d1dedcb09f9a61b92dd2398c592f2c4a7b10bf993afd5d54184d3548581041df70035b9009ddd47b016fc413cf71ab970612b718170a52b09686139e4c833dc17bf8d4568914cb8da6369e6867db8df5cbc1980d4a9480a7413c70d763e912d190d4bf91bd55e05c782b6cda01f24d29dbbdc7cca2610fec02fd7780623c6f134ed23a57f6d05989e5e46079f207527d482d15e572e9efb51d5e3d459cb8e9b50f42d71690b8a1b3765c8e5ee0ab6d525555896a1bf69197ed3b08924ff780ced17a3610ee3668dd30a21e23062e6e7408d1600b05764c367bd7a20369a9218c6f674f997df771eea36f76755a2694ea8e1d2ce475d08a58471daea7fc992a4739c7f057d322fe866d7182b0c4653682cbb280ef71a442db9136b17cad4d4e669f066a57f5cdd835e684426a21d1e0fd0e8a085f95c8b356404430188a527b09d629f2bde8af08d458759f51822524148d5669920b014a1d9b5b8fc14e44136337862287a5403625c01d93e758e7490eac4b05fb9e534cde0c6a85e6629240fd7aba49b7a28256963337089f60560955e07ad4b2fee7a52f9d9903c7ae6ad01cdea6defdd678bd6e77e14c140ba03a10ac05a9d9181eb8ffb12c8bf8dafba8fce08acd884239fe87e0a3ed1cf20d20edb330f5a53dad60d3dea1b9483e18c159634677043c9311ad0b22969e74043fa344cfe124640535a087c273e0fcff185361ba983b7793e58902ea8f4430c87ca2337b3c8df06856f64fb9d6059d81d34b58d2a436616901a52225a10189d80a6f6c6ce525724b96e7710a43bef63e2da2ef76e8c1cd644158a62731cc785aec020e29055cee4c54c6ed5cf017320c2cf5f26a06092c6dbb78efd4e8e9f07b8e8f74f71f5d8503954e73f666ecf799c7b91207dc0ed973cf4d4dd07e54580e29471032d260c1f533ed1d46d654239d17854eb4d05ec6c9754c653c016ba23c5f9cde76b428915620feabe7b9affe1e71cbe56b96672ef97b312b1e078dea282584b9a85770ea5126018557234f5961206ec0ed87eb76963645b73f1bac4f91960a87782be9ed2c482e0c496732575eb94fe61ce672dd05b8acfd1621548b6a526da9eb24b431092bd3c50b7cde3bb0964e1d6a8c2ac3584587986ddcdc330bf6db1cb8ddaaacae9f7c7dc5290aabaa6579d7bb05621de43a3a57e77f9ee48b28bbbf1b5b5d9257bd897554cf2d65a3a126cafe80d97fedd2c1386f0cb47c688ef8a8735978ad6e484caea15195373ee22e96de4f142a5d397bd3b56087bdd797d6431a6671d68dca0f917ee908a6d317007102efbb10cac98b62bd98597a47b1a5dbb846db5f11e710a8f5fd50afb69f972201fd5a69c77ce11c3fce1197472d1d16ea6735bb7ad7879bb0046a1f2b25a03e035ff9f240e859388df783a662b600e9959f86d31cc6d3dfbb07c91720ad74b065750262ab9bbf10595d73d3916e65548ff5fe9195056ad8880efb50346632f8777367ed30900c76b2276eeb5c9e497e1210cad7242b242952b51af5f565592194bd1a3dbd5cab9f13649e0eea4ea949b9e069685285c1fccac77c9efcde8a755756d2f177e1bf730499fff5e246d5a1068b7041d6e3227b0e75aa3650b3e7ca4ca9bbe2af146b724fa2db6e41ae4e9a7b03c160c045aa86177457c6ea7a874c2cdc34d518e57037c34a626293d62529775fde076591b6e852d4ca65a63da40fe2c173481a8ad7e590dfedcc3e45138e415e835dfe15f0d7832bc6ab5e004025f2f940a88ac7255819045d78487335d2106421ee252d059f0fe21a21bde805b4b9f4664f48682b10e127aa0576bc8ceb658d065983a946a6c9095b92445c54d1ebf724f80cc63088df15f92475b920db4fe75db813311564990280d00bcb5f3706fe87610e69e36444ff05ac8b00ecd14d7eab4685ec68f50646", 0x1000}, {&(0x7f00000028c0)="3a34c52f2bbd6f21fe82d81d1e53e6f06a88769a0c88db1c4ba7caf0e3d4b08c3163402e304fc9875d7c8f57eba9b52c2bd09fa7f65669822b91309b5a4e86d3bb850a9fde20a69afa9c9105b559e2eea639a2a7896e8c93a25ac506f1b00504b9a023aa50decbda27c926f5075132f39ee517685b6fe2906739783626162bae6cdbf2dd5689e19679e8a5370ae99d4334445a8c64d0cd729a59a34222ab308f48e538c2cb74ebb8b190c238685d62d263c3bdfb955377375810210d31d660a50edf8de9bff6ce", 0xc7}, {&(0x7f00000029c0)="8575dba0a3bf62733e3820b29ecf9462e08d4934244915f7233a49d99ea16c69a35b1da8e3870cb4f4d68cd1a327e1499f6b0d16265900b051474fe056e145fcc2527a194d6a2d8ec4bb2ebc53748bd60be6196e884d2363ffe901f9b86b29c15af25fcf304fd5af7650f80873f5ab86ce4572e09e1b854d645dc13313c52ecaa494396939d47c053eea0946732c5cf76759815356c1791b91f97a7be66e52165f5e05e7934cd95ba6af1b92b4affca2d79b9f3da1e6da6932c1243d1ff6fcd9891b129458da", 0xc6}, {&(0x7f0000002ac0)}, {&(0x7f0000002b00)="4a2640ffff1a8fd0d417ca817037c13ae9b3e3d21ceea4843e07b4725c98a0d3da7d6f9ae39702cd049f7772a67f6fde6e020e3ea000fafe15a6b99c20ec6c1cf4e3c53b49b13b87ffa3ff88663879c83d66f5ed7ce4eac17d987fe808875c38ffcca60c7986763e66cb8cc16ee93ddc1a0b53f12ac715138ce2e6ec15de4ea9640028ecc5cbae0c5da9bffe7abcdf27c91aa413b620df3de4416dfeb3e647ba0de9818d5b5c732fdbfcae0cb675d75916ddd910cbcd", 0xb6}, {&(0x7f0000002bc0)="9e07579be20808b9ff2e23d1ea503531730942356aa7786771af341486ac6843c14aefb69d82559831151d074332b673c4af1989d7fee419122b8cfac3445569cdb67a1028178dc04a872c74e3699867145f07a63517465044c3d205b57371bf7a516d28faa64dcd8b0ea8d8", 0x6c}], 0xa, &(0x7f0000002d00)=[{0xa8, 0x107, 0xe, "90eae835c1a3858fdb01ef516fd53b8775c71726ad8182ab7a77754db26ecc6b73549ad9ca33e85a14ca08473bd8c0982f9e901b51c67db8aad3fb47f1b15c6945e1e3d811c98f4abc043cb513731c74ff5c9d76b99ac273d6d5d51c7ec9c6ad61a06c51cbc01dfd379a6e7ef65e7c85a000550486fa399038fdc0e65b7a5325e9780457b7e7b0a3e342467b80f826797bd9e37178"}], 0xa8}}, {{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000002dc0)="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", 0x1000}, {&(0x7f0000003dc0)="56f64d99a7aaf05cd2ac0bf8564a3db47bf44db34101434524eed30d29560520a36b245bb33682e7405bbab2c7ebd56e751a2f88b3d2f3424a3a7e6a485e861169f3aff8228a47802c7d2f372240602a944546be7e35b3efec7971a931499015ff9953f260535656c8f44031a7bfa75a0530cd89b592f771f5a6fc215ebc5d51e0521e547eaf506ac3694a6ee577a4043bf362d1803a248cfa52217fe7606a2ac86d739dc1a3b9a40f82141bf445833e65be20b5e39e468669d27d436108b3bb6bccb8a912725f779aebd455f95f6737f2995ae8", 0xd4}], 0x2, &(0x7f0000003f00)=[{0xf8, 0x1, 0x77f, "ad548c04b534486840234804bf998f037101b89d50d0f7f6a7aa77dee03fcb0a48fd463c6c25883536f409f69c8085dffe9eff76f341a338bd46d917d7d21df267838dda8295a95c402788cbb5b98a452a8d261f70dee0919f12841d666b7e87b2448f93e0ce4ad1a2f24362ba2e425cd34e98f31330fc60a6fa03082e539ae229fa59398e490c01d877941a579b1ecb5653616c0fabf7abaa1d33f2d25498564a972c8d0d323133706679b8f8d5735f2af82b80dcf3a212a3975b11010d8cfc4f23b10a9935fbc048ef5b2b1c3fd042558db0206e515d528f6f90219bdcffc725f9ce06"}, {0x40, 0x113, 0x2, "c65e03fa3c6c8c5c4b339b0ab0d64238c7ec3e4e7128ec4232bd978ee23407e871bc310f6fb78c59df2ba063c1d08d"}, {0x30, 0x103, 0x81, "8434ccf33d99a0803ceb9c1566c390a5f0b80443516212b31791015b"}, {0xa0, 0x113, 0x2, "0c1ac9ff975d11f7a804b8b5182189eb6e710cf42b3d9a9ee18fd52495cbc0d56cf429ab7d919d14e94cd2c6995807c7ea07c3ab6b9f1e2852abe3ae7ffc7b06dbe36d407d2861573657dd9738857cf7d101d83aa1c8c95dbf967f8ba80d01dc4c293dda76c78b9d7a92f777e3aba7cd96ea727857fe0c2ac55204c2f05748cc0a3103129e830bde2d09d805"}, {0x28, 0x104, 0x3, "af82041236ca95516966b4591d6bc4ad16fcdbb5"}], 0x230}}], 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000041c0), 0x200000, 0x0) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000041c0), 0x200000, 0x0) r6 = dup2(r5, r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000004200)={{0xffffffffffffffff, 0x2, 0x7fffffff, 0x1, 0x80000000}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000004200)={{0xffffffffffffffff, 0x2, 0x7fffffff, 0x1, 0x80000000}}) lsetxattr$security_ima(&(0x7f0000004240)='./file0\x00', &(0x7f0000004280), &(0x7f00000042c0)=@ng={0x4, 0xd, "ab9e9d3ae57d8a1ab8e03cecff598ce3aa7d"}, 0x14, 0x3) (async) lsetxattr$security_ima(&(0x7f0000004240)='./file0\x00', &(0x7f0000004280), &(0x7f00000042c0)=@ng={0x4, 0xd, "ab9e9d3ae57d8a1ab8e03cecff598ce3aa7d"}, 0x14, 0x3) sendmsg(r0, &(0x7f00000049c0)={&(0x7f0000004300)=@caif=@util={0x25, "d496cb1d6a3b6617a21ad34bde55c962"}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004380)="063a9fac4257e69884fb86521a6d6e5f7047c313d1be975de0a84cf20fc1215f28f8ab7fa95bfdd11b9df1148b898e91b8d1bb44125c3f6cd55a3111ee04a1e482658c87fa6dd1c0560cf043f12af5058b3da0e8900cb6a49ef25cf6e23a8884f719f3250b5a2d2145299ce9eabfb04b85ab78f6de4a6d412f316e3ae929af3d39d441f379e96fc8", 0x88}, {&(0x7f0000004440)="f955a2596bd76d75a175ce0a09782dd5", 0x10}], 0x2, &(0x7f00000044c0)=[{0x58, 0x107, 0x1000, "3d038e75d52399a8ce2078858bbc4bf4eccf600aeaa64f4c40e3d31c57c8a0e36ae466897833efb207fa13f9848d3cc1ea93efae3049d05e5b0eacd01a9b8e1d4a70f8dde88a"}, {0xe8, 0x119, 0x1, "a7416d374c5a55d77b7d66ab783b975a0cb47cf09bdd19089524690c3e31b5ca11a1de2787375f08a5d40a7ac25013f8c9d6dd7e322e545435461e8aead2f5b068b2e9f87db83c36635959fba912326fb239d8d80b6490ed05abb04d18b56fd6096b4acd0e63450966023fc664943cd678d9edb43c61be98e1bd82caf1acacee369dc537e9ed26fc73039359dc65b912dd16087f1421b691d24e1e3e3b738af7a859c660d35d7e76f18080a3d8e30ed3f2441da25389a58a1fd1539c063b0e9597a66942cff28e5d56e51c533a0432b16ab653"}, {0xd8, 0x10e, 0x0, "97d78cad10eeaeb0da0f5c2c15bc2d178646e7636619220e1afc4f99fc8480413f3db5adf91f22a98b3f924c44e2c9b87d0b5f6c532819492c0ddc5f6539249b856243f8a9ee616e25f7d2e9d2106865cb145f4703a018882e0614d44a4e41460f0d89aa7a623aee5cd8995069d86416f187fa84ff7e0762b91e53d97d2ca4daffdb948990209e60129f2f99470296e69db0f62823d9b82c7faa081c37c1d724443c89c9889a0f1365596a188a187f9c0c4a9e02c12654c8a2bee1418560d3c5b2bfeb23cb1baa64"}, {0x90, 0x119, 0x0, "7b3b9a84bb655f9a1f5e818c364776d56bc9d57fa5274aa299af2b2b80be4b64aa7f82661a8e549e0654352f8a956935a1ec54e003e251124c439d001dcecfe9e88603b2481a874784fea2e4c73790b31bd3d523f6e31f251e1f30f088c441857ab93b6ef54542330eb2c4c96d850371f72ecc5d13bf99794dbf338290ec3c"}, {0x110, 0xff, 0x9, "ccfdcb94f5a18cfff236b2d061598d6123801b69ddd42d58f9a3584bc53bae910c825c862ed6c42f3bf236cb61b7909ad13f28a4df7159e7480581bc7b791a3553025441c89b68c197074b61f08b874fdd26b28427383d065fa607cd3d67ba8eb03615035292bdb351ecb9a40c05d8213a9a810ae5f7227224fba3260ff5848cedc91ad4a56e6889e78667921eab6800229d48f1ca844d4e44b789bb07e5e3835632f51c2d6b399a4845ba4f07b450110ae78e0cef4e7c12b8f4d4f42499e2e49a61dc3b9158c792414c6386a599fe39047e45bcaa4563a660f078777f88aa44ef72cdf6c3d2d71d21237e3de7d3a08af3cf180471b7b4dcad81727550ca"}, {0x20, 0x29, 0x5, "e341a4ba0414892ae21a3c89ef"}, {0xb8, 0x10e, 0x6, "015ca91a8adb5119c501d604cdfbd6ee4b140339353182640b80f86f94f0ff0a63c42a42b452903767f0e1734b0307636bba0cddfaafc53720d38ff7a05c9a2b68f99435c1e781c2e1f62a16010af8889a2bf4da8c41b2d0f41b5d2b58b19f663f5b09c18cac03459a0338ae241ed4ef600172556491adc03f9411c9b48538e3756c35070d17d6dfc69d216050fc0e6fb2922977093c5b6f9983f2c69592966bba53bfae399fdd"}, {0x68, 0x114, 0x1, "dbce11d4022cc508c9e540b85cba91b58d337fb12d7bdf969fc12121596f1af38b41277c56a0873d0c9285daf4bf235aad6ea759a0308e8455c762172c3a648c071a12ac4f1a905e286b8928b8a7f85061"}], 0x4f8}, 0x0) close(r6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004cc0)={r2, 0xe0, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000004a00)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000004a40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004a80)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000004ac0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000004b00), &(0x7f0000004b40), 0x8, 0x7fffffff, 0x8, 0x8, &(0x7f0000004b80)}}, 0x10) fallocate(r2, 0x8, 0x8, 0xfffffffffffffffd) close_range(r0, r1, 0x0) fchown(r1, r3, r4) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000004d00)=""/114) (async) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000004d00)=""/114) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000004d80)={0x2, 0xc, 0x0, 0x3, 0xc0, 0x4, 0x1, 0xf, 0x0, 0x2, 0x1, 0x5, 0xf4, 0x10}, 0xe) socket$kcm(0x29, 0x7, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000004dc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000004dc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) semget$private(0x0, 0x3, 0x410) (async) r7 = semget$private(0x0, 0x3, 0x410) semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f0000005000)={{0x2, r3, r4, r3, r4, 0x18c, 0x9}, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000}) 3m41.003916653s ago: executing program 35 (id=861): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x40, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) write$cgroup_pid(r2, &(0x7f0000000040)=r3, 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8000a001, 0x7fffffff, 0x6, 0xe3df, 0xc265, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x1ff, 0x2, 0x6, 0x8918, 0x0, 0x3, 0x4, 0x8, 0x5, 0x9, 0x8, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x400003, 0x8, 0x107a, 0x5, 0x5, 0xd6bc, 0x1ff, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x80000001, 0xfff, 0x6, 0xa6, 0x7, 0xffffffff, 0x80ff, 0x1400, 0x7, 0x3, 0x7ff, 0x807fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x3ff8000, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x0, 0xffffffff, 0xa0, 0xffffffff, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0x100, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x101, 0x2, 0x4, 0x3, 0x1400, 0x5, 0x1, 0x103, 0xd4e, 0x65ad, 0x0, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0xffffffff, 0x6, 0xffffffff, 0x5, 0x0, 0x6, 0xa0, 0x7, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x3, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x408, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff7, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x3, 0x9, 0x5, 0x0, 0x8, 0xfffffffe, 0x7ff, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x405, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0xfffffffc, 0x9, 0x8, 0x2, 0x8001, 0xf0000000, 0xc, 0x3, 0x3, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x0, 0x3, 0x1, 0x9, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0x401, 0x6, 0x9982, 0x5, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x2, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3, 0x200, 0x100000c8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x3, 0x7, 0x40, {0x4, 0x2, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x6}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x2b, 0xb, 0x53, 0x5, 0x0, 0x4, 0x0, 0x12, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_bp={0x0, 0x1}, 0x20, 0x10001, 0x21382424, 0x3, 0x5, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r5, 0x9000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x40, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) write$cgroup_pid(r2, &(0x7f0000000040)=r3, 0x12) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8000a001, 0x7fffffff, 0x6, 0xe3df, 0xc265, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x1ff, 0x2, 0x6, 0x8918, 0x0, 0x3, 0x4, 0x8, 0x5, 0x9, 0x8, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x400003, 0x8, 0x107a, 0x5, 0x5, 0xd6bc, 0x1ff, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x80000001, 0xfff, 0x6, 0xa6, 0x7, 0xffffffff, 0x80ff, 0x1400, 0x7, 0x3, 0x7ff, 0x807fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x3ff8000, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x0, 0xffffffff, 0xa0, 0xffffffff, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0x100, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x101, 0x2, 0x4, 0x3, 0x1400, 0x5, 0x1, 0x103, 0xd4e, 0x65ad, 0x0, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0xffffffff, 0x6, 0xffffffff, 0x5, 0x0, 0x6, 0xa0, 0x7, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x3, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x408, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff7, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x3, 0x9, 0x5, 0x0, 0x8, 0xfffffffe, 0x7ff, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x405, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0xfffffffc, 0x9, 0x8, 0x2, 0x8001, 0xf0000000, 0xc, 0x3, 0x3, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x0, 0x3, 0x1, 0x9, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0x401, 0x6, 0x9982, 0x5, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x2, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3, 0x200, 0x100000c8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x3, 0x7, 0x40, {0x4, 0x2, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x6}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x2b, 0xb, 0x53, 0x5, 0x0, 0x4, 0x0, 0x12, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_bp={0x0, 0x1}, 0x20, 0x10001, 0x21382424, 0x3, 0x5, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r5, 0x9000) (async) 3m37.170957398s ago: executing program 36 (id=913): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfdd, &(0x7f0000001e00)=""/4061, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff19}, 0x94) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0xa3d8, &(0x7f0000000340)=[{&(0x7f00000000c0)='\x009zL', 0x4}], 0x1, 0x0, 0x1, {0x2}}) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000380)=0x0) sendmsg$nfc_llcp(r3, &(0x7f00000003c0)={&(0x7f00000004c0)={0x27, r5, 0x1, 0x7, 0xf, 0x5, "db1488594c01a2b47045dba0108ed983a8d1e0e698830af430b08ce26563b40329ccbc6962ee785e731f6b19d561f863976f405fecf3aa805bee95431cf7aa", 0x2e}, 0x60, &(0x7f0000000e40)=[{&(0x7f0000000540)="785c43d9b9fc3698e2d20478f1fdf8578a6fd8b306b4b3dca7209228315aaea32f7cefdae8783c543377936eef8137226f87d271f9726ad6baefff36532b9893fe73f2302fd0c19dbb3f99d684f3c7d9b74272b04834f2006a522b0ef9d33dafadb202e800fd2d5e1336335c3c84fd6bbc871ec6c1ecc940c9661e3b", 0x7c}, {&(0x7f00000005c0)="10f96d79e01356aaf9f6b094b01234ec693bc3b704632f82b1b800c0b734190807e3d9cf12293d63f0748ad52563fc83e4adbcd87b1b42f575c39fa0a10840f9873ede500c15d7fe898d5889e225cd229a9fcbce2c350cd2a5e3974a5a37909eb32ab00711d3c8a2333de42fd154e3a800d88f5592bc3e06dc17e127128d9827542c027d315578bfadbd67cab5af10dd30b3d3bd20d994e89f6cab99ea786c07eede0baf0f82b8fa248e9a205bd890d771b78fee647b1f9ecfda80c459f5b2f9e2e16357f71d1f1c2d", 0xc9}, {&(0x7f00000006c0)="5f24cce0eab69d09bc338e58ddb4cf03ee38ce3605a5672f834e5fb0d19b26328ef081e04c42a56fb79d0ce8dc77a09b25293136eee5926b054b194bf2894a1e2fc75c8deb57775e78c5c9ed7bffe69dddcd792a136c1e24399bdfdf099e39e4a7d66af1755d275ac4b0dfa8ab7e7a0bdc6ca6f43ac50745aa42eb6dbf7122237342f82e805b08dfa875070240d8531244f5adfe5819790ed78f6f02630b4aea9e6fbbcfdc8a77f8edfec7d45c481a800a2d18fe26fcfdfd05d5fd", 0xbb}, {&(0x7f0000000780)="06a67f7a1d6c0d86e74a6c4c308c48060a696c6a1f56b8d0c36297a38266c885052fa4dea81c93d1446e6313ac85b78ef08898b94baf428b8df0e6c8128fdf2ec7746ed950a08f26fe5a01dbd1c1bb238de75d042d485846f977c3b869263aafb848f5eb3025c0747e1a3537023b58f12d4e63e89e2410c8327f5830d9601b530a0f8ba66053a675b8036578b6f005e18881715a5ff08b5f49a88e498766a8ba99bd22d09553e256dfcf6c6d8de0495bca47dd7a131a9f2860105ac1de3ebbe1b1d748616912b1c2e3cd07970c2b362590", 0xd1}, {&(0x7f0000000940)="0c0828eed5e8f3ff1f00f9f06d032579e1163a1cd07e72071121bb64cc021fb877c3b3b65a89212b62b848e61e3fe406b1fdace3d5781948cb72cf5071a8afbf74a5aaebd7f35f444aba1aa08fec8f398cb9f5839ff097a375284a60cf5f67347c5c4744d855422bb5dfc29bbdc2dd7c614c87d1e020ad24ceefa6c056d9010701a5cd91", 0x84}, {&(0x7f0000000a00)="7a9b7e7e23ee43966ee15dfb2b04195057a00892e649a2c061f31e03cc248e9ded3226caf2118926f4bf10dca0b797fb78cea83a9c1763043da0433509ccaf208494e3dba69ce8a53d3a4aa6286805db1ca1641a78be87f5f0069bf94a85621ecc1e5e7b6f8e58375f5b605d459817ad67a9bab65c7dd700799758f7432de81921e2feb58143bf258f11f75f9f4d4daebced9a00df8d4ad19fa3f58359400a1952e61abff44973d889a9ed20db111e", 0xaf}, {&(0x7f0000000ac0)="0d36c3f1faac8bfbecc3b32980bb04b58ae4f174e5eaa7eef401b3cb806966468a936eb3d4e23c38e5d36f92777f07a6d934954a6ece220459e6be3cc55409001127dc1cc8f0f57b884985cfe6f5aa317fc0ac66d5531f730e2cb4dc107ce007e384898d5aaeb5c49a2ebf8e9bbdd3bd698d9715ed80697e86ef473a87a14972eab5bb7baa4272a3029b69919d5f0e07add70110863d55de2f6a3364ce8bf2455007698df9edd28693919f9f2bbe4542db14d3c0b3732515c70f7764bb9a20087750a9bef241d6846c298fc4f14786c7c40dc0", 0xd3}, {&(0x7f0000000bc0)="61cd3dcdaf479260cf12e7df3e02b51a847f9d56a948db9735239555999daf1b67f3854b6228ad78a7323076893b26edeca3491680eb6cdf18408fefe79a3a5c159dacaea7813017c730ebb0744fa769f6af16e2d79cbe7f88663f7b0072d94dc3537301a4ed057e9028613e00976a2646e5b70f40485df1b6c248f846", 0x7d}, {&(0x7f0000000c40)="a1f3276b1efee82ec01c00cf32551695c7c51ef903a83b54c69b218414751c943a6fb91ecdaf253f33fb08c95df77c22fdc5c5cac79d7db357283585737e5826a4be2ad47c893ec22dfdae6e2ddb118d3efaabc10d6314482670c473f5ac2367cf3082bf95b9f0835f4dd5c25d75811466441894330502a9cd47d36a6232e4e601e6600ce026c069162f0260252470451ea402479a5f6817f5b3ed8e7b26a7f254cf26c6bfaf24f7389a3e0d1421929f2202ecd0d1c5467a9706aea005e27386494c008eaf9898d388d2f6ec6cbf", 0xce}, {&(0x7f0000000d40)="6d95f0dc909a52f9c5e56cf33374367bee0fb62f254a7b6c23661f084b4379f1b9d6cc42ae075765abe856877370f3d0340692215e825fc4c4f80be941c88cc98eb6db959eb9ece34b00f144173fbd84bcc6d1c58311a29b512e8f37e95859cd204229b1442e2de60c2f9d14cbc69e2657ac84068df286b3695012a23b6e4ea22c07afa3637fe8f3acbe5bd5032e30004d265f9d1edff54f0af44e00505ad92b695e414d3176c341c8db6dd74af6ea92ed3460cebba64b1cb7fc8fe50c7556890382c99d7e85ce71c4070470ab62c5244e0e36ac68ea5a5d45ba571b75147979e860c566ea6d693914ae11cec794b8b5ea1263", 0xf3}], 0xa, &(0x7f0000000f00)={0x60, 0x3a, 0x3, "0ab5768f53a0e01f9b4ce0b658753dfc80313b45386ff16a64e1a5246ea84df9b61845b9ff0abc809e027900bdb866aa6c770439f5f026af8a96227191ae615c971a4a877d8d3d9a9f54"}, 0x60, 0x4000}, 0x80) epoll_wait(r3, &(0x7f0000000880)=[{}, {}, {}], 0x3, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x121, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)='bridge0\x00', 0x5d, 0x0, 0x86e2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) getitimer(0x2, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$usbfs(&(0x7f0000000f80), 0x1, 0xc000) r6 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 3m30.434133566s ago: executing program 37 (id=957): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x533, &(0x7f0000000880)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r1, 0x0, 0x0, 0x80000) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, 0x0, &(0x7f00000001c0)) 3m8.773832757s ago: executing program 38 (id=1164): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x300, 0xfea7) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000deffffff0000f6fffeffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4790, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000400)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'netdevsim', 0x3a, 'netdevsim', 0x3a, './file0', 0x3a, [0x46]}, 0x3a) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xc, 0xfff1}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) r12 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r2) sendmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="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", 0xfdd}], 0x2}}], 0x1, 0x24044015) recvmmsg(r1, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/22, 0x16}], 0x1, &(0x7f0000000100)=""/36, 0x24}}], 0x1, 0x2002, 0x0) r13 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1411ab6797332f85dc", @ANYRES16=r13, @ANYBLOB="010026bd7000fddbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x800c0}, 0x4084) 1m9.449672146s ago: executing program 3 (id=2587): r0 = socket$inet6(0xa, 0x1, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@null, 0x3, 'lo\x00'}) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000000)={'ip6gretap0\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x10003, 0x0, 0x401, 0x0, 0x0, 0x0, 0x9b, 0x4, 0x3, 0x0, 0x0, 0x2, 0x6, 0x44, 0x0, [0x0, 0x7ffdff]}}) (async) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb68, &(0x7f0000000c40)="$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") 1m9.340837195s ago: executing program 3 (id=2593): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x40800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r1 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r1, 0x0, 0x2000000, 0x1001f3) (fail_nth: 2) 1m9.06585945s ago: executing program 3 (id=2595): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) unshare(0x22020400) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="1c0000001c000104000000000000e9ff2d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) io_uring_enter(r4, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 1m8.838052779s ago: executing program 3 (id=2600): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0xfffffffffffffffd, &(0x7f0000000280)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000002240)=ANY=[@ANYBLOB="0800080007000000000014000000456f002c006600004011907864010101ac14141a35a2a59f9e4e204e210018907804000000020000"], 0x3a) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@init_itable_val}, {@data_err_abort}, {}, {@usrquota}, {@data_err_ignore}, {@init_itable}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x559, &(0x7f0000000940)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x0) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000080)) write$binfmt_script(r1, 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x3, 0x14, "89c1275824655e4d185f4d03498c8207edf7c3"}) r3 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1m8.562187363s ago: executing program 3 (id=2605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)=@newtaction={0x14, 0x30, 0x20}, 0x14}}, 0x20000044) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r3 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") lseek(r2, 0x1000000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022bbd7000fbe5442549000000080001003c00000008000300", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x48, 0x7, 0x6, 0x401, 0x0, 0x0, {0xc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x202}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000200900010073797a30000000000900020073797a320000000034000000080a010200000000000000000200000608000940000000000900020073797a32000000000900010073797a300000000014000000110001", @ANYRES32=r3], 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1m7.765686053s ago: executing program 3 (id=2620): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400"], 0x110}}, 0x0) 1m7.765079563s ago: executing program 39 (id=2620): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400"], 0x110}}, 0x0) 43.562204116s ago: executing program 5 (id=2858): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 43.505652221s ago: executing program 5 (id=2859): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x3ff, 0x5, 0x6, 0x3, 0x6, 0xfffffffe, 0x4, 0x5, 0x80000001, 0x5, 0x7, 0x8, 0x4, 0x6, 0x300, 0x6, 0x2, 0x3, 0x1ff, 0x3, 0x5, 0x3a7, 0x6, 0x6, 0xeee, 0x4, 0x4, 0x9, 0x9, 0x7, 0x0, 0x3fca, 0x62e6, 0x3, 0x4, 0x8, 0x2e2, 0x400, 0x6, 0x3, 0x9, 0xffffffff, 0x7f, 0xd, 0x1, 0x4, 0x7f, 0x9, 0x0, 0x0, 0x5a4, 0x101, 0x3, 0x3, 0xeb, 0x2, 0x8, 0x7, 0xffff8000, 0x0, 0x5, 0x8, 0x6, 0xb2, 0xca0e, 0x5, 0x200, 0x9, 0x1, 0x6, 0xffffffff, 0x3, 0x80, 0x6, 0x1b0, 0x2, 0x6, 0x8, 0xfffffffc, 0x3ad, 0x47d1, 0x4, 0x1, 0xf, 0x189, 0x9, 0x3, 0x3, 0x5, 0x4, 0x0, 0x2, 0x5, 0x2, 0x1, 0x6b3, 0x3, 0x4, 0x8, 0xffff8001, 0x3, 0x81, 0x7, 0xcb0a, 0xe51, 0x6, 0x8000, 0x5, 0x7c, 0x8c73, 0x1, 0x81, 0x800, 0xffffffff, 0x10000, 0x8, 0x7fffffff, 0x3, 0x80, 0x6, 0xffffffa5, 0x1, 0x4f23dcfd, 0x0, 0xfd, 0x65, 0x9, 0x1ff, 0x101, 0x3, 0x0, 0xb, 0x80, 0x3, 0x7f, 0x9, 0xfffffff8, 0x1ff, 0x8000, 0xa, 0x8, 0x2, 0xa, 0x5, 0x3, 0x14bd, 0x1, 0x4, 0x200000, 0x10000000, 0xffffffff, 0xe, 0x2, 0x2bf4, 0x1d50, 0x9, 0x400, 0x4, 0x1, 0x7, 0x1000, 0x5af7, 0x6, 0x40, 0x5, 0x44, 0x15dbc6d1, 0xfd, 0x7fffffff, 0x0, 0x2, 0x6, 0x2, 0x10000, 0x0, 0x6, 0x1000, 0xe314, 0x5, 0x9, 0xffffff45, 0x2, 0x3f, 0xffffffff, 0x5, 0x7, 0x4, 0xd7, 0xe, 0x8006, 0x9, 0x0, 0x7, 0x8, 0x9, 0x53e90d17, 0x2, 0x80, 0x8d4, 0x7, 0xf5, 0x8000, 0xbb6, 0x7, 0x10001, 0xd7, 0x4, 0x0, 0x7, 0x0, 0x0, 0x60, 0x0, 0x0, 0x4, 0x3, 0x8, 0xf9a0, 0x0, 0xd48, 0xf24, 0x1, 0x1, 0x6, 0x8, 0x2, 0x7, 0x22e, 0x6f4, 0x5, 0xfffffff9, 0x9, 0x3ff, 0xd91, 0x5, 0x1, 0x40, 0x9, 0xcd, 0xfffffffa, 0x3, 0x6, 0x6, 0x10, 0x2, 0x4, 0xffffff00, 0x6223, 0x7, 0x100, 0x9, 0x0, 0x6, 0x2, 0x3]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8b7, 0x1, 0x7f, 0x5, 0x6b69, 0x1, 0x9, 0x0, 0x7ff, 0x3, 0x5, 0x6, 0x3, 0x8000, 0xffffffff, 0x9, 0x6, 0x4, 0x1, 0x10000, 0x1, 0x5, 0xbf, 0x86a0, 0xfffff921, 0x4, 0xbc, 0x35cd, 0x80, 0x7, 0x4a, 0x8, 0xffffffd8, 0x4, 0xfffffffe, 0x7fffffff, 0x7cc3, 0x0, 0x2, 0x5, 0x10001, 0x6, 0x81, 0xab77, 0x0, 0x9, 0x4, 0x9, 0x80000000, 0xd7d, 0x401, 0x5, 0x0, 0x8, 0x1, 0x0, 0x3, 0x3ff, 0xb7f9, 0x80000001, 0x1, 0xeb, 0xfffffff9, 0xf6, 0x5, 0x5, 0x9, 0x7, 0x0, 0x1, 0x0, 0x0, 0x7, 0x5, 0x9, 0x0, 0x3, 0x0, 0x34, 0x8e2, 0x0, 0x200, 0x3cf, 0x9, 0x3, 0xec, 0x1ff, 0x1, 0x7, 0x1, 0x3, 0x9, 0xffffffff, 0xffff268f, 0x9, 0x7, 0xfffff4a8, 0x7d6b8949, 0x5, 0x3, 0xe, 0xfffffa68, 0x400, 0x9, 0x8773, 0x1, 0x0, 0x5, 0x56d, 0x6, 0xffffff67, 0x9, 0x1, 0x3, 0x2, 0x8, 0x100, 0x11, 0xfffffff7, 0xffffffff, 0x3, 0x3, 0x1, 0x2, 0xffffff28, 0x6, 0x81, 0x9, 0x8001, 0x6c, 0xffffffcf, 0x4, 0x51a0, 0x1, 0x6, 0x3, 0x6, 0x9, 0x2, 0x4, 0xfffffff9, 0x9, 0x4, 0x10001, 0x1, 0x9530, 0xe1c, 0x5, 0x5, 0x8, 0x80000000, 0x7, 0x9857, 0x400, 0x3, 0x7, 0x0, 0xfffffff9, 0x5, 0x5, 0x0, 0x6, 0x3fee, 0x3cd, 0x7, 0x401, 0x8, 0x8, 0xa5f, 0xe00c, 0x5ce, 0x1ff, 0x8, 0x2, 0x1, 0x8000, 0x0, 0x7cc1, 0xd2c, 0x3, 0x9, 0x1, 0x2, 0x4, 0x0, 0x8, 0xfff, 0x3, 0x32, 0x17, 0x40ae, 0x1, 0x81, 0x2, 0x5, 0x7, 0x75c, 0x6, 0x4, 0x2, 0x5, 0x0, 0x200, 0x4, 0x8f2, 0x2016, 0x1a0, 0xfffffe01, 0x6, 0xc, 0x6, 0x3, 0x29f9, 0x3, 0x4800000, 0x7fffffff, 0x9, 0x5, 0x7, 0x1000, 0xd877, 0x4, 0x3, 0x42, 0x1, 0xe6, 0xff, 0x2, 0x111e576a, 0xfffffff9, 0x9f, 0x8, 0x1, 0x4a2d, 0x6, 0x1, 0x1, 0x1, 0xfffffff8, 0xfff, 0x2, 0xfffffffa, 0x4, 0x7, 0x6a, 0x9a, 0x2, 0x5, 0x8, 0x0, 0x6, 0x3, 0xe, 0x1, 0x7, 0xfffffffb]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 43.505368381s ago: executing program 5 (id=2861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 43.409989619s ago: executing program 5 (id=2864): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRESOCT], 0x1, 0x2d5, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) 43.330217896s ago: executing program 5 (id=2867): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@gettaction={0x3c, 0x32, 0x605, 0x70bd27, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x3c}}, 0x0) 42.809770152s ago: executing program 5 (id=2873): getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xb, &(0x7f00000032c0)=""/161, &(0x7f0000003380)=0xa1) 42.704952291s ago: executing program 40 (id=2873): getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xb, &(0x7f00000032c0)=""/161, &(0x7f0000003380)=0xa1) 40.19618217s ago: executing program 6 (id=2924): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000300)={[{@cruft}, {@cruft}, {@check_relaxed}, {@mode={'mode', 0x3d, 0x7f}}]}, 0x1, 0x51d, &(0x7f0000000680)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 40.145950684s ago: executing program 6 (id=2925): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x2a, 0x0, &(0x7f00000007c0)="e02742e8680d85009882762f86dd6cea8b94a42626f6eff90292fb7b0500ac5a6d9d7c7ceaf08a0f8f81", 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.809719544s ago: executing program 6 (id=2927): r0 = memfd_create(&(0x7f0000000040)='\a\x00\x00\x00\x00\x00\x00\x00\x8e\x00\x00\x00', 0x6) lseek(r0, 0xff00000000000000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80642, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 39.758713148s ago: executing program 6 (id=2928): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRESOCT], 0x1, 0x2d5, &(0x7f00000007c0)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000080)) 39.640826119s ago: executing program 6 (id=2931): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 39.371992002s ago: executing program 8 (id=2942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb705) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'ip6gretap0\x00'}) 39.177721809s ago: executing program 8 (id=2946): unshare(0x20040600) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') unshare(0x22020600) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x381983, 0x0) 39.138894922s ago: executing program 8 (id=2948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "1657178b9c5070b49c40bbed6debe067"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) 39.029583812s ago: executing program 8 (id=2951): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRESOCT], 0x1, 0x2d5, &(0x7f00000007c0)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000080)) 38.877883565s ago: executing program 8 (id=2954): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 38.877764585s ago: executing program 6 (id=2955): unshare(0x4a000200) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01010200000000002000128008000100677265001400028006000e0002"], 0x40}, 0x1, 0xba01, 0x0, 0x40080}, 0x810) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfff, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x788, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 38.850683628s ago: executing program 41 (id=2955): unshare(0x4a000200) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01010200000000002000128008000100677265001400028006000e0002"], 0x40}, 0x1, 0xba01, 0x0, 0x40080}, 0x810) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfff, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x788, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 38.634800436s ago: executing program 8 (id=2963): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x800012, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x1, 0x2c9, &(0x7f0000000340)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x21) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8000) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x3, 0x17, 0x3, {0x7, './file1'}}, 0x10) 38.610381738s ago: executing program 42 (id=2963): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x800012, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x1, 0x2c9, &(0x7f0000000340)="$eJzs3T+LHGUYAPBndvdmN7HYLaxEcEALq5BLa7OHXCC4lXKFWuhhLiC3i3CBA6O4WNnaWPoJBMHOL2Ej+AEEP4CdKQKvzOwMO5fsnyxkE//8fsXec/O+z/s+78zc3h3HvPfxq7Pzu0Xc+/rL32MwyKIzjnE8zGIUnWiklFIsjb8NAODf7GFK8WdaeMqUcfmSRcRgv6UBAHuy8/f/n/ZeEgCwZ++9/8E7R5PJ8btFMYjbs28uT8rf7MuPi/aje/FpTOMsbsYwHi3+FtD8tFC+3k4pzXtFaRRvzOaXJ2Xm7KNf6vGPmokOYxijKrqaf2dyfFgstPLnZR3XF/N3qvlvxTBeXjH/ncnxrRX5cZLHm6+36r8Rw/j1k/gspnG3KmKZ/9VhUbydvvvriw/L8sr8bH550q/6LaXu87sqAAAAAAAAAAAAAAAAAAAAAAD8192o987pR7V/T3mo3n+n+6j85CCKxujq/jyL/KwZ6LH9geYpvk+p34uYHN8siiLVHZf5vXilF70Xs2oAAAAAAAAAAAAAAAAAAAD4Z7n/+YPz0+n07GJF8Nv1iDVNa4JmN4Dmsf4tWd11TePWkdfiwflpf/2AraZOHW6YNLpNnyxi43Kid9CMPNrpJOweXFtX8w8/7jrgYHufg03n59kEzd11fprFyj79aI4Mmmv6c7tPHk85V76uKW2//VpBvrJpuPPa85eqYL6hT2SbCnvrj8WZq49kj68ir87qyvSD1m4cq++N1rUYbF3Ok+8VWfVlnT+7Nx8AAAAAAAAAAAAAAAAAAOCK5UO/TzRd25LaSf29lQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz9Xy///vEMzr5LOLbh2t7ZzHxf0XuDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+J/4OAAD//2B3Ub8=") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x21) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8000) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x3, 0x17, 0x3, {0x7, './file1'}}, 0x10) 32.972729281s ago: executing program 0 (id=3056): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) 32.972350181s ago: executing program 0 (id=3057): connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0xb0, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x71, 0x0, [{0x6, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x6, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91f6dc"}, {0x6, 0xa, "6580a9e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 32.925541405s ago: executing program 0 (id=3058): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000000500)='\x00', 0x1) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) sendfile(r1, r0, 0x0, 0x3ffff) sync_file_range(r0, 0x8, 0x1, 0x1) 32.737823181s ago: executing program 0 (id=3059): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRESOCT], 0x1, 0x2d5, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, 0x0) 32.585550655s ago: executing program 0 (id=3061): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000740)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x38) 32.300799419s ago: executing program 0 (id=3070): syz_emit_ethernet(0x7e, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x4, 0x0, 0xfe, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010103, @local, {[@generic={0x83, 0x12, "53fc053875373c0dad2cc78797e1e7bd"}, @ssrr={0x89, 0x27, 0xf1, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}, @remote, @broadcast, @multicast2]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}}}}}}, 0x0) 32.256681353s ago: executing program 43 (id=3070): syz_emit_ethernet(0x7e, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x4, 0x0, 0xfe, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010103, @local, {[@generic={0x83, 0x12, "53fc053875373c0dad2cc78797e1e7bd"}, @ssrr={0x89, 0x27, 0xf1, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}, @remote, @broadcast, @multicast2]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}}}}}}, 0x0) 1.788571133s ago: executing program 1 (id=4174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$netlink(0x10, 0x3, 0x8) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/26, 0xe}], 0x26, 0x8, 0x2) 1.439909934s ago: executing program 2 (id=4194): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.398449378s ago: executing program 2 (id=4197): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0) 1.308323146s ago: executing program 2 (id=4201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newrule={0x38, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10002}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3b}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 1.274346989s ago: executing program 2 (id=4204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) 1.02136999s ago: executing program 2 (id=4209): syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r0 = syz_clone(0x8284180, 0x0, 0xfffffffffffffcc3, 0x0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000080)='smaps\x00') 790.333631ms ago: executing program 1 (id=4213): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0) 762.615503ms ago: executing program 1 (id=4215): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newrule={0x44, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10002}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 695.302269ms ago: executing program 1 (id=4218): bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000001580)={@in6={{0xa, 0x4e21, 0x80, @mcast2, 0x3}}, 0x0, 0x0, 0x46, 0x0, "302c567e5f72be792e132d8c2fc41a8e9854a3bf6d958bffe1d911e00e17933f0f34a2eda68a73ac68f26407cd4a61a4fef2167425d74d3edf0caa9e87ed41c807952788ea545ebe236eac971bfbbb84"}, 0xd8) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x1018, 0x3f7, 0x100, 0x70bd28, 0x25dfdbfb, {0x7, 0xff9, './file0', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, 0x1018}, 0x1, 0x0, 0x0, 0x10}, 0x40000) write$binfmt_elf64(r0, 0x0, 0xfffffdcf) 641.618664ms ago: executing program 1 (id=4220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) 462.199759ms ago: executing program 7 (id=4221): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xffe, &(0x7f0000003680)=ANY=[], 0x0) 411.393654ms ago: executing program 9 (id=4223): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 410.945974ms ago: executing program 1 (id=4224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$netlink(0x10, 0x3, 0x8) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/26, 0xe}], 0x26, 0x8, 0x2) 401.036475ms ago: executing program 7 (id=4226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387d9a57034b6eb3d5a", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 374.041257ms ago: executing program 7 (id=4227): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_to_hsr\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x4b, 0x3c, "04000787b600eca6aa0825471829a00700e5cde91eaf6df1497941f89ca551d1e71f0051669dbe000008005f19bf3852a3b32306f179db469789aefd"}}) 343.10964ms ago: executing program 7 (id=4228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newrule={0x44, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10002}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 342.77593ms ago: executing program 9 (id=4229): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xac}}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0xb, 0x8, 0x5) 334.02135ms ago: executing program 7 (id=4230): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, r1, 0x601, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4090) 289.550434ms ago: executing program 7 (id=4232): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/221, 0xdd}], 0x1}, 0x1ff}], 0x1, 0x7, 0x0) 285.687545ms ago: executing program 9 (id=4233): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0146493e6241f12e016cc5d600000000000000000000000000000000000000eccb7f10cdb643e1321647cd3d7fd7908eebf69333fc0dec4ee9621f60c30ac664617af5bf75e0fac25ec35378b98b400b8726d76389fe2071321b12e0645b5b278fdae5b179e138545e2c2a2333"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 285.076055ms ago: executing program 4 (id=4234): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}]}, &(0x7f0000000140)=0x10) r3 = dup(r0) r4 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0xf, @empty, 0x1}}, 0x400, 0xbffc, 0xe652, 0x2, 0x24, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000780)={r2, @in6={{0xa, 0xce20, 0xfffffffc, @empty, 0x2c}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 269.045756ms ago: executing program 9 (id=4235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) 236.727029ms ago: executing program 9 (id=4236): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xffe, &(0x7f0000003680)=ANY=[], 0x0) 216.486711ms ago: executing program 9 (id=4237): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x4, 0x8000}, 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xc9, 0xe}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, [], "8029335287b7a081"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) setresuid(0xee00, 0xee01, 0x0) setreuid(0xffffffffffffffff, 0xee01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000006800e97800000000ffdbdf250a00000000000000"], 0x30}}, 0x0) 158.463746ms ago: executing program 4 (id=4238): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000300)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, 0x0, 0x0) 158.274986ms ago: executing program 4 (id=4239): bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000001580)={@in6={{0xa, 0x4e21, 0x80, @mcast2, 0x3}}, 0x0, 0x0, 0x46, 0x0, "302c567e5f72be792e132d8c2fc41a8e9854a3bf6d958bffe1d911e00e17933f0f34a2eda68a73ac68f26407cd4a61a4fef2167425d74d3edf0caa9e87ed41c807952788ea545ebe236eac971bfbbb84"}, 0xd8) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x1018, 0x3f7, 0x100, 0x70bd28, 0x25dfdbfb, {0x7, 0xff9, './file0', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, 0x1018}, 0x1, 0x0, 0x0, 0x10}, 0x40000) write$binfmt_elf64(r0, 0x0, 0xfffffdcf) 153.388886ms ago: executing program 4 (id=4240): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newrule={0x44, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10002}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 133.447478ms ago: executing program 2 (id=4241): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[], 0x0) 109.04274ms ago: executing program 4 (id=4242): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x3ff, 0x5, 0x6, 0x3, 0x6, 0xfffffffe, 0x4, 0x5, 0x80000001, 0x5, 0x7, 0x8, 0x4, 0x6, 0x300, 0x6, 0x2, 0x3, 0x1ff, 0x3, 0x5, 0x3a7, 0x6, 0x6, 0xeee, 0x4, 0x4, 0x9, 0x9, 0x7, 0x0, 0x3fca, 0x62e6, 0x3, 0x4, 0x8, 0x2e2, 0x400, 0x6, 0x3, 0x9, 0xffffffff, 0x7f, 0xd, 0x1, 0x4, 0x7f, 0x9, 0x0, 0x0, 0x5a4, 0x101, 0x3, 0x3, 0xeb, 0x2, 0x8, 0x7, 0xffff8000, 0x0, 0x5, 0x8, 0x6, 0xb2, 0xca0e, 0x5, 0x200, 0x9, 0x1, 0x6, 0xffffffff, 0x3, 0x80, 0x6, 0x1b0, 0x2, 0x6, 0x8, 0xfffffffc, 0x3ad, 0x47d1, 0x4, 0x1, 0xf, 0x189, 0x9, 0x3, 0x3, 0x5, 0x4, 0x0, 0x2, 0x5, 0x2, 0x1, 0x6b3, 0x3, 0x4, 0x8, 0xffff8001, 0x3, 0x81, 0x7, 0xcb0a, 0xe51, 0x6, 0x8000, 0x5, 0x7c, 0x8c73, 0x1, 0x81, 0x800, 0xffffffff, 0x10000, 0x8, 0x7fffffff, 0x3, 0x80, 0x6, 0xffffffa5, 0x1, 0x4f23dcfd, 0x0, 0xfd, 0x65, 0x9, 0x1ff, 0x101, 0x3, 0x0, 0xb, 0x80, 0x3, 0x7f, 0x9, 0xfffffff8, 0x1ff, 0x8000, 0xa, 0x8, 0x2, 0xa, 0x5, 0x3, 0x14bd, 0x1, 0x4, 0x200000, 0x10000000, 0xffffffff, 0xe, 0x2, 0x2bf4, 0x1d50, 0x9, 0x400, 0x4, 0x1, 0x7, 0x1000, 0x5af7, 0x6, 0x40, 0x5, 0x44, 0x15dbc6d1, 0xfd, 0x7fffffff, 0x0, 0x2, 0x6, 0x2, 0x10000, 0x0, 0x6, 0x1000, 0xe314, 0x5, 0x9, 0xffffff45, 0x2, 0x3f, 0xffffffff, 0x5, 0x7, 0x4, 0xd7, 0xe, 0x8006, 0x9, 0x0, 0x7, 0x8, 0x9, 0x53e90d17, 0x2, 0x80, 0x8d4, 0x7, 0xf5, 0x8000, 0xbb6, 0x7, 0x10001, 0xd7, 0x4, 0x0, 0x7, 0x0, 0x0, 0x60, 0x0, 0x0, 0x4, 0x3, 0x8, 0xf9a0, 0x0, 0xd48, 0xf24, 0x1, 0x1, 0x6, 0x8, 0x2, 0x7, 0x22e, 0x6f4, 0x5, 0xfffffff9, 0x9, 0x3ff, 0xd91, 0x5, 0x1, 0x40, 0x9, 0xcd, 0xfffffffa, 0x3, 0x6, 0x6, 0x10, 0x2, 0x4, 0xffffff00, 0x6223, 0x7, 0x100, 0x9, 0x0, 0x6, 0x2, 0x3]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8b7, 0x1, 0x7f, 0x5, 0x6b69, 0x1, 0x9, 0x0, 0x7ff, 0x3, 0x5, 0x6, 0x3, 0x8000, 0xffffffff, 0x9, 0x6, 0x4, 0x1, 0x10000, 0x1, 0x5, 0xbf, 0x86a0, 0xfffff921, 0x4, 0xbc, 0x35cd, 0x80, 0x7, 0x4a, 0x8, 0xffffffd8, 0x4, 0xfffffffe, 0x7fffffff, 0x7cc3, 0x0, 0x2, 0x5, 0x10001, 0x6, 0x81, 0xab77, 0x0, 0x9, 0x4, 0x9, 0x80000000, 0xd7d, 0x401, 0x5, 0x0, 0x8, 0x1, 0x0, 0x3, 0x3ff, 0xb7f9, 0x80000001, 0x1, 0xeb, 0xfffffff9, 0xf6, 0x5, 0x5, 0x9, 0x7, 0x0, 0x1, 0x0, 0x0, 0x7, 0x5, 0x9, 0x0, 0x3, 0x0, 0x34, 0x8e2, 0x0, 0x200, 0x3cf, 0x9, 0x3, 0xec, 0x1ff, 0x1, 0x7, 0x1, 0x3, 0x9, 0xffffffff, 0xffff268f, 0x9, 0x7, 0xfffff4a8, 0x7d6b8949, 0x5, 0x3, 0xe, 0xfffffa68, 0x400, 0x9, 0x8773, 0x1, 0x0, 0x5, 0x56d, 0x6, 0xffffff67, 0x9, 0x1, 0x3, 0x2, 0x8, 0x100, 0x11, 0xfffffff7, 0xffffffff, 0x3, 0x3, 0x1, 0x2, 0xffffff28, 0x6, 0x81, 0x9, 0x8001, 0x6c, 0xffffffcf, 0x4, 0x51a0, 0x1, 0x6, 0x3, 0x6, 0x9, 0x2, 0x4, 0xfffffff9, 0x9, 0x4, 0x10001, 0x1, 0x9530, 0xe1c, 0x5, 0x5, 0x8, 0x80000000, 0x7, 0x9857, 0x400, 0x3, 0x7, 0x0, 0xfffffff9, 0x5, 0x5, 0x0, 0x6, 0x3fee, 0x3cd, 0x7, 0x401, 0x8, 0x8, 0xa5f, 0xe00c, 0x5ce, 0x1ff, 0x8, 0x2, 0x1, 0x8000, 0x0, 0x7cc1, 0xd2c, 0x3, 0x9, 0x1, 0x2, 0x4, 0x0, 0x8, 0xfff, 0x3, 0x32, 0x17, 0x40ae, 0x1, 0x81, 0x2, 0x5, 0x7, 0x75c, 0x6, 0x4, 0x2, 0x5, 0x0, 0x200, 0x4, 0x8f2, 0x2016, 0x1a0, 0xfffffe01, 0x6, 0xc, 0x6, 0x3, 0x29f9, 0x3, 0x4800000, 0x7fffffff, 0x9, 0x5, 0x7, 0x1000, 0xd877, 0x4, 0x3, 0x42, 0x1, 0xe6, 0xff, 0x2, 0x111e576a, 0xfffffff9, 0x9f, 0x8, 0x1, 0x4a2d, 0x6, 0x1, 0x1, 0x1, 0xfffffff8, 0xfff, 0x2, 0xfffffffa, 0x4, 0x7, 0x6a, 0x9a, 0x2, 0x5, 0x8, 0x0, 0x6, 0x3, 0xe, 0x1, 0x7, 0xfffffffb]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 0s ago: executing program 4 (id=4243): r0 = syz_open_dev$loop(0x0, 0x6, 0x109081) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xac}}, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0xb, 0x8, 0x5) kernel console output (not intermixed with test programs): .532157][T12536] RSP: 002b:00007eff9fdc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 236.532179][T12536] RAX: ffffffffffffffda RBX: 00007effa15e5fa0 RCX: 00007effa136c629 [ 236.532193][T12536] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 00000000000002e3 [ 236.532206][T12536] RBP: 00007eff9fdc7090 R08: 0000000000000001 R09: 0000000000000000 [ 236.532220][T12536] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 236.532234][T12536] R13: 00007effa15e6038 R14: 00007effa15e5fa0 R15: 00007ffe28f70778 [ 236.532254][T12536] [ 236.757860][T12549] loop2: detected capacity change from 0 to 512 [ 236.778315][T12549] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 236.801399][T12545] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 236.841167][T12545] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.071792][T12549] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 237.083690][T12549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 237.124889][T12549] netlink: 'syz.2.2416': attribute type 9 has an invalid length. [ 237.201400][ T8378] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.363056][ T28] audit: type=1400 audit(1771758782.738:3260): avc: denied { write } for pid=12556 comm="syz.6.2419" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 237.422981][T12567] syzkaller0: entered promiscuous mode [ 237.440504][T12567] syzkaller0: entered allmulticast mode [ 237.704282][ T28] audit: type=1400 audit(1771758783.078:3261): avc: denied { ioctl } for pid=12584 comm="syz.2.2425" path="socket:[38429]" dev="sockfs" ino=38429 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 237.760322][ T28] audit: type=1400 audit(1771758783.108:3262): avc: denied { write } for pid=12584 comm="syz.2.2425" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 237.820818][T12592] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.859586][T12594] loop8: detected capacity change from 0 to 1024 [ 237.877073][ T7306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.894294][T12594] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.916174][T12594] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 238.061785][T12603] __nla_validate_parse: 3 callbacks suppressed [ 238.061845][T12603] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2433'. [ 238.173409][T12613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=43 sclass=netlink_tcpdiag_socket pid=12613 comm=syz.2.2434 [ 238.241143][T12618] loop3: detected capacity change from 0 to 128 [ 238.334452][T12618] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 238.531106][T12618] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.054213][ T7306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.581037][T12645] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2447'. [ 239.724702][T12649] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2449'. [ 239.795268][T12651] xt_time: unknown flags 0xc [ 239.804348][T12651] netlink: 'syz.2.2450': attribute type 15 has an invalid length. [ 239.812710][T12651] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2450'. [ 240.468720][T12670] FAULT_INJECTION: forcing a failure. [ 240.468720][T12670] name failslab, interval 1, probability 0, space 0, times 0 [ 240.571050][T12670] CPU: 0 UID: 0 PID: 12670 Comm: syz.6.2458 Not tainted syzkaller #0 PREEMPT(full) [ 240.571079][T12670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 240.571134][T12670] Call Trace: [ 240.571141][T12670] [ 240.571149][T12670] __dump_stack+0x1d/0x30 [ 240.571176][T12670] dump_stack_lvl+0x95/0xd0 [ 240.571201][T12670] dump_stack+0x15/0x1b [ 240.571303][T12670] should_fail_ex+0x263/0x280 [ 240.571327][T12670] should_failslab+0x8c/0xb0 [ 240.571344][T12670] kmem_cache_alloc_noprof+0x66/0x400 [ 240.571369][T12670] ? __anon_vma_prepare+0x70/0x2f0 [ 240.571392][T12670] ? _raw_spin_lock+0x52/0xa0 [ 240.571416][T12670] __anon_vma_prepare+0x70/0x2f0 [ 240.571507][T12670] handle_mm_fault+0x215a/0x3020 [ 240.571557][T12670] ? __rcu_read_unlock+0x4e/0x70 [ 240.571583][T12670] ? check_vma_flags+0x26d/0x330 [ 240.571616][T12670] __get_user_pages+0x1023/0x1ea0 [ 240.571697][T12670] __gup_longterm_locked+0x8d7/0xe30 [ 240.571731][T12670] ? security_ptrace_access_check+0x61/0x70 [ 240.571784][T12670] ? __ptrace_may_access+0x2bc/0x340 [ 240.571807][T12670] pin_user_pages_remote+0x7e/0xb0 [ 240.571839][T12670] process_vm_rw+0x49b/0x9c0 [ 240.571933][T12670] __x64_sys_process_vm_writev+0x78/0x90 [ 240.571955][T12670] x64_sys_call+0x1592/0x3020 [ 240.572009][T12670] do_syscall_64+0x12c/0x370 [ 240.572080][T12670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.572103][T12670] RIP: 0033:0x7f646ce4c629 [ 240.572120][T12670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.572137][T12670] RSP: 002b:00007f646b8a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 240.572197][T12670] RAX: ffffffffffffffda RBX: 00007f646d0c5fa0 RCX: 00007f646ce4c629 [ 240.572212][T12670] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 00000000000003d1 [ 240.572226][T12670] RBP: 00007f646b8a7090 R08: 0000000000000001 R09: 0000000000000000 [ 240.572238][T12670] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 240.572250][T12670] R13: 00007f646d0c6038 R14: 00007f646d0c5fa0 R15: 00007ffca4db7788 [ 240.572270][T12670] [ 240.914081][T12679] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2461'. [ 240.951029][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 241.128954][T12683] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2463'. [ 241.369830][T12687] xt_ecn: cannot match TCP bits for non-tcp packets [ 241.634415][T12696] loop2: detected capacity change from 0 to 4096 [ 241.837813][T12710] netlink: 'syz.4.2473': attribute type 9 has an invalid length. [ 241.863673][T12712] FAULT_INJECTION: forcing a failure. [ 241.863673][T12712] name failslab, interval 1, probability 0, space 0, times 0 [ 241.968364][T12712] CPU: 1 UID: 0 PID: 12712 Comm: syz.6.2471 Not tainted syzkaller #0 PREEMPT(full) [ 241.968394][T12712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.968405][T12712] Call Trace: [ 241.968420][T12712] [ 241.968429][T12712] __dump_stack+0x1d/0x30 [ 241.968597][T12712] dump_stack_lvl+0x95/0xd0 [ 241.968621][T12712] dump_stack+0x15/0x1b [ 241.968642][T12712] should_fail_ex+0x263/0x280 [ 241.968692][T12712] should_failslab+0x8c/0xb0 [ 241.968713][T12712] kmem_cache_alloc_noprof+0x66/0x400 [ 241.968736][T12712] ? __anon_vma_prepare+0xcd/0x2f0 [ 241.968821][T12712] __anon_vma_prepare+0xcd/0x2f0 [ 241.968847][T12712] handle_mm_fault+0x215a/0x3020 [ 241.968873][T12712] ? __rcu_read_unlock+0x4e/0x70 [ 241.968894][T12712] ? check_vma_flags+0x26d/0x330 [ 241.968960][T12712] __get_user_pages+0x1023/0x1ea0 [ 241.968990][T12712] __gup_longterm_locked+0x8d7/0xe30 [ 241.969093][T12712] ? security_ptrace_access_check+0x61/0x70 [ 241.969118][T12712] ? __ptrace_may_access+0x2bc/0x340 [ 241.969147][T12712] pin_user_pages_remote+0x7e/0xb0 [ 241.969179][T12712] process_vm_rw+0x49b/0x9c0 [ 241.969216][T12712] __x64_sys_process_vm_writev+0x78/0x90 [ 241.969271][T12712] x64_sys_call+0x1592/0x3020 [ 241.969299][T12712] do_syscall_64+0x12c/0x370 [ 241.969388][T12712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.969482][T12712] RIP: 0033:0x7f646ce4c629 [ 241.969498][T12712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.969545][T12712] RSP: 002b:00007f646b8a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 241.969567][T12712] RAX: ffffffffffffffda RBX: 00007f646d0c5fa0 RCX: 00007f646ce4c629 [ 241.969582][T12712] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 00000000000003e5 [ 241.969667][T12712] RBP: 00007f646b8a7090 R08: 0000000000000001 R09: 0000000000000000 [ 241.969680][T12712] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 241.969695][T12712] R13: 00007f646d0c6038 R14: 00007f646d0c5fa0 R15: 00007ffca4db7788 [ 241.969715][T12712] [ 242.294165][T12726] loop6: detected capacity change from 0 to 1024 [ 242.373965][T12726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.600324][T12735] syzkaller0: entered promiscuous mode [ 242.711002][T12735] syzkaller0: entered allmulticast mode [ 242.887368][T12744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=12744 comm=syz.6.2479 [ 243.433701][ T6063] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.116999][T12760] loop8: detected capacity change from 0 to 512 [ 244.141689][T12760] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 244.201208][T12760] EXT4-fs (loop8): 1 truncate cleaned up [ 244.231486][T12760] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.447740][ T6665] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.659326][T12771] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2490'. [ 244.689198][T12773] loop2: detected capacity change from 0 to 512 [ 244.719736][T12774] loop6: detected capacity change from 0 to 128 [ 244.727979][ T28] audit: type=1400 audit(1771758790.098:3263): avc: denied { shutdown } for pid=12769 comm="syz.8.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 244.748148][T12773] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 244.781918][T12773] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 244.811108][T12771] loop6: detected capacity change from 0 to 512 [ 244.827695][T12773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 244.932502][T12773] netlink: 'syz.2.2493': attribute type 9 has an invalid length. [ 245.060842][T12771] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 245.111520][ T8378] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.243400][T12771] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 245.425801][T12788] xt_NFQUEUE: number of total queues is 0 [ 245.482287][T12771] EXT4-fs (loop6): group descriptors corrupted! [ 246.259643][T12796] syzkaller0: entered promiscuous mode [ 246.309446][T12796] syzkaller0: entered allmulticast mode [ 246.377218][T12771] loop6: detected capacity change from 0 to 512 [ 246.606203][T12771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.709951][T12771] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.907974][ T6063] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.290733][T12832] tmpfs: Bad value for 'nr_inodes' [ 247.537937][T12838] syzkaller0: entered promiscuous mode [ 247.571608][T12838] syzkaller0: entered allmulticast mode [ 247.583851][T12841] FAULT_INJECTION: forcing a failure. [ 247.583851][T12841] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 247.617542][T12841] CPU: 0 UID: 0 PID: 12841 Comm: syz.2.2511 Not tainted syzkaller #0 PREEMPT(full) [ 247.617573][T12841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 247.617584][T12841] Call Trace: [ 247.617589][T12841] [ 247.617596][T12841] __dump_stack+0x1d/0x30 [ 247.617627][T12841] dump_stack_lvl+0x95/0xd0 [ 247.617650][T12841] dump_stack+0x15/0x1b [ 247.617672][T12841] should_fail_ex+0x263/0x280 [ 247.617695][T12841] should_fail_alloc_page+0xf2/0x100 [ 247.617814][T12841] __alloc_frozen_pages_noprof+0x108/0x360 [ 247.617845][T12841] alloc_pages_mpol+0xb3/0x260 [ 247.617871][T12841] ? css_rstat_updated+0xbb/0x280 [ 247.617951][T12841] vma_alloc_folio_noprof+0x1a9/0x300 [ 247.617997][T12841] handle_mm_fault+0x111f/0x3020 [ 247.618026][T12841] ? _raw_spin_lock+0x52/0xa0 [ 247.618047][T12841] ? pte_offset_map_lock+0x1d9/0x240 [ 247.618122][T12841] __get_user_pages+0x1023/0x1ea0 [ 247.618153][T12841] __gup_longterm_locked+0x8d7/0xe30 [ 247.618181][T12841] ? security_ptrace_access_check+0x61/0x70 [ 247.618203][T12841] ? __ptrace_may_access+0x2bc/0x340 [ 247.618226][T12841] pin_user_pages_remote+0x7e/0xb0 [ 247.618255][T12841] process_vm_rw+0x49b/0x9c0 [ 247.618362][T12841] __x64_sys_process_vm_writev+0x78/0x90 [ 247.618383][T12841] x64_sys_call+0x1592/0x3020 [ 247.618421][T12841] do_syscall_64+0x12c/0x370 [ 247.618473][T12841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.618535][T12841] RIP: 0033:0x7fde4807c629 [ 247.618549][T12841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.618645][T12841] RSP: 002b:00007fde46acf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 247.618666][T12841] RAX: ffffffffffffffda RBX: 00007fde482f5fa0 RCX: 00007fde4807c629 [ 247.618687][T12841] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 0000000000000322 [ 247.618776][T12841] RBP: 00007fde46acf090 R08: 0000000000000001 R09: 0000000000000000 [ 247.618791][T12841] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000002 [ 247.618805][T12841] R13: 00007fde482f6038 R14: 00007fde482f5fa0 R15: 00007ffeeec597a8 [ 247.618825][T12841] [ 248.032116][T12851] loop8: detected capacity change from 0 to 1024 [ 248.039271][T12851] EXT4-fs: Ignoring removed orlov option [ 248.081834][T12851] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.220268][T12864] loop6: detected capacity change from 0 to 512 [ 248.238055][ T6665] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.258759][T12864] EXT4-fs: Ignoring removed nobh option [ 248.279934][T12864] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 248.328204][T12864] EXT4-fs (loop6): 1 truncate cleaned up [ 248.345033][T12875] macvlan0: entered allmulticast mode [ 248.365549][T12864] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.381118][T12875] veth1_vlan: entered allmulticast mode [ 248.389772][T12860] veth4: entered allmulticast mode [ 248.403212][T12878] loop8: detected capacity change from 0 to 512 [ 248.438281][T12878] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2522'. [ 248.492209][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2522'. [ 248.516975][ T6063] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.605115][T12882] loop2: detected capacity change from 0 to 512 [ 249.080261][T12896] tipc: Enabled bearer , priority 0 [ 249.333909][T12896] syzkaller0: entered promiscuous mode [ 249.387369][T12896] syzkaller0: entered allmulticast mode [ 249.447788][T12896] tipc: Resetting bearer [ 249.488258][T12882] veth1_vlan: left allmulticast mode [ 249.556107][T12882] macvlan0 (unregistering): left allmulticast mode [ 249.623429][T12895] tipc: Resetting bearer [ 249.646614][T12895] tipc: Disabling bearer [ 249.901523][ T28] audit: type=1326 audit(1771758795.198:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.6.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646ce4c629 code=0x7ffc0000 [ 249.946161][T12908] loop6: detected capacity change from 0 to 512 [ 250.057005][ T28] audit: type=1326 audit(1771758795.218:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.6.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f646ce4c629 code=0x7ffc0000 [ 250.105751][T12908] EXT4-fs (loop6): orphan cleanup on readonly fs [ 250.131856][T12908] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 250.174244][T12908] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 250.190965][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 250.197401][ C0] EXT4-fs (loop6): initial error at time 1771758795: ext4_mb_generate_buddy:1315 [ 250.206553][ C0] EXT4-fs (loop6): last error at time 1771758795: ext4_mb_generate_buddy:1315 [ 250.228540][ T28] audit: type=1326 audit(1771758795.218:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.6.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646ce4c629 code=0x7ffc0000 [ 250.279834][T12908] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2530: attempt to clear invalid blocks 2 len 1 [ 250.607157][T12908] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 250.681162][T12908] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2530: invalid indirect mapped block 1819239214 (level 0) [ 250.956916][ T28] audit: type=1326 audit(1771758795.218:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.6.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f646ce4c629 code=0x7ffc0000 [ 250.980541][ T28] audit: type=1326 audit(1771758795.218:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.6.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646ce4c629 code=0x7ffc0000 [ 251.011267][T12908] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 251.055031][T12908] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2530: invalid indirect mapped block 1819239214 (level 1) [ 251.136185][T12915] loop3: detected capacity change from 0 to 4096 [ 251.143290][T12915] EXT4-fs (loop3): inodes count not valid: 32 vs 27 [ 251.145282][ T28] audit: type=1326 audit(1771758795.218:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.6.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f646ce4c629 code=0x7ffc0000 [ 251.176889][T12915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.181082][T12908] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 251.185440][T12915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.211806][T12908] EXT4-fs (loop6): 1 truncate cleaned up [ 251.217937][T12908] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.234448][T12924] loop8: detected capacity change from 0 to 128 [ 251.240852][ T28] audit: type=1326 audit(1771758795.218:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.6.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646ce4c629 code=0x7ffc0000 [ 251.281380][T12924] msdos: Unknown parameter 'jeÅuo' [ 251.311056][ T28] audit: type=1326 audit(1771758795.218:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.6.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f646ce4c629 code=0x7ffc0000 [ 251.477148][T12927] syzkaller0: entered promiscuous mode [ 251.509813][ T6063] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.535358][T12938] loop8: detected capacity change from 0 to 8192 [ 251.659742][T12927] syzkaller0: entered allmulticast mode [ 251.673757][ T28] audit: type=1326 audit(1771758795.218:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.6.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646ce4c629 code=0x7ffc0000 [ 251.697745][ T28] audit: type=1326 audit(1771758795.218:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.6.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f646ce4c629 code=0x7ffc0000 [ 251.741358][ T6665] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 251.767952][ T6665] FAT-fs (loop8): Filesystem has been set read-only [ 251.789938][T12946] batman_adv: batadv0: Adding interface: macsec1 [ 251.796666][T12946] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.831076][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.849636][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.869887][T12946] batman_adv: batadv0: Interface activated: macsec1 [ 251.906986][T12951] loop8: detected capacity change from 0 to 1024 [ 251.930144][T12951] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 251.962180][T12951] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.2539: Invalid block bitmap block 0 in block_group 0 [ 251.986058][T12951] loop8: lost filesystem error report for type 5 error -117 [ 251.986250][T12951] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.2539: Failed to acquire dquot type 0 [ 251.993786][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 251.993805][ C0] EXT4-fs (loop8): initial error at time 1771758797: ext4_read_block_bitmap_nowait:483 [ 251.993826][ C0] EXT4-fs (loop8): last error at time 1771758797: ext4_read_block_bitmap_nowait:483 [ 252.123255][T12951] loop8: lost filesystem error report for type 5 error -117 [ 252.123490][T12951] EXT4-fs error (device loop8): ext4_free_blocks:6725: comm syz.8.2539: Freeing blocks not in datazone - block = 0, count = 4096 [ 252.158569][T12951] loop8: lost filesystem error report for type 5 error -117 [ 252.159032][T12951] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.2539: Invalid inode bitmap blk 0 in block_group 0 [ 252.179202][ T50] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 0 [ 252.190698][T12951] loop8: lost filesystem error report for type 5 error -117 [ 252.190860][T12951] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 252.210893][ T50] loop8: lost filesystem error report for type 5 error -117 [ 252.214838][T12951] loop8: lost filesystem error report for type 5 error -117 [ 252.222940][T12951] EXT4-fs (loop8): 1 orphan inode deleted [ 252.236680][T12951] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.287901][T12971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2544'. [ 252.378613][T12972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2544'. [ 252.393496][T12974] tipc: Enabled bearer , priority 0 [ 252.451562][T12974] syzkaller0: entered promiscuous mode [ 252.457062][T12974] syzkaller0: entered allmulticast mode [ 252.472059][T12974] tipc: Resetting bearer [ 252.621158][T12973] tipc: Resetting bearer [ 252.648810][T12973] tipc: Disabling bearer [ 252.728416][ T6665] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.750028][ T40] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 0 [ 252.771118][ T40] loop8: lost filesystem error report for type 5 error -117 [ 252.798607][T12986] loop8: detected capacity change from 0 to 512 [ 252.907125][T12986] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.931093][T12986] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.990060][T12986] netlink: 'syz.8.2546': attribute type 15 has an invalid length. [ 253.018262][T12986] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2546'. [ 253.206566][ T6665] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.276697][T13011] loop2: detected capacity change from 0 to 128 [ 253.372196][T12998] loop3: detected capacity change from 0 to 512 [ 253.497347][T13021] FAULT_INJECTION: forcing a failure. [ 253.497347][T13021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.522007][T13021] CPU: 1 UID: 0 PID: 13021 Comm: syz.6.2560 Not tainted syzkaller #0 PREEMPT(full) [ 253.522037][T13021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.522060][T13021] Call Trace: [ 253.522067][T13021] [ 253.522075][T13021] __dump_stack+0x1d/0x30 [ 253.522103][T13021] dump_stack_lvl+0x95/0xd0 [ 253.522123][T13021] dump_stack+0x15/0x1b [ 253.522145][T13021] should_fail_ex+0x263/0x280 [ 253.522232][T13021] should_fail+0xb/0x20 [ 253.522253][T13021] should_fail_usercopy+0x1a/0x20 [ 253.522274][T13021] _copy_from_iter+0xcf/0xea0 [ 253.522302][T13021] ? __alloc_skb+0x4f6/0x690 [ 253.522325][T13021] ? __alloc_skb+0x200/0x690 [ 253.522349][T13021] netlink_sendmsg+0x4ae/0x6f0 [ 253.522391][T13021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.522419][T13021] ____sys_sendmsg+0x5af/0x600 [ 253.522478][T13021] ___sys_sendmsg+0x195/0x1e0 [ 253.522595][T13021] __x64_sys_sendmsg+0xd4/0x160 [ 253.522627][T13021] x64_sys_call+0x194c/0x3020 [ 253.522714][T13021] do_syscall_64+0x12c/0x370 [ 253.522747][T13021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.522770][T13021] RIP: 0033:0x7f646ce4c629 [ 253.522788][T13021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.522807][T13021] RSP: 002b:00007f646b8a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.522888][T13021] RAX: ffffffffffffffda RBX: 00007f646d0c5fa0 RCX: 00007f646ce4c629 [ 253.522901][T13021] RDX: 0000000000000018 RSI: 0000200000000540 RDI: 0000000000000003 [ 253.522915][T13021] RBP: 00007f646b8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 253.522930][T13021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.522944][T13021] R13: 00007f646d0c6038 R14: 00007f646d0c5fa0 R15: 00007ffca4db7788 [ 253.522995][T13021] [ 253.771540][T12998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.894876][T13033] loop6: detected capacity change from 0 to 512 [ 253.909317][T13035] loop2: detected capacity change from 0 to 128 [ 253.919817][T13033] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 253.940879][T12998] netlink: 'syz.3.2551': attribute type 1 has an invalid length. [ 253.989070][T13033] EXT4-fs (loop6): 1 truncate cleaned up [ 254.005505][T12998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.012526][T13033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.066221][ T6063] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.136073][ T50] bond0 (unregistering): Released all slaves [ 254.172859][T13043] team0: Port device syz_tun added [ 254.178366][ T7306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.188016][T13043] lo: entered allmulticast mode [ 254.197860][T13043] tunl0: entered allmulticast mode [ 254.212948][T13043] gre0: entered allmulticast mode [ 254.233078][T13043] gretap0: entered allmulticast mode [ 254.239271][T13043] erspan0: entered allmulticast mode [ 254.291998][T13043] ip_vti0: entered allmulticast mode [ 254.305351][T13043] ip6_vti0: entered allmulticast mode [ 254.322499][T13043] sit0: entered allmulticast mode [ 254.349048][T13043] ip6tnl0: entered allmulticast mode [ 254.362161][T13043] ip6gre0: entered allmulticast mode [ 254.376955][T13043] syz_tun: entered allmulticast mode [ 254.412622][T13043] team0: Port device syz_tun removed [ 254.418292][T13043] ip6gretap0: entered allmulticast mode [ 254.437932][T13043] bridge0: entered allmulticast mode [ 254.458622][T13043] bond0: (slave bridge0): Releasing backup interface [ 254.475378][T13043] vcan0: entered allmulticast mode [ 254.481930][T13043] bond0: entered allmulticast mode [ 254.498298][T13053] usb usb9: usbfs: process 13053 (syz.3.2567) did not claim interface 0 before use [ 254.507773][T13043] : entered allmulticast mode [ 254.512810][T13043] bond_slave_1: entered allmulticast mode [ 254.519410][T13043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.542335][T13043] team0: entered allmulticast mode [ 254.551363][T13043] team_slave_0: entered allmulticast mode [ 254.557502][T13043] team_slave_1: entered allmulticast mode [ 254.576611][T13043] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.593211][T13043] dummy0: entered allmulticast mode [ 254.608429][T13043] nlmon0: entered allmulticast mode [ 254.631952][T13043] caif0: entered allmulticast mode [ 254.637221][T13043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.852650][T13058] syzkaller0: entered promiscuous mode [ 254.868164][T13058] syzkaller0: entered allmulticast mode [ 254.950798][T13070] loop3: detected capacity change from 0 to 512 [ 255.001167][T13070] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 255.009361][T13074] loop8: detected capacity change from 0 to 1764 [ 255.040300][T13078] loop2: detected capacity change from 0 to 512 [ 255.046803][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 255.046894][ T28] audit: type=1400 audit(1771758800.408:3303): avc: denied { ioctl } for pid=13076 comm="syz.6.2575" path="socket:[41098]" dev="sockfs" ino=41098 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 255.078877][T13070] EXT4-fs (loop3): orphan cleanup on readonly fs [ 255.084626][T13074] iso9660: Bad value for 'session' [ 255.113566][T13070] EXT4-fs error (device loop3): __ext4_iget:5378: inode #11: block 8: comm syz.3.2573: invalid block [ 255.131107][T13070] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 255.131495][T13070] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2573: couldn't read orphan inode 11 (err -117) [ 255.152556][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 255.152579][ C0] EXT4-fs (loop3): initial error at time 1771758800: __ext4_iget:5378: inode 11: block 8 [ 255.152620][ C0] EXT4-fs (loop3): last error at time 1771758800: __ext4_iget:5378: inode 11: block 8 [ 255.194754][T13082] loop6: detected capacity change from 0 to 512 [ 255.203522][T13070] loop3: lost filesystem error report for type 5 error -117 [ 255.211820][T13082] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 255.251612][T13070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 255.264827][T13070] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 255.275813][T13070] netlink: 'syz.3.2573': attribute type 9 has an invalid length. [ 255.287771][T13082] EXT4-fs (loop6): 1 truncate cleaned up [ 255.294613][T13082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.308139][T13082] FAULT_INJECTION: forcing a failure. [ 255.308139][T13082] name failslab, interval 1, probability 0, space 0, times 0 [ 255.320894][T13082] CPU: 1 UID: 0 PID: 13082 Comm: syz.6.2577 Not tainted syzkaller #0 PREEMPT(full) [ 255.321015][T13082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.321026][T13082] Call Trace: [ 255.321033][T13082] [ 255.321041][T13082] __dump_stack+0x1d/0x30 [ 255.321145][T13082] dump_stack_lvl+0x95/0xd0 [ 255.321169][T13082] dump_stack+0x15/0x1b [ 255.321273][T13082] should_fail_ex+0x263/0x280 [ 255.321293][T13082] should_failslab+0x8c/0xb0 [ 255.321363][T13082] __kmalloc_noprof+0xb8/0x4e0 [ 255.321386][T13082] ? ext4_convert_inline_data_nolock+0x8d/0x5a0 [ 255.321423][T13082] ext4_convert_inline_data_nolock+0x8d/0x5a0 [ 255.321538][T13082] ext4_convert_inline_data+0x2bd/0x360 [ 255.321562][T13082] ext4_fallocate+0x163/0x2f0 [ 255.321609][T13082] vfs_fallocate+0x3b6/0x450 [ 255.321704][T13082] __x64_sys_fallocate+0x7a/0xd0 [ 255.321726][T13082] x64_sys_call+0x298e/0x3020 [ 255.321767][T13082] do_syscall_64+0x12c/0x370 [ 255.321802][T13082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.321830][T13082] RIP: 0033:0x7f646ce4c629 [ 255.321848][T13082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.321866][T13082] RSP: 002b:00007f646b8a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 255.321889][T13082] RAX: ffffffffffffffda RBX: 00007f646d0c5fa0 RCX: 00007f646ce4c629 [ 255.321904][T13082] RDX: 0000000002000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 255.321978][T13082] RBP: 00007f646b8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 255.321992][T13082] R10: 00000000001001f3 R11: 0000000000000246 R12: 0000000000000001 [ 255.322006][T13082] R13: 00007f646d0c6038 R14: 00007f646d0c5fa0 R15: 00007ffca4db7788 [ 255.322025][T13082] [ 255.543938][ T6063] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.570104][ T7306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.743904][T13118] loop3: detected capacity change from 0 to 4096 [ 255.754783][T13118] EXT4-fs (loop3): #clusters per group too big: 32768 [ 255.850384][T13135] lo: entered allmulticast mode [ 255.852343][T13138] loop3: detected capacity change from 0 to 512 [ 255.863279][T13138] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 255.884054][T13138] EXT4-fs (loop3): 1 truncate cleaned up [ 255.895516][T13138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.921723][T13138] FAULT_INJECTION: forcing a failure. [ 255.921723][T13138] name failslab, interval 1, probability 0, space 0, times 0 [ 255.942164][T13138] CPU: 0 UID: 0 PID: 13138 Comm: syz.3.2593 Not tainted syzkaller #0 PREEMPT(full) [ 255.942194][T13138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.942208][T13138] Call Trace: [ 255.942291][T13138] [ 255.942301][T13138] __dump_stack+0x1d/0x30 [ 255.942327][T13138] dump_stack_lvl+0x95/0xd0 [ 255.942417][T13138] dump_stack+0x15/0x1b [ 255.942441][T13138] should_fail_ex+0x263/0x280 [ 255.942460][T13138] should_failslab+0x8c/0xb0 [ 255.942503][T13138] kmem_cache_alloc_noprof+0x66/0x400 [ 255.942521][T13138] ? ext4_mb_new_blocks+0x2f0/0x1f50 [ 255.942547][T13138] ext4_mb_new_blocks+0x2f0/0x1f50 [ 255.942574][T13138] ? strlen+0x19/0x40 [ 255.942654][T13138] ? ext4_get_branch+0x321/0x3a0 [ 255.942678][T13138] ? ext4_ind_map_blocks+0x1309/0x1620 [ 255.942702][T13138] ext4_ind_map_blocks+0xbd4/0x1620 [ 255.942769][T13138] ? ext4_map_query_blocks+0x438/0x550 [ 255.942792][T13138] ext4_map_create_blocks+0x8a/0x3a0 [ 255.942863][T13138] ext4_map_blocks+0x594/0x970 [ 255.942909][T13138] ext4_convert_inline_data_nolock+0x195/0x5a0 [ 255.942941][T13138] ext4_convert_inline_data+0x2bd/0x360 [ 255.942991][T13138] ext4_fallocate+0x163/0x2f0 [ 255.943029][T13138] vfs_fallocate+0x3b6/0x450 [ 255.943052][T13138] __x64_sys_fallocate+0x7a/0xd0 [ 255.943073][T13138] x64_sys_call+0x298e/0x3020 [ 255.943133][T13138] do_syscall_64+0x12c/0x370 [ 255.943174][T13138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.943197][T13138] RIP: 0033:0x7fde5c08c629 [ 255.943212][T13138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.943243][T13138] RSP: 002b:00007fde5aadf028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 255.943265][T13138] RAX: ffffffffffffffda RBX: 00007fde5c305fa0 RCX: 00007fde5c08c629 [ 255.943281][T13138] RDX: 0000000002000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 255.943295][T13138] RBP: 00007fde5aadf090 R08: 0000000000000000 R09: 0000000000000000 [ 255.943309][T13138] R10: 00000000001001f3 R11: 0000000000000246 R12: 0000000000000001 [ 255.943323][T13138] R13: 00007fde5c306038 R14: 00007fde5c305fa0 R15: 00007ffcbb6afb58 [ 255.943375][T13138] [ 256.040571][T13134] lo: left allmulticast mode [ 256.171939][ T7306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.286330][ T28] audit: type=1400 audit(1771758801.648:3304): avc: denied { getopt } for pid=13149 comm="syz.8.2598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.401742][T13160] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 256.415683][T13158] EXT4-fs: Ignoring removed oldalloc option [ 256.434852][T13158] EXT4-fs: Ignoring removed bh option [ 256.452660][T13160] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.484462][T13158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.537285][T13167] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 256.566389][T13167] ext4 filesystem being mounted at /385/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 256.640751][ T28] audit: type=1326 audit(1771758802.008:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.2.2606" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde4807c629 code=0x0 [ 256.681490][T13168] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.2600: Allocating blocks 497-513 which overlap fs metadata [ 256.695763][T13168] EXT4-fs (loop3): pa ffff888107ace310: logic 256, phys. 385, len 8 [ 256.703891][T13168] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 256.775632][ T6063] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.869007][ T28] audit: type=1400 audit(1771758802.228:3306): avc: denied { name_connect } for pid=13188 comm="syz.6.2609" dest=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 256.923841][ T6665] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.039860][T13199] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 257.067068][T13199] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2613: bg 0: block 393: padding at end of block bitmap is not set [ 257.082861][T13199] loop6: lost filesystem error report for type 5 error -117 [ 257.093568][T13199] EXT4-fs (loop6): Remounting filesystem read-only [ 257.100978][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 257.101005][ C0] EXT4-fs (loop6): initial error at time 1771758802: ext4_validate_block_bitmap:441 [ 257.101028][ C0] EXT4-fs (loop6): last error at time 1771758802: ext4_validate_block_bitmap:441 [ 257.163887][T13205] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 257.183565][T13199] EXT4-fs (loop6): 2 truncates cleaned up [ 257.196461][T13199] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.214098][T13205] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 257.241569][T13205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 257.273012][T13205] netlink: 'syz.2.2615': attribute type 9 has an invalid length. [ 257.303636][T13168] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.381776][ T8378] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.409618][T13217] bridge_slave_1: left allmulticast mode [ 257.641742][T13217] bridge_slave_1: left promiscuous mode [ 257.647839][T13217] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.660878][T13217] bridge_slave_0: left allmulticast mode [ 257.670520][T13217] bridge_slave_0: left promiscuous mode [ 257.682956][T13217] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.004398][ T6063] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.038161][ T40] bridge_slave_1: left allmulticast mode [ 258.089761][ T40] bridge_slave_1: left promiscuous mode [ 258.112833][T13232] EXT4-fs: Ignoring removed orlov option [ 258.119447][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.166776][ T40] bridge_slave_0: left allmulticast mode [ 258.174891][T13232] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.187458][ T40] bridge_slave_0: left promiscuous mode [ 258.193429][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.206438][T13232] EXT4-fs (loop8): Online resizing not supported with bigalloc [ 258.231049][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 258.295115][ T6665] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.331794][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.362048][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.410558][ T40] bond0 (unregistering): Released all slaves [ 258.423408][T13242] netlink: 22 bytes leftover after parsing attributes in process `syz.2.2625'. [ 258.439338][ T40] bond1 (unregistering): Released all slaves [ 258.525633][T13241] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2624'. [ 258.535076][ T40] tipc: Left network mode [ 258.661368][ T40] hsr_slave_0: left promiscuous mode [ 258.668896][ T40] hsr_slave_1: left promiscuous mode [ 258.682751][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.923447][T13223] chnl_net:caif_netlink_parms(): no params data found [ 259.060199][T13223] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.082339][T13223] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.106348][T13223] bridge_slave_0: entered allmulticast mode [ 259.125419][T13223] bridge_slave_0: entered promiscuous mode [ 259.157139][T13223] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.178417][T13223] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.199640][T13223] bridge_slave_1: entered allmulticast mode [ 259.206330][T13223] bridge_slave_1: entered promiscuous mode [ 259.223210][T13223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.233769][T13223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.253129][T13223] team0: Port device team_slave_0 added [ 259.259835][T13223] team0: Port device team_slave_1 added [ 259.340030][T13223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.347120][T13223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.442616][T13223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.536002][T13291] set_capacity_and_notify: 9 callbacks suppressed [ 259.536018][T13291] loop6: detected capacity change from 0 to 512 [ 259.575963][T13294] xt_NFQUEUE: number of total queues is 0 [ 259.651913][T13295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2629'. [ 259.674889][T13291] EXT4-fs: Ignoring removed orlov option [ 259.704096][T13291] EXT4-fs: Mount option(s) incompatible with ext2 [ 260.227753][T13223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.245217][T13223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.278573][T13223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.411767][T13223] hsr_slave_0: entered promiscuous mode [ 260.441493][T13223] hsr_slave_1: entered promiscuous mode [ 260.469558][T13223] debugfs: 'hsr0' already exists in 'hsr' [ 260.493765][T13223] Cannot create hsr debugfs directory [ 260.589322][T13320] syzkaller0: entered promiscuous mode [ 260.605124][T13320] syzkaller0: entered allmulticast mode [ 261.198003][T13223] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 261.223756][T13223] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 261.250902][T13223] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 261.276665][T13223] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 261.344924][ T7578] kernel read not supported for file /885/numa_maps (pid: 7578 comm: kworker/1:7) [ 261.390463][ T28] audit: type=1400 audit(1771758806.748:3307): avc: denied { getopt } for pid=13364 comm="syz.4.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 261.455541][T13223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.475141][ T28] audit: type=1400 audit(1771758806.848:3308): avc: denied { listen } for pid=13402 comm="syz.2.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 261.496990][T13223] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.507627][ T1691] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.514777][ T1691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.553299][ T1691] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.560389][ T1691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.629053][T13428] loop6: detected capacity change from 0 to 512 [ 261.664466][T13428] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 261.684161][T13428] EXT4-fs (loop6): orphan cleanup on readonly fs [ 261.695601][T13428] EXT4-fs error (device loop6): __ext4_iget:5378: inode #11: block 8: comm syz.6.2648: invalid block [ 261.712247][T13223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.723970][T13428] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 261.724225][T13428] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2648: couldn't read orphan inode 11 (err -117) [ 261.733691][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 261.733717][ C0] EXT4-fs (loop6): initial error at time 1771758807: __ext4_iget:5378: inode 11: block 8 [ 261.733774][ C0] EXT4-fs (loop6): last error at time 1771758807: __ext4_iget:5378: inode 11: block 8 [ 261.871202][T13428] loop6: lost filesystem error report for type 5 error -117 [ 261.871828][T13428] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 261.944409][T13470] tipc: Enabled bearer , priority 0 [ 261.951508][T13470] syzkaller0: entered promiscuous mode [ 261.957097][T13470] syzkaller0: entered allmulticast mode [ 261.987931][T13473] netlink: 'syz.6.2648': attribute type 9 has an invalid length. [ 262.044658][T13428] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 262.113031][T13471] tipc: Resetting bearer [ 262.123730][T13471] tipc: Disabling bearer [ 262.133661][ T6063] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.160474][T13223] veth0_vlan: entered promiscuous mode [ 262.184931][T13496] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2656'. [ 262.190827][T13223] veth1_vlan: entered promiscuous mode [ 262.211052][T13496] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2656'. [ 262.299392][T13223] veth0_macvtap: entered promiscuous mode [ 262.349002][T13223] veth1_macvtap: entered promiscuous mode [ 262.389319][T13223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.424568][T13223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.511356][ T4492] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.542939][T13529] netlink: 'syz.8.2664': attribute type 10 has an invalid length. [ 262.611004][T13532] loop6: detected capacity change from 0 to 256 [ 262.648882][T13509] syzkaller0: entered promiscuous mode [ 262.713639][T13509] syzkaller0: entered allmulticast mode [ 262.756615][ T4492] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.813406][T13532] FAT-fs (loop6): Directory bread(block 64) failed [ 262.820092][T13532] FAT-fs (loop6): Directory bread(block 65) failed [ 262.826701][T13532] FAT-fs (loop6): Directory bread(block 66) failed [ 262.833350][T13532] FAT-fs (loop6): Directory bread(block 67) failed [ 262.840035][T13532] FAT-fs (loop6): Directory bread(block 68) failed [ 262.846649][T13532] FAT-fs (loop6): Directory bread(block 69) failed [ 262.853248][T13532] FAT-fs (loop6): Directory bread(block 70) failed [ 262.859795][T13532] FAT-fs (loop6): Directory bread(block 71) failed [ 262.866439][T13532] FAT-fs (loop6): Directory bread(block 72) failed [ 262.873039][T13532] FAT-fs (loop6): Directory bread(block 73) failed [ 263.553860][T13529] team0: Port device netdevsim1 added [ 263.623048][ T4492] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.642011][ T4492] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.629684][T13576] loop8: detected capacity change from 0 to 512 [ 264.649440][T13576] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 264.707779][T13576] EXT4-fs (loop8): orphan cleanup on readonly fs [ 264.720520][T13576] EXT4-fs error (device loop8): __ext4_iget:5378: inode #11: block 8: comm syz.8.2666: invalid block [ 264.734771][T13576] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 264.735078][T13576] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2666: couldn't read orphan inode 11 (err -117) [ 264.744233][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 264.744249][ C0] EXT4-fs (loop8): initial error at time 1771758810: __ext4_iget:5378: inode 11: block 8 [ 264.744288][ C0] EXT4-fs (loop8): last error at time 1771758810: __ext4_iget:5378: inode 11: block 8 [ 264.801027][T13583] loop5: detected capacity change from 0 to 512 [ 264.810614][T13583] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 264.866076][T13576] loop8: lost filesystem error report for type 5 error -117 [ 264.874546][T13576] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 264.877478][T13583] EXT4-fs (loop5): 1 truncate cleaned up [ 264.900418][T13583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.912896][T13576] EXT4-fs (loop8): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 264.974363][T13588] netlink: 'syz.8.2666': attribute type 9 has an invalid length. [ 265.021955][T13591] loop6: detected capacity change from 0 to 128 [ 265.067264][T13223] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.106407][ T6665] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.130836][ T28] audit: type=1400 audit(1771758810.498:3309): avc: denied { shutdown } for pid=13603 comm="syz.8.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 265.210266][ T50] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.237075][ T50] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.388559][ T50] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.411219][ T50] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.414733][T13634] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13634 comm=syz.2.2676 [ 265.612157][ T50] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.631115][ T50] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.744097][ T28] audit: type=1400 audit(1771758811.108:3310): avc: denied { connect } for pid=13631 comm="syz.2.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 265.802567][T13652] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2677'. [ 266.017165][ T28] audit: type=1400 audit(1771758811.368:3311): avc: denied { setopt } for pid=13631 comm="syz.2.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 266.275562][ T28] audit: type=1400 audit(1771758811.638:3312): avc: denied { listen } for pid=13671 comm="syz.2.2680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 266.277710][T13663] syzkaller0: entered promiscuous mode [ 266.311688][T13663] syzkaller0: entered allmulticast mode [ 266.381727][ T50] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.399457][T13683] loop8: detected capacity change from 0 to 512 [ 266.406292][ T50] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.417825][T13683] EXT4-fs: Ignoring removed orlov option [ 266.424212][T13683] EXT4-fs: Mount option(s) incompatible with ext2 [ 266.489616][T13692] loop2: detected capacity change from 0 to 512 [ 266.520000][T13692] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 266.530143][T13692] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 266.553490][ T28] audit: type=1400 audit(1771758811.928:3313): avc: denied { accept } for pid=13691 comm="syz.2.2684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 266.584524][T13580] chnl_net:caif_netlink_parms(): no params data found [ 266.599165][T13699] netlink: 'syz.8.2685': attribute type 2 has an invalid length. [ 266.629764][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2685'. [ 266.677278][T13706] xt_hashlimit: size too large, truncated to 1048576 [ 266.686082][T13699] loop8: detected capacity change from 0 to 512 [ 266.701116][ T3369] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.727733][T13699] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.816006][T13699] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.840791][T13700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=13700 comm=syz.8.2685 [ 266.841400][T13699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=13699 comm=syz.8.2685 [ 266.855050][T13700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13700 comm=syz.8.2685 [ 266.879120][ T3369] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.886967][T13700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=13700 comm=syz.8.2685 [ 266.910865][T13699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13699 comm=syz.8.2685 [ 266.929613][T13699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=13699 comm=syz.8.2685 [ 266.958433][ T6665] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.026032][ T50] bond0 (unregistering): left promiscuous mode [ 267.058570][ T50] bond0 (unregistering): Released all slaves [ 267.072547][T13714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2687'. [ 267.087977][T13580] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.096910][T13580] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.104914][T13580] bridge_slave_0: entered allmulticast mode [ 267.112540][T13580] bridge_slave_0: entered promiscuous mode [ 267.135126][T13580] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.142664][T13580] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.156397][T13758] netlink: 'syz.6.2691': attribute type 5 has an invalid length. [ 267.164451][T13580] bridge_slave_1: entered allmulticast mode [ 267.171370][T13580] bridge_slave_1: entered promiscuous mode [ 267.181092][ T50] tipc: Left network mode [ 267.198583][T13761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2692'. [ 267.222785][T13761] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 267.230028][T13761] IPv6: NLM_F_CREATE should be set when creating new route [ 267.239646][ T50] hsr_slave_0: left promiscuous mode [ 267.259054][ T50] hsr_slave_1: left promiscuous mode [ 267.297993][ T50] veth1_macvtap: left promiscuous mode [ 267.311260][ T50] veth0_macvtap: left promiscuous mode [ 267.316864][ T50] veth1_vlan: left promiscuous mode [ 267.328755][ T50] veth0_vlan: left promiscuous mode [ 267.374416][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 267.474818][ T50] team0 (unregistering): Port device dummy0 removed [ 267.493524][T13580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.508703][ T4495] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 267.519003][T13580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.554158][ T28] audit: type=1400 audit(1771758812.918:3314): avc: denied { listen } for pid=13791 comm="syz.2.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 267.580638][T13580] team0: Port device team_slave_0 added [ 267.587726][T13580] team0: Port device team_slave_1 added [ 267.605628][T13580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.613599][T13580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.639751][T13580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.664164][T13798] syzkaller0: entered promiscuous mode [ 267.669727][T13798] syzkaller0: entered allmulticast mode [ 267.679092][T13580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.686131][T13580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.712583][T13580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.747027][T13580] hsr_slave_0: entered promiscuous mode [ 267.753143][T13580] hsr_slave_1: entered promiscuous mode [ 267.940190][T13822] loop6: detected capacity change from 0 to 1764 [ 267.953410][T13822] iso9660: Unknown parameter 'sessio„¸Í¥n' [ 268.048982][T13838] loop2: detected capacity change from 0 to 2048 [ 268.086078][T13702] Alternate GPT is invalid, using primary GPT. [ 268.103057][T13702] loop2: p1 p2 p3 [ 268.113435][T13838] Alternate GPT is invalid, using primary GPT. [ 268.120378][T13838] loop2: p1 p2 p3 [ 268.204770][T13858] loop6: detected capacity change from 0 to 512 [ 268.234498][T13858] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 268.261610][T13858] EXT4-fs (loop6): orphan cleanup on readonly fs [ 268.277338][T13858] EXT4-fs error (device loop6): __ext4_iget:5378: inode #11: block 8: comm syz.6.2708: invalid block [ 268.288752][T13858] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 268.298909][T13580] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 268.308069][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 268.308089][ C1] EXT4-fs (loop6): initial error at time 1771758813: __ext4_iget:5378: inode 11: block 8 [ 268.308120][ C1] EXT4-fs (loop6): last error at time 1771758813: __ext4_iget:5378: inode 11: block 8 [ 268.317337][T13858] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2708: couldn't read orphan inode 11 (err -117) [ 268.364595][T10156] udevd[10156]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 268.379513][T10155] udevd[10155]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 268.396629][T13702] udevd[13702]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 268.406932][T13580] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 268.416683][T13580] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 268.422934][T13858] loop6: lost filesystem error report for type 5 error -117 [ 268.425901][T13866] tipc: Enabled bearer , priority 0 [ 268.443417][T13580] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.447881][T13858] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 268.474503][T13858] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 268.498423][T13866] syzkaller0: entered promiscuous mode [ 268.507191][T13866] syzkaller0: entered allmulticast mode [ 268.515705][T13866] tipc: Resetting bearer [ 268.527318][T13858] netlink: 'syz.6.2708': attribute type 9 has an invalid length. [ 268.546758][T13865] tipc: Resetting bearer [ 268.580888][T13865] tipc: Disabling bearer [ 268.592348][ T1691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 268.600823][ T1691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 268.653745][ T6063] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.721247][T13580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.758225][T13580] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.773036][ T1691] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.780132][ T1691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.804081][ T1691] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.811194][ T1691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.890155][T13899] loop2: detected capacity change from 0 to 4096 [ 269.011165][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 269.045888][T13580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.315966][T13939] tipc: Enabled bearer , priority 0 [ 269.403828][T13939] syzkaller0: entered promiscuous mode [ 269.409544][T13939] syzkaller0: entered allmulticast mode [ 269.419403][T13939] tipc: Resetting bearer [ 269.436622][T13580] veth0_vlan: entered promiscuous mode [ 269.447013][T13938] tipc: Resetting bearer [ 269.461613][T13938] tipc: Disabling bearer [ 269.476840][T13580] veth1_vlan: entered promiscuous mode [ 269.581700][T13580] veth0_macvtap: entered promiscuous mode [ 269.614777][T13580] veth1_macvtap: entered promiscuous mode [ 269.654347][T13580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.670304][T13580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.674527][T13948] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2721'. [ 269.718553][ T1691] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.422855][ T1691] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.494085][ T1691] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.529391][ T1691] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.538538][T13964] loop8: detected capacity change from 0 to 1024 [ 270.547922][T13964] EXT4-fs: Ignoring removed nomblk_io_submit option [ 270.571349][T13964] EXT4-fs: dax option not supported [ 270.658583][T13970] ip6erspan1: entered allmulticast mode [ 270.839127][T13987] tipc: Enabled bearer , priority 0 [ 270.918216][T13981] syzkaller0: entered promiscuous mode [ 270.926614][T13992] loop4: detected capacity change from 0 to 512 [ 270.965194][T13981] syzkaller0: entered allmulticast mode [ 270.981737][T13981] tipc: Resetting bearer [ 271.014333][T13979] tipc: Resetting bearer [ 271.038011][T13979] tipc: Disabling bearer [ 271.230417][ T4495] tipc: Subscription rejected, illegal request [ 271.322861][T13986] FAULT_INJECTION: forcing a failure. [ 271.322861][T13986] name fail_futex, interval 1, probability 0, space 0, times 1 [ 271.364359][T14018] loop5: detected capacity change from 0 to 512 [ 271.397949][T13986] CPU: 1 UID: 0 PID: 13986 Comm: syz.8.2731 Not tainted syzkaller #0 PREEMPT(full) [ 271.398018][T13986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.398031][T13986] Call Trace: [ 271.398039][T13986] [ 271.398055][T13986] __dump_stack+0x1d/0x30 [ 271.398145][T13986] dump_stack_lvl+0x95/0xd0 [ 271.398170][T13986] dump_stack+0x15/0x1b [ 271.398193][T13986] should_fail_ex+0x263/0x280 [ 271.398216][T13986] should_fail+0xb/0x20 [ 271.398287][T13986] get_futex_key+0x12f/0xbe0 [ 271.398312][T13986] ? futex_lock_pi+0x757/0x7e0 [ 271.398400][T13986] futex_lock_pi+0xfe/0x7e0 [ 271.398479][T13986] ? _parse_integer_limit+0x170/0x190 [ 271.398582][T13986] ? __pfx_futex_wake_mark+0x10/0x10 [ 271.398608][T13986] do_futex+0x21f/0x380 [ 271.398634][T13986] __se_sys_futex+0x2f6/0x370 [ 271.398663][T13986] ? mutex_unlock+0x4e/0x90 [ 271.398732][T13986] __x64_sys_futex+0x78/0x90 [ 271.398821][T13986] x64_sys_call+0x24ab/0x3020 [ 271.398899][T13986] do_syscall_64+0x12c/0x370 [ 271.398929][T13986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.398948][T13986] RIP: 0033:0x7effa136c629 [ 271.398962][T13986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.398977][T13986] RSP: 002b:00007eff9fdc7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 271.399076][T13986] RAX: ffffffffffffffda RBX: 00007effa15e5fa0 RCX: 00007effa136c629 [ 271.399091][T13986] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000200 [ 271.399125][T13986] RBP: 00007eff9fdc7090 R08: 0000000000000000 R09: 0000000000000001 [ 271.399137][T13986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.399148][T13986] R13: 00007effa15e6038 R14: 00007effa15e5fa0 R15: 00007ffe28f70778 [ 271.399165][T13986] [ 271.416991][T14018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.611024][T14026] loop2: detected capacity change from 0 to 512 [ 271.617619][T14026] EXT4-fs: test_dummy_encryption option not supported [ 271.633997][T14018] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.688146][T14027] bond2: ARP target 9.0.0.0 is already present [ 271.713130][T14027] bond2: option arp_ip_target: invalid value (9) [ 271.747031][T14027] bond2 (unregistering): Released all slaves [ 271.821503][T14022] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 272.273491][T14093] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2746'. [ 272.384637][T13223] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.393544][T14103] loop2: detected capacity change from 0 to 512 [ 272.409503][T14103] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 272.465006][T14093] loop4: detected capacity change from 0 to 512 [ 272.469172][T14107] tipc: Started in network mode [ 272.476489][T14107] tipc: Node identity babbef777c1e, cluster identity 4711 [ 272.484169][T14103] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 272.581972][T14103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 272.601110][T14107] tipc: Enabled bearer , priority 0 [ 272.628296][T14103] netlink: 'syz.2.2747': attribute type 9 has an invalid length. [ 272.787222][T14110] syzkaller0: entered promiscuous mode [ 272.791038][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 272.814295][T14114] loop6: detected capacity change from 0 to 128 [ 272.821580][T14114] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615' [ 272.912398][T14110] syzkaller0: entered allmulticast mode [ 272.969822][T14110] tipc: Resetting bearer [ 273.110982][T14113] bond2: option min_links: invalid value (18446744073709551601) [ 273.118761][T14113] bond2: option min_links: allowed values 0 - 2147483647 [ 273.128157][T14113] bond2 (unregistering): Released all slaves [ 273.144476][ T4492] tipc: Resetting bearer [ 273.157779][T14106] tipc: Resetting bearer [ 273.231836][T14106] tipc: Disabling bearer [ 273.245395][ T8378] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.443377][T14132] loop2: detected capacity change from 0 to 512 [ 273.500671][T14137] sctp: [Deprecated]: syz.6.2752 (pid 14137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.500671][T14137] Use struct sctp_sack_info instead [ 273.650133][T14153] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2757'. [ 273.684303][T14152] loop4: detected capacity change from 0 to 512 [ 273.692211][T14148] bond1 (unregistering): Released all slaves [ 273.786743][T14152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=14152 comm=syz.4.2754 [ 273.847564][T14147] syzkaller0: entered promiscuous mode [ 273.853140][T14147] syzkaller0: entered allmulticast mode [ 273.892243][T14153] pim6reg: entered allmulticast mode [ 273.952222][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2754'. [ 274.021707][T14168] tipc: Enabled bearer , priority 0 [ 274.095239][T14168] syzkaller0: entered promiscuous mode [ 274.114140][T14168] syzkaller0: entered allmulticast mode [ 274.131716][T14168] tipc: Resetting bearer [ 274.192005][T14082] tipc: Resetting bearer [ 274.198556][T14167] tipc: Resetting bearer [ 274.240585][T14167] tipc: Disabling bearer [ 274.310989][T14182] sctp: [Deprecated]: syz.6.2765 (pid 14182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.310989][T14182] Use struct sctp_sack_info instead [ 274.365241][T14172] FAULT_INJECTION: forcing a failure. [ 274.365241][T14172] name fail_futex, interval 1, probability 0, space 0, times 0 [ 274.431409][T14172] CPU: 0 UID: 0 PID: 14172 Comm: syz.8.2763 Not tainted syzkaller #0 PREEMPT(full) [ 274.431433][T14172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 274.431444][T14172] Call Trace: [ 274.431450][T14172] [ 274.431456][T14172] __dump_stack+0x1d/0x30 [ 274.431548][T14172] dump_stack_lvl+0x95/0xd0 [ 274.431567][T14172] dump_stack+0x15/0x1b [ 274.431629][T14172] should_fail_ex+0x263/0x280 [ 274.431648][T14172] should_fail+0xb/0x20 [ 274.431665][T14172] get_futex_key+0x5b7/0xbe0 [ 274.431825][T14172] ? futex_lock_pi+0x757/0x7e0 [ 274.431854][T14172] futex_lock_pi+0xfe/0x7e0 [ 274.431879][T14172] ? _parse_integer_limit+0x170/0x190 [ 274.431984][T14172] ? __pfx_futex_wake_mark+0x10/0x10 [ 274.432008][T14172] do_futex+0x21f/0x380 [ 274.432034][T14172] __se_sys_futex+0x2f6/0x370 [ 274.432058][T14172] ? mutex_unlock+0x4e/0x90 [ 274.432082][T14172] __x64_sys_futex+0x78/0x90 [ 274.432114][T14172] x64_sys_call+0x24ab/0x3020 [ 274.432136][T14172] do_syscall_64+0x12c/0x370 [ 274.432209][T14172] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 274.432232][T14172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.432250][T14172] RIP: 0033:0x7effa136c629 [ 274.432263][T14172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.432301][T14172] RSP: 002b:00007eff9fdc7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 274.432329][T14172] RAX: ffffffffffffffda RBX: 00007effa15e5fa0 RCX: 00007effa136c629 [ 274.432342][T14172] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000200 [ 274.432354][T14172] RBP: 00007eff9fdc7090 R08: 0000000000000000 R09: 0000000000000001 [ 274.432366][T14172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.432377][T14172] R13: 00007effa15e6038 R14: 00007effa15e5fa0 R15: 00007ffe28f70778 [ 274.432393][T14172] [ 274.637287][T14190] netlink: 'syz.2.2767': attribute type 10 has an invalid length. [ 274.650538][T14190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.671410][T14190] team0: Device bond0 failed to register rx_handler [ 274.691673][T14190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2767'. [ 275.016107][ T7578] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 275.030569][ T7578] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 275.065945][T14212] netlink: 'syz.4.2773': attribute type 8 has an invalid length. [ 275.074446][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2773'. [ 275.087814][T14212] bond0: entered promiscuous mode [ 275.100309][T14209] loop8: detected capacity change from 0 to 512 [ 275.108295][T14212] bond_slave_0: entered promiscuous mode [ 275.121147][T14212] bond_slave_1: entered promiscuous mode [ 275.135413][T14210] fido_id[14210]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 275.149942][T14212] gretap0: entered promiscuous mode [ 275.156862][T14212] hsr1: entered promiscuous mode [ 275.179240][T14209] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 275.219272][T14209] EXT4-fs (loop8): orphan cleanup on readonly fs [ 275.273909][T14219] tipc: Enabled bearer , priority 0 [ 275.290802][T14209] EXT4-fs error (device loop8): __ext4_iget:5378: inode #11: block 8: comm syz.8.2772: invalid block [ 275.334198][T14209] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 275.340988][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 275.356610][ C0] EXT4-fs (loop8): initial error at time 1771758820: __ext4_iget:5378: inode 11: block 8 [ 275.366484][ C0] EXT4-fs (loop8): last error at time 1771758820: __ext4_iget:5378: inode 11: block 8 [ 275.374001][T14219] syzkaller0: entered promiscuous mode [ 275.376328][T14209] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2772: couldn't read orphan inode 11 (err -117) [ 275.382337][T14219] syzkaller0: entered allmulticast mode [ 275.393593][T14209] loop8: lost filesystem error report for type 5 error -117 [ 275.399714][T14219] tipc: Resetting bearer [ 275.401348][T14209] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 275.425018][T14218] tipc: Resetting bearer [ 275.437188][T14209] EXT4-fs (loop8): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 275.464704][T14218] tipc: Disabling bearer [ 275.678835][T14227] netlink: 'syz.8.2772': attribute type 9 has an invalid length. [ 275.969809][ T6665] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.018995][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2779'. [ 276.103377][T14234] FAULT_INJECTION: forcing a failure. [ 276.103377][T14234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.116853][T14234] CPU: 0 UID: 0 PID: 14234 Comm: syz.5.2780 Not tainted syzkaller #0 PREEMPT(full) [ 276.116883][T14234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 276.116901][T14234] Call Trace: [ 276.116909][T14234] [ 276.116918][T14234] __dump_stack+0x1d/0x30 [ 276.116959][T14234] dump_stack_lvl+0x95/0xd0 [ 276.117001][T14234] dump_stack+0x15/0x1b [ 276.117025][T14234] should_fail_ex+0x263/0x280 [ 276.117121][T14234] should_fail+0xb/0x20 [ 276.117141][T14234] should_fail_usercopy+0x1a/0x20 [ 276.117165][T14234] _copy_from_user+0x1c/0xb0 [ 276.117223][T14234] restore_altstack+0x4b/0x300 [ 276.117246][T14234] ? _raw_spin_unlock_irq+0x9/0x30 [ 276.117314][T14234] ? __set_current_blocked+0x284/0x2e0 [ 276.117349][T14234] __ia32_sys_rt_sigreturn+0xdb/0x350 [ 276.117410][T14234] ? arch_do_signal_or_restart+0x2c2/0x450 [ 276.117452][T14234] ? exit_to_user_mode_loop+0xef/0x6f0 [ 276.117517][T14234] ? __rcu_read_unlock+0x4e/0x70 [ 276.117541][T14234] x64_sys_call+0x2823/0x3020 [ 276.117565][T14234] do_syscall_64+0x12c/0x370 [ 276.117611][T14234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.117631][T14234] RIP: 0033:0x7f4c4e10da19 [ 276.117649][T14234] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 276.117731][T14234] RSP: 002b:00007f4c4cbbe480 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 276.117753][T14234] RAX: ffffffffffffffda RBX: 00007f4c4cbbf6c0 RCX: 00007f4c4e10da19 [ 276.117769][T14234] RDX: 00007f4c4cbbe480 RSI: 00007f4c4cbbe5b0 RDI: 0000000000000021 [ 276.117784][T14234] RBP: 00007f4c4cbbf090 R08: 0000000000000000 R09: 0000000000000000 [ 276.117798][T14234] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 276.117810][T14234] R13: 00007f4c4e3e6038 R14: 00007f4c4e3e5fa0 R15: 00007ffc36217698 [ 276.117905][T14234] [ 276.421858][T14246] loop4: detected capacity change from 0 to 512 [ 276.438507][T14249] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 276.552112][T14247] loop8: detected capacity change from 0 to 512 [ 276.572526][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2787'. [ 276.623099][T14256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2787'. [ 276.632928][T14247] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.651884][ T4494] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.681543][T14247] ext4 filesystem being mounted at /352/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.696461][ T4494] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.731408][ T4494] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.768751][ T4494] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.705283][T14297] loop6: detected capacity change from 0 to 128 [ 277.715819][ T6665] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.941559][T14313] loop2: detected capacity change from 0 to 512 [ 278.676244][T14332] loop5: detected capacity change from 0 to 128 [ 278.718031][T14337] loop2: detected capacity change from 0 to 512 [ 279.131345][T14348] loop4: detected capacity change from 0 to 128 [ 279.455618][T14362] loop8: detected capacity change from 0 to 256 [ 280.310769][T14372] loop2: detected capacity change from 0 to 7 [ 280.394835][ T8378] loop2: [ 280.422283][T14372] loop2: [ 280.612850][T14380] loop2: detected capacity change from 0 to 512 [ 280.781291][ T28] audit: type=1400 audit(1771758826.148:3315): avc: denied { getopt } for pid=14399 comm="syz.8.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 281.271023][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 281.693184][T14472] set_capacity_and_notify: 1 callbacks suppressed [ 281.693203][T14472] loop2: detected capacity change from 0 to 1764 [ 281.716666][T14472] iso9660: Unknown parameter 'utf0' [ 281.752376][T14480] loop5: detected capacity change from 0 to 256 [ 281.762842][T14472] loop2: detected capacity change from 0 to 2048 [ 281.820617][T13223] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 281.835949][T13223] FAT-fs (loop5): Filesystem has been set read-only [ 281.981235][T13223] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 282.041663][ T3000] loop2: p1 < > p4 [ 282.072068][ T3000] loop2: p4 size 722688 extends beyond EOD, truncated [ 282.097947][T14495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.416094][ T4494] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.572890][ T4494] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.740491][ T4494] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.758967][T14472] loop2: p1 < > p4 [ 282.782277][T14472] loop2: p4 size 722688 extends beyond EOD, truncated [ 282.844614][T14521] loop4: detected capacity change from 0 to 128 [ 282.857056][ T4494] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.900457][ T28] audit: type=1400 audit(1771758828.268:3316): avc: denied { unmount } for pid=8378 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 282.940747][T14532] loop2: detected capacity change from 0 to 256 [ 283.035540][T13702] udevd[13702]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 283.037746][T10156] udevd[10156]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 283.120815][ T4494] bridge_slave_1: left allmulticast mode [ 283.121739][T13702] udevd[13702]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 283.129879][ T4494] bridge_slave_1: left promiscuous mode [ 283.146011][T13229] udevd[13229]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 283.181940][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.228094][ T4494] bridge_slave_0: left allmulticast mode [ 283.233874][ T4494] bridge_slave_0: left promiscuous mode [ 283.241817][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.252319][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2892'. [ 283.274380][T14561] loop2: detected capacity change from 0 to 128 [ 283.405362][ T28] audit: type=1400 audit(1771758828.778:3317): avc: denied { setopt } for pid=14573 comm="syz.4.2901" lport=45756 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 283.433598][ T4494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.449882][ T4494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.460252][ T4494] bond0 (unregistering): Released all slaves [ 283.627362][ T4494] tipc: Left network mode [ 283.772217][ T4494] hsr_slave_0: left promiscuous mode [ 283.815984][ T4494] hsr_slave_1: left promiscuous mode [ 283.844677][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.881025][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.909847][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.917369][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.955043][ T4494] veth1_macvtap: left promiscuous mode [ 283.960544][ T4494] veth0_macvtap: left promiscuous mode [ 283.976385][ T4494] veth1_vlan: left promiscuous mode [ 283.991368][ T4494] veth0_vlan: left promiscuous mode [ 284.126655][ T4494] team0 (unregistering): Port device team_slave_1 removed [ 284.136930][ T4494] team0 (unregistering): Port device team_slave_0 removed [ 284.181052][T14606] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2907'. [ 284.197896][T14609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.233692][T14606] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2907'. [ 284.242805][T14513] chnl_net:caif_netlink_parms(): no params data found [ 284.258890][ T50] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.269926][ T50] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.306530][ T50] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.321924][ T4492] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.445255][T14513] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.452410][T14513] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.462964][T14513] bridge_slave_0: entered allmulticast mode [ 284.469516][T14513] bridge_slave_0: entered promiscuous mode [ 284.492244][T14513] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.499335][T14513] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.516761][T14513] bridge_slave_1: entered allmulticast mode [ 284.527483][T14513] bridge_slave_1: entered promiscuous mode [ 284.562683][T14644] loop8: detected capacity change from 0 to 256 [ 284.579742][T14513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.593019][T14513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.638760][T14513] team0: Port device team_slave_0 added [ 284.648016][T14513] team0: Port device team_slave_1 added [ 284.738329][T14513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.769237][T14513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.881509][T14513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.895270][T14668] loop4: detected capacity change from 0 to 128 [ 284.933909][T14513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.955687][T14513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.984216][T14671] loop6: detected capacity change from 0 to 164 [ 284.992392][T14671] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 285.002241][T14513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.105308][T14513] hsr_slave_0: entered promiscuous mode [ 285.126694][T14513] hsr_slave_1: entered promiscuous mode [ 285.142419][T14513] debugfs: 'hsr0' already exists in 'hsr' [ 285.165200][T14513] Cannot create hsr debugfs directory [ 285.361886][T14695] loop4: detected capacity change from 0 to 256 [ 285.531384][ T6063] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 285.538984][ T6063] FAT-fs (loop6): Filesystem has been set read-only [ 285.581137][ T6063] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 285.723666][ T28] audit: type=1400 audit(1771758831.098:3318): avc: denied { setattr } for pid=14727 comm="syz.4.2938" name="file0" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 285.870403][T14740] syzkaller0: tun_chr_ioctl cmd 35111 [ 286.095554][T14513] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 286.117962][T14513] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 286.161481][T14513] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 286.193522][T14513] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 286.257363][ T6665] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 286.295592][T14513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.300275][ T6665] FAT-fs (loop8): Filesystem has been set read-only [ 286.318387][ T6665] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 286.334730][T14513] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.361603][T14796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2934'. [ 286.450179][T14082] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.457291][T14082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.489060][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.496155][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.682635][T14513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.771923][ T4492] bridge_slave_1: left allmulticast mode [ 286.777909][ T4492] bridge_slave_1: left promiscuous mode [ 286.811598][ T4492] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.841131][ T4492] bridge_slave_0: left allmulticast mode [ 286.846874][ T4492] bridge_slave_0: left promiscuous mode [ 286.861149][ T4492] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.960639][T14870] set_capacity_and_notify: 6 callbacks suppressed [ 286.960706][T14870] loop2: detected capacity change from 0 to 7 [ 287.150399][ T4492] bond0 (unregistering): (slave 30): Releasing backup interface [ 287.166817][ T4492] : left allmulticast mode [ 287.180222][ T4492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.222027][ T4492] bond_slave_1: left allmulticast mode [ 287.227845][ T4492] bond0 (unregistering): Released all slaves [ 287.241597][ T4492] bond1 (unregistering): Released all slaves [ 287.316502][ T4492] tipc: Left network mode [ 287.366754][T14513] veth0_vlan: entered promiscuous mode [ 287.414233][T14513] veth1_vlan: entered promiscuous mode [ 287.436015][T14807] chnl_net:caif_netlink_parms(): no params data found [ 287.505444][ T4492] hsr_slave_0: left promiscuous mode [ 287.511834][ T4492] hsr_slave_1: left promiscuous mode [ 287.517515][ T4492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.535626][ T4492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.551876][ T4492] batman_adv: batadv0: Interface deactivated: macsec1 [ 287.558860][ T4492] batman_adv: batadv0: Removing interface: macsec1 [ 287.586011][ T4492] pim6reg (unregistering): left allmulticast mode [ 287.639830][ T4492] team_slave_1 (unregistering): left allmulticast mode [ 287.651197][ T4492] team0 (unregistering): Port device team_slave_1 removed [ 287.669650][ T4492] team_slave_0 (unregistering): left allmulticast mode [ 287.681121][ T4492] team0 (unregistering): Port device team_slave_0 removed [ 287.852383][T14953] loop2: detected capacity change from 0 to 128 [ 287.950643][T14959] netlink: 'syz.2.2990': attribute type 1 has an invalid length. [ 287.964895][T14959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.002576][T14513] veth0_macvtap: entered promiscuous mode [ 288.012485][T14959] vlan2: entered promiscuous mode [ 288.017519][T14959] bond1: entered promiscuous mode [ 288.024120][T14959] vlan2: entered allmulticast mode [ 288.029940][T14959] bond1: entered allmulticast mode [ 288.042880][T14807] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.050009][T14807] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.058277][T14807] bridge_slave_0: entered allmulticast mode [ 288.073705][T14807] bridge_slave_0: entered promiscuous mode [ 288.105721][T14966] bond1: (slave bridge1): making interface the new active one [ 288.113278][T14966] bridge1: entered promiscuous mode [ 288.122700][T14966] bridge1: entered allmulticast mode [ 288.137425][T14966] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 288.147461][T14807] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.155807][T14807] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.163329][T14807] bridge_slave_1: entered allmulticast mode [ 288.195801][T14807] bridge_slave_1: entered promiscuous mode [ 288.204975][T14513] veth1_macvtap: entered promiscuous mode [ 288.258057][T14807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.281908][T14807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.330128][T14807] team0: Port device team_slave_0 added [ 288.349843][T14807] team0: Port device team_slave_1 added [ 288.370611][T14513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.377446][T15002] loop4: detected capacity change from 0 to 764 [ 288.388314][ T4492] IPVS: stop unused estimator thread 0... [ 288.388582][T14513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.426758][T15002] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 288.428137][T14807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.451387][T14807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.484077][T14807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.545620][T14807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.564603][T14807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.657976][T14807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.671353][ T4494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.682844][ T4494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.711844][T14844] chnl_net:caif_netlink_parms(): no params data found [ 288.742042][ T28] audit: type=1400 audit(1771758834.118:3319): avc: denied { mounton } for pid=14998 comm="syz.4.2995" path="/70/file0" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 288.767576][ T4494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.781117][ T4494] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.803729][ T4492] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.839523][T14807] hsr_slave_0: entered promiscuous mode [ 288.846183][T14807] hsr_slave_1: entered promiscuous mode [ 288.852743][T14807] debugfs: 'hsr0' already exists in 'hsr' [ 288.858560][T14807] Cannot create hsr debugfs directory [ 288.899915][ T4492] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.041838][ T4492] team0: Port device netdevsim1 removed [ 289.047882][ T4492] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.130195][ T4492] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.179736][T14844] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.190274][T14844] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.210676][T14844] bridge_slave_0: entered allmulticast mode [ 289.218495][T14844] bridge_slave_0: entered promiscuous mode [ 289.282836][T14844] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.289941][T14844] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.297648][T14844] bridge_slave_1: entered allmulticast mode [ 289.307794][T14844] bridge_slave_1: entered promiscuous mode [ 289.368033][T14844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.380179][T14844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.493773][T14844] team0: Port device team_slave_0 added [ 289.500582][T14844] team0: Port device team_slave_1 added [ 289.522179][T14844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.529293][T14844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.555516][T14844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.572081][T14844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.579126][T14844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.605363][T14844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.631203][ T4492] tipc: Left network mode [ 289.645878][T14844] hsr_slave_0: entered promiscuous mode [ 289.652064][T14844] hsr_slave_1: entered promiscuous mode [ 289.658460][T14844] debugfs: 'hsr0' already exists in 'hsr' [ 289.664824][T14844] Cannot create hsr debugfs directory [ 289.672954][ T4492] hsr_slave_0: left promiscuous mode [ 289.678563][ T4492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.706640][ T4492] team0 (unregistering): Port device team_slave_1 removed [ 289.719755][ T4492] team0 (unregistering): Port device team_slave_0 removed [ 290.020481][T15139] loop4: detected capacity change from 0 to 128 [ 290.241242][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 290.609737][T15207] loop2: detected capacity change from 0 to 512 [ 290.974474][T14807] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 291.028706][T14807] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 291.051825][T14807] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 291.071245][T14807] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 291.178707][T14807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.239293][T14807] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.261953][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.269044][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.316606][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.323750][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.353853][T14844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 291.367088][T14844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 291.386004][T14844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 291.406925][T14844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 291.492000][T14807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.521686][T14844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.556100][T14844] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.557331][T15333] loop4: detected capacity change from 0 to 256 [ 291.607233][ T4492] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.614404][ T4492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.639691][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.646825][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.743901][T14844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 291.787559][T14844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.802547][T15362] loop4: detected capacity change from 0 to 256 [ 291.963585][T14844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.972162][T14807] veth0_vlan: entered promiscuous mode [ 291.999880][T14807] veth1_vlan: entered promiscuous mode [ 292.008939][T15391] loop4: detected capacity change from 0 to 764 [ 292.020256][T15391] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 292.062308][T14807] veth0_macvtap: entered promiscuous mode [ 292.090634][T14807] veth1_macvtap: entered promiscuous mode [ 292.117582][T14807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.146373][T14807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.163430][ T4493] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.187604][ T4493] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.229520][ T4493] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.241949][ T4493] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.271317][T14844] veth0_vlan: entered promiscuous mode [ 292.285389][T15422] loop0: detected capacity change from 0 to 128 [ 292.291853][T14844] veth1_vlan: entered promiscuous mode [ 292.322667][T15422] syz.0.3058: attempt to access beyond end of device [ 292.322667][T15422] loop0: rw=8390657, sector=171, nr_sectors = 1 limit=128 [ 292.329020][T14844] veth0_macvtap: entered promiscuous mode [ 292.356057][T15422] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 292.378798][ T28] audit: type=1400 audit(1771758837.748:3320): avc: denied { map } for pid=15427 comm="syz.7.2956" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 292.430653][T14844] veth1_macvtap: entered promiscuous mode [ 292.489617][T15438] loop0: detected capacity change from 0 to 256 [ 292.503052][T14844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.536590][T14844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.559193][T14513] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 292.579254][T14513] FAT-fs (loop0): Filesystem has been set read-only [ 292.587447][T14513] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 292.608786][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.618063][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.633731][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.656432][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.905244][T15486] loop2: detected capacity change from 0 to 256 [ 292.934475][ T4492] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.006990][ T4492] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.105300][ T4492] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.203681][ T4492] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.353100][ T4492] bridge_slave_1: left allmulticast mode [ 293.358785][ T4492] bridge_slave_1: left promiscuous mode [ 293.364832][ T4492] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.375637][ T4492] bridge_slave_0: left allmulticast mode [ 293.388082][ T4492] bridge_slave_0: left promiscuous mode [ 293.394190][ T4492] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.503163][ T4492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.513129][ T4492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.522731][ T4492] bond0 (unregistering): Released all slaves [ 293.561457][ T4492] hsr_slave_0: left promiscuous mode [ 293.567326][ T4492] hsr_slave_1: left promiscuous mode [ 293.573750][ T4492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.581325][ T4492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.589462][ T4492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.603664][ T4492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.618739][ T4492] veth1_macvtap: left promiscuous mode [ 293.633880][ T4492] veth0_macvtap: left promiscuous mode [ 293.639890][ T4492] veth1_vlan: left promiscuous mode [ 293.646350][ T4492] veth0_vlan: left promiscuous mode [ 293.830061][ T4492] team0 (unregistering): Port device team_slave_1 removed [ 293.851458][ T4492] team0 (unregistering): Port device team_slave_0 removed [ 294.047752][T15500] chnl_net:caif_netlink_parms(): no params data found [ 294.318285][T15500] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.350685][T15500] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.385577][T15500] bridge_slave_0: entered allmulticast mode [ 294.413562][T15500] bridge_slave_0: entered promiscuous mode [ 294.447851][T15500] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.465288][T15500] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.475638][T15500] bridge_slave_1: entered allmulticast mode [ 294.501740][T15500] bridge_slave_1: entered promiscuous mode [ 294.552227][T15500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.582381][T15500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.652795][T15500] team0: Port device team_slave_0 added [ 294.675456][T15500] team0: Port device team_slave_1 added [ 294.759612][T15500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.774073][T15500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.882839][T15500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.928639][T15500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.944952][T15500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.984182][T15500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.084657][T15500] hsr_slave_0: entered promiscuous mode [ 295.112961][T15500] hsr_slave_1: entered promiscuous mode [ 295.118850][T15500] debugfs: 'hsr0' already exists in 'hsr' [ 295.150895][T15732] loop2: detected capacity change from 0 to 512 [ 295.161794][T15500] Cannot create hsr debugfs directory [ 295.162525][T15735] loop7: detected capacity change from 0 to 128 [ 295.233888][T15741] loop2: detected capacity change from 0 to 256 [ 295.648046][T15785] loop1: detected capacity change from 0 to 256 [ 295.686355][T15785] FAT-fs (loop1): Directory bread(block 64) failed [ 295.687046][T15500] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 295.703669][T15785] FAT-fs (loop1): Directory bread(block 65) failed [ 295.717743][T15785] FAT-fs (loop1): Directory bread(block 66) failed [ 295.734132][T15785] FAT-fs (loop1): Directory bread(block 67) failed [ 295.741216][T15785] FAT-fs (loop1): Directory bread(block 68) failed [ 295.747793][T15785] FAT-fs (loop1): Directory bread(block 69) failed [ 295.754607][T15785] FAT-fs (loop1): Directory bread(block 70) failed [ 295.763156][T15500] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 295.770062][T15785] FAT-fs (loop1): Directory bread(block 71) failed [ 295.778834][T15500] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 295.785961][T15785] FAT-fs (loop1): Directory bread(block 72) failed [ 295.792784][T15785] FAT-fs (loop1): Directory bread(block 73) failed [ 295.802004][T15500] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 295.887346][T15500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.935491][T15500] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.959289][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.966388][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.985470][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.992583][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.176375][T15500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.274466][T15849] loop4: detected capacity change from 0 to 128 [ 296.294403][T15853] loop7: detected capacity change from 0 to 512 [ 296.518565][T15500] veth0_vlan: entered promiscuous mode [ 296.555781][T15500] veth1_vlan: entered promiscuous mode [ 296.616791][T15500] veth0_macvtap: entered promiscuous mode [ 296.656124][T15500] veth1_macvtap: entered promiscuous mode [ 296.681377][T15500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.709135][T15500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.741278][ T4492] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.811409][ T4492] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.835258][ T4492] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.852306][ T4492] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.361446][T15986] IPv6: addrconf: prefix option has invalid lifetime [ 297.971766][ T28] audit: type=1400 audit(1771758843.348:3321): avc: denied { mounton } for pid=16079 comm="syz.4.3202" path="/proc/308/cgroup" dev="proc" ino=51127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 298.378570][T16146] set_capacity_and_notify: 2 callbacks suppressed [ 298.378589][T16146] loop2: detected capacity change from 0 to 7 [ 298.640144][T16174] loop1: detected capacity change from 0 to 764 [ 298.658524][T16174] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 299.009071][T16200] loop2: detected capacity change from 0 to 512 [ 299.259001][T16228] syzkaller0: entered promiscuous mode [ 299.272625][T16228] syzkaller0: entered allmulticast mode [ 299.339421][T16243] loop4: detected capacity change from 0 to 128 [ 299.659315][T16294] loop1: detected capacity change from 0 to 512 [ 300.106531][T16358] loop7: detected capacity change from 0 to 512 [ 300.417988][T16403] loop2: detected capacity change from 0 to 512 [ 300.471816][T16411] loop2: detected capacity change from 0 to 7 [ 300.503908][T16415] loop2: detected capacity change from 0 to 256 [ 300.692193][T16443] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3289'. [ 300.850304][T16472] loop9: detected capacity change from 0 to 512 [ 300.999602][ T28] audit: type=1400 audit(1771758846.368:3322): avc: denied { append } for pid=16493 comm="syz.1.3306" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.296847][T16549] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3322'. [ 301.609211][T16593] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3335'. [ 302.779015][T16708] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16708 comm=syz.9.3382 [ 303.840882][T16834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3426'. [ 303.980667][T16838] set_capacity_and_notify: 15 callbacks suppressed [ 303.980709][T16838] loop1: detected capacity change from 0 to 128 [ 304.457532][T16889] loop4: detected capacity change from 0 to 128 [ 304.484295][T16892] loop2: detected capacity change from 0 to 128 [ 304.699288][T16912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3463'. [ 304.711528][T16905] loop1: detected capacity change from 0 to 512 [ 304.751855][T16914] loop2: detected capacity change from 0 to 128 [ 304.820298][T16918] loop1: detected capacity change from 0 to 128 [ 304.828331][T16919] loop2: detected capacity change from 0 to 7 [ 304.883889][T16924] loop7: detected capacity change from 0 to 512 [ 305.045300][T16941] loop1: detected capacity change from 0 to 128 [ 305.124495][T16949] loop2: detected capacity change from 0 to 7 [ 305.669495][T16964] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 305.678327][T16964] FAT-fs (loop9): Filesystem has been set read-only [ 307.616422][T17167] 9p: Bad value for 'rfdno' [ 307.944787][T17201] 9p: Bad value for 'rfdno' [ 308.783930][T17289] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 308.823979][T17289] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 308.905287][T17306] 9p: Bad value for 'wfdno' [ 309.439751][T17383] set_capacity_and_notify: 17 callbacks suppressed [ 309.439770][T17383] loop9: detected capacity change from 0 to 8192 [ 309.478932][T17389] loop2: detected capacity change from 0 to 512 [ 309.535785][T17390] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 309.547933][T17390] FAT-fs (loop9): Filesystem has been set read-only [ 309.561217][T17390] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 309.943586][T17444] loop2: detected capacity change from 0 to 512 [ 310.536745][T17501] loop9: detected capacity change from 0 to 512 [ 310.624839][T17513] loop9: detected capacity change from 0 to 128 [ 310.759783][T17535] loop9: detected capacity change from 0 to 764 [ 310.768456][T17535] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 311.814520][T17579] loop1: detected capacity change from 0 to 128 [ 311.828494][T17579] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 311.857712][T17579] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 311.936244][T17596] loop2: detected capacity change from 0 to 1156 [ 311.949752][T17596] ISOFS: Bad logical zone size 1792 [ 312.054248][T17615] loop9: detected capacity change from 0 to 512 [ 312.067831][T17615] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 312.096793][T17619] loop2: detected capacity change from 0 to 7 [ 313.545685][T17797] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 313.724662][T17823] syzkaller0: entered promiscuous mode [ 313.730831][T17823] syzkaller0: entered allmulticast mode [ 313.962333][T17853] iso9660: Bad value for 'gid' [ 313.977414][T17853] iso9660: Bad value for 'gid' [ 314.197564][T17892] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 314.620376][T17923] set_capacity_and_notify: 6 callbacks suppressed [ 314.620403][T17923] loop9: detected capacity change from 0 to 512 [ 315.007225][T17931] loop1: detected capacity change from 0 to 1156 [ 315.018230][T17931] iso9660: Bad value for 'gid' [ 315.038701][T17938] loop2: detected capacity change from 0 to 128 [ 315.046830][T17931] iso9660: Bad value for 'gid' [ 315.089566][T17940] loop9: detected capacity change from 0 to 512 [ 315.197854][T17961] loop4: detected capacity change from 0 to 512 [ 315.209141][T17964] loop2: detected capacity change from 0 to 7 [ 315.302711][T17978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3834'. [ 315.460519][T18004] loop9: detected capacity change from 0 to 512 [ 315.546306][T18012] loop2: detected capacity change from 0 to 1156 [ 315.562262][T18012] ISOFS: Bad logical zone size 1792 [ 316.240044][T18075] loop2: detected capacity change from 0 to 7 [ 316.556446][T18100] loop2: detected capacity change from 0 to 7 [ 316.698157][T18113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.330568][T18146] chnl_net:caif_netlink_parms(): no params data found [ 317.394110][T14082] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.448333][T18146] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.455665][T18146] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.462998][T18146] bridge_slave_0: entered allmulticast mode [ 317.469367][T18146] bridge_slave_0: entered promiscuous mode [ 317.476207][T18146] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.483318][T18146] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.490595][T18146] bridge_slave_1: entered allmulticast mode [ 317.497219][T18146] bridge_slave_1: entered promiscuous mode [ 317.517315][T14082] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.529295][T18146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.539914][T18146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.559933][T18146] team0: Port device team_slave_0 added [ 317.566947][T18146] team0: Port device team_slave_1 added [ 317.586927][T18146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.596581][T18146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.622726][T18146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.634254][T18146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.641360][T18146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.667301][T18146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.682859][T14082] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.738164][T18146] hsr_slave_0: entered promiscuous mode [ 317.763739][T18146] hsr_slave_1: entered promiscuous mode [ 317.769970][T18146] debugfs: 'hsr0' already exists in 'hsr' [ 317.791001][T18146] Cannot create hsr debugfs directory [ 317.817784][T14082] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.998160][T14082] bridge_slave_1: left allmulticast mode [ 318.006652][T14082] bridge_slave_1: left promiscuous mode [ 318.012763][T14082] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.022062][T14082] bridge_slave_0: left allmulticast mode [ 318.031138][T14082] bridge_slave_0: left promiscuous mode [ 318.040075][T14082] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.109130][T14082] dvmrp1 (unregistering): left allmulticast mode [ 318.142899][T14082] bond1 (unregistering): (slave bridge1): Releasing active interface [ 318.153348][T14082] bridge1 (unregistering): left promiscuous mode [ 318.163456][T14082] bridge1 (unregistering): left allmulticast mode [ 318.227126][T14082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.255456][T14082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.266169][T14082] bond0 (unregistering): Released all slaves [ 318.284614][T14082] bond1 (unregistering): Released all slaves [ 318.293597][T14082] bond2 (unregistering): Released all slaves [ 318.359843][T18222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.378988][T14082] tipc: Disabling bearer [ 318.388955][T14082] tipc: Left network mode [ 318.397700][T18234] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 318.410851][T18234] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 318.452437][T14082] hsr_slave_0: left promiscuous mode [ 318.475041][T14082] hsr_slave_1: left promiscuous mode [ 318.483491][ T4493] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 318.491025][T14082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.507201][T14082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.525615][T14082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.535827][T14082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.552335][T14082] veth1_macvtap: left promiscuous mode [ 318.559891][T14082] veth0_macvtap: left promiscuous mode [ 318.570814][T14082] veth1_vlan: left promiscuous mode [ 318.583715][T14082] veth0_vlan: left promiscuous mode [ 318.670425][T14082] team0 (unregistering): Port device team_slave_1 removed [ 318.679994][T14082] team0 (unregistering): Port device team_slave_0 removed [ 319.400386][T18146] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 319.571221][T18146] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 319.589361][T18146] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 319.614497][T13229] loop4: p1 p3 < > [ 319.620537][T18146] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 319.636917][T18324] loop4: p1 p3 < > [ 319.692318][T18146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.721730][T18146] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.748498][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.755674][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.827298][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.834452][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.848658][T13702] udevd[13702]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 319.858750][T18146] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 319.860306][T13229] udevd[13229]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 319.869972][T18146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.910563][T13702] udevd[13702]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 319.930477][T13229] udevd[13229]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 320.004882][T18146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.102063][T18146] veth0_vlan: entered promiscuous mode [ 320.112001][T18146] veth1_vlan: entered promiscuous mode [ 320.128925][T18146] veth0_macvtap: entered promiscuous mode [ 320.137137][T18146] veth1_macvtap: entered promiscuous mode [ 320.150084][T18146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.166795][T18146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.179338][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.206135][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.235971][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.245771][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.354283][T18410] set_capacity_and_notify: 5 callbacks suppressed [ 320.354301][T18410] loop2: detected capacity change from 0 to 7 [ 320.405583][T18394] loop1: detected capacity change from 0 to 32768 [ 320.441625][T13229] loop1: p1 p3 < > [ 320.454788][T18394] loop1: p1 p3 < > [ 320.628006][T18443] loop2: detected capacity change from 0 to 7 [ 320.658897][T13229] udevd[13229]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 320.659576][T14547] udevd[14547]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 320.744925][T13702] udevd[13702]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 320.765664][T13229] udevd[13229]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 320.882527][T18485] loop2: detected capacity change from 0 to 7 [ 321.402667][ T28] audit: type=1400 audit(1771758866.768:3323): avc: denied { ioctl } for pid=18567 comm="syz.2.4071" path="socket:[57942]" dev="sockfs" ino=57942 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 322.481897][T18697] loop2: detected capacity change from 0 to 7 [ 322.574643][ T28] audit: type=1400 audit(1771758867.948:3324): avc: denied { watch } for pid=18712 comm="syz.4.4142" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 322.634898][T18722] loop4: detected capacity change from 0 to 128 [ 322.698608][T18732] loop2: detected capacity change from 0 to 7 [ 322.962145][T18767] loop2: detected capacity change from 0 to 7 [ 323.482399][T18796] loop2: detected capacity change from 0 to 7 [ 324.464951][T18883] netlink: 296 bytes leftover after parsing attributes in process `syz.4.4217'. [ 324.481789][T18883] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 325.187771][T18146] ================================================================== [ 325.195892][T18146] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 325.203360][T18146] [ 325.205691][T18146] read-write to 0xffff88811b983178 of 8 bytes by task 18867 on cpu 0: [ 325.213834][T18146] shmem_recalc_inode+0x3f/0x1f0 [ 325.218783][T18146] shmem_get_folio_gfp+0x7a8/0xd60 [ 325.223900][T18146] shmem_write_begin+0xfc/0x1f0 [ 325.228753][T18146] generic_perform_write+0x183/0x490 [ 325.234048][T18146] shmem_file_write_iter+0xc5/0xf0 [ 325.239163][T18146] __kernel_write_iter+0x319/0x590 [ 325.244271][T18146] dump_user_range+0xa7d/0xdb0 [ 325.249030][T18146] elf_core_dump+0x21a2/0x2330 [ 325.253788][T18146] coredump_write+0xacc/0xdd0 [ 325.258458][T18146] vfs_coredump+0x26c7/0x3130 [ 325.263124][T18146] get_signal+0xd80/0xf60 [ 325.267456][T18146] arch_do_signal_or_restart+0x96/0x450 [ 325.273000][T18146] irqentry_exit+0xf7/0x520 [ 325.277505][T18146] asm_exc_page_fault+0x26/0x30 [ 325.282349][T18146] [ 325.284661][T18146] read to 0xffff88811b983178 of 8 bytes by task 18146 on cpu 1: [ 325.292279][T18146] shmem_getattr+0x41/0x200 [ 325.296789][T18146] vfs_getattr_nosec+0x146/0x1e0 [ 325.301718][T18146] vfs_getattr+0x48/0x60 [ 325.305952][T18146] vfs_statx_path+0x28/0x140 [ 325.310541][T18146] vfs_statx+0xc4/0x170 [ 325.314695][T18146] vfs_fstatat+0x118/0x170 [ 325.319102][T18146] __se_sys_newfstatat+0x55/0x3e0 [ 325.324132][T18146] __x64_sys_newfstatat+0x55/0x70 [ 325.329151][T18146] x64_sys_call+0x2c64/0x3020 [ 325.333823][T18146] do_syscall_64+0x12c/0x370 [ 325.338411][T18146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.344302][T18146] [ 325.346612][T18146] value changed: 0x0000000000003b57 -> 0x0000000000003b58 [ 325.353702][T18146] [ 325.356008][T18146] Reported by Kernel Concurrency Sanitizer on: [ 325.362147][T18146] CPU: 1 UID: 0 PID: 18146 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 325.371679][T18146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.381724][T18146] ==================================================================