last executing test programs: 10m22.754317938s ago: executing program 0 (id=116): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000240)={[{@noquota}, {@usrjquota}, {@nodioread_nolock}, {@nolazytime}], [{@smackfshat={'smackfshat', 0x3d, 'nodioread_nolock'}}]}, 0xfe, 0x275, &(0x7f0000000980)="$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") creat(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x84, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xe000000000000002, 0xffffffffffffffff, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000020000100000000000000000102000000020004020000000008000400fbffffff08000db69100"], 0x2c}}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x15, 0xa, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRES32=r3, @ANYRES8=r2, @ANYBLOB="a330556d9de0dad77fd37ab890ca972b569bd951750d0100000000000000517ad6d5cc632928e3975247895f87c1f6a6"], 0x3c}}, 0x4000) r7 = memfd_create(&(0x7f0000000d40)='[\v\xdbX\xae[\x1a\x02\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x05||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDf\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%iC}n\rSF\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe28\xc0\xf4\xee\x19\xce\xedX\x8d\rmq\t\xb5$\xef\xa6N\x9e\x0f@\xdfo\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82~\xb7\xb1<\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb69\xd3\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb92Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83D\x99\xf3j\xaf\xd0Fd\x81\xbe\xbf\by\x7f\xd8X?\n\xf8P&!\x9d0F\x8dp\xf9:?1\xe8T\x13\xfb\x89\xac\\\xd4\xa9\xa3\xac\x80\xddd\xed\xb1I\xfcz\x9aQ\x03\xcdO\xdfn^\xb4\x97\xd1\x8a%\x8d\xce\xafg\xa2W|v\xc2\x99\x97X\xd7\x8b\x82Z\xa7\xac\xa4\xb1P\x8c\xfd^\xb8=\xd6Q\xdb\x05\x8a\xe2\xed\xaaR\xd9\x1a\xd8\x92\xc8\x1b\xe6f\xd6\xb7rp\x8e\xd7I\xd0lN\xbd\x89\xac&)<\x9d\x8b\xcb\x93p\x90a\xef\xd0?\x02\x93\x83\xb9\xe4b\xfc1@\xde\xd8&\xd0\x8f\xa6G\xe0\xc9\xe9Z\xb4PG\xcf\xed\xf5\x94\x89\x9a\xa8\xd7\x02\xac\x9d\x1b\x9am\x82L\a,;\xcd\x11,\xf9\xe6\xe1\fa\xfe\xdc\xc0A\xc3\xda\x8f$\x87<\xef\xe2\xc2xP\xfc\xd4\xefX\x8doK\x8aa\x98.\x82!\xf9\rS\x04\xd2\xb4I\x1d=\xf9<\xb0?l\xa5\t\xd1j\"\x1e\xe5\xe0\xad\x14\x97\xde\xa3\x97\x9a\x9bq\'\xd4\xbc4\xf2\x9a\xa9\xa5\xb5\x8f\xdfD\xdf\xf9\xdc\xc3\xce\x90\f\xd9_y_\xda\x13p0\x02I\\~aT\xd4\x91\xa2\xb3\xb4\xa9\xdc\x90)\xac\xc6\x01\xf3\x98\x8e\xe2\xc2\f\xa0Yv\xb4\xa9\x99\x85\xd9t\xb9\x9ax@11\b\xba\xc0\xf1/\x1b\xfc\x93\xd8y\x89\xc6bO=w\xd5?C\x01e\x02z\xed[\x12\xd0{\xbc9\xd2Xm\xbe3h\x10\x00\xdfP\xfc\x01\xa19\xea\xae+c\xea\x1a.\x9ap\x0f<+t\x81\x84\xc3r\xcd\xdb\xa6\x84\x8a;l\x018\xda?\x90\xdd#\xaaM\xdcEV(u\xe1\x15\x8b\x88>\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbr\xe4\xef\xe9\xa0\xdfht\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\x00'/1641, 0x7) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="001828bd7000fcdbdf2502000000050002000a000000cbe1b05df591bdcbb165eadc24f48900a8065c62a95fe4fd5faa7f2c07a4854f0e32b8bc1dd6653a3ae054a32e9bd949b80dc852772a8975d6556a0d"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 10m21.2029808s ago: executing program 0 (id=120): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000440)=[{&(0x7f0000001cc0)=""/103, 0x67}, {0x0}], 0x2, 0x0) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') sendmsg$nl_route(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 10m19.507439349s ago: executing program 0 (id=124): madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) madvise(&(0x7f0000130000/0x4000)=nil, 0x4000, 0x1) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0x0, 0xc2ff, 0x0, 0x0, 0x0, 0x6a}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18ade54d400000000000"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000300)=""/120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000006c0), 0x3}, 0x38) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) recvmsg$can_bcm(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/83, 0x53}, {0x0}, {&(0x7f0000000600)=""/146, 0x92}, {0x0}, {0x0}], 0x5, &(0x7f0000000940)=""/119, 0x77}, 0x2001) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) sendmmsg$inet(r6, 0x0, 0x0, 0x8010) 10m16.485289121s ago: executing program 0 (id=130): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00921dfb9400000000000000000000000000000000f50000000000001e69236c80d20b786e832eed3e869d4b6de406d922c87f2206247d4349beb2"], 0x50) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000400)={'lo\x00', 0x2b4b}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x390, 0x2e8, 0x218, 0xfeffffff, 0x2e8, 0xf0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x2e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x4, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fchdir(0xffffffffffffffff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) 10m11.014797343s ago: executing program 0 (id=137): madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) madvise(&(0x7f0000130000/0x4000)=nil, 0x4000, 0x1) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0x0, 0xc2ff, 0x0, 0x0, 0x0, 0x6a}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18ade54d400000000000"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000006c0), 0x3}, 0x38) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) recvmsg$can_bcm(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/83, 0x53}, {0x0}, {&(0x7f0000000600)=""/146, 0x92}, {0x0}, {0x0}], 0x5, &(0x7f0000000940)=""/119, 0x77}, 0x2001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) sendmmsg$inet(r7, 0x0, 0x0, 0x8010) 10m8.085902386s ago: executing program 0 (id=142): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x8) 9m52.735272571s ago: executing program 32 (id=142): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x8) 9m18.964510591s ago: executing program 2 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x8) 9m17.694015376s ago: executing program 2 (id=217): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) unshare(0x60000600) sync() sync() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x900) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, 0x0, 0x20000084) sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$eJzs3U1sHFcdAPD/rO18OAl2AxWlSGBRBJGi+iNGZINAJD0hFaM2BS5FDUuysd2svZZ3LdUuh0SotDdUxKXqCVk58CWlUhEtFKkSoohD4cAJgcK9qqlUviQQWjSzs6kbb+yETTyV/ftJTzPzZnfff/Y/M5k3b+INYNcaiYiTEdEXEUcjYiivL+UlLrZL+rrVySszaUmi1XrkrSSSiHh28spM57OSfHog/4B9EXF6NaL01MZ2G8srFyq1WnUxXx5rzi2MNZZX7p+dq0xXp6vz5XJ5vFw+fmLi9m3ro4f3H37u11/4z89f++6Hv/K93zyZxnswX7d+O26XkRjJv5OB2Luuvj+JOH+7GytIut/0RzvXN+Pu6nd+eYdD4iZ9/geXSkXHAABsv/QC4HBEfCy7/h+KvuxqLuLkoa+9PRT/fLzo+AAAAIDetYaG4nPpFAAAANixStkzsElpNH8W4GCUSqOj7Wd4PxCDpVq90Tx6vr40f679rOxwDJTOz9aq4/mzwsMxkKTLE9n8O8vHrluejIi7IuKZof3Z8ujZeu1c0Tc/AAAAYIc7GHH10W+9/MEDN+j/p/48VHSUAAAAQC/S/v+hq4PZn+r6u34+AAAA7Ehp///tb//1t6H/DwAAADtWp///0NRUPDQ11VrNf/9qvj49e2Fm4cSx8dG5pbOjZ+uLC6PT9fp09j/257b+3Fq9vjBxLJaeGGtWG82xxvLKmbn60nzzTPa7XmeqA9uwbcDWHj55tlp0DAAAwPa566Ov/jGJiIuf2Z+V1J58nb467Gx+ABx2r76iAwAK0190AEBh9PGBZIv1+2604uLtjwUAALgzPvkh4/+wWxn/h93L+D/sXsb/YffSxweM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNZarSRaAAAAwI7WWF65UKnVqotmzJgxc22m6DuTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyXPTt5ZaZTtqvNV36xXS1xI2unImK4nf/VvLTX9Me+bLovBiJi8G9J9K97XxIRfT22/e97IkbisSdfbF1+KS2R74c9fiy34OKliLin2/GfpLtFDOd7wfX5L2V7Rm9+8sM0/6u/W18n/9url/wP9tj2yx9J8//g3evr5H/3uPfhoiOgSL9/pugIKNIf1oqOgCKdfqToCCjSlz5ddAQU6fm3io6AV09FxHi3/l8p7RZe6+Vf3//ry+4Q9ebISNr/e/ro+rqN/b/SGz02wybWTkV8NiJWN9z/K3VeMtyXLx3K7gcMJOdna9XxiHhfmsMY2JsuT2zSxuUzS491q3/wdJr/Kz9d+NMLP+uUtP10+s6rSm/07333+85VmpVet5u2tUsR9/Z3y39y7f5vcoP7v++/yTZmXv/G493qJ3+V5v+V5zfPP3dS6/sRn+h6/CfXXpPOjTXnFsYayyv3z85VpqvT1flyuTxeLh8/MTGWnQ7GOieFLobWDny1W/3XH0jz/98p+S9OevwPbp7/7PzfWF65UKnVqouNW2/jX2++vtqt/vBTaf4f+Ob/c/7fk3w5C3BPXvdEpdlcnIjYk3xxY/2xW495p+p8H53vK83/kfu6//vfuf5rn/9LG+7/D+fTdP3IJm0OHH/h6W71H78vG/+7+mLr8kuO/2Kk+T+3xfGfvOv4v/WZ5/7yjx91a/vHe9P8v/ZmZ/w3LWn7nbHgtvT4/1QWzJG8xvXf1m42QUXHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6/0vAAD//wqlOeU=") r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) getpgrp(0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x20040090) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) write$tun(r3, &(0x7f0000000740)=ANY=[], 0x2e) 9m14.63506579s ago: executing program 2 (id=225): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f0000000100)=0x4) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000240)={[{@noquota}, {@usrjquota}, {@nodioread_nolock}, {@nolazytime}], [{@smackfshat={'smackfshat', 0x3d, 'nodioread_nolock'}}]}, 0xfe, 0x275, &(0x7f0000000980)="$eJzs3T1onHUcB/Dfcy8mMUGiLoL4AiKigRAHQXDRRSEgIYgIKkREnCQRYoJbzsnFwc5tydQllG5NO5YuoUuha9pmSJcODR0aOrTDleeeu3BJLiS515Ln84HL8/zv/m8H9/0/d8PzTwC5NR4RX0ZEMSImIqIcEUlzhfezx3i9uDqyMRdRrX73OKnVy8qZRrvRiKhExOcRpcZry+s/bT/d/Oaj/5bKH15a/3GkX+8vYnjvbGd769vdizP/Xp3+dLlQf26sfmx+H92UtHiulES80YvBXhJJadAz4CRm/75yN839mxHxQS3/5SjUI/v/4is3y/HJhaPannt05+1+zhXovmq1nF4DK1Ugdwq178BJYTIisvNCYXIy+w5/r5jEHwuLf038vrA0/1vL5aPY9wUL6ESS/jZPf4B/fX3o2uiB/D8sZvk/kc96PFOgJ8Yitr6fXbufnu+6ikM+vJMd0vxP/LLyccg/5I78Q37JP+SX/MMZ0GZ25R/yqzn/Q4OeDNBXrv9whpUbJ5WWL8s/5Jf8Q34dyH8f78cFBq05/wBAvlSHBn0HMjAog15/AAAAAAAAAAAAAAAAAACAw1ZHNuYaj36Neet8xM5XEVHaP362H3mx9v+II4Zrf199kqTV9iRZs478/F6HHXTocpfvvp455Uburz3o7vindfvd3vT7z/7ikXvbrcxHVNLKU6XS4c9/Uv/8HevI/l8/pmH515MN0C3JgfIXP3Sv75U22jxf69747ZjejLiRrj9Trda/QrxVO7Zef8aat1hu05/POuwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvnkRAAD//0x2aeA=") creat(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x84, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xe000000000000002, 0xffffffffffffffff, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000020000100000000000000000102000000020004020000000008000400fbffffff08000db691000000"], 0x2c}}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x15, 0xa, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRES32=r4, @ANYRES8=r3, @ANYBLOB="a330556d9de0dad77fd37ab890ca972b569bd951750d0100000000000000517ad6d5cc632928e3975247895f87c1f6a6"], 0x3c}}, 0x4000) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r7) memfd_create(&(0x7f0000000d40)='[\v\xdbX\xae[\x1a\x02\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x05||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDf\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%iC}n\rSF\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe28\xc0\xf4\xee\x19\xce\xedX\x8d\rmq\t\xb5$\xef\xa6N\x9e\x0f@\xdfo\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82~\xb7\xb1<\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb69\xd3\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb92Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83D\x99\xf3j\xaf\xd0Fd\x81\xbe\xbf\by\x7f\xd8X?\n\xf8P&!\x9d0F\x8dp\xf9:?1\xe8T\x13\xfb\x89\xac\\\xd4\xa9\xa3\xac\x80\xddd\xed\xb1I\xfcz\x9aQ\x03\xcdO\xdfn^\xb4\x97\xd1\x8a%\x8d\xce\xafg\xa2W|v\xc2\x99\x97X\xd7\x8b\x82Z\xa7\xac\xa4\xb1P\x8c\xfd^\xb8=\xd6Q\xdb\x05\x8a\xe2\xed\xaaR\xd9\x1a\xd8\x92\xc8\x1b\xe6f\xd6\xb7rp\x8e\xd7I\xd0lN\xbd\x89\xac&)<\x9d\x8b\xcb\x93p\x90a\xef\xd0?\x02\x93\x83\xb9\xe4b\xfc1@\xde\xd8&\xd0\x8f\xa6G\xe0\xc9\xe9Z\xb4PG\xcf\xed\xf5\x94\x89\x9a\xa8\xd7\x02\xac\x9d\x1b\x9am\x82L\a,;\xcd\x11,\xf9\xe6\xe1\fa\xfe\xdc\xc0A\xc3\xda\x8f$\x87<\xef\xe2\xc2xP\xfc\xd4\xefX\x8doK\x8aa\x98.\x82!\xf9\rS\x04\xd2\xb4I\x1d=\xf9<\xb0?l\xa5\t\xd1j\"\x1e\xe5\xe0\xad\x14\x97\xde\xa3\x97\x9a\x9bq\'\xd4\xbc4\xf2\x9a\xa9\xa5\xb5\x8f\xdfD\xdf\xf9\xdc\xc3\xce\x90\f\xd9_y_\xda\x13p0\x02I\\~aT\xd4\x91\xa2\xb3\xb4\xa9\xdc\x90)\xac\xc6\x01\xf3\x98\x8e\xe2\xc2\f\xa0Yv\xb4\xa9\x99\x85\xd9t\xb9\x9ax@11\b\xba\xc0\xf1/\x1b\xfc\x93\xd8y\x89\xc6bO=w\xd5?C\x01e\x02z\xed[\x12\xd0{\xbc9\xd2Xm\xbe3h\x10\x00\xdfP\xfc\x01\xa19\xea\xae+c\xea\x1a.\x9ap\x0f<+t\x81\x84\xc3r\xcd\xdb\xa6\x84\x8a;l\x018\xda?\x90\xdd#\xaaM\xdcEV(u\xe1\x15\x8b\x88>\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbr\xe4\xef\xe9\xa0\xdfht\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\x00'/1641, 0x7) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES16=r9, @ANYBLOB="001828bd7000fcdbdf2502000000050002000a000000cbe1b05df591bdcbb165eadc24f48900a8065c62a95fe4fd5faa7f2c07a4854f0e32b8bc1dd6653a3ae054a32e9bd949b80dc852772a8975d6556a0d"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000220000032abd7000fcdbdfa50a00000006000002080000e80876fd387b5773ea1666460a03a4ffbb7239df1625b7888427e77c378e8c4f3c2b90708039df40bc141b4193e9a3e7f93011bb48bacbe5ecc1342ebd4f1bf3b0eabfdc01c693a6fa8863dd95d859a19f0681ef2708d66035a173530be51b07e727e1644e8af98b5d2f951380cddb75cabc67b48ee7b6297b8d1c1c446925249c797933153e444d4e0b37aca1ef2244b045da9a2196110b992ce6837b773ef90555bc14d5060d0b19b1"], 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) 9m9.040320814s ago: executing program 2 (id=230): open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x81100) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x35a5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)="e5fce1bc3fd2fe6b812396bf806c5a0939e990ad35abac079a1850d3511c2bf492a94db2fcbdffa741d9922874a0fe9703088c4ff090e1e1d29e1c7ef73bc9d230f4f42cba8ee8d8bc1ff375df90927e246443d0b1547538047a844ae49308db3bdbba8de93d22af7cbcc2bceb50e4b00d7f61ed67d3", 0x76}, {&(0x7f0000000400)="afbc9440454161c6c09142ab97a390c1359507e2a6190930f2f5ac23342ff797dc74bc3da6f1a43cf9eb046dc6ed8f2b8b9e350d27a20d1dff0adc092319b8734d1f4b6d74053ef93fa66612fb9768e50e938f7739760247f48e8e3d39e52ebf84e3e05588909977d137cfcb4ec10dfb558935c636ff16b8810a58180d692a22d0e1b9414c17d7d00ed49f3cba0966d3d810a35eccd072bdebf1461906d320f67c077003d419a9ff564511f84dafd6fc042a4c482fedfec7491b5e136ec10216429ae1d0c33526f8ed815fe8ec1a3f7999d27c368f5f8cb072ef", 0xda}, {&(0x7f0000000500)="717d3a8073c152c34c6b266d099c00711f89d3f164dfe09613001df02d20ef2102df09a64a6c852f3bbb881383793897766d74d85616eb4253aec95ba38b97649726b885513263dca44477f74050e43cfe83d9869b10cd2be94cda77a5aecb8fa199eb5c180cb2f11749555de06e154a10749d70f3ecb48ecea7787909e85ca6a355f28a8476e8546f8ad66c5d36a8ed381d01f5c5b5", 0x96}, {&(0x7f0000000080)="064c90f353c5d8230f8b3f928bf4bd", 0xf}, {&(0x7f00000005c0)="29ffd23b589eebb92867343252cde04f42d72f98c9fdbdea3601a00042ead2b1db6100b8231370c07f567d83c8b679a76e29bab876e974a201c1df45d687bddc75ae9a07f227a0f3eb11441d1eb4366a31cc507abe064489912e2f7efba685582d31fda7da7dfa3c54faa0d119103619c2f3dbef1c58718ae4c5fddaefd462c8b32b53aaa5e16f8dbc8aac18f4654bd7b4f564b0a22946df36806858447c48b7570c054817cf56c81f74f5cc6c79545ec149676d8f774ca8e677361799542b87525d853b40c819315205b128210d4cc407a4b4", 0xd3}], 0x5) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x95, 0x4) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(0x0, &(0x7f0000000200)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x1]) 9m7.713880416s ago: executing program 2 (id=235): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$eJzs3MtvG8UfAPCv7Th9/+JfKY+WFkILouKRNOmDHrgUgcQBJCQ4FHEKSVqVug1qgkSrCloO5YgqcUcckfgLuFAuCDghcUICiSNCqlAvLZyM1t5NXcdO7MSxA/58JCcznlnNfHd37PGs1wEMrNHkTy5ie0T8EhEjtey9FUZr/+7cujz9163L07moVF7/M1etd/vW5emsarbdtlqmUlmm3WtvRUyVy7MX0vz4wrl3x+cvXnr2zLmp07OnZ89PHj9+5PC+4WOTR7sSZxLX7T0fzO3d/fKb11+dPnn97e+/TPq7PS2vj6NbRmt7t6knut1Yn+2oS+eG+tgROlKIiORwFavjfyQKsWWxbCRe+qivnQPWVaWSr2xqXXylAvyHJRN1YBBlb/TJ59/s0aOpx4Zw80QsrmPcSR+1kqHIp3WK6Wek9TAaESev/P1Z8oh1WocAAKh340REPNNs/pePB+rq/S+9hlKKiP9HxM6IuC8idkXE/RHVug9GxEMdtt94hWTp/KcysqrA2pTM/55Pr23dO//LZn9RKqS5HdX4i7lTZ8qzh9J9cjCKm5L8xDJtfPPiT5+0Kquf/yWPpP1sLpj244+hhgW6mamFqbXEXO/m1Yg9Q83izy3OeZP58e6I2LPKNs489cXeVmWlFeNfRhcm5ZXPI56sHf8r0RB/Jtfy+uTEc8cmj45vjvLsofHsrFjqhx+vvdaq/ZWP//q6eaMSWxvO/4bdWsptjpi/eOls9XrtfIcN/Bxx7dePW36mWe35P5x7o5oeTp97f2ph4cJExHDulaXPT97dNstn9ZPz/+CB5uN/Z7pNcvwfjojkJN4XEY9ExKNp3x+LiP0RcWCZXfDdC4+/03n8y6zKd1ES/0zT17/F87+UpO4e/84ThbPfftV5/Imt6fE/Us0dTLdp5/Wv3Q6udf8BAADAv0G++h34XH5sMZ3Pj43VvsO/K7bmy3PzC0+fmnvv/Eztu/KlKOazla6RuvXQiXQtL8tPNuQPp+vGnxa2VPNj03PlmX4HDwNuW4vxn/i9UPv/W197CKwr92vB4DL+YXAZ/zC4jH8YXMY/DK5m4//DPvQD6L0V3v+39KofQO+Z/8PgMv5hcK00/vf35l5koLda3hufX9Mt/xJ9Snw9vLbfamg/EfkNEvIGTRTaqHM1HYW1Z4rRtPJQ2z9mcU8ie1NfufKmpkV9fFECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoon8CAAD///T43is=") socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00921dfb9400000000000000000000000000000000f50000000000001e69236c80d20b786e832eed3e869d4b6de406d922c87f2206247d4349beb2"], 0x50) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000400)={'lo\x00', 0x2b4b}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x390, 0x2e8, 0x218, 0xfeffffff, 0x2e8, 0xf0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x2e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x4, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) 8m59.62344652s ago: executing program 2 (id=246): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) madvise(&(0x7f0000130000/0x4000)=nil, 0x4000, 0x1) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0x0, 0xc2ff, 0x0, 0x0, 0x0, 0x6a}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18ade54d400000000000"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000300)=""/120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000006c0), 0x3}, 0x38) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) recvmsg$can_bcm(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/83, 0x53}, {0x0}, {&(0x7f0000000600)=""/146, 0x92}, {0x0}, {0x0}], 0x5, &(0x7f0000000940)=""/119, 0x77}, 0x2001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) sendmmsg$inet(r7, 0x0, 0x0, 0x8010) 8m44.171233903s ago: executing program 33 (id=246): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) madvise(&(0x7f0000130000/0x4000)=nil, 0x4000, 0x1) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0x0, 0xc2ff, 0x0, 0x0, 0x0, 0x6a}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18ade54d400000000000"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000300)=""/120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000006c0), 0x3}, 0x38) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) recvmsg$can_bcm(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/83, 0x53}, {0x0}, {&(0x7f0000000600)=""/146, 0x92}, {0x0}, {0x0}], 0x5, &(0x7f0000000940)=""/119, 0x77}, 0x2001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) sendmmsg$inet(r7, 0x0, 0x0, 0x8010) 24.333807181s ago: executing program 4 (id=4391): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pread64(r0, &(0x7f00000000c0)=""/91, 0x5b, 0x800) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 23.96997849s ago: executing program 4 (id=4396): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, 0x0, 0x8) 23.042447132s ago: executing program 4 (id=4402): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x802) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f662b9ee07962c220852f426072a0000000000100000000000", 0x2a}], 0x1) 22.844204607s ago: executing program 4 (id=4404): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x509, &(0x7f0000000340)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe70, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0xe, 0x2}, [{0xdc8, 0xffffffff, 0xfffffffd, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x8009, 0x4, 0x5, 0x3, 0x983c3b9}, {0x14, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x4391}, {0x8ce, 0x8, 0x101, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x5}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xd, 0x3a, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x5, 0x8}, {0x7fffffff, 0x401, 0x0, 0xffffffff, 0x380000, 0x2}, {0x9, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x1}, {0x6, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x6f8, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x20000004, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x2d, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x72b42cb3, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4c}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0xffffffff, 0x2, 0x8002000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffdfa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x10, 0x2, 0xfffffffd, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x7}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x9, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x403, 0x9, 0x16b9, 0x6}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0x5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x4000002, 0x7, 0x5}, {0x80e0470, 0x9, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7ffffffd, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x2, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x5, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0xffffffff, 0xffff, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0xfffffffe, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x6}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0xb}, {0x200, 0x9, 0x0, 0xfff, 0x3, 0xf}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0xfffd, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x8, 0xb, 0x8b0, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x100, 0x56, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x1}, {0x4, 0x33b46010c087959a}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0xb92f7acd6c055d88}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe70}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x0, 0x0, &(0x7f0000000700), 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x65140000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x20042, 0x9a) write$tcp_mem(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}}}, 0x10) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') accept4$x25(r3, 0x0, &(0x7f00000004c0), 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x5, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0xfffffffffffffff7, 0x6}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x200080) write$binfmt_aout(r7, &(0x7f00000003c0)=ANY=[], 0xfce1) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0x3, 0x8000000000000129, 0x2000000000800002, 0x622, 0x20000002, 0x6, 0x5, 0xfffffffffffffffd, 0x80000000}) syz_open_dev$evdev(&(0x7f0000000080), 0x98, 0x10000) 22.217062237s ago: executing program 4 (id=4411): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x7a02, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x6, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 21.613670981s ago: executing program 4 (id=4420): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601"], 0x4) 21.613401861s ago: executing program 34 (id=4420): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601"], 0x4) 15.253254754s ago: executing program 5 (id=4449): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) (fail_nth: 3) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x8) 13.490458348s ago: executing program 5 (id=4456): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.145502641s ago: executing program 5 (id=4462): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x7a02, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x6, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 10.971301532s ago: executing program 5 (id=4466): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x509, &(0x7f0000000340)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe70, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0xe, 0x2}, [{0xdc8, 0xffffffff, 0xfffffffd, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x8009, 0x4, 0x5, 0x3, 0x983c3b9}, {0x14, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x4391}, {0x8ce, 0x8, 0x101, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x5}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xd, 0x3a, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x5, 0x8}, {0x7fffffff, 0x401, 0x0, 0xffffffff, 0x380000, 0x2}, {0x9, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x1}, {0x6, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x6f8, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x20000004, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x2d, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x72b42cb3, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4c}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0xffffffff, 0x2, 0x8002000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffdfa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x10, 0x2, 0xfffffffd, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x7}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x9, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x403, 0x9, 0x16b9, 0x6}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0x5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x4000002, 0x7, 0x5}, {0x80e0470, 0x9, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7ffffffd, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x2, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x5, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0xffffffff, 0xffff, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0xfffffffe, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x6}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0xb}, {0x200, 0x9, 0x0, 0xfff, 0x3, 0xf}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0xfffd, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x8, 0xb, 0x8b0, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x100, 0x56, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x1}, {0x4, 0x33b46010c087959a}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0xb92f7acd6c055d88}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe70}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x0, 0x0, &(0x7f0000000700), 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x65140000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x20042, 0x9a) write$tcp_mem(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}}}, 0x10) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') accept4$x25(r3, 0x0, &(0x7f00000004c0), 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x5, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0xfffffffffffffff7, 0x6}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r7, &(0x7f00000003c0)=ANY=[], 0xfce1) 10.551995709s ago: executing program 5 (id=4476): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0xfd, 0x101, 0xa, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40, 0x1, 0x381, 0xc0000000}}) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 8.33221691s ago: executing program 5 (id=4482): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x2f) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) 8.303877814s ago: executing program 35 (id=4482): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x2f) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) 3.276128106s ago: executing program 7 (id=4429): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@data_err_ignore}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFxGkCCIWxD/Au8fiP+BfIWihSAl68BKZzWy7TXa7yXZrUufzgWnfm5nkO2/fvJfvzOyyARTWWPZPKeLliPg6iTjYtm048o1ja/utPLg2nS1JrK5+8mcSSb6utX+S/78/r7wUEb98EXG8tDFufWl5rlKtpgt5fbwxf3m8vrR84uJ8ZTadTS9NTk2demtq8t133h5YW18/9/d3H9/94NSXR1e+/eneodtJnIkD+bb2djyFG+2VsRjLX5OROLNux4kBBNtJkl47dDgH2H5D+TgfiWwOOBhD+agH/v+uR8QqUFCJ8Q8F1coDWtf2A7oOfm7cf3/tAqi9/V81b4IMr90biT3Na6N9K8ljV0bZ9e7oAOJnMX7+487tbIke9yGuDyAeQMuNmxFxcnh44/yf5PNf/05u4q7f+hhF+/sD2+lulv+80Sn/Kz3Mf6JD/rO/w9jtR+/xX7o3gDBdZfnfex3z34dT1+hQXnuhmfONJBcuVtOTEfFiRByLkd1Zvd/nOe35X7Zk8Vu5YH4c94Z3P/4zM5VGpc9wG9y/GfHKo/w3iQ3z/55mrru+/7PX49wmYxxJ77zabVvv9rcbfAa8+mPEax37/9ETreTJzyfHm+fDeOus2OivW0d+7RZ/a+0fvKz/9z25/aNJ+/Pa+tZj/LDnn7Tbtn7P/13Jp83yrnzd1UqjsTARsSv5aOP6yUc/26q39s/af+zok+e/Tuf/3oj4bJPtv3W4exq0E/p/Zkv9v/XCbx9+/n23+Jvr/zebpWP5ms3Mf5s9wKd57QAAAAAAAGCnKUXEgUhK5YflUqlcXnt/x+HYV6rW6o3jF2qLl2ai+VnZ0RgptZ50H2x7P8RE/n7YVn1yXX0qIg5FxDdDe5v18nStOrPdjQcAAAAAAAAAAAAAAAAAAIAdYn+Xz/9nfh/a7qMDnjlf+Q3F1XP8D+KbnoAdyd9/KC7jH4rL+IfiMv6huIx/KC7jH4rL+IfiMv4BAAAAAAAAAAAAAAAAAAAAAAAAAABgoM6dPZstqysPrk1n9ZkrS4tztSsnZtL6XHl+cbo8XVu4XJ6t1WaraXm6Nt/r91VrtcsTk7F4dbyR1hvj9aXl8/O1xUuN8xfnK7Pp+XTkP2kVAAAAAAAAAAAAAAAAAAAAPF/qS8tzlWo1XVDoWjgdO+Iw+i4kvXr5dH4y9BViePsbqPAMCts8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAm38DAAD//wC8MHI=") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x8080, 0x0) r3 = getgid() lstat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x28000, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)={0x2c, r7, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x7, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}}, 0x20000000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f00000015c0)={0x868, r7, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x886c}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x6, @random="44451b184194"}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x827, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {}, @device_b, @random="6d03a06712e4", @from_mac=@broadcast, {0x0, 0x6}, "", @value={0x0, 0x0, 0x2}}, @random="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"}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x868}, 0x1, 0x0, 0x0, 0x4044000}, 0x40) setgroups(0x4, &(0x7f0000000300)=[r3, r4, r5, 0xee01]) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r9, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e26, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x30}, 0x0) 2.737794065s ago: executing program 6 (id=4508): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") fallocate(0xffffffffffffffff, 0x0, 0x2000000, 0x1001f3) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xa142, 0x189) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x9, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8001, 0x543}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b0100004ec6"}) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="c66532b574494f357bc9dd15d0c34008b61a9c986b1f22543036fd99a8722bca99048c6339d4bb", 0x27}, {&(0x7f00000003c0)="97a2776dc741098f5b83df1607e7c954c867f4faf71cb4ad57b0e50e8f9ff5f4bc3e4347144e9e54e8e07e292659bb9f9276bd0f1e807d31d091b02acff4d986a5852e2bab2bf12874066c6c273d958f0b0348f56422b09e5982801fc7b4b378b73fc617e32ca0db0872fbe9676684d4bfba4cd143aad18083ae6ea233545e70885c", 0x82}, {&(0x7f0000000480)="b4677583af99bfccbfad12ce2aed2225cd63e2b48f3a263d8611e0e55d47220923122c2d655ca3c23b0dca0a98b8d401dd2123b532c71a1bd4e856db9b323931077dc1dba5b996fc94c93b329132d21b69ef8447343e2efd284ecd831fa7b42cb9e9f8f557c705c46bbbaec8d5ba6d70b7888cac21bde6430638f2bb14722bb88cb1d619c4d5deba868caf4ec4d4b40e888b024133317cf07399ff259e70726bea2dec93800ec0812fc3d37cf2768b9ecf", 0xb1}], 0x3, &(0x7f0000000200)=[@ip_tos_u8={{0x11}}], 0x18}, 0x24004040) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r3, 0x6, 0x10, &(0x7f0000000640)=0x7800, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x18088, 0x80}}}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}, 0x1, 0x8}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x1, 0x6b61, 0x2, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x700, 0x2}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x54, r4, 0x320, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100001a, 0x12, 0xffffffffffffffff, 0x8000000) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x10000) 2.542961621s ago: executing program 6 (id=4511): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x3b6, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0xffff], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048805}, 0x0) 2.478598776s ago: executing program 6 (id=4512): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x509, &(0x7f0000000340)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe70, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0xe, 0x2}, [{0xdc8, 0xffffffff, 0xfffffffd, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x8009, 0x4, 0x5, 0x3, 0x983c3b9}, {0x14, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x4391}, {0x8ce, 0x8, 0x101, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x5}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xd, 0x3a, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x5, 0x8}, {0x7fffffff, 0x401, 0x0, 0xffffffff, 0x380000, 0x2}, {0x9, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x1}, {0x6, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x6f8, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x20000004, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x2d, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x72b42cb3, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4c}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0xffffffff, 0x2, 0x8002000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffdfa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x10, 0x2, 0xfffffffd, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x7}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x9, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x403, 0x9, 0x16b9, 0x6}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0x5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x4000002, 0x7, 0x5}, {0x80e0470, 0x9, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7ffffffd, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x2, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x5, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0xffffffff, 0xffff, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0xfffffffe, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x6}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0xb}, {0x200, 0x9, 0x0, 0xfff, 0x3, 0xf}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0xfffd, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x8, 0xb, 0x8b0, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x100, 0x56, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x1}, {0x4, 0x33b46010c087959a}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0xb92f7acd6c055d88}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe70}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x0, 0x0, &(0x7f0000000700), 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x65140000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x20042, 0x9a) write$tcp_mem(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}}}, 0x10) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') accept4$x25(r3, 0x0, &(0x7f00000004c0), 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x5, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0xfffffffffffffff7, 0x6}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) write$binfmt_aout(r7, &(0x7f00000003c0)=ANY=[], 0xfce1) 1.774468928s ago: executing program 1 (id=4513): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x802) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f662b9ee07962c220852f426072a0000000000100000000000", 0x2a}, {&(0x7f0000000640)="ee038ed19cd8b88877f938527ee7a5d78249d4fb8fd8fad9a099191b44", 0x1d}], 0x2) 1.773694858s ago: executing program 1 (id=4514): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@tmpl={0x104, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x2, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x3, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x1, 0x0, 0xabf, 0x1000000}]}]}, 0x1bc}}, 0x4000) 1.759191535s ago: executing program 1 (id=4515): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x22020400) r4 = epoll_create1(0x80000) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000f00)={{}, 0x9, 0x3, 0x4}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x6d1e, 0x0, 0x3, 0x2c8}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r6, 0x47f5, 0x0, 0x0, 0x0, 0x0) ptrace$getregs(0xc, 0x0, 0x9, 0x0) timer_create(0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r6, 0x17, 0x0, 0x1) 1.166215912s ago: executing program 7 (id=4516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x6, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r4, &(0x7f0000000240)="bad330", 0x3, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @remote}, 0x14) 1.163435391s ago: executing program 6 (id=4517): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x509, &(0x7f0000000340)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe70, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0xe, 0x2}, [{0xdc8, 0xffffffff, 0xfffffffd, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x8009, 0x4, 0x5, 0x3, 0x983c3b9}, {0x14, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x4391}, {0x8ce, 0x8, 0x101, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x5}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xd, 0x3a, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x5, 0x8}, {0x7fffffff, 0x401, 0x0, 0xffffffff, 0x380000, 0x2}, {0x9, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x1}, {0x6, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x6f8, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x20000004, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x2d, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x72b42cb3, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4c}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0xffffffff, 0x2, 0x8002000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffdfa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x10, 0x2, 0xfffffffd, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x7}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x9, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x403, 0x9, 0x16b9, 0x6}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0x5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x4000002, 0x7, 0x5}, {0x80e0470, 0x9, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7ffffffd, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x2, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x5, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0xffffffff, 0xffff, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0xfffffffe, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x6}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0xb}, {0x200, 0x9, 0x0, 0xfff, 0x3, 0xf}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0xfffd, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x8, 0xb, 0x8b0, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x100, 0x56, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x1}, {0x4, 0x33b46010c087959a}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0xb92f7acd6c055d88}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe70}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x0, 0x0, &(0x7f0000000700), 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x65140000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x20042, 0x9a) write$tcp_mem(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}}}, 0x10) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') accept4$x25(r3, 0x0, &(0x7f00000004c0), 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x5, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0xfffffffffffffff7, 0x6}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) write$binfmt_aout(r7, &(0x7f00000003c0)=ANY=[], 0xfce1) 1.137965715s ago: executing program 3 (id=4518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c000000020000000000000018e8ffff1f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaa"], 0x72) 950.419304ms ago: executing program 3 (id=4519): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000180000003249000082000000010000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000b4"], 0x50) 858.214083ms ago: executing program 3 (id=4520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$PTRACE_SETSIGMASK(0x420b, r6, 0x8, &(0x7f00000000c0)={[0x1]}) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000000)={r0, 0x0, 0x1ff, 0x0, 0x6, 0x8}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x4) 857.575393ms ago: executing program 1 (id=4521): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) timer_create(0x1, &(0x7f0000000100)={0x0, 0x1e, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r2, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x400101e2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000080)='c', 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="480000000000000029000000370000002b0500000000000007280000000308480400030000000000000008000000000000000104000000000000080000000000000004010300000014000000000000002900000043000000080000000000000050"], 0xb0}}], 0x1, 0x4000801) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}]}, &(0x7f00000001c0)=0x10) shutdown(r3, 0x1) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xc, 0x4, 0xc4c, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x301000, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000000)=0x402, 0x4) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@gettaction={0x20, 0x32, 0x605, 0x70bd2d, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x97}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001080)=@mangle={'mangle\x00', 0x2, 0x6, 0x6e0, 0x0, 0x540, 0x540, 0x610, 0x0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [0x0, 0xffffff00]}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e23, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0x40, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x2, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x009\\', @ANYRESOCT=r0, @ANYBLOB="0000000002000000440012800b000100697036746e6c000034000280140002002001000000000000000000000000000014000300ff0200000000000000000000000000010500090004000000080004"], 0x6c}, 0x1, 0x0, 0x0, 0x24004845}, 0x40014) 712.7206ms ago: executing program 7 (id=4522): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400, 0x20565, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x4}, 0x100904, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x25, &(0x7f0000000000), 0x20000010) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8000000000000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0xfffffffe, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x10000000, 0xaa, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000000000003000000000000000300000004000000030000000000000000000002000000000000005f4f"], 0x0, 0x5e, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x108, 0xe, 0x2f, &(0x7f0000000200)="63eced8e46dc3f13df33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 663.240629ms ago: executing program 6 (id=4523): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000005c0)={[{@bh}, {@norecovery}, {@test_dummy_encryption_v1}, {@grpquota}, {@auto_da_alloc}, {@nodioread_nolock}], [{@uid_gt}, {@euid_eq}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'bridge_slave_1\x00'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@smackfsdef}, {@smackfsfloor={'smackfsfloor', 0x3d, 'test_dummy_encryption=v1'}}, {@hash}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fadvise64(r1, 0x1a86, 0x6, 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @initdev={0xac, 0x1e, 0xff, 0x0}}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0xffff, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400000000000000b, 0x2}) r5 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2, 0x31c}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x0, &(0x7f0000000200)=0x7, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff}) io_uring_enter(r5, 0x7a91, 0x0, 0x0, 0x0, 0x18) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000580)={&(0x7f0000002000)={[{0x0}, {0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0x8}, {0x0}, {0x0}, {0x0}, {0x0, 0x0, 0x1}]}, 0x8}, 0x1) r8 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r9, 0x29, 0x4, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="c918ff00000000000000860188a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000180)=""/38, 0x26}], 0x1, 0xffff, 0xddd073cf) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x11, r8, 0x200000) r11 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r11, &(0x7f0000000780)={&(0x7f0000000300)=@in={0x2, 0x4e22, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x41, 0x9}}], 0x18}, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) setsockopt$packet_int(r12, 0x107, 0x11, 0x0, 0x0) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r3, 0x7, {0x0, 0xf0}, 0xfe}, 0x18, &(0x7f0000000180)={&(0x7f0000000100)="90f84d", 0x3}, 0x1, 0x0, 0x0, 0x20044000}, 0x4004) lseek(r0, 0x0, 0x1) 623.13349ms ago: executing program 3 (id=4524): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x802) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f662b9ee07962c220852f426072a0000000000100000000000", 0x2a}, {&(0x7f0000000640)="ee038ed19cd8b88877f938527ee7a5d78249d4fb8fd8fad9a099191b44", 0x1d}], 0x2) 597.442674ms ago: executing program 3 (id=4525): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 452.114242ms ago: executing program 3 (id=4526): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) close(0x3) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r2) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000040900010073797a30000000000900020073797a320000000048000480440001800b00010065787468647200f32d000280080003400000008c080007400000000e08000640000000010500020089000000080004"], 0x9c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0xc) timerfd_create(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x56a9, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x1a, 0x4) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000340)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f00000006c0)=""/126, 0x7e}, {&(0x7f0000000540)=""/43, 0x2b}], 0xa, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x0, 0x3938700}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf250410000014000180080005000300d600060001"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x12) 402.16337ms ago: executing program 7 (id=4527): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='AF', @ANYRES32=r2], 0x4) 350.221059ms ago: executing program 6 (id=4528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x0, 0x64e, 0xfffffffd, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xc, 0x1, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 349.945669ms ago: executing program 36 (id=4528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x0, 0x64e, 0xfffffffd, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xc, 0x1, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 46.808551ms ago: executing program 1 (id=4530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 0s ago: executing program 1 (id=4531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x84, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0, 0x9}, 0x400, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x51, 0x0, 0x0, 0x0, 0x6e5, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x8) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4092, 0xffc}], 0x1) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) msgctl$IPC_SET(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) kernel console output (not intermixed with test programs): buffer_io_error: 28 callbacks suppressed [ 679.101928][T17988] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 679.119328][ T3787] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.128573][ T3787] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.159047][T17988] syz.1.4080: attempt to access beyond end of device [ 679.159047][T17988] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 679.367905][T18000] loop3: detected capacity change from 0 to 512 [ 679.623111][T17988] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 679.672895][ T28] audit: type=1400 audit(1772357058.112:408): avc: denied { getopt } for pid=17998 comm="syz.4.4084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 679.694693][T18000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.707451][T18000] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 679.736609][ T3787] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.757730][T17988] syz.1.4080: attempt to access beyond end of device [ 679.757730][T17988] loop1: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 679.773727][ T3787] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.809876][T17988] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 679.826653][T17988] syz.1.4080: attempt to access beyond end of device [ 679.826653][T17988] loop1: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 679.884021][T17988] Buffer I/O error on dev loop1, logical block 78, lost async page write [ 679.892739][T17988] syz.1.4080: attempt to access beyond end of device [ 679.892739][T17988] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 679.907585][T17988] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 679.916239][T17988] syz.1.4080: attempt to access beyond end of device [ 679.916239][T17988] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 679.934729][T17988] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 680.172974][T18007] syz.1.4080: attempt to access beyond end of device [ 680.172974][T18007] loop1: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 680.187586][T18007] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 680.198535][T18007] syz.1.4080: attempt to access beyond end of device [ 680.198535][T18007] loop1: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 680.212734][T18007] Buffer I/O error on dev loop1, logical block 78, lost async page write [ 680.221204][T18007] syz.1.4080: attempt to access beyond end of device [ 680.221204][T18007] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 680.235802][T18007] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 680.244475][T18007] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 680.410637][T18010] loop1: detected capacity change from 0 to 512 [ 680.443931][T18010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.457830][T18010] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.470452][ T28] audit: type=1400 audit(1772357058.942:409): avc: denied { setattr } for pid=18009 comm="syz.1.4085" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 680.567724][T18016] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 680.604684][T18010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18010 comm=syz.1.4085 [ 680.629676][T14220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.894988][T17236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.990005][T18020] FAULT_INJECTION: forcing a failure. [ 680.990005][T18020] name failslab, interval 1, probability 0, space 0, times 0 [ 681.012980][T18022] loop1: detected capacity change from 0 to 512 [ 681.037249][T18022] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 681.056169][T18022] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 681.065620][T18022] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 681.075341][T18022] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 681.083601][T18022] System zones: 0-2, 18-18, 34-35 [ 681.091353][T18020] CPU: 0 UID: 0 PID: 18020 Comm: syz.6.4089 Not tainted syzkaller #0 PREEMPT(full) [ 681.091379][T18020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 681.091392][T18020] Call Trace: [ 681.091404][T18020] [ 681.091414][T18020] __dump_stack+0x1d/0x30 [ 681.091447][T18020] dump_stack_lvl+0x95/0xd0 [ 681.091495][T18020] dump_stack+0x15/0x1b [ 681.091521][T18020] should_fail_ex+0x263/0x280 [ 681.091545][T18020] should_failslab+0x8c/0xb0 [ 681.091585][T18020] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 681.091612][T18020] ? __alloc_skb+0x2d6/0x690 [ 681.091635][T18020] __alloc_skb+0x2d6/0x690 [ 681.091705][T18020] ? __alloc_skb+0x200/0x690 [ 681.091726][T18020] netlink_alloc_large_skb+0xbf/0xf0 [ 681.091754][T18020] netlink_sendmsg+0x40c/0x6f0 [ 681.091867][T18020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.091901][T18020] ____sys_sendmsg+0x5af/0x600 [ 681.091937][T18020] ___sys_sendmsg+0x195/0x1e0 [ 681.092045][T18020] __x64_sys_sendmsg+0xd4/0x160 [ 681.092083][T18020] x64_sys_call+0x194c/0x3020 [ 681.092172][T18020] do_syscall_64+0x12c/0x370 [ 681.092193][T18020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.092274][T18020] RIP: 0033:0x7f19f13dc799 [ 681.092363][T18020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.092383][T18020] RSP: 002b:00007f19efe37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.092472][T18020] RAX: ffffffffffffffda RBX: 00007f19f1655fa0 RCX: 00007f19f13dc799 [ 681.092486][T18020] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 681.092500][T18020] RBP: 00007f19efe37090 R08: 0000000000000000 R09: 0000000000000000 [ 681.092513][T18020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.092607][T18020] R13: 00007f19f1656038 R14: 00007f19f1655fa0 R15: 00007ffc3ef90b58 [ 681.092631][T18020] [ 681.123094][T18022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.333393][T18026] loop3: detected capacity change from 0 to 512 [ 681.348926][T18026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.361535][T18026] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.375418][T18026] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #12: comm syz.3.4090: invalid size [ 681.386311][T18026] EXT4-fs (loop3): Remounting filesystem read-only [ 681.404286][T18022] EXT4-fs warning (device loop1): ext4_lookup:1797: Inconsistent encryption contexts: 12/14 [ 681.419341][T17236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.439495][T16066] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 681.439707][ T28] audit: type=1326 audit(1772357059.912:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.4.4093" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5bab1c799 code=0x0 [ 681.450314][T16066] Quota error (device loop3): write_blk: dquota write failed [ 681.482319][T14220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.542122][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4094'. [ 681.564716][T18045] loop1: detected capacity change from 0 to 1024 [ 681.584039][T18045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 681.596890][T18045] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.662614][T14220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 681.953504][T18051] loop1: detected capacity change from 0 to 128 [ 681.983266][T18053] x_tables: ip_tables: osf match: only valid for protocol 6 [ 681.997882][T18053] loop3: detected capacity change from 0 to 1024 [ 682.004823][T18053] EXT4-fs: inline encryption not supported [ 682.023735][T18053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.072884][T17236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.164150][T18062] binfmt_misc: register: failed to install interpreter file ./file0 [ 682.375720][T18068] loop6: detected capacity change from 0 to 512 [ 682.875171][T18068] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.888089][T18068] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.964318][T18072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.977052][T18072] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.013517][T18060] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #12: comm syz.3.4098: invalid size [ 683.119692][T18060] EXT4-fs (loop3): Remounting filesystem read-only [ 683.253400][T14588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.296205][T17236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.305579][ T3787] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 683.317204][ T3787] __quota_error: 1 callbacks suppressed [ 683.317218][ T3787] Quota error (device loop3): write_blk: dquota write failed [ 683.330879][ T3787] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 683.347964][T18089] EXT4-fs: inline encryption not supported [ 683.372851][T18089] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 683.385240][T18089] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.398811][T18089] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.4102: Freeing blocks not in datazone - block = 0, count = 16 [ 683.410287][ T28] audit: type=1400 audit(1772357061.872:411): avc: denied { unlink } for pid=18088 comm="syz.6.4102" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 683.432395][T18089] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4102: bg 0: block 112: padding at end of block bitmap is not set [ 683.449307][T18089] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 683.480442][T14588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 683.512911][T18100] set_capacity_and_notify: 2 callbacks suppressed [ 683.512930][T18100] loop5: detected capacity change from 0 to 1024 [ 683.513691][T18098] tipc: Enabling of bearer rejected, failed to enable media [ 683.519789][T18100] EXT4-fs: test_dummy_encryption option not supported [ 683.590357][ T28] audit: type=1400 audit(1772357062.062:412): avc: denied { write } for pid=18099 comm="syz.5.4107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 683.718359][T18115] loop1: detected capacity change from 0 to 128 [ 683.771449][ T28] audit: type=1400 audit(1772357062.242:413): avc: denied { write } for pid=18119 comm="syz.5.4112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 683.901930][ T28] audit: type=1400 audit(1772357062.372:414): avc: denied { bind } for pid=18132 comm="syz.6.4114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 683.986298][ T28] audit: type=1400 audit(1772357062.462:415): avc: denied { ioctl } for pid=18134 comm="syz.1.4115" path="socket:[56585]" dev="sockfs" ino=56585 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 684.017022][T18135] loop1: detected capacity change from 0 to 128 [ 684.041448][T18135] EXT4-fs: quotafile must be on filesystem root [ 684.278166][T18155] tipc: Enabling of bearer rejected, failed to enable media [ 684.306738][T18160] syzkaller0: entered promiscuous mode [ 684.312418][T18160] syzkaller0: entered allmulticast mode [ 684.426396][T18176] loop5: detected capacity change from 0 to 1024 [ 684.448315][T18176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 684.521458][T18182] loop4: detected capacity change from 0 to 512 [ 684.554372][ T28] audit: type=1400 audit(1772357063.022:416): avc: denied { read write } for pid=18174 comm="syz.5.4127" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 684.599666][T14915] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.609211][T18182] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 684.614751][ T28] audit: type=1400 audit(1772357063.032:417): avc: denied { open } for pid=18174 comm="syz.5.4127" path="/179/file1/file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 684.623870][T18182] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 684.674051][ T28] audit: type=1400 audit(1772357063.062:418): avc: denied { ioctl } for pid=18174 comm="syz.5.4127" path="/179/file1/file2" dev="loop5" ino=16 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 684.818346][T18182] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 684.828182][T18182] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 684.844243][T18182] System zones: 0-2, 18-18, 34-35 [ 684.850079][T18182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 684.895608][T18182] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 12/14 [ 684.949011][T18193] loop3: detected capacity change from 0 to 512 [ 684.975493][T18198] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 12/14 [ 685.041561][T13950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.083709][T18193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.096365][T18193] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.118414][T18191] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #12: comm syz.3.4133: invalid size [ 685.128936][T18191] EXT4-fs (loop3): Remounting filesystem read-only [ 685.182875][T17236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.190251][T18204] netlink: 'syz.5.4137': attribute type 27 has an invalid length. [ 685.204480][ T3907] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 685.244553][T18214] syzkaller0: entered promiscuous mode [ 685.256173][T18214] syzkaller0: entered allmulticast mode [ 685.293907][T18204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.294488][T18221] x_tables: ip_tables: osf match: only valid for protocol 6 [ 685.302523][T18204] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.316295][T18221] loop4: detected capacity change from 0 to 1024 [ 685.325678][T18221] EXT4-fs: inline encryption not supported [ 685.333596][T18204] net_ratelimit: 30 callbacks suppressed [ 685.333609][T18204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 685.367927][T18221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.460453][T13950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.476195][T18236] loop3: detected capacity change from 0 to 512 [ 685.487714][T18236] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 685.497814][T18236] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 685.517153][T18236] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 685.521048][T18240] syzkaller0: entered promiscuous mode [ 685.532233][T18240] syzkaller0: entered allmulticast mode [ 685.542438][T18236] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 685.550504][T18236] System zones: 0-2, 18-18, 34-35 [ 685.569587][T18244] loop5: detected capacity change from 0 to 128 [ 685.579527][T18236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.589591][T18244] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 685.593989][T18236] EXT4-fs warning (device loop3): ext4_lookup:1797: Inconsistent encryption contexts: 12/14 [ 685.605728][T18244] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 685.618737][T18236] EXT4-fs warning (device loop3): ext4_lookup:1797: Inconsistent encryption contexts: 12/14 [ 685.648329][T18244] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.5.4148: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 685.677456][T18244] EXT4-fs (loop5): Remounting filesystem read-only [ 685.692761][T14915] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 685.703372][T17236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.762779][T18251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4151'. [ 685.803509][T18254] loop4: detected capacity change from 0 to 128 [ 685.823858][T18252] syzkaller0: entered promiscuous mode [ 685.825778][T18256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4152'. [ 685.829640][T18252] syzkaller0: entered allmulticast mode [ 685.839448][T18254] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 685.870642][T18248] loop5: p3 < > [ 685.880265][T18254] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 685.916451][T18261] syzkaller0: entered promiscuous mode [ 685.923263][T18261] syzkaller0: entered allmulticast mode [ 685.928866][T18254] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.4.4153: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 685.952259][T18254] EXT4-fs (loop4): Remounting filesystem read-only [ 685.983530][ T3632] udevd[3632]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 685.995454][T13950] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 686.011348][T18265] FAULT_INJECTION: forcing a failure. [ 686.011348][T18265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.026572][T18265] CPU: 1 UID: 0 PID: 18265 Comm: syz.5.4155 Not tainted syzkaller #0 PREEMPT(full) [ 686.026645][T18265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 686.026657][T18265] Call Trace: [ 686.026664][T18265] [ 686.026672][T18265] __dump_stack+0x1d/0x30 [ 686.026703][T18265] dump_stack_lvl+0x95/0xd0 [ 686.026730][T18265] dump_stack+0x15/0x1b [ 686.026788][T18265] should_fail_ex+0x263/0x280 [ 686.026814][T18265] should_fail+0xb/0x20 [ 686.026833][T18265] should_fail_usercopy+0x1a/0x20 [ 686.026856][T18265] _copy_from_iter+0xcf/0xea0 [ 686.026942][T18265] ? should_fail_ex+0xd9/0x280 [ 686.026964][T18265] ? should_failslab+0x8c/0xb0 [ 686.026984][T18265] ? __kmalloc_noprof+0x1e3/0x4e0 [ 686.027052][T18265] ? kernfs_fop_write_iter+0xe2/0x300 [ 686.027107][T18265] kernfs_fop_write_iter+0x125/0x300 [ 686.027139][T18265] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 686.027172][T18265] vfs_write+0x5a6/0x9f0 [ 686.027267][T18265] ksys_write+0xdc/0x1a0 [ 686.027297][T18265] __x64_sys_write+0x40/0x50 [ 686.027317][T18265] x64_sys_call+0x27e1/0x3020 [ 686.027348][T18265] do_syscall_64+0x12c/0x370 [ 686.027437][T18265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.027462][T18265] RIP: 0033:0x7fa20b05c799 [ 686.027481][T18265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.027502][T18265] RSP: 002b:00007fa209ab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 686.027594][T18265] RAX: ffffffffffffffda RBX: 00007fa20b2d5fa0 RCX: 00007fa20b05c799 [ 686.027689][T18265] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000004 [ 686.027705][T18265] RBP: 00007fa209ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 686.027720][T18265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.027753][T18265] R13: 00007fa20b2d6038 R14: 00007fa20b2d5fa0 R15: 00007ffc74ff55c8 [ 686.027777][T18265] [ 686.246255][T18267] x_tables: ip_tables: osf match: only valid for protocol 6 [ 686.259996][T18267] EXT4-fs: inline encryption not supported [ 686.268778][T18270] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 686.285813][T18270] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 686.319980][T18267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.342530][T18270] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 686.365536][T18278] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 686.383521][T18270] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 686.395193][T18270] System zones: 0-2, 18-18, 34-35 [ 686.401228][T18270] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 686.433258][T18278] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 686.451689][T14220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.462775][T18278] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 686.482483][T18278] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 686.490531][T18278] System zones: 0-2, 18-18, 34-35 [ 686.511079][T14588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.523517][T18278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 686.636952][T18295] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4165'. [ 686.654357][T18296] syzkaller0: entered promiscuous mode [ 686.704305][T18296] syzkaller0: entered allmulticast mode [ 686.714033][T18295] netlink: 'syz.6.4165': attribute type 1 has an invalid length. [ 686.727526][T18295] netlink: 'syz.6.4165': attribute type 2 has an invalid length. [ 686.911839][T17236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.945262][T18299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.958199][T18299] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.224416][T18312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.237652][T18312] ext4 filesystem being mounted at /34/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.312327][T17236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.371456][T13950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.391189][T18325] x_tables: ip_tables: osf match: only valid for protocol 6 [ 687.452575][T18325] EXT4-fs: inline encryption not supported [ 687.500804][T18325] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.544619][T18347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4183'. [ 687.568755][T18343] syzkaller0: entered promiscuous mode [ 687.575234][T18343] syzkaller0: entered allmulticast mode [ 687.581512][T14588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.620387][T18351] FAULT_INJECTION: forcing a failure. [ 687.620387][T18351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.641169][T18351] CPU: 1 UID: 0 PID: 18351 Comm: syz.3.4186 Not tainted syzkaller #0 PREEMPT(full) [ 687.641199][T18351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 687.641211][T18351] Call Trace: [ 687.641217][T18351] [ 687.641225][T18351] __dump_stack+0x1d/0x30 [ 687.641255][T18351] dump_stack_lvl+0x95/0xd0 [ 687.641277][T18351] dump_stack+0x15/0x1b [ 687.641373][T18351] should_fail_ex+0x263/0x280 [ 687.641397][T18351] should_fail+0xb/0x20 [ 687.641415][T18351] should_fail_usercopy+0x1a/0x20 [ 687.641441][T18351] _copy_from_user+0x1c/0xb0 [ 687.641550][T18351] ppp_set_compress+0x95/0x490 [ 687.641616][T18351] ? __pfx_ppp_ioctl+0x10/0x10 [ 687.641680][T18351] ppp_ioctl+0xf5f/0x1230 [ 687.641768][T18351] ? __fget_files+0x184/0x1c0 [ 687.641814][T18351] ? mutex_lock+0x57/0x90 [ 687.641846][T18351] ? __pfx_ppp_ioctl+0x10/0x10 [ 687.641895][T18351] __se_sys_ioctl+0xce/0x140 [ 687.641931][T18351] __x64_sys_ioctl+0x43/0x50 [ 687.641983][T18351] x64_sys_call+0x1563/0x3020 [ 687.642012][T18351] do_syscall_64+0x12c/0x370 [ 687.642037][T18351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.642066][T18351] RIP: 0033:0x7fbc1235c799 [ 687.642158][T18351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.642180][T18351] RSP: 002b:00007fbc10db7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 687.642205][T18351] RAX: ffffffffffffffda RBX: 00007fbc125d5fa0 RCX: 00007fbc1235c799 [ 687.642221][T18351] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003 [ 687.642236][T18351] RBP: 00007fbc10db7090 R08: 0000000000000000 R09: 0000000000000000 [ 687.642297][T18351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.642312][T18351] R13: 00007fbc125d6038 R14: 00007fbc125d5fa0 R15: 00007fff1e6356e8 [ 687.642333][T18351] [ 688.030750][T18378] FAULT_INJECTION: forcing a failure. [ 688.030750][T18378] name failslab, interval 1, probability 0, space 0, times 0 [ 688.048457][T18378] CPU: 1 UID: 0 PID: 18378 Comm: syz.3.4197 Not tainted syzkaller #0 PREEMPT(full) [ 688.048552][T18378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 688.048564][T18378] Call Trace: [ 688.048571][T18378] [ 688.048581][T18378] __dump_stack+0x1d/0x30 [ 688.048611][T18378] dump_stack_lvl+0x95/0xd0 [ 688.048637][T18378] dump_stack+0x15/0x1b [ 688.048732][T18378] should_fail_ex+0x263/0x280 [ 688.048759][T18378] should_failslab+0x8c/0xb0 [ 688.048885][T18378] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 688.048913][T18378] ? __alloc_skb+0x2d6/0x690 [ 688.049025][T18378] __alloc_skb+0x2d6/0x690 [ 688.049050][T18378] ? __alloc_skb+0x200/0x690 [ 688.049110][T18378] netlink_alloc_large_skb+0xbf/0xf0 [ 688.049137][T18378] netlink_sendmsg+0x40c/0x6f0 [ 688.049221][T18378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 688.049254][T18378] ____sys_sendmsg+0x5af/0x600 [ 688.049284][T18378] ___sys_sendmsg+0x195/0x1e0 [ 688.049407][T18378] __x64_sys_sendmsg+0xd4/0x160 [ 688.049481][T18378] x64_sys_call+0x194c/0x3020 [ 688.049588][T18378] do_syscall_64+0x12c/0x370 [ 688.049678][T18378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.049705][T18378] RIP: 0033:0x7fbc1235c799 [ 688.049725][T18378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.049755][T18378] RSP: 002b:00007fbc10db7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.049776][T18378] RAX: ffffffffffffffda RBX: 00007fbc125d5fa0 RCX: 00007fbc1235c799 [ 688.049805][T18378] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 688.049821][T18378] RBP: 00007fbc10db7090 R08: 0000000000000000 R09: 0000000000000000 [ 688.049836][T18378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.049852][T18378] R13: 00007fbc125d6038 R14: 00007fbc125d5fa0 R15: 00007fff1e6356e8 [ 688.049874][T18378] [ 688.051937][T18379] x_tables: ip_tables: osf match: only valid for protocol 6 [ 688.057251][T18381] gretap0: entered promiscuous mode [ 688.107215][T18379] EXT4-fs: inline encryption not supported [ 688.230606][T18381] vlan2: entered promiscuous mode [ 688.241066][T18383] EXT4-fs: Ignoring removed orlov option [ 688.297361][T18379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.320038][T18388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.334346][T18383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.347207][T18388] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 688.365511][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 688.365529][ T28] audit: type=1400 audit(1772357066.842:426): avc: denied { watch } for pid=18387 comm="syz.3.4201" path="/42/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 688.395342][ T28] audit: type=1400 audit(1772357066.842:427): avc: denied { setattr } for pid=18387 comm="syz.3.4201" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 688.419576][T14588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.421031][T17236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.503408][T18398] syzkaller0: entered promiscuous mode [ 688.509099][T18398] syzkaller0: entered allmulticast mode [ 688.572482][T14915] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.850815][T18429] FAULT_INJECTION: forcing a failure. [ 688.850815][T18429] name failslab, interval 1, probability 0, space 0, times 0 [ 688.863757][T18429] CPU: 0 UID: 0 PID: 18429 Comm: syz.6.4213 Not tainted syzkaller #0 PREEMPT(full) [ 688.863787][T18429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 688.863801][T18429] Call Trace: [ 688.863810][T18429] [ 688.863819][T18429] __dump_stack+0x1d/0x30 [ 688.863849][T18429] dump_stack_lvl+0x95/0xd0 [ 688.863895][T18429] dump_stack+0x15/0x1b [ 688.863916][T18429] should_fail_ex+0x263/0x280 [ 688.863939][T18429] should_failslab+0x8c/0xb0 [ 688.863959][T18429] __kvmalloc_node_noprof+0x155/0x650 [ 688.864034][T18429] ? fanout_add+0x5e4/0xad0 [ 688.864064][T18429] fanout_add+0x5e4/0xad0 [ 688.864093][T18429] ? _copy_from_user+0x89/0xb0 [ 688.864162][T18429] packet_setsockopt+0x981/0xfd0 [ 688.864275][T18429] ? __sys_setsockopt+0x157/0x200 [ 688.864343][T18429] ? __pfx_packet_setsockopt+0x10/0x10 [ 688.864365][T18429] __sys_setsockopt+0x184/0x200 [ 688.864397][T18429] __x64_sys_setsockopt+0x64/0x80 [ 688.864510][T18429] x64_sys_call+0x2327/0x3020 [ 688.864553][T18429] do_syscall_64+0x12c/0x370 [ 688.864578][T18429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.864605][T18429] RIP: 0033:0x7f19f13dc799 [ 688.864625][T18429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.864647][T18429] RSP: 002b:00007f19efe16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 688.864727][T18429] RAX: ffffffffffffffda RBX: 00007f19f1656090 RCX: 00007f19f13dc799 [ 688.864786][T18429] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003 [ 688.864799][T18429] RBP: 00007f19efe16090 R08: 0000000000000004 R09: 0000000000000000 [ 688.864881][T18429] R10: 0000200000000ac0 R11: 0000000000000246 R12: 0000000000000001 [ 688.864896][T18429] R13: 00007f19f1656128 R14: 00007f19f1656090 R15: 00007ffc3ef90b58 [ 688.864915][T18429] [ 689.094599][ T28] audit: type=1400 audit(1772357067.562:428): avc: denied { create } for pid=18435 comm="syz.6.4216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 689.119045][ T28] audit: type=1400 audit(1772357067.562:429): avc: denied { bind } for pid=18435 comm="syz.6.4216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 689.126298][T18439] FAULT_INJECTION: forcing a failure. [ 689.126298][T18439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.170298][T18439] CPU: 1 UID: 0 PID: 18439 Comm: syz.4.4218 Not tainted syzkaller #0 PREEMPT(full) [ 689.170398][T18439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 689.170413][T18439] Call Trace: [ 689.170423][T18439] [ 689.170442][T18439] __dump_stack+0x1d/0x30 [ 689.170497][T18439] dump_stack_lvl+0x95/0xd0 [ 689.170519][T18439] dump_stack+0x15/0x1b [ 689.170605][T18439] should_fail_ex+0x263/0x280 [ 689.170637][T18439] should_fail+0xb/0x20 [ 689.170661][T18439] should_fail_usercopy+0x1a/0x20 [ 689.170731][T18439] _copy_to_user+0x20/0xa0 [ 689.170758][T18439] simple_read_from_buffer+0xb5/0x130 [ 689.170781][T18439] proc_fail_nth_read+0x10e/0x150 [ 689.170817][T18439] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 689.170917][T18439] vfs_read+0x1ab/0x7f0 [ 689.170955][T18439] ? packet_setsockopt+0x731/0xfd0 [ 689.171039][T18439] ksys_read+0xdc/0x1a0 [ 689.171134][T18439] __x64_sys_read+0x40/0x50 [ 689.171173][T18439] x64_sys_call+0x2886/0x3020 [ 689.171202][T18439] do_syscall_64+0x12c/0x370 [ 689.171296][T18439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.171324][T18439] RIP: 0033:0x7fe5baadcfce [ 689.171345][T18439] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 689.171367][T18439] RSP: 002b:00007fe5b9576fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 689.171394][T18439] RAX: ffffffffffffffda RBX: 00007fe5b95776c0 RCX: 00007fe5baadcfce [ 689.171441][T18439] RDX: 000000000000000f RSI: 00007fe5b95770a0 RDI: 0000000000000004 [ 689.171453][T18439] RBP: 00007fe5b9577090 R08: 0000000000000000 R09: 0000000000000000 [ 689.171466][T18439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.171478][T18439] R13: 00007fe5bad96038 R14: 00007fe5bad95fa0 R15: 00007ffd0be5cff8 [ 689.171501][T18439] [ 689.381293][T18442] set_capacity_and_notify: 11 callbacks suppressed [ 689.381336][T18442] loop6: detected capacity change from 0 to 512 [ 689.401162][T18442] EXT4-fs: Ignoring removed orlov option [ 689.407540][T18442] EXT4-fs: Mount option(s) incompatible with ext3 [ 689.628615][ T28] audit: type=1400 audit(1772357068.102:430): avc: denied { bind } for pid=18461 comm="syz.1.4227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 689.683953][T18469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4230'. [ 689.889667][T18485] SET target dimension over the limit! [ 689.900091][ T28] audit: type=1400 audit(1772357068.362:431): avc: denied { getopt } for pid=18475 comm="syz.6.4233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 689.963108][T18488] FAULT_INJECTION: forcing a failure. [ 689.963108][T18488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.976417][T18488] CPU: 0 UID: 0 PID: 18488 Comm: syz.1.4237 Not tainted syzkaller #0 PREEMPT(full) [ 689.976453][T18488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 689.976465][T18488] Call Trace: [ 689.976473][T18488] [ 689.976483][T18488] __dump_stack+0x1d/0x30 [ 689.976540][T18488] dump_stack_lvl+0x95/0xd0 [ 689.976563][T18488] dump_stack+0x15/0x1b [ 689.976630][T18488] should_fail_ex+0x263/0x280 [ 689.976653][T18488] should_fail+0xb/0x20 [ 689.976675][T18488] should_fail_usercopy+0x1a/0x20 [ 689.976780][T18488] _copy_from_user+0x1c/0xb0 [ 689.976806][T18488] ___sys_sendmsg+0xc1/0x1e0 [ 689.976911][T18488] __x64_sys_sendmsg+0xd4/0x160 [ 689.976944][T18488] x64_sys_call+0x194c/0x3020 [ 689.976968][T18488] do_syscall_64+0x12c/0x370 [ 689.976989][T18488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.977017][T18488] RIP: 0033:0x7fc0870fc799 [ 689.977096][T18488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.977118][T18488] RSP: 002b:00007fc085b4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.977160][T18488] RAX: ffffffffffffffda RBX: 00007fc087375fa0 RCX: 00007fc0870fc799 [ 689.977174][T18488] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000006 [ 689.977187][T18488] RBP: 00007fc085b4f090 R08: 0000000000000000 R09: 0000000000000000 [ 689.977199][T18488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.977212][T18488] R13: 00007fc087376038 R14: 00007fc087375fa0 R15: 00007ffd0ca8b678 [ 689.977233][T18488] [ 690.221669][T18494] loop1: detected capacity change from 0 to 512 [ 690.229900][T18494] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 690.240300][T18494] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 690.258936][T18494] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 690.277991][T18494] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 690.282556][T18499] FAULT_INJECTION: forcing a failure. [ 690.282556][T18499] name failslab, interval 1, probability 0, space 0, times 0 [ 690.287526][T18494] System zones: 0-2, 18-18, 34-35 [ 690.304591][T18494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.324008][T18499] CPU: 1 UID: 0 PID: 18499 Comm: syz.4.4242 Not tainted syzkaller #0 PREEMPT(full) [ 690.324087][T18499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 690.324155][T18499] Call Trace: [ 690.324163][T18499] [ 690.324173][T18499] __dump_stack+0x1d/0x30 [ 690.324200][T18499] dump_stack_lvl+0x95/0xd0 [ 690.324227][T18499] dump_stack+0x15/0x1b [ 690.324253][T18499] should_fail_ex+0x263/0x280 [ 690.324337][T18499] should_failslab+0x8c/0xb0 [ 690.324375][T18499] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 690.324468][T18499] ? __alloc_skb+0x2d6/0x690 [ 690.324498][T18499] __alloc_skb+0x2d6/0x690 [ 690.324544][T18499] ? __alloc_skb+0x200/0x690 [ 690.324571][T18499] netlink_alloc_large_skb+0xbf/0xf0 [ 690.324601][T18499] netlink_sendmsg+0x40c/0x6f0 [ 690.324661][T18499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.324693][T18499] ____sys_sendmsg+0x5af/0x600 [ 690.324729][T18499] ___sys_sendmsg+0x195/0x1e0 [ 690.324787][T18499] __x64_sys_sendmsg+0xd4/0x160 [ 690.324828][T18499] x64_sys_call+0x194c/0x3020 [ 690.324859][T18499] do_syscall_64+0x12c/0x370 [ 690.324883][T18499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.324977][T18499] RIP: 0033:0x7fe5bab1c799 [ 690.325017][T18499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.325035][T18499] RSP: 002b:00007fe5b9577028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 690.325060][T18499] RAX: ffffffffffffffda RBX: 00007fe5bad95fa0 RCX: 00007fe5bab1c799 [ 690.325100][T18499] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 690.325114][T18499] RBP: 00007fe5b9577090 R08: 0000000000000000 R09: 0000000000000000 [ 690.325173][T18499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.325188][T18499] R13: 00007fe5bad96038 R14: 00007fe5bad95fa0 R15: 00007ffd0be5cff8 [ 690.325209][T18499] [ 690.529009][T14220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.592021][T18506] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4246'. [ 690.613216][ T28] audit: type=1400 audit(1772357069.062:432): avc: denied { mount } for pid=18505 comm="syz.3.4246" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 690.734456][T18517] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.741898][T18517] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.815634][ T28] audit: type=1400 audit(1772357069.292:433): avc: denied { bind } for pid=18502 comm="syz.4.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 690.851831][T18517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.862592][T18517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.928842][T16052] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.941960][T16052] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.951290][T16052] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.960846][T16052] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.026010][T18535] FAULT_INJECTION: forcing a failure. [ 691.026010][T18535] name failslab, interval 1, probability 0, space 0, times 0 [ 691.039946][T18535] CPU: 0 UID: 0 PID: 18535 Comm: syz.3.4256 Not tainted syzkaller #0 PREEMPT(full) [ 691.039975][T18535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.039988][T18535] Call Trace: [ 691.039994][T18535] [ 691.040003][T18535] __dump_stack+0x1d/0x30 [ 691.040034][T18535] dump_stack_lvl+0x95/0xd0 [ 691.040076][T18535] dump_stack+0x15/0x1b [ 691.040104][T18535] should_fail_ex+0x263/0x280 [ 691.040150][T18535] should_failslab+0x8c/0xb0 [ 691.040196][T18535] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 691.040270][T18535] ? __alloc_skb+0x2d6/0x690 [ 691.040301][T18535] __alloc_skb+0x2d6/0x690 [ 691.040328][T18535] ? __alloc_skb+0x200/0x690 [ 691.040460][T18535] netlink_alloc_large_skb+0xbf/0xf0 [ 691.040486][T18535] netlink_sendmsg+0x40c/0x6f0 [ 691.040565][T18535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.040669][T18535] ____sys_sendmsg+0x5af/0x600 [ 691.040706][T18535] ___sys_sendmsg+0x195/0x1e0 [ 691.040746][T18535] __x64_sys_sendmsg+0xd4/0x160 [ 691.040842][T18535] x64_sys_call+0x194c/0x3020 [ 691.040873][T18535] do_syscall_64+0x12c/0x370 [ 691.040946][T18535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.041017][T18535] RIP: 0033:0x7fbc1235c799 [ 691.041052][T18535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.041070][T18535] RSP: 002b:00007fbc10db7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.041090][T18535] RAX: ffffffffffffffda RBX: 00007fbc125d5fa0 RCX: 00007fbc1235c799 [ 691.041104][T18535] RDX: 0000000000004000 RSI: 0000200000004ec0 RDI: 0000000000000005 [ 691.041190][T18535] RBP: 00007fbc10db7090 R08: 0000000000000000 R09: 0000000000000000 [ 691.041282][T18535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.041298][T18535] R13: 00007fbc125d6038 R14: 00007fbc125d5fa0 R15: 00007fff1e6356e8 [ 691.041317][T18535] [ 691.285500][T18533] loop4: detected capacity change from 0 to 512 [ 691.338768][T18533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.345226][T18552] loop6: detected capacity change from 0 to 512 [ 691.351517][T18533] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.370455][T18553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4260'. [ 691.382325][T18533] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz.4.4255: invalid size [ 691.398131][T18533] EXT4-fs (loop4): Remounting filesystem read-only [ 691.417044][T18552] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 691.438177][T18552] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 691.470942][T13950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.482238][T16068] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 691.482537][T18552] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 691.502253][T16068] Quota error (device loop4): write_blk: dquota write failed [ 691.502274][T16068] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 691.522449][T18556] FAULT_INJECTION: forcing a failure. [ 691.522449][T18556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.533194][T18552] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 691.537448][T18556] CPU: 1 UID: 0 PID: 18556 Comm: syz.3.4262 Not tainted syzkaller #0 PREEMPT(full) [ 691.537544][T18556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.537557][T18556] Call Trace: [ 691.537564][T18556] [ 691.537573][T18556] __dump_stack+0x1d/0x30 [ 691.537672][T18556] dump_stack_lvl+0x95/0xd0 [ 691.537695][T18556] dump_stack+0x15/0x1b [ 691.537738][T18556] should_fail_ex+0x263/0x280 [ 691.537762][T18556] should_fail+0xb/0x20 [ 691.537782][T18556] should_fail_usercopy+0x1a/0x20 [ 691.537841][T18556] _copy_from_user+0x1c/0xb0 [ 691.537869][T18556] ___sys_sendmsg+0xc1/0x1e0 [ 691.537909][T18556] __x64_sys_sendmsg+0xd4/0x160 [ 691.538020][T18556] x64_sys_call+0x194c/0x3020 [ 691.538045][T18556] do_syscall_64+0x12c/0x370 [ 691.538065][T18556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.538135][T18556] RIP: 0033:0x7fbc1235c799 [ 691.538229][T18556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.538322][T18556] RSP: 002b:00007fbc10db7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.538354][T18556] RAX: ffffffffffffffda RBX: 00007fbc125d5fa0 RCX: 00007fbc1235c799 [ 691.538370][T18556] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 691.538384][T18556] RBP: 00007fbc10db7090 R08: 0000000000000000 R09: 0000000000000000 [ 691.538398][T18556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.538412][T18556] R13: 00007fbc125d6038 R14: 00007fbc125d5fa0 R15: 00007fff1e6356e8 [ 691.538473][T18556] [ 691.705302][T18552] System zones: 0-2, 18-18, 34-35 [ 691.711312][T18552] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.753297][T18566] syzkaller0: entered promiscuous mode [ 691.759851][T18566] syzkaller0: entered allmulticast mode [ 691.760847][T18552] EXT4-fs warning (device loop6): ext4_lookup:1797: Inconsistent encryption contexts: 12/14 [ 692.061151][T18601] FAULT_INJECTION: forcing a failure. [ 692.061151][T18601] name failslab, interval 1, probability 0, space 0, times 0 [ 692.074086][T18601] CPU: 0 UID: 0 PID: 18601 Comm: syz.6.4277 Not tainted syzkaller #0 PREEMPT(full) [ 692.074115][T18601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 692.074129][T18601] Call Trace: [ 692.074138][T18601] [ 692.074208][T18601] __dump_stack+0x1d/0x30 [ 692.074235][T18601] dump_stack_lvl+0x95/0xd0 [ 692.074310][T18601] dump_stack+0x15/0x1b [ 692.074333][T18601] should_fail_ex+0x263/0x280 [ 692.074358][T18601] should_failslab+0x8c/0xb0 [ 692.074407][T18601] __kvmalloc_node_noprof+0x155/0x650 [ 692.074436][T18601] ? fanout_add+0x5e4/0xad0 [ 692.074505][T18601] fanout_add+0x5e4/0xad0 [ 692.074530][T18601] ? _copy_from_user+0x89/0xb0 [ 692.074576][T18601] packet_setsockopt+0x981/0xfd0 [ 692.074603][T18601] ? __pfx_packet_setsockopt+0x10/0x10 [ 692.074639][T18601] __sys_setsockopt+0x184/0x200 [ 692.074666][T18601] __x64_sys_setsockopt+0x64/0x80 [ 692.074712][T18601] x64_sys_call+0x2327/0x3020 [ 692.074743][T18601] do_syscall_64+0x12c/0x370 [ 692.074766][T18601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.074787][T18601] RIP: 0033:0x7f19f13dc799 [ 692.074842][T18601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.074863][T18601] RSP: 002b:00007f19efe37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 692.074886][T18601] RAX: ffffffffffffffda RBX: 00007f19f1655fa0 RCX: 00007f19f13dc799 [ 692.074902][T18601] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003 [ 692.074928][T18601] RBP: 00007f19efe37090 R08: 0000000000000004 R09: 0000000000000000 [ 692.074991][T18601] R10: 0000200000000ac0 R11: 0000000000000246 R12: 0000000000000001 [ 692.075004][T18601] R13: 00007f19f1656038 R14: 00007f19f1655fa0 R15: 00007ffc3ef90b58 [ 692.075024][T18601] [ 692.326833][T18608] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4278'. [ 692.336065][T18608] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4278'. [ 694.871007][T18576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 694.947905][T18616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4281'. [ 694.987594][T18616] netlink: 'syz.4.4281': attribute type 3 has an invalid length. [ 694.996100][T18618] syzkaller0: entered promiscuous mode [ 695.005854][T18618] syzkaller0: entered allmulticast mode [ 695.032394][ T28] audit: type=1400 audit(1772357073.502:434): avc: denied { write } for pid=18613 comm="syz.4.4281" name="file0" dev="tmpfs" ino=1510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 695.076663][ T28] audit: type=1400 audit(1772357073.502:435): avc: denied { read } for pid=18613 comm="syz.4.4281" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 695.104524][ T28] audit: type=1400 audit(1772357073.502:436): avc: denied { open } for pid=18613 comm="syz.4.4281" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 695.155182][T18633] syzkaller0: entered promiscuous mode [ 695.171142][ T28] audit: type=1400 audit(1772357073.502:437): avc: denied { ioctl } for pid=18613 comm="syz.4.4281" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 695.182421][T18633] syzkaller0: entered allmulticast mode [ 695.207606][T18646] FAULT_INJECTION: forcing a failure. [ 695.207606][T18646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.225015][ T28] audit: type=1400 audit(1772357073.502:438): avc: denied { mounton } for pid=18613 comm="syz.4.4281" path="/287/file0" dev="tmpfs" ino=1510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 695.251924][T18646] CPU: 1 UID: 0 PID: 18646 Comm: syz.6.4290 Not tainted syzkaller #0 PREEMPT(full) [ 695.251952][T18646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 695.251967][T18646] Call Trace: [ 695.251975][T18646] [ 695.251985][T18646] __dump_stack+0x1d/0x30 [ 695.252063][T18646] dump_stack_lvl+0x95/0xd0 [ 695.252088][T18646] dump_stack+0x15/0x1b [ 695.252112][T18646] should_fail_ex+0x263/0x280 [ 695.252217][T18646] should_fail+0xb/0x20 [ 695.252297][T18646] should_fail_usercopy+0x1a/0x20 [ 695.252365][T18646] _copy_to_user+0x20/0xa0 [ 695.252399][T18646] simple_read_from_buffer+0xb5/0x130 [ 695.252430][T18646] proc_fail_nth_read+0x10e/0x150 [ 695.252463][T18646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 695.252493][T18646] vfs_read+0x1ab/0x7f0 [ 695.252546][T18646] ? __rcu_read_unlock+0x4e/0x70 [ 695.252570][T18646] ? __fget_files+0x184/0x1c0 [ 695.252599][T18646] ? mutex_lock+0x57/0x90 [ 695.252665][T18646] ksys_read+0xdc/0x1a0 [ 695.252703][T18646] __x64_sys_read+0x40/0x50 [ 695.252787][T18646] x64_sys_call+0x2886/0x3020 [ 695.252819][T18646] do_syscall_64+0x12c/0x370 [ 695.252840][T18646] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 695.252910][T18646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.252937][T18646] RIP: 0033:0x7f19f139cfce [ 695.252969][T18646] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 695.253031][T18646] RSP: 002b:00007f19efe36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 695.253127][T18646] RAX: ffffffffffffffda RBX: 00007f19efe376c0 RCX: 00007f19f139cfce [ 695.253143][T18646] RDX: 000000000000000f RSI: 00007f19efe370a0 RDI: 0000000000000004 [ 695.253157][T18646] RBP: 00007f19efe37090 R08: 0000000000000000 R09: 0000000000000000 [ 695.253170][T18646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.253184][T18646] R13: 00007f19f1656038 R14: 00007f19f1655fa0 R15: 00007ffc3ef90b58 [ 695.253206][T18646] [ 695.467981][ T28] audit: type=1400 audit(1772357073.512:439): avc: denied { mount } for pid=18613 comm="syz.4.4281" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 695.534733][T18666] FAULT_INJECTION: forcing a failure. [ 695.534733][T18666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.548447][T18666] CPU: 1 UID: 0 PID: 18666 Comm: syz.6.4293 Not tainted syzkaller #0 PREEMPT(full) [ 695.548478][T18666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 695.548492][T18666] Call Trace: [ 695.548500][T18666] [ 695.548508][T18666] __dump_stack+0x1d/0x30 [ 695.548588][T18666] dump_stack_lvl+0x95/0xd0 [ 695.548687][T18666] dump_stack+0x15/0x1b [ 695.548773][T18666] should_fail_ex+0x263/0x280 [ 695.548796][T18666] should_fail+0xb/0x20 [ 695.548816][T18666] should_fail_usercopy+0x1a/0x20 [ 695.548864][T18666] _copy_to_user+0x20/0xa0 [ 695.548889][T18666] simple_read_from_buffer+0xb5/0x130 [ 695.548911][T18666] proc_fail_nth_read+0x10e/0x150 [ 695.548986][T18666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 695.549015][T18666] vfs_read+0x1ab/0x7f0 [ 695.549051][T18666] ? __rcu_read_unlock+0x4e/0x70 [ 695.549080][T18666] ? __fget_files+0x184/0x1c0 [ 695.549102][T18666] ? mutex_lock+0x57/0x90 [ 695.549222][T18666] ksys_read+0xdc/0x1a0 [ 695.549258][T18666] __x64_sys_read+0x40/0x50 [ 695.549362][T18666] x64_sys_call+0x2886/0x3020 [ 695.549391][T18666] do_syscall_64+0x12c/0x370 [ 695.549416][T18666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.549468][T18666] RIP: 0033:0x7f19f139cfce [ 695.549487][T18666] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 695.549522][T18666] RSP: 002b:00007f19efe36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 695.549544][T18666] RAX: ffffffffffffffda RBX: 00007f19efe376c0 RCX: 00007f19f139cfce [ 695.549560][T18666] RDX: 000000000000000f RSI: 00007f19efe370a0 RDI: 0000000000000004 [ 695.549575][T18666] RBP: 00007f19efe37090 R08: 0000000000000000 R09: 0000000000000000 [ 695.549614][T18666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.549628][T18666] R13: 00007f19f1656038 R14: 00007f19f1655fa0 R15: 00007ffc3ef90b58 [ 695.549649][T18666] [ 695.755648][T18672] x_tables: unsorted underflow at hook 2 [ 695.810259][T18682] xt_bpf: check failed: parse error [ 695.818023][ T28] audit: type=1400 audit(1772357074.292:440): avc: denied { setattr } for pid=18667 comm="syz.4.4294" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 698.491029][T18656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 698.553705][T18721] FAULT_INJECTION: forcing a failure. [ 698.553705][T18721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.573398][T18727] syzkaller0: entered promiscuous mode [ 698.587532][T18718] loop4: detected capacity change from 0 to 1024 [ 698.594056][T18727] syzkaller0: entered allmulticast mode [ 698.599850][T18721] CPU: 0 UID: 0 PID: 18721 Comm: syz.6.4308 Not tainted syzkaller #0 PREEMPT(full) [ 698.599940][T18721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 698.599952][T18721] Call Trace: [ 698.599959][T18721] [ 698.599967][T18721] __dump_stack+0x1d/0x30 [ 698.600077][T18721] dump_stack_lvl+0x95/0xd0 [ 698.600099][T18721] dump_stack+0x15/0x1b [ 698.600122][T18721] should_fail_ex+0x263/0x280 [ 698.600221][T18721] should_fail+0xb/0x20 [ 698.600253][T18721] should_fail_usercopy+0x1a/0x20 [ 698.600353][T18721] _copy_to_user+0x20/0xa0 [ 698.600401][T18721] simple_read_from_buffer+0xb5/0x130 [ 698.600423][T18721] proc_fail_nth_read+0x10e/0x150 [ 698.600457][T18721] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 698.600525][T18721] vfs_read+0x1ab/0x7f0 [ 698.600556][T18721] ? poll_select_finish+0x168/0x440 [ 698.600581][T18721] ? __rcu_read_unlock+0x4e/0x70 [ 698.600653][T18721] ? __fget_files+0x184/0x1c0 [ 698.600675][T18721] ? mutex_lock+0x57/0x90 [ 698.600732][T18721] ksys_read+0xdc/0x1a0 [ 698.600761][T18721] __x64_sys_read+0x40/0x50 [ 698.600791][T18721] x64_sys_call+0x2886/0x3020 [ 698.600845][T18721] do_syscall_64+0x12c/0x370 [ 698.600868][T18721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.600952][T18721] RIP: 0033:0x7f19f139cfce [ 698.600968][T18721] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 698.600986][T18721] RSP: 002b:00007f19efe36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 698.601089][T18721] RAX: ffffffffffffffda RBX: 00007f19efe376c0 RCX: 00007f19f139cfce [ 698.601159][T18721] RDX: 000000000000000f RSI: 00007f19efe370a0 RDI: 0000000000000004 [ 698.601173][T18721] RBP: 00007f19efe37090 R08: 0000000000000000 R09: 0000000000000000 [ 698.601189][T18721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.601204][T18721] R13: 00007f19f1656038 R14: 00007f19f1655fa0 R15: 00007ffc3ef90b58 [ 698.601226][T18721] [ 698.609651][T18729] x_tables: ip_tables: osf match: only valid for protocol 6 [ 698.642772][T18718] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 698.681301][T18729] loop5: detected capacity change from 0 to 1024 [ 698.791139][T18739] loop6: detected capacity change from 0 to 512 [ 698.841520][T18729] EXT4-fs: inline encryption not supported [ 698.927998][T18718] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.4307: lblock 2 mapped to illegal pblock 2 (length 1) [ 698.942289][T18718] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 698.952104][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 698.962285][T18718] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 698.967835][ C1] EXT4-fs (loop4): initial error at time 1772357077: ext4_map_blocks:776: inode 3: block 2 [ 698.967870][ C1] EXT4-fs (loop4): last error at time 1772357077: ext4_map_blocks:776: inode 3: block 2 [ 698.982159][T18718] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.4307: lblock 0 mapped to illegal pblock 48 (length 1) [ 698.985977][ C1] [ 698.997583][T18718] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 699.012714][T18718] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 699.047700][T18718] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.4307: Failed to acquire dquot type 0 [ 699.071795][T18751] FAULT_INJECTION: forcing a failure. [ 699.071795][T18751] name failslab, interval 1, probability 0, space 0, times 0 [ 699.084631][T18718] loop4: lost filesystem error report for type 5 error -117 [ 699.084916][T18751] CPU: 0 UID: 0 PID: 18751 Comm: syz.6.4313 Not tainted syzkaller #0 PREEMPT(full) [ 699.084947][T18751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 699.084962][T18751] Call Trace: [ 699.084971][T18751] [ 699.084981][T18751] __dump_stack+0x1d/0x30 [ 699.085011][T18751] dump_stack_lvl+0x95/0xd0 [ 699.085089][T18718] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 699.085090][T18751] dump_stack+0x15/0x1b [ 699.085115][T18751] should_fail_ex+0x263/0x280 [ 699.085155][T18751] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 699.085188][T18751] should_failslab+0x8c/0xb0 [ 699.085242][T18751] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 699.085265][T18751] ? shmem_alloc_inode+0x34/0x50 [ 699.085293][T18751] ? kstrtouint+0x76/0xc0 [ 699.085312][T18751] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 699.085355][T18751] shmem_alloc_inode+0x34/0x50 [ 699.085383][T18751] alloc_inode+0x40/0x170 [ 699.085406][T18751] new_inode+0x1d/0xe0 [ 699.085430][T18751] shmem_get_inode+0x246/0x750 [ 699.085521][T18751] __shmem_file_setup+0x112/0x210 [ 699.085547][T18751] shmem_file_setup+0x3b/0x50 [ 699.085647][T18751] memfd_alloc_file+0x4e/0x300 [ 699.085678][T18751] __se_sys_memfd_create+0x2e1/0x3b0 [ 699.085710][T18751] __x64_sys_memfd_create+0x31/0x40 [ 699.085771][T18751] x64_sys_call+0x1f22/0x3020 [ 699.085823][T18751] do_syscall_64+0x12c/0x370 [ 699.085846][T18751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.085919][T18751] RIP: 0033:0x7f19f13dc799 [ 699.085937][T18751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.085955][T18751] RSP: 002b:00007f19efe36e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 699.085978][T18751] RAX: ffffffffffffffda RBX: 00000000000007b9 RCX: 00007f19f13dc799 [ 699.085993][T18751] RDX: 00007f19efe36ee0 RSI: 0000000000000000 RDI: 00007f19f1472db9 [ 699.086008][T18751] RBP: 0000200000000880 R08: 00000000ffffffff R09: 0000000000000000 [ 699.086102][T18751] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000800 [ 699.086116][T18751] R13: 00007f19efe36ee0 R14: 00007f19efe36ea0 R15: 0000200000000840 [ 699.086136][T18751] [ 699.316818][T18718] loop4: lost filesystem error report for type 5 error -117 [ 699.316957][T18718] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.4307: mark_inode_dirty error [ 699.336225][T18718] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 699.336356][T18718] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 699.356481][T18718] EXT4-fs (loop4): 1 orphan inode deleted [ 699.378768][T16073] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 699.406739][T16073] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 699.415392][T16073] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:20: Failed to release dquot type 0 [ 699.453017][T16073] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 699.477703][T16073] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 699.477798][T16073] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:20: Failed to release dquot type 0 [ 699.499283][T16073] loop4: lost filesystem error report for type 5 error -117 [ 699.502586][T13950] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 699.514181][T18776] loop3: detected capacity change from 0 to 128 [ 699.529307][T13950] loop4: lost filesystem error report for type 5 error -117 [ 699.529552][T13950] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 699.545525][T18776] bio_check_eod: 93 callbacks suppressed [ 699.545541][T18776] syz.3.4323: attempt to access beyond end of device [ 699.545541][T18776] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 699.552105][T13950] loop4: lost filesystem error report for type 5 error -117 [ 699.552321][T13950] EXT4-fs error (device loop4): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 699.571235][T18776] syz.3.4323: attempt to access beyond end of device [ 699.571235][T18776] loop3: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 699.577801][T13950] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 699.585309][T18776] buffer_io_error: 64 callbacks suppressed [ 699.585324][T18776] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 699.642260][T18776] syz.3.4323: attempt to access beyond end of device [ 699.642260][T18776] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 699.659758][T18776] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 699.794994][T18778] syz.3.4323: attempt to access beyond end of device [ 699.794994][T18778] loop3: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 699.809174][T18778] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 699.817727][T18778] syz.3.4323: attempt to access beyond end of device [ 699.817727][T18778] loop3: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 699.831737][T18778] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 699.894594][T18778] syz.3.4323: attempt to access beyond end of device [ 699.894594][T18778] loop3: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 699.909773][T18778] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 699.919272][T18778] syz.3.4323: attempt to access beyond end of device [ 699.919272][T18778] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 699.933600][T18778] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 699.965947][T18795] syzkaller0: entered promiscuous mode [ 699.972001][T18795] syzkaller0: entered allmulticast mode [ 700.310698][T18801] syzkaller0: entered promiscuous mode [ 700.332878][T18801] syzkaller0: entered allmulticast mode [ 700.388813][T18806] loop5: detected capacity change from 0 to 128 [ 700.460419][T18806] syz.5.4333: attempt to access beyond end of device [ 700.460419][T18806] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 700.513769][T18806] syz.5.4333: attempt to access beyond end of device [ 700.513769][T18806] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 700.528993][T18806] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 700.552673][T18806] syz.5.4333: attempt to access beyond end of device [ 700.552673][T18806] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 700.583538][T18806] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 700.617942][T18806] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 700.642948][T18806] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 700.850101][T18824] syzkaller0: entered promiscuous mode [ 700.861919][T18824] syzkaller0: entered allmulticast mode [ 701.411382][T18841] loop3: detected capacity change from 0 to 128 [ 701.420885][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 701.420903][ T28] audit: type=1400 audit(1772357079.892:441): avc: denied { mounton } for pid=18840 comm="syz.3.4345" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 701.450995][T18841] tmpfs: Unknown parameter '01777777777777777777777' [ 702.462591][T18760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 702.796296][T18861] loop6: detected capacity change from 0 to 1024 [ 702.830014][T18861] EXT4-fs: inline encryption not supported [ 702.916085][T18865] syzkaller0: entered promiscuous mode [ 702.925910][T18840] syz.3.4345 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 702.937590][T18865] syzkaller0: entered allmulticast mode [ 702.969132][T18840] CPU: 1 UID: 0 PID: 18840 Comm: syz.3.4345 Not tainted syzkaller #0 PREEMPT(full) [ 702.969166][T18840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 702.969181][T18840] Call Trace: [ 702.969189][T18840] [ 702.969199][T18840] __dump_stack+0x1d/0x30 [ 702.969231][T18840] dump_stack_lvl+0x95/0xd0 [ 702.969265][T18840] dump_stack+0x15/0x1b [ 702.969292][T18840] dump_header+0x80/0x240 [ 702.969316][T18840] oom_kill_process+0x295/0x350 [ 702.969382][T18840] out_of_memory+0x97d/0xb80 [ 702.969463][T18840] try_charge_memcg+0x62e/0xa10 [ 702.969509][T18840] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 702.969544][T18840] __swap_cache_prepare_and_add+0x386/0x530 [ 702.969591][T18840] swap_cache_alloc_folio+0xa2/0x120 [ 702.969671][T18840] swap_cluster_readahead+0x36b/0x3d0 [ 702.969709][T18840] swapin_readahead+0xde/0x840 [ 702.969734][T18840] ? css_rstat_updated+0x94/0x280 [ 702.969755][T18840] ? css_rstat_updated+0xbb/0x280 [ 702.969858][T18840] ? __rcu_read_unlock+0x4e/0x70 [ 702.969881][T18840] ? swap_cache_get_folio+0x26f/0x280 [ 702.969915][T18840] do_swap_page+0x309/0x2210 [ 702.969984][T18840] ? __account_obj_stock+0x2d6/0x350 [ 702.970009][T18840] ? __rcu_read_lock+0x36/0x50 [ 702.970032][T18840] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 702.970123][T18840] handle_mm_fault+0xb40/0x3020 [ 702.970153][T18840] ? vma_start_read+0x1c7/0x2c0 [ 702.970181][T18840] do_user_addr_fault+0x62f/0x1050 [ 702.970347][T18840] ? irqentry_exit+0x3c/0x520 [ 702.970378][T18840] ? trace_page_fault_user+0x1f/0xe0 [ 702.970435][T18840] exc_page_fault+0x62/0xa0 [ 702.970516][T18840] asm_exc_page_fault+0x26/0x30 [ 702.970606][T18840] RIP: 0033:0x7fbc1223184b [ 702.970687][T18840] Code: fa 03 48 0f bd d2 48 63 d2 48 01 d2 e8 8e b3 ff ff 49 81 fc 80 00 00 00 0f 87 94 00 00 00 48 8b 3c 24 48 89 ee e8 35 b5 ff ff <48> 8b 14 24 eb 1d 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 [ 702.970704][T18840] RSP: 002b:00007fff1e635790 EFLAGS: 00010246 [ 702.970721][T18840] RAX: 00007fbc121beff0 RBX: 00007fbc13105720 RCX: ffffffff859c3dec [ 702.970735][T18840] RDX: ffffffff859c3dec RSI: 00007fbc121beff8 RDI: 00007fbc11dbf008 [ 702.970751][T18840] RBP: 00007fbc121bf000 R08: 00007fbc125c0000 R09: 00007fbc125d6038 [ 702.970768][T18840] R10: 0000000000000001 R11: 000000000000000c R12: 00007fbc121bf000 [ 702.970829][T18840] R13: 00007fbc125d6038 R14: 00007fbc11dbf008 R15: 0000000000000001 [ 702.970849][T18840] ? xa_load+0xac/0xe0 [ 702.970871][T18840] ? xa_load+0xac/0xe0 [ 702.970894][T18840] [ 702.970903][T18840] memory: usage 307200kB, limit 307200kB, failcnt 380 [ 703.229089][T18840] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 703.237407][T18840] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 703.244890][T18840] Memory cgroup stats for /syz3: [ 703.245168][T18840] cache 0 [ 703.253318][T18840] rss 0 [ 703.256097][T18840] shmem 0 [ 703.259120][T18840] mapped_file 0 [ 703.262940][T18840] dirty 0 [ 703.266126][T18840] writeback 0 [ 703.269419][T18840] workingset_refault_anon 80 [ 703.274202][T18840] workingset_refault_file 1272 [ 703.279244][T18840] swap 212992 [ 703.282798][T18840] swapcached 212992 [ 703.286694][T18840] pgpgin 501452 [ 703.291090][T18840] pgpgout 501449 [ 703.294856][T18840] pgfault 587583 [ 703.298452][T18840] pgmajfault 55 [ 703.302030][T18840] inactive_anon 0 [ 703.305780][T18840] active_anon 0 [ 703.309253][T18840] inactive_file 0 [ 703.314311][T18840] active_file 12288 [ 703.318144][T18840] unevictable 0 [ 703.321655][T18840] hierarchical_memory_limit 314572800 [ 703.327454][T18840] hierarchical_memsw_limit 9223372036854771712 [ 703.333832][T18840] total_cache 0 [ 703.337394][T18840] total_rss 0 [ 703.340976][T18840] total_shmem 0 [ 703.344613][T18840] total_mapped_file 0 [ 703.348687][T18840] total_dirty 0 [ 703.352256][T18840] total_writeback 0 [ 703.358812][T18840] total_workingset_refault_anon 80 [ 703.364136][T18840] total_workingset_refault_file 1272 [ 703.369455][T18840] total_swap 212992 [ 703.373352][T18840] total_swapcached 212992 [ 703.377758][T18840] total_pgpgin 501452 [ 703.381840][T18840] total_pgpgout 501449 [ 703.385969][T18840] total_pgfault 587584 [ 703.390109][T18840] total_pgmajfault 55 [ 703.394347][T18840] total_inactive_anon 0 [ 703.398531][T18840] total_active_anon 0 [ 703.402589][T18840] total_inactive_file 0 [ 703.406890][T18840] total_active_file 12288 [ 703.411275][T18840] total_unevictable 0 [ 703.415545][T18840] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4345,pid=18840,uid=0 [ 703.430333][T18840] Memory cgroup out of memory: Killed process 18840 (syz.3.4345) total-vm:96340kB, anon-rss:1228kB, file-rss:22404kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 703.512638][T18841] syz.3.4345 (18841) used greatest stack depth: 6752 bytes left [ 703.545591][ T28] audit: type=1400 audit(1772357082.022:442): avc: denied { read } for pid=18876 comm="syz.6.4357" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 703.597076][ T28] audit: type=1400 audit(1772357082.022:443): avc: denied { open } for pid=18876 comm="syz.6.4357" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 703.988918][T18907] FAULT_INJECTION: forcing a failure. [ 703.988918][T18907] name failslab, interval 1, probability 0, space 0, times 0 [ 704.003545][T18907] CPU: 1 UID: 0 PID: 18907 Comm: syz.3.4367 Not tainted syzkaller #0 PREEMPT(full) [ 704.003617][T18907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 704.003631][T18907] Call Trace: [ 704.003638][T18907] [ 704.003646][T18907] __dump_stack+0x1d/0x30 [ 704.003676][T18907] dump_stack_lvl+0x95/0xd0 [ 704.003715][T18907] dump_stack+0x15/0x1b [ 704.003792][T18907] should_fail_ex+0x263/0x280 [ 704.003819][T18907] should_failslab+0x8c/0xb0 [ 704.003843][T18907] kmem_cache_alloc_noprof+0x66/0x400 [ 704.003927][T18907] ? do_getname+0x2e/0x1c0 [ 704.003955][T18907] do_getname+0x2e/0x1c0 [ 704.003980][T18907] __se_sys_linkat+0x3e/0x1d0 [ 704.004070][T18907] __x64_sys_linkat+0x67/0x80 [ 704.004096][T18907] x64_sys_call+0x20e4/0x3020 [ 704.004125][T18907] do_syscall_64+0x12c/0x370 [ 704.004150][T18907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.004171][T18907] RIP: 0033:0x7fbc1235c799 [ 704.004192][T18907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.004209][T18907] RSP: 002b:00007fbc10db7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 704.004231][T18907] RAX: ffffffffffffffda RBX: 00007fbc125d5fa0 RCX: 00007fbc1235c799 [ 704.004246][T18907] RDX: ffffffffffffff9c RSI: 0000200000000380 RDI: ffffffffffffff9c [ 704.004263][T18907] RBP: 00007fbc10db7090 R08: 0000000000000000 R09: 0000000000000000 [ 704.004387][T18907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.004402][T18907] R13: 00007fbc125d6038 R14: 00007fbc125d5fa0 R15: 00007fff1e6356e8 [ 704.004478][T18907] [ 704.008631][T18910] loop4: detected capacity change from 0 to 128 [ 704.041453][ T28] audit: type=1400 audit(1772357082.512:444): avc: denied { firmware_load } for pid=18902 comm="syz.4.4365" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 704.140115][T18913] loop3: detected capacity change from 0 to 512 [ 704.219954][T18913] msdos: Unknown parameter 'errortinue' [ 704.230870][ T28] audit: type=1400 audit(1772357082.702:445): avc: denied { accept } for pid=18902 comm="syz.4.4365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 704.306405][ T28] audit: type=1400 audit(1772357082.762:446): avc: denied { read write } for pid=18912 comm="syz.3.4369" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 704.393158][ T28] audit: type=1400 audit(1772357082.762:447): avc: denied { open } for pid=18912 comm="syz.3.4369" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 704.533651][ T28] audit: type=1400 audit(1772357082.762:448): avc: denied { ioctl } for pid=18912 comm="syz.3.4369" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 704.559558][ T28] audit: type=1400 audit(1772357082.782:449): avc: denied { listen } for pid=18912 comm="syz.3.4369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 704.573354][T18935] loop1: detected capacity change from 0 to 128 [ 704.593006][ T28] audit: type=1400 audit(1772357082.792:450): avc: denied { create } for pid=18912 comm="syz.3.4369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 704.748006][T18935] bio_check_eod: 4 callbacks suppressed [ 704.748024][T18935] syz.1.4376: attempt to access beyond end of device [ 704.748024][T18935] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 705.076887][T18934] syz.1.4376: attempt to access beyond end of device [ 705.076887][T18934] loop1: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 705.234217][T18934] buffer_io_error: 2 callbacks suppressed [ 705.234232][T18934] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 705.339141][T18941] loop3: detected capacity change from 0 to 512 [ 705.363229][T18934] syz.1.4376: attempt to access beyond end of device [ 705.363229][T18934] loop1: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 705.385005][T18941] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 705.398784][T18943] syzkaller0: entered promiscuous mode [ 705.432633][T18943] syzkaller0: entered allmulticast mode [ 705.442232][T18941] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 705.450739][T18934] Buffer I/O error on dev loop1, logical block 78, lost async page write [ 705.481617][T18934] syz.1.4376: attempt to access beyond end of device [ 705.481617][T18934] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 705.502584][T18941] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 705.522328][T18941] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 705.534439][T18934] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 705.552925][T18941] System zones: 0-2, 18-18, 34-35 [ 705.569003][T18941] EXT4-fs mount: 7 callbacks suppressed [ 705.569020][T18941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.640173][T18948] loop4: detected capacity change from 0 to 512 [ 705.649256][T18941] EXT4-fs warning (device loop3): ext4_lookup:1797: Inconsistent encryption contexts: 12/14 [ 705.670421][T18948] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 705.712091][T18948] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 705.767460][T18948] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 705.794085][T18948] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 705.809258][T17236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.828774][T18948] System zones: 0-2, 18-18, 34-35 [ 705.849495][T18948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.893965][T18948] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 12/14 [ 705.984234][T13950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.070882][T18965] syzkaller0: entered promiscuous mode [ 706.090583][T18965] syzkaller0: entered allmulticast mode [ 706.206567][T18971] loop1: detected capacity change from 0 to 1024 [ 706.229902][T18971] EXT4-fs: inline encryption not supported [ 706.275681][T18971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.414646][T14220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.462147][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 706.462184][ T28] audit: type=1400 audit(1772357084.932:506): avc: denied { create } for pid=18986 comm="syz.3.4392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 706.581753][T18992] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 706.604996][ T28] audit: type=1400 audit(1772357084.932:507): avc: denied { connect } for pid=18986 comm="syz.3.4392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 706.680422][ T28] audit: type=1400 audit(1772357084.932:508): avc: denied { write } for pid=18986 comm="syz.3.4392" path="socket:[59600]" dev="sockfs" ino=59600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 706.720868][ T28] audit: type=1400 audit(1772357085.122:509): avc: denied { block_suspend } for pid=18995 comm="syz.6.4394" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 706.861521][ T28] audit: type=1400 audit(1772357085.332:510): avc: denied { create } for pid=19009 comm="syz.5.4398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 706.888571][T19006] loop4: detected capacity change from 0 to 512 [ 706.997191][ T28] audit: type=1400 audit(1772357085.362:511): avc: denied { setopt } for pid=19009 comm="syz.5.4398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 707.017266][ T28] audit: type=1400 audit(1772357085.422:512): avc: denied { ioctl } for pid=18986 comm="syz.3.4392" path="socket:[58892]" dev="sockfs" ino=58892 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 707.320748][ T28] audit: type=1400 audit(1772357085.792:513): avc: denied { sys_module } for pid=18986 comm="syz.3.4392" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 707.480788][T19022] loop5: detected capacity change from 0 to 1024 [ 707.676312][T19022] EXT4-fs: inline encryption not supported [ 707.813711][T19022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.863905][T19030] loop4: detected capacity change from 0 to 512 [ 707.933784][T19030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.957308][T14915] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.979932][T19030] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 708.092769][ T28] audit: type=1400 audit(1772357086.572:514): avc: denied { shutdown } for pid=19040 comm="syz.1.4406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 708.192197][ T28] audit: type=1400 audit(1772357086.592:515): avc: denied { getopt } for pid=19040 comm="syz.1.4406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 708.226617][T19045] syzkaller0: entered promiscuous mode [ 708.252133][T19045] syzkaller0: entered allmulticast mode [ 708.469534][T13950] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 708.487614][T19057] netlink: 'syz.3.4410': attribute type 1 has an invalid length. [ 708.500617][T13950] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 708.516593][T19057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 708.550094][T19057] bond1: (slave veth3): Enslaving as an active interface with a down link [ 708.569518][T19057] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 708.578287][T19057] bond1: (slave batadv1): making interface the new active one [ 708.588733][T19057] batadv1: entered promiscuous mode [ 708.594386][T19057] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 708.608501][T19057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19057 comm=syz.3.4410 [ 708.627221][T19057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4410'. [ 708.666049][T19060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4412'. [ 708.677660][T19060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4412'. [ 708.701471][T19060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4412'. [ 708.711890][T19060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4412'. [ 708.727463][T18041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.780876][T19060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4412'. [ 708.798035][T19060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4412'. [ 708.832946][T19066] loop6: detected capacity change from 0 to 512 [ 708.848876][T19066] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 708.860695][T19066] EXT4-fs error (device loop6): xattr_find_entry:337: inode #15: comm syz.6.4413: corrupted xattr entries [ 708.872565][T19066] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 708.877300][T19066] EXT4-fs (loop6): 1 orphan inode deleted [ 708.886599][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 708.886624][ C1] EXT4-fs (loop6): initial error at time 1772357087: xattr_find_entry:337: inode 15 [ 708.886657][ C1] EXT4-fs (loop6): last error at time 1772357087: xattr_find_entry:337: inode 15 [ 708.920295][T19066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.923721][T19073] syzkaller0: entered promiscuous mode [ 708.933448][T19066] netlink: 'syz.6.4413': attribute type 21 has an invalid length. [ 708.946259][T19066] IPv6: NLM_F_CREATE should be specified when creating new route [ 708.954216][T19073] syzkaller0: entered allmulticast mode [ 708.954222][T19066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 708.967001][T19066] IPv6: NLM_F_CREATE should be set when creating new route [ 708.974328][T19066] IPv6: NLM_F_CREATE should be set when creating new route [ 708.981598][T19066] IPv6: NLM_F_CREATE should be set when creating new route [ 708.985503][ T3504] IPVS: starting estimator thread 0... [ 708.996464][T19075] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 709.006089][T14588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.093477][T19080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4419'. [ 709.102678][T19078] IPVS: using max 2592 ests per chain, 129600 per kthread [ 709.218435][T19086] loop5: detected capacity change from 0 to 1024 [ 709.280900][T16073] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.314071][T19092] loop5: detected capacity change from 0 to 1024 [ 709.353842][T19080] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4419'. [ 709.396271][T16073] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.422872][T19092] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 709.447718][T19092] System zones: 0-1, 3-36 [ 709.476303][T19092] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.4421: bad orphan inode 134217728 [ 709.629077][T19092] loop5: lost filesystem error report for type 5 error -117 [ 709.630865][T19092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.162175][T16073] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.264137][T14915] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.182856][T19123] loop1: detected capacity change from 0 to 128 [ 712.197962][T19123] syz.1.4428: attempt to access beyond end of device [ 712.197962][T19123] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 712.212697][T19123] syz.1.4428: attempt to access beyond end of device [ 712.212697][T19123] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 712.227472][T19123] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 712.237533][T19123] syz.1.4428: attempt to access beyond end of device [ 712.237533][T19123] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 712.252012][T19123] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 712.262614][T19123] syz.1.4428: attempt to access beyond end of device [ 712.262614][T19123] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 712.289359][T16073] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.424103][T19131] syzkaller0: entered promiscuous mode [ 712.429728][T19131] syzkaller0: entered allmulticast mode [ 712.465608][T19142] loop6: detected capacity change from 0 to 512 [ 712.519476][T16073] bridge_slave_1: left allmulticast mode [ 712.529548][T19124] syz.1.4428: attempt to access beyond end of device [ 712.529548][T19124] loop1: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 712.535744][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 712.535760][ T28] audit: type=1400 audit(1772357091.012:532): avc: denied { write } for pid=19147 comm="syz.3.4436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 712.544350][T16073] bridge_slave_1: left promiscuous mode [ 712.570713][T19124] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 712.575611][T16073] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.592029][T16073] bridge_slave_0: left allmulticast mode [ 712.592160][T19142] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.597834][T16073] bridge_slave_0: left promiscuous mode [ 712.617167][T16073] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.633940][ T28] audit: type=1400 audit(1772357091.092:533): avc: denied { name_bind } for pid=19147 comm="syz.3.4436" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 712.656100][T19124] syz.1.4428: attempt to access beyond end of device [ 712.656100][T19124] loop1: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 712.670139][T19142] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 712.682515][T19124] Buffer I/O error on dev loop1, logical block 78, lost async page write [ 712.695368][ T28] audit: type=1400 audit(1772357091.172:534): avc: denied { name_connect } for pid=19147 comm="syz.3.4436" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 712.718694][T19124] syz.1.4428: attempt to access beyond end of device [ 712.718694][T19124] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 712.739655][ T28] audit: type=1400 audit(1772357091.212:535): avc: denied { read write } for pid=19151 comm="syz.5.4437" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 712.755600][T19124] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 712.763669][ T28] audit: type=1400 audit(1772357091.212:536): avc: denied { open } for pid=19151 comm="syz.5.4437" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 712.795950][ T28] audit: type=1400 audit(1772357091.212:537): avc: denied { ioctl } for pid=19151 comm="syz.5.4437" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 712.796275][T19158] netlink: 'syz.5.4437': attribute type 4 has an invalid length. [ 712.831131][T19124] syz.1.4428: attempt to access beyond end of device [ 712.831131][T19124] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 712.842973][ T28] audit: type=1400 audit(1772357091.312:538): avc: denied { accept } for pid=19147 comm="syz.3.4436" laddr=::ffff:172.20.20.170 lport=40692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 712.845400][T19124] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 712.919070][T16073] bond2 (unregistering): (slave gretap1): Releasing active interface [ 713.114236][T16073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.127602][T16073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.138422][T16073] bond0 (unregistering): Released all slaves [ 713.148601][T16073] bond1 (unregistering): Released all slaves [ 713.161280][T16073] bond2 (unregistering): Released all slaves [ 713.184332][ T28] audit: type=1400 audit(1772357091.652:539): avc: denied { name_bind } for pid=19164 comm="syz.3.4439" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 713.265132][ T28] audit: type=1400 audit(1772357091.652:540): avc: denied { node_bind } for pid=19164 comm="syz.3.4439" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 713.315309][ T28] audit: type=1400 audit(1772357091.692:541): avc: denied { search } for pid=3041 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.455313][T16073] tipc: Left network mode [ 713.486549][T16073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.572037][T16073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.620137][T16073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.648477][T16073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.670599][T16073] veth1_macvtap: left promiscuous mode [ 713.676437][T16073] veth0_macvtap: left promiscuous mode [ 713.682623][T16073] veth1_vlan: left promiscuous mode [ 713.688078][T16073] veth0_vlan: left promiscuous mode [ 713.976521][T16073] team_slave_1 (unregistering): left promiscuous mode [ 713.983966][T16073] team0 (unregistering): Port device team_slave_1 removed [ 713.994790][T16073] team_slave_0 (unregistering): left promiscuous mode [ 714.002247][T16073] team0 (unregistering): Port device team_slave_0 removed [ 714.110514][T19088] chnl_net:caif_netlink_parms(): no params data found [ 714.229353][T19174] syzkaller0: entered promiscuous mode [ 714.235143][T19174] syzkaller0: entered allmulticast mode [ 714.954465][T19196] loop5: detected capacity change from 0 to 512 [ 714.998628][T19196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.011635][T19196] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 715.035286][T19196] EXT4-fs error (device loop5): ext4_empty_dir:3075: inode #12: comm syz.5.4442: invalid size [ 715.046114][T19196] EXT4-fs (loop5): Remounting filesystem read-only [ 715.225685][T14915] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.241980][T16052] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 715.290978][T19088] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.311968][T19088] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.319473][T19088] bridge_slave_0: entered allmulticast mode [ 715.326935][T19088] bridge_slave_0: entered promiscuous mode [ 715.367957][T19088] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.372226][T19224] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=19224 comm=syz.5.4446 [ 715.375240][T19088] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.394710][T19088] bridge_slave_1: entered allmulticast mode [ 715.401447][T19088] bridge_slave_1: entered promiscuous mode [ 715.447999][T19088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.463652][T19088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.610440][T19088] team0: Port device team_slave_0 added [ 715.611823][T14588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.617256][T19088] team0: Port device team_slave_1 added [ 715.650196][T19088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.657534][T19088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.685455][T19249] FAULT_INJECTION: forcing a failure. [ 715.685455][T19249] name failslab, interval 1, probability 0, space 0, times 0 [ 715.698232][T19249] CPU: 0 UID: 0 PID: 19249 Comm: syz.5.4449 Not tainted syzkaller #0 PREEMPT(full) [ 715.698259][T19249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 715.698271][T19249] Call Trace: [ 715.698280][T19249] [ 715.698326][T19249] __dump_stack+0x1d/0x30 [ 715.698354][T19249] dump_stack_lvl+0x95/0xd0 [ 715.698389][T19249] dump_stack+0x15/0x1b [ 715.698425][T19249] should_fail_ex+0x263/0x280 [ 715.698500][T19249] should_failslab+0x8c/0xb0 [ 715.698525][T19249] __kmalloc_noprof+0xb8/0x4e0 [ 715.698547][T19249] ? copy_splice_read+0xc2/0x6c0 [ 715.698592][T19249] copy_splice_read+0xc2/0x6c0 [ 715.698620][T19249] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 715.698715][T19249] splice_direct_to_actor+0x28f/0x670 [ 715.698781][T19249] ? __pfx_direct_splice_actor+0x10/0x10 [ 715.698808][T19249] do_splice_direct+0x119/0x1a0 [ 715.698827][T19249] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 715.698897][T19249] do_sendfile+0x382/0x650 [ 715.698925][T19249] __x64_sys_sendfile64+0x105/0x150 [ 715.698948][T19249] x64_sys_call+0x2dc4/0x3020 [ 715.698972][T19249] do_syscall_64+0x12c/0x370 [ 715.699047][T19249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.699143][T19249] RIP: 0033:0x7fa20b05c799 [ 715.699162][T19249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.699185][T19249] RSP: 002b:00007fa209a75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 715.699210][T19249] RAX: ffffffffffffffda RBX: 00007fa20b2d6180 RCX: 00007fa20b05c799 [ 715.699228][T19249] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 715.699243][T19249] RBP: 00007fa209a75090 R08: 0000000000000000 R09: 0000000000000000 [ 715.699271][T19249] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 715.699286][T19249] R13: 00007fa20b2d6218 R14: 00007fa20b2d6180 R15: 00007ffc74ff55c8 [ 715.699304][T19249] [ 715.899313][T19088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.945024][T19088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.017836][T19088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.072445][T19088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.466548][T19088] hsr_slave_0: entered promiscuous mode [ 718.495351][T19088] hsr_slave_1: entered promiscuous mode [ 718.935818][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 718.935837][ T28] audit: type=1400 audit(1772357097.412:568): avc: denied { mounton } for pid=19285 comm="syz.3.4457" path="/106/file0" dev="tmpfs" ino=578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 718.973849][T19287] 9p: Bad value for 'wfdno' [ 719.446567][T19088] debugfs: 'hsr0' already exists in 'hsr' [ 719.464725][T19088] Cannot create hsr debugfs directory [ 719.475363][T19289] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.4458'. [ 719.589979][T19302] syzkaller0: entered promiscuous mode [ 719.624098][T19302] syzkaller0: entered allmulticast mode [ 719.745425][T19311] loop5: detected capacity change from 0 to 512 [ 719.769118][ T28] audit: type=1400 audit(1772357098.232:569): avc: denied { sqpoll } for pid=19312 comm="syz.1.4467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 719.823192][T19311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.893295][T19311] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 719.999555][T19330] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4472'. [ 720.138969][T14915] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 720.255394][T14915] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 721.231712][T14915] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.249316][ T28] audit: type=1400 audit(1772357099.723:570): avc: denied { create } for pid=19368 comm="syz.1.4480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 721.386747][T19371] loop6: detected capacity change from 0 to 256 [ 721.455268][T19371] FAT-fs (loop6): Directory bread(block 64) failed [ 721.462154][T19371] FAT-fs (loop6): Directory bread(block 65) failed [ 721.469037][T19371] FAT-fs (loop6): Directory bread(block 66) failed [ 721.476247][T19371] FAT-fs (loop6): Directory bread(block 67) failed [ 721.483122][T19371] FAT-fs (loop6): Directory bread(block 68) failed [ 721.489977][T19371] FAT-fs (loop6): Directory bread(block 69) failed [ 721.497162][T19371] FAT-fs (loop6): Directory bread(block 70) failed [ 721.503899][T19371] FAT-fs (loop6): Directory bread(block 71) failed [ 721.510551][T19371] FAT-fs (loop6): Directory bread(block 72) failed [ 721.517199][T19371] FAT-fs (loop6): Directory bread(block 73) failed [ 722.418138][T19088] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 722.458120][T19088] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 722.535614][T19088] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 722.618631][T19088] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 722.627142][T19395] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4484'. [ 722.676387][T19400] loop1: detected capacity change from 0 to 512 [ 722.772841][T19400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.819104][T19400] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 723.038946][T19088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.469847][T19439] syzkaller0: entered promiscuous mode [ 723.515831][T19439] syzkaller0: entered allmulticast mode [ 723.677610][T19088] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.697437][ T3787] bridge_slave_1: left allmulticast mode [ 723.704618][ T3787] bridge_slave_1: left promiscuous mode [ 723.710567][ T3787] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.720171][ T3787] bridge_slave_0: left allmulticast mode [ 723.726190][ T3787] bridge_slave_0: left promiscuous mode [ 723.732342][ T3787] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.123372][ T3787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.133236][ T3787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.142655][ T3787] bond0 (unregistering): Released all slaves [ 724.222816][ T3787] bond0 (unregistering): Released all slaves [ 724.260221][ T3816] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.267443][ T3816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.309687][ T3816] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.317010][ T3816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.390671][ T28] audit: type=1400 audit(1772357102.863:571): avc: denied { setopt } for pid=19444 comm="syz.6.4490" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 724.425176][T14220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.438800][T19088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 724.460062][T19088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 724.473574][ T28] audit: type=1400 audit(1772357102.933:572): avc: denied { getopt } for pid=19444 comm="syz.6.4490" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 724.505912][ T3787] tipc: Left network mode [ 724.525677][T19387] chnl_net:caif_netlink_parms(): no params data found [ 724.605463][ T3787] tipc: Disabling bearer [ 724.621364][ T3787] tipc: Left network mode [ 724.682554][ T3787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.761276][ T3787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.782979][ T3787] hsr_slave_0: left promiscuous mode [ 724.788852][ T3787] hsr_slave_1: left promiscuous mode [ 724.803840][ T3787] veth1_macvtap: left promiscuous mode [ 724.809403][ T3787] veth0_macvtap: left promiscuous mode [ 724.821234][ T3787] veth1_vlan: left promiscuous mode [ 724.894162][ T3787] veth0_vlan: left promiscuous mode [ 725.023556][ T3787] team0 (unregistering): Port device team_slave_1 removed [ 725.040555][ T3787] team0 (unregistering): Port device team_slave_0 removed [ 725.103542][T19481] FAULT_INJECTION: forcing a failure. [ 725.103542][T19481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.118610][T19481] CPU: 0 UID: 0 PID: 19481 Comm: syz.3.4492 Not tainted syzkaller #0 PREEMPT(full) [ 725.118701][T19481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 725.118712][T19481] Call Trace: [ 725.118727][T19481] [ 725.118738][T19481] __dump_stack+0x1d/0x30 [ 725.118770][T19481] dump_stack_lvl+0x95/0xd0 [ 725.118797][T19481] dump_stack+0x15/0x1b [ 725.118849][T19481] should_fail_ex+0x263/0x280 [ 725.118957][T19481] should_fail+0xb/0x20 [ 725.119057][T19481] should_fail_usercopy+0x1a/0x20 [ 725.119083][T19481] _copy_from_user+0x1c/0xb0 [ 725.119111][T19481] ___sys_sendmsg+0xc1/0x1e0 [ 725.119246][T19481] __x64_sys_sendmsg+0xd4/0x160 [ 725.119288][T19481] x64_sys_call+0x194c/0x3020 [ 725.119312][T19481] do_syscall_64+0x12c/0x370 [ 725.119401][T19481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.119428][T19481] RIP: 0033:0x7fbc1235c799 [ 725.119448][T19481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.119469][T19481] RSP: 002b:00007fbc10d75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.119503][T19481] RAX: ffffffffffffffda RBX: 00007fbc125d6180 RCX: 00007fbc1235c799 [ 725.119521][T19481] RDX: 0000000004000800 RSI: 0000200000006040 RDI: 0000000000000006 [ 725.119538][T19481] RBP: 00007fbc10d75090 R08: 0000000000000000 R09: 0000000000000000 [ 725.119554][T19481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.119568][T19481] R13: 00007fbc125d6218 R14: 00007fbc125d6180 R15: 00007fff1e6356e8 [ 725.119611][T19481] [ 725.286627][ T28] audit: type=1400 audit(1772357103.763:573): avc: denied { create } for pid=19444 comm="syz.6.4490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 725.345835][T19088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.371281][ T28] audit: type=1400 audit(1772357103.763:574): avc: denied { getopt } for pid=19444 comm="syz.6.4490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 725.453201][T19484] syzkaller0: entered promiscuous mode [ 725.461302][T19484] syzkaller0: entered allmulticast mode [ 725.492155][T19387] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.499448][T19387] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.510992][T19387] bridge_slave_0: entered allmulticast mode [ 725.536682][T19387] bridge_slave_0: entered promiscuous mode [ 725.568670][T19387] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.581218][T19387] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.595540][T19387] bridge_slave_1: entered allmulticast mode [ 725.609613][T19387] bridge_slave_1: entered promiscuous mode [ 725.683314][T19387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.694558][T19387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.716033][T19387] team0: Port device team_slave_0 added [ 725.724307][T19387] team0: Port device team_slave_1 added [ 725.818710][T19387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.877660][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4496'. [ 726.021744][ T28] audit: type=1400 audit(1772357104.503:575): avc: denied { wake_alarm } for pid=19519 comm="syz.3.4498" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 726.349684][T19387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.376738][T19387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.391236][T16073] batadv1: left promiscuous mode [ 726.407324][T19387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.414636][T19387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.442919][T19387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.559008][T19387] hsr_slave_0: entered promiscuous mode [ 726.565350][T19387] hsr_slave_1: entered promiscuous mode [ 726.571850][T19387] debugfs: 'hsr0' already exists in 'hsr' [ 726.577598][T19387] Cannot create hsr debugfs directory [ 726.620003][T19088] veth0_vlan: entered promiscuous mode [ 726.784862][T19088] veth1_vlan: entered promiscuous mode [ 726.813318][T19088] veth0_macvtap: entered promiscuous mode [ 726.823850][T19088] veth1_macvtap: entered promiscuous mode [ 726.878175][T19549] FAULT_INJECTION: forcing a failure. [ 726.878175][T19549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.891520][T19549] CPU: 1 UID: 0 PID: 19549 Comm: syz.1.4502 Not tainted syzkaller #0 PREEMPT(full) [ 726.891547][T19549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 726.891566][T19549] Call Trace: [ 726.891573][T19549] [ 726.891583][T19549] __dump_stack+0x1d/0x30 [ 726.891677][T19549] dump_stack_lvl+0x95/0xd0 [ 726.891730][T19549] dump_stack+0x15/0x1b [ 726.891760][T19549] should_fail_ex+0x263/0x280 [ 726.891783][T19549] ? __pfx_ucma_create_id+0x10/0x10 [ 726.891857][T19549] should_fail+0xb/0x20 [ 726.891880][T19549] should_fail_usercopy+0x1a/0x20 [ 726.891902][T19549] _copy_from_user+0x1c/0xb0 [ 726.891972][T19549] ucma_create_id+0x7f/0x280 [ 726.891994][T19549] ? __pfx_ucma_create_id+0x10/0x10 [ 726.892063][T19549] ucma_write+0x1c9/0x260 [ 726.892080][T19549] ? __pfx_ucma_write+0x10/0x10 [ 726.892097][T19549] vfs_write+0x269/0x9f0 [ 726.892184][T19549] ? __rcu_read_unlock+0x4e/0x70 [ 726.892209][T19549] ? __fget_files+0x184/0x1c0 [ 726.892239][T19549] ksys_write+0xdc/0x1a0 [ 726.892354][T19549] __x64_sys_write+0x40/0x50 [ 726.892376][T19549] x64_sys_call+0x27e1/0x3020 [ 726.892413][T19549] do_syscall_64+0x12c/0x370 [ 726.892434][T19549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.892476][T19549] RIP: 0033:0x7fc0870fc799 [ 726.892496][T19549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.892541][T19549] RSP: 002b:00007fc085b0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 726.892562][T19549] RAX: ffffffffffffffda RBX: 00007fc087376180 RCX: 00007fc0870fc799 [ 726.892578][T19549] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000006 [ 726.892594][T19549] RBP: 00007fc085b0d090 R08: 0000000000000000 R09: 0000000000000000 [ 726.892625][T19549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.892640][T19549] R13: 00007fc087376218 R14: 00007fc087376180 R15: 00007ffd0ca8b678 [ 726.892712][T19549] [ 727.236551][T19088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.262554][T19088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.265017][ T28] audit: type=1400 audit(1772357105.733:576): avc: denied { write } for pid=19553 comm="syz.1.4503" name="route" dev="proc" ino=4026533777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 727.313956][T16052] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.326526][T16052] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.346425][T16052] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.363696][T16052] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.377248][ T28] audit: type=1400 audit(1772357105.733:577): avc: denied { execute } for pid=19553 comm="syz.1.4503" path="/302/cpu.stat" dev="tmpfs" ino=1585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 727.402259][ T28] audit: type=1400 audit(1772357105.783:578): avc: denied { mounton } for pid=19088 comm="syz-executor" path="/root/syzkaller.OKRwxS/syz-tmp" dev="sda1" ino=2064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 727.404861][T19559] syzkaller0: entered promiscuous mode [ 727.435581][T19559] syzkaller0: entered allmulticast mode [ 727.441912][ T28] audit: type=1400 audit(1772357105.783:579): avc: denied { mount } for pid=19088 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 727.445073][T19561] loop7: detected capacity change from 0 to 1024 [ 727.467172][ T28] audit: type=1400 audit(1772357105.793:580): avc: denied { mounton } for pid=19088 comm="syz-executor" path="/root/syzkaller.OKRwxS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 727.500482][T19561] EXT4-fs: Ignoring removed orlov option [ 727.547380][T19561] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.655186][T19569] SET target dimension over the limit! [ 727.683958][T19569] netlink: 'syz.1.4507': attribute type 39 has an invalid length. [ 727.747104][T19571] loop1: detected capacity change from 0 to 1024 [ 727.766044][T19571] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 727.785033][T19571] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 727.793407][T19571] EXT4-fs (loop1): orphan cleanup on readonly fs [ 727.800242][T19571] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz.1.4507: Invalid inode table block 0 in block_group 0 [ 727.813567][T19571] loop1: lost filesystem error report for type 5 error -117 [ 727.813669][T19571] EXT4-fs (loop1): Remounting filesystem read-only [ 727.821281][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 727.821306][ C1] EXT4-fs (loop1): initial error at time 1772357106: __ext4_get_inode_loc:4782 [ 727.821372][ C1] EXT4-fs (loop1): last error at time 1772357106: __ext4_get_inode_loc:4782 [ 727.852831][T19571] EXT4-fs (loop1): 1 truncate cleaned up [ 727.859236][T19571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 727.912632][T19574] loop6: detected capacity change from 0 to 512 [ 727.919962][T19574] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 727.935786][T19574] EXT4-fs (loop6): 1 truncate cleaned up [ 727.942282][T19574] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.985785][T14220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.021570][T19577] random: crng reseeded on system resumption [ 728.103369][T19574] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4508'. [ 728.140408][T14588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.213404][T19588] loop6: detected capacity change from 0 to 512 [ 728.233303][T19588] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.246301][T19588] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 729.476842][T19532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 729.487283][T19387] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 729.499193][T19387] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 729.520707][T19387] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 729.521779][T14588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.529025][T19088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.551421][T19387] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 729.635671][T19387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.643074][T19616] loop6: detected capacity change from 0 to 512 [ 729.650248][T19387] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.677668][T19616] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.693016][T19616] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 729.705056][T19612] syzkaller0: entered promiscuous mode [ 729.715413][T19612] syzkaller0: entered allmulticast mode [ 729.745314][T16068] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.752526][T16068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.799556][T16073] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.806739][T16073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.833389][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 729.833409][ T28] audit: type=1400 audit(1772357108.303:599): avc: denied { write } for pid=19635 comm="syz.1.4521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 729.896211][ T28] audit: type=1400 audit(1772357108.303:600): avc: denied { read } for pid=19635 comm="syz.1.4521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 729.922719][T19387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 729.960154][T19387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 729.981469][T19634] syzkaller0: entered promiscuous mode [ 729.987133][T19634] syzkaller0: entered allmulticast mode [ 730.020765][T14588] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 730.041667][T14588] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 730.132061][T19387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.180078][T18691] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.251378][T18691] team0: Port device syz_tun removed [ 730.310643][T19665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4526'. [ 730.336200][T19665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4526'. [ 730.345341][T19665] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4526'. [ 730.425901][T19636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4521'. [ 730.435226][T19636] tc_dump_action: action bad kind [ 730.490058][ T28] audit: type=1400 audit(1772357108.903:601): avc: denied { create } for pid=19635 comm="syz.1.4521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 730.524251][ T28] audit: type=1400 audit(1772357108.943:602): avc: denied { setopt } for pid=19635 comm="syz.1.4521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 730.526064][T19387] veth0_vlan: entered promiscuous mode [ 730.572804][T19387] veth1_vlan: entered promiscuous mode [ 730.613165][T19387] veth0_macvtap: entered promiscuous mode [ 730.622730][T19387] veth1_macvtap: entered promiscuous mode [ 730.647254][T19387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.686461][T19387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.718076][ T28] audit: type=1400 audit(1772357109.193:603): avc: denied { read } for pid=19709 comm="syz.1.4531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 730.737845][T19710] loop1: detected capacity change from 0 to 512 [ 730.750671][T19710] ------------[ cut here ]------------ [ 730.756242][T19710] EA inode 11 i_nlink=2 [ 730.756309][T19710] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.1.4531/19710 [ 730.771545][T19710] Modules linked in: [ 730.775741][T19710] CPU: 1 UID: 0 PID: 19710 Comm: syz.1.4531 Not tainted syzkaller #0 PREEMPT(full) [ 730.785315][T19710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 730.792733][T16071] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.795615][T19710] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 730.811188][T19710] Code: 84 5a 99 ff 4c 8d 2d 8d ea 5d 05 49 8d 7e 40 e8 f4 f0 b5 ff 49 8b 6e 40 4c 89 e7 e8 28 ec b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 df 44 dd 03 66 66 66 66 66 66 2e [ 730.831083][T19710] RSP: 0018:ffffc9000174f778 EFLAGS: 00010246 [ 730.837283][T19710] RAX: ffff88810193cc78 RBX: ffff88811acac608 RCX: ffffffff81bffab8 [ 730.845400][T19710] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871de530 [ 730.853419][T19710] RBP: 000000000000000b R08: 000188811acac5bb R09: 0000000000000000 [ 730.861474][T19710] R10: ffffc9000174f6a8 R11: 0001c9000174f6a8 R12: ffff88811acac5b8 [ 730.869625][T19710] R13: ffffffff871de530 R14: ffff88811acac570 R15: 0000000000000001 [ 730.877743][T19710] FS: 00007fc085b4f6c0(0000) GS:ffff8882ae9dc000(0000) knlGS:0000000000000000 [ 730.877857][ T2991] ================================================================== [ 730.886950][T19710] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 730.895075][ T2991] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 730.901796][T19710] CR2: 00007fc0870e5900 CR3: 0000000116b78000 CR4: 00000000003506f0 [ 730.908757][ T2991] [ 730.908767][ T2991] write to 0xffffffff86c78858 of 8 bytes by task 19710 on cpu 1: [ 730.916851][T19710] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 730.919146][ T2991] data_alloc+0x310/0x390 [ 730.926938][T19710] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 730.934963][ T2991] prb_reserve+0x8d7/0xae0 [ 730.935006][ T2991] vprintk_store+0x54a/0x910 [ 730.939447][T19710] Call Trace: [ 730.947645][ T2991] vprintk_emit+0x1a4/0x600 [ 730.947669][ T2991] vprintk_default+0x26/0x30 [ 730.947693][ T2991] vprintk+0x1d/0x30 [ 730.952146][T19710] [ 730.956870][ T2991] _printk+0x79/0xa0 [ 730.960248][T19710] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 730.964739][ T2991] __show_regs+0x21e/0x420 [ 730.969533][T19710] ? errseq_check+0x2c/0x50 [ 730.973512][ T2991] show_regs+0x36/0x60 [ 730.973536][ T2991] __warn+0x159/0x360 [ 730.973565][ T2991] __report_bug+0x241/0x490 [ 730.973584][ T2991] report_bug_entry+0xb2/0x100 [ 730.973602][ T2991] handle_bug+0xca/0x200 [ 730.976652][T19710] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 730.980531][ T2991] exc_invalid_op+0x1a/0x50 [ 730.986701][T19710] ? ext4_truncate+0x92b/0xb00 [ 730.991003][ T2991] asm_exc_invalid_op+0x1a/0x20 [ 730.991029][ T2991] ext4_xattr_inode_update_ref+0x332/0x350 [ 730.995743][T19710] ext4_evict_inode+0xa1f/0xd60 [ 731.000062][ T2991] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 731.000097][ T2991] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 731.004192][T19710] ? __pfx_ext4_evict_inode+0x10/0x10 [ 731.008741][ T2991] ext4_evict_inode+0xa1f/0xd60 [ 731.013531][T19710] evict+0x2af/0x510 [ 731.017841][ T2991] evict+0x2af/0x510 [ 731.023418][T19710] ? __dquot_initialize+0x146/0x7c0 [ 731.028066][ T2991] iput+0x41a/0x580 [ 731.032929][T19710] iput+0x41a/0x580 [ 731.037962][ T2991] ext4_process_orphan+0x1a9/0x1c0 [ 731.044055][T19710] ext4_process_orphan+0x1a9/0x1c0 [ 731.048860][ T2991] ext4_orphan_cleanup+0x6a8/0xa00 [ 731.054840][T19710] ext4_orphan_cleanup+0x6a8/0xa00 [ 731.060194][ T2991] ext4_fill_super+0x3408/0x37c0 [ 731.065653][T19710] ext4_fill_super+0x3408/0x37c0 [ 731.070483][ T2991] get_tree_bdev_flags+0x291/0x300 [ 731.074407][T19710] ? set_blocksize+0x14c/0x270 [ 731.078264][ T2991] get_tree_bdev+0x1f/0x30 [ 731.083550][T19710] ? setup_bdev_super+0x30e/0x370 [ 731.087415][ T2991] ext4_get_tree+0x1c/0x30 [ 731.091327][T19710] ? __pfx_ext4_fill_super+0x10/0x10 [ 731.096581][ T2991] vfs_get_tree+0x57/0x1d0 [ 731.101882][T19710] get_tree_bdev_flags+0x291/0x300 [ 731.106960][ T2991] do_new_mount+0x288/0x8d0 [ 731.106982][ T2991] path_mount+0x4d0/0xbc0 [ 731.106999][ T2991] __se_sys_mount+0x28c/0x2e0 [ 731.107018][ T2991] __x64_sys_mount+0x67/0x80 [ 731.107036][ T2991] x64_sys_call+0x2d61/0x3020 [ 731.112169][T19710] ? __pfx_ext4_fill_super+0x10/0x10 [ 731.117150][ T2991] do_syscall_64+0x12c/0x370 [ 731.122110][T19710] get_tree_bdev+0x1f/0x30 [ 731.127193][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.132234][T19710] ext4_get_tree+0x1c/0x30 [ 731.136797][ T2991] [ 731.136807][ T2991] read to 0xffffffff86c78858 of 16 bytes by task 2991 on cpu 0: [ 731.142110][T19710] vfs_get_tree+0x57/0x1d0 [ 731.146580][ T2991] _prb_read_valid+0x1bc/0x950 [ 731.151973][T19710] do_new_mount+0x288/0x8d0 [ 731.156334][ T2991] prb_read_valid+0x3c/0x60 [ 731.161575][T19710] path_mount+0x4d0/0xbc0 [ 731.166048][ T2991] syslog_print+0x258/0x560 [ 731.170378][T19710] __se_sys_mount+0x28c/0x2e0 [ 731.175042][ T2991] do_syslog+0x52b/0x7f0 [ 731.175063][ T2991] __x64_sys_syslog+0x41/0x50 [ 731.180014][T19710] __x64_sys_mount+0x67/0x80 [ 731.184809][ T2991] x64_sys_call+0x2b9e/0x3020 [ 731.184840][ T2991] do_syscall_64+0x12c/0x370 [ 731.190116][T19710] x64_sys_call+0x2d61/0x3020 [ 731.194702][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.194727][ T2991] [ 731.194733][ T2991] Reported by Kernel Concurrency Sanitizer on: [ 731.194746][ T2991] CPU: 0 UID: 0 PID: 2991 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 731.194782][ T2991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 731.194796][ T2991] ================================================================== [ 731.199197][T19710] do_syscall_64+0x12c/0x370 [ 731.296922][ T28] audit: type=1400 audit(1772357109.683:604): avc: denied { write } for pid=3303 comm="syz-executor" path="pipe:[367]" dev="pipefs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 731.303892][T19710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.314201][T19671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 731.322248][T19710] RIP: 0033:0x7fc0870fda0a [ 731.369174][T19710] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 731.388889][T19710] RSP: 002b:00007fc085b4ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 731.397443][T19710] RAX: ffffffffffffffda RBX: 00007fc085b4eee0 RCX: 00007fc0870fda0a [ 731.405570][T19710] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fc085b4eea0 [ 731.413946][T19710] RBP: 00002000000009c0 R08: 00007fc085b4eee0 R09: 0000000000800718 [ 731.421973][T19710] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 731.430569][T19710] R13: 00007fc085b4eea0 R14: 000000000000048d R15: 0000200000000200 [ 731.438726][T19710] [ 731.441784][T19710] ---[ end trace 0000000000000000 ]--- [ 731.448954][T19710] EXT4-fs (loop1): 1 orphan inode deleted [ 731.455128][T19710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.492772][T19710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.512296][T16073] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.526075][T16073] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.552859][ T3787] bridge_slave_1: left allmulticast mode [ 731.558710][ T3787] bridge_slave_1: left promiscuous mode [ 731.564609][ T3787] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.572515][ T3787] bridge_slave_0: left allmulticast mode [ 731.578162][ T3787] bridge_slave_0: left promiscuous mode [ 731.584130][ T3787] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.643101][ T3787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.652280][ T3787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.661573][ T3787] bond0 (unregistering): Released all slaves [ 731.669096][ T3787] bond1 (unregistering): Released all slaves [ 731.690019][T16073] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.713279][ T3787] tipc: Left network mode [ 731.730230][ T3787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.746962][ T3787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.795960][ T3787] team0 (unregistering): Port device team_slave_1 removed [ 731.807753][ T3787] team0 (unregistering): Port device team_slave_0 removed [ 732.275248][ T3787] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.323730][ T3787] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.404144][ T3787] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.444159][ T3787] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.544239][ T3787] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.573664][ T3787] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.615825][ T3787] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.714510][ T3787] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.779067][ T3787] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.814078][ T3787] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.864106][ T3787] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.914836][ T3787] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.991994][ T3787] bridge_slave_1: left allmulticast mode [ 732.997757][ T3787] bridge_slave_1: left promiscuous mode [ 733.003898][ T3787] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.012179][ T3787] bridge_slave_0: left allmulticast mode [ 733.017855][ T3787] bridge_slave_0: left promiscuous mode [ 733.025303][ T3787] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.034746][ T3787] bridge_slave_1: left allmulticast mode [ 733.040596][ T3787] bridge_slave_1: left promiscuous mode [ 733.046820][ T3787] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.054629][ T3787] bridge_slave_0: left allmulticast mode [ 733.060358][ T3787] bridge_slave_0: left promiscuous mode [ 733.066259][ T3787] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.193388][ T3787] bond0 (unregistering): Released all slaves [ 733.233741][ T3787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.244529][ T3787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.254086][ T3787] bond0 (unregistering): Released all slaves [ 733.312599][ T3787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.322665][ T3787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.332906][ T3787] bond0 (unregistering): Released all slaves [ 733.341039][ T3787] bond1 (unregistering): (slave veth3): Releasing active interface [ 733.348932][ T3787] batadv1: entered promiscuous mode [ 733.357302][ T3787] bond1 (unregistering): (slave batadv1): Releasing active interface [ 733.366531][ T3787] bond1 (unregistering): Released all slaves [ 733.420704][ T3787] tipc: Left network mode [ 733.431385][ T3787] hsr_slave_0: left promiscuous mode [ 733.437301][ T3787] hsr_slave_1: left promiscuous mode [ 733.445177][ T3787] hsr_slave_0: left promiscuous mode [ 733.451041][ T3787] hsr_slave_1: left promiscuous mode [ 733.456895][ T3787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.466055][ T3787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.473834][ T3787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.482407][ T3787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.492512][ T3787] hsr_slave_0: left promiscuous mode [ 733.498470][ T3787] hsr_slave_1: left promiscuous mode [ 733.504603][ T3787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.512237][ T3787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.519872][ T3787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.527683][ T3787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.542581][ T3787] veth1_macvtap: left promiscuous mode [ 733.548077][ T3787] veth0_macvtap: left promiscuous mode [ 733.553751][ T3787] veth1_vlan: left promiscuous mode [ 733.559070][ T3787] veth0_vlan: left promiscuous mode [ 733.564952][ T3787] veth1_macvtap: left promiscuous mode [ 733.570862][ T3787] veth0_macvtap: left promiscuous mode [ 733.576748][ T3787] veth1_vlan: left promiscuous mode [ 733.582561][ T3787] veth0_vlan: left promiscuous mode [ 733.588363][ T3787] veth1_macvtap: left promiscuous mode [ 733.595037][ T3787] veth0_macvtap: left promiscuous mode [ 733.600801][ T3787] veth1_vlan: left promiscuous mode [ 733.606113][ T3787] veth0_vlan: left promiscuous mode [ 733.779079][ T3787] team0 (unregistering): Port device team_slave_1 removed [ 733.790436][ T3787] team0 (unregistering): Port device team_slave_0 removed [ 733.845663][ T3787] team0 (unregistering): Port device team_slave_1 removed [ 733.856727][ T3787] team0 (unregistering): Port device team_slave_0 removed [ 734.419236][ T3787] IPVS: stop unused estimator thread 0... [ 734.484366][ T3787] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.534749][ T3787] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.584734][ T3787] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.629348][ T3787] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.718676][ T3787] bridge_slave_1: left allmulticast mode [ 734.724516][ T3787] bridge_slave_1: left promiscuous mode [ 734.730212][ T3787] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.738135][ T3787] bridge_slave_0: left allmulticast mode [ 734.743948][ T3787] bridge_slave_0: left promiscuous mode [ 734.749653][ T3787] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.834206][ T3787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.844298][ T3787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.854405][ T3787] bond0 (unregistering): Released all slaves [ 734.915184][ T3787] hsr_slave_0: left promiscuous mode [ 734.921582][ T3787] hsr_slave_1: left promiscuous mode [ 734.927261][ T3787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.935299][ T3787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.943632][ T3787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.952999][ T3787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.963677][ T3787] veth1_macvtap: left promiscuous mode [ 734.969229][ T3787] veth0_macvtap: left promiscuous mode [ 734.975042][ T3787] veth1_vlan: left promiscuous mode [ 734.980297][ T3787] veth0_vlan: left promiscuous mode [ 735.038864][ T3787] team0 (unregistering): Port device team_slave_1 removed [ 735.048596][ T3787] team0 (unregistering): Port device team_slave_0 removed