last executing test programs: 9m59.021215007s ago: executing program 32 (id=50): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00007}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000780)={{r1}, "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"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000140)='1', 0xf}], 0x1) preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/54, 0x36}], 0x1, 0xbbb, 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000017c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001780)={&(0x7f0000000240)={0x24, r5, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x1) r6 = epoll_create1(0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000002c0)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f00000001c0)={0x2007}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}]}}, 0x0, 0x42}, 0x28) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r0, &(0x7f0000000000)={0x20000018}) 9m39.965594126s ago: executing program 33 (id=353): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x7ff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000100000000800040001000000", 0x24) 9m21.624737184s ago: executing program 34 (id=692): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x20, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@grpquota}, {@usrjquota}]}, 0x1, 0x7b8, &(0x7f0000000980)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x1dc) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) 9m14.926937452s ago: executing program 35 (id=766): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) fgetxattr(r2, &(0x7f0000000140)=@known='trusted.overlay.upper\x00', 0x0, 0xffffffffffffff85) 9m4.39204386s ago: executing program 36 (id=938): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$peeksig(0x4209, r0, &(0x7f0000000080)={0x6, 0x0, 0x3}, &(0x7f00000000c0)=[{}, {}, {}]) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="0000e3ffffff00"], 0x1c}], 0x1, 0x0, 0x0, 0x810}, 0x0) 8m19.517351206s ago: executing program 37 (id=1716): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}, @generic={0x66, 0x0, 0x0, 0x0, 0x2}, @initr0, @exit, @alu={0x7, 0x0, 0x7, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x3, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 7m46.341910603s ago: executing program 38 (id=2382): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e7000) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003300)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="70000011000000000000000007"], 0x70}}], 0x1, 0x2000c044) 7m31.639909335s ago: executing program 39 (id=2636): r0 = socket(0x10, 0x3, 0x3) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x7ff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24) 7m2.601450133s ago: executing program 40 (id=3179): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000080)) close_range(r0, r0, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@val={0x88a8, 0x4, 0x1, 0x3}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_extract_tcp_res(0x0, 0x9, 0x7) 6m51.14507177s ago: executing program 41 (id=3146): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) flock(0xffffffffffffffff, 0x5) flistxattr(0xffffffffffffffff, 0x0, 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x2, r1, &(0x7f0000001280)='3', 0x1}]) io_destroy(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x8402, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8001, 0xf7f}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) unshare(0x2020600) r2 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x40, 0x4, &(0x7f0000000040)={0xffffffffffffff7f, 0x2, 0x5}) r3 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, 0x4e23, 0xfffc, 0x4e20, 0x0, 0xa, 0x80, 0x80, 0x95}, {0x100000000, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0xf168}, 0xd6, 0x6e6bb1, 0x1, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x210000, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x0, 0x0, 0x0, 0x7, 0x3f0, 0x9, 0xfffffffb}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) r4 = open(0x0, 0x109cc2, 0x5c) sendfile(0xffffffffffffffff, r4, 0x0, 0x80001d00c0d1) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000002c0)) mq_getsetattr(r2, &(0x7f0000000000)={0x800, 0x4, 0x9, 0x9a}, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000280)={0x2a, 0x0, 0xc001}, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) mq_timedreceive(r2, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) 5m57.645921948s ago: executing program 42 (id=4307): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "19d38a46c4fdff33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) 5m45.635744816s ago: executing program 43 (id=4522): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) 5m17.534555754s ago: executing program 44 (id=4961): socketpair$unix(0x1, 0x3, 0x0, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000181) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x19, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000174f0000000000004402000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000fcff010000000000950000000000000018140000", @ANYRES32, @ANYBLOB="000000000000000018470000ffffffff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018600000030000000000000039000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x7, 0x6, &(0x7f0000000180)=""/6, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 4m56.677467944s ago: executing program 45 (id=5130): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2000004, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") open(0x0, 0x14927e, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) memfd_secret(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4m55.892894804s ago: executing program 46 (id=5046): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001b80)=""/4106, 0x100a}, {&(0x7f0000000200)=""/131, 0x83}, {&(0x7f00000054c0)=""/4077, 0xfed}, {&(0x7f0000000600)=""/76, 0x4c}, {&(0x7f0000000680)=""/281, 0x119}, {&(0x7f0000000180)=""/64, 0x40}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f00000007c0)=""/182, 0xb6}, {&(0x7f00000004c0)=""/136, 0x88}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0xa}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) 4m20.678506573s ago: executing program 0 (id=5597): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) write(r2, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 4m20.521279342s ago: executing program 0 (id=5601): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x1820c84, &(0x7f0000002480)=ANY=[@ANYRES32], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) iopl(0xcf) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x6}, 0x200, 0x2, 0x0, 0x4, 0x408, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x1) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0xf5ff, 0x0}, &(0x7f0000000000)="a2b2536b0513", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)=0x0) setreuid(r3, r4) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a030}], 0x1, 0x7000, 0x0, 0x3) mount$bind(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x4, 0x0) 4m20.068559551s ago: executing program 0 (id=5613): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0/file0/file0\x00', 0x200000, &(0x7f0000000500)={[{@nodelalloc}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000005}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}], [{@flag='ro'}]}, 0xfd, 0x573, &(0x7f0000000640)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b722c64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a41856102000000000000006357ee95fffb99cde923a6c2e7eee552c60119e2822287367b0526cec2098d6ef88304699e83b0d070ad82774d8cc230dc844fa4ed26ec244085d833e4e2309d01aea46150e5d791371358a8ecd02c1e8795d500af4694cc800962a672fd461d94ad695620623ccf81ae84a48df7d0ffafbb72f694c5e1bb70d4b394fd631e5801e7"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000bc0)={{0x81, 0x1}, 'port1\x00', 0x22, 0x50, 0x0, 0xdcc9, 0x1, 0x9, 0x6, 0x0, 0x1, 0x72}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000340)={@id={0x2, 0x0, @d}}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r2, &(0x7f0000000280)={0x6, 0x2d, 0x0, 0x3a, 0x0, 0x2c}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904022008f110000000040000a118000200e01d000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24048890) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2) 4m19.860033987s ago: executing program 0 (id=5617): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80078b, &(0x7f0000000180)={[{@usrjquota}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gg54ru4/5fGffnzb/nfXcUcymBE3B0RuyPinojYExH3RuRt74+IB1YZz+39n/TKKj9yWVn/77libmtx/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHllnHNy/+/Em7Zc39v+yRrb/sCxZxXOltGaCbmpibyDulHXD1YsS+3qXyT27OBCQRsTci9q3so3eVheknvtzfrtGd819GB+aZFr7I0pvP8p+PlvxLSfP85PRt85OjW6NeOzha7hW3+/GnS6+1W/+q8u+Aq7XGc9P2b20ymDTP186ufB2Xfv2o7T3Nf9z/0/7kjXyeub947b2JubkzYxH9ydG8vuj18VvvLetl+2z/Hz6w9PG/u3hPlv+DEZHtxA9FxMMR8UgR+6MR8VhEHFgm/+9faL+szD/Sirb/xYipJc9/N/f/lu2/8kLPye++brf+f7f9D+el4eKV/Px3B0uFk50uWgNczf8OAAAA/i/S/DvwSTpys5ymIyON7/DvibvS+szs3JPHZ945PdX4rvxg9KXlSNdAMR5an67XxpL54hMb46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W2O/8zvPVVHB6yxbUu+Ot6/7oEAFWidR08XVy+8Gk4GsFn5vTZ0rzsc/+l6xQGsP9d/6F5LHf8XWurmAmBzcv2H7uX4hy6Vflt1BECFXP+hK63md/1rWNi6McKoprBRN0peiCgL6YaIR2GNClWfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrjnwAAAP//fhbpGw==") setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x45, 0x0, 0x3, 0x3}, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f0000000100)={'bridge0\x00', 0x1}) 4m19.591013892s ago: executing program 0 (id=5620): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0xfd}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@md5={0x1, "ae258bc6e0c5ec028fbff2871b92d3fa"}, 0x11, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0xfd}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@md5={0x1, "ae258bc6e0c5ec028fbff2871b92d3fa"}, 0x11, 0x0) (async) close(0xffffffffffffffff) (async) 4m19.086385777s ago: executing program 0 (id=5630): mknod(&(0x7f0000000040)='./file0\x00', 0x8001422, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x18) open$dir(&(0x7f0000000140)='./file0\x00', 0x46263, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0xb0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="8b332abd702826ae7b3115"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40084) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r3, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) r4 = memfd_secret(0x80000) mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)={0x70, 0x74, 0x80000, {r4}}, 0x20) 4m19.043367092s ago: executing program 47 (id=5630): mknod(&(0x7f0000000040)='./file0\x00', 0x8001422, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x18) open$dir(&(0x7f0000000140)='./file0\x00', 0x46263, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0xb0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="8b332abd702826ae7b3115"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40084) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r3, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) r4 = memfd_secret(0x80000) mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)={0x70, 0x74, 0x80000, {r4}}, 0x20) 3m24.264412985s ago: executing program 5 (id=6612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r1, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {0x1, 0x0, 0xfffe}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x14}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) 3m24.205080193s ago: executing program 5 (id=6615): getresuid(0x0, 0x0, 0x0) 3m24.198127003s ago: executing program 5 (id=6616): r0 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x51a, &(0x7f0000000600)="$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") r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0200000001000000000000000800030000000000100000000000000020"], 0x24, 0x0) dup3(r1, r0, 0x0) bind$bt_hci(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00007}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x2007}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x20000018}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="39fe80001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000240)={0x1, 0x0, 0x80000001, 0x3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 3m23.148882627s ago: executing program 5 (id=6635): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x7}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x87, 0x7ffc0001}]}) kexec_load(0x0, 0x0, 0x0, 0x1000000) 3m22.872745363s ago: executing program 5 (id=6640): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_dev$loop(&(0x7f0000000680), 0x9, 0x103480) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6e) 3m22.713132494s ago: executing program 5 (id=6644): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x11, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)={0x18, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4, 0x3}]}, 0x18}], 0x1}, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) syz_emit_ethernet(0x46, &(0x7f00000005c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @private=0xfffffffe}, '\x00\x00eX\x00\x00\x00\x00'}}}}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 3m8.282978221s ago: executing program 48 (id=6644): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x11, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)={0x18, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4, 0x3}]}, 0x18}], 0x1}, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) syz_emit_ethernet(0x46, &(0x7f00000005c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @private=0xfffffffe}, '\x00\x00eX\x00\x00\x00\x00'}}}}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 2m48.086678727s ago: executing program 8 (id=6939): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) unshare(0x26000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="00020000", @ANYRES16=r1, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 2m47.621151916s ago: executing program 8 (id=6943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a0088a80180c20000032833b165653286dd6676b0c9000c11ff20010000000000000000000000000002ff0200000000000000000000000000014e214e24000c907861810001f4270887a91504cf9c442bdebb1a4234bd2b61e55b906cf6181ee2263cbd2168420053580c2ade7aa7d2c2ff6484c22193c32b90bede0564d7036d1632fda1b15dfe46d804727842ccb360a4abcc4150"], 0x46) 2m47.342121272s ago: executing program 8 (id=6946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x4, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2100000002000000040000000240000005000000", @ANYRES32=r0], 0x48) 2m47.11839939s ago: executing program 8 (id=6949): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x12000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}}, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x100, 0x4}, 0xa822, 0x4005, 0xb, 0x3, 0x6, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r4, 0x0, 0x272) 2m46.72525762s ago: executing program 8 (id=6954): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYRESOCT], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@delchain={0x24, 0x65, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0xffff, 0x3}, {0xa, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4004001) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xdb, 0x9d, 0x1b, 0x8, 0x12d1, 0xfae2, 0x708b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x4, 0x1a}}]}}]}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, "fe2e80ee"}, @mss={0x2, 0x4, 0x2}]}}}}}}}}, 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 2m46.153477114s ago: executing program 8 (id=6958): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb) syz_io_uring_setup(0x26d8, &(0x7f0000000080)={0x0, 0xb428, 0x1, 0x3, 0x3f}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr$security_selinux(r1, &(0x7f0000000040), &(0x7f0000000180)='system_u:object_r:getty_exec_t:s0\x00', 0x22, 0x0) syz_io_uring_setup(0x6940, &(0x7f0000000180)={0x0, 0x2c80, 0x80, 0x3, 0x359}, &(0x7f0000000200), &(0x7f0000000240)=0x0) r3 = open$dir(&(0x7f0000000280)='./file0\x00', 0xcc000, 0xe4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/sockstat6\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c006394e00060aa429ac8cf327fae85abb4449dbca9e56efd7d8157fc305dde1150104bec77506dde24fa"]) syz_io_uring_submit(r0, r2, &(0x7f0000000340)=@IORING_OP_LINKAT={0x27, 0x7a, 0x0, r3, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', r4, 0x400}) r6 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x2, 0xf9, 0x9, 0x0, 0x8, 0x8230, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x5, 0x7}, 0x2040, 0x46350c2, 0x3689, 0x4, 0x1, 0x3, 0xff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x3, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000576000/0x4000)=nil, 0x4000, 0x1000004, 0x10, r6, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x922c, 0x30, 0x10000, 0x0, 0x18bd, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m46.108184669s ago: executing program 49 (id=6958): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb) syz_io_uring_setup(0x26d8, &(0x7f0000000080)={0x0, 0xb428, 0x1, 0x3, 0x3f}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr$security_selinux(r1, &(0x7f0000000040), &(0x7f0000000180)='system_u:object_r:getty_exec_t:s0\x00', 0x22, 0x0) syz_io_uring_setup(0x6940, &(0x7f0000000180)={0x0, 0x2c80, 0x80, 0x3, 0x359}, &(0x7f0000000200), &(0x7f0000000240)=0x0) r3 = open$dir(&(0x7f0000000280)='./file0\x00', 0xcc000, 0xe4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/sockstat6\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c006394e00060aa429ac8cf327fae85abb4449dbca9e56efd7d8157fc305dde1150104bec77506dde24fa"]) syz_io_uring_submit(r0, r2, &(0x7f0000000340)=@IORING_OP_LINKAT={0x27, 0x7a, 0x0, r3, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', r4, 0x400}) r6 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x2, 0xf9, 0x9, 0x0, 0x8, 0x8230, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x5, 0x7}, 0x2040, 0x46350c2, 0x3689, 0x4, 0x1, 0x3, 0xff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x3, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000576000/0x4000)=nil, 0x4000, 0x1000004, 0x10, r6, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x922c, 0x30, 0x10000, 0x0, 0x18bd, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m31.826154303s ago: executing program 9 (id=7090): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x18b203) fcntl$dupfd(r0, 0x0, r0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYRES16], 0x2000, 0x0) (fail_nth: 6) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) 2m31.329303657s ago: executing program 9 (id=7094): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x1) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x200}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = gettid() r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}, @IFLA_XDP={0x4}]}, 0x40}, 0x1, 0x2}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r6 = syz_clone(0xc020500, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) tkill(r6, 0x3) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000100003040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0018001c0000001f000000060001000000", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070", @ANYRESOCT=r7], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m31.06761858s ago: executing program 9 (id=7100): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}) syz_open_dev$usbmon(&(0x7f0000000000), 0x7, 0x20200) 2m30.707084116s ago: executing program 9 (id=7105): io_uring_enter(0xffffffffffffffff, 0x70c2, 0xb2a0, 0x45, &(0x7f00000000c0)={[0xfffffffffffffff7]}, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a0d006, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x83) unshare(0x2a020400) r4 = openat(r3, &(0x7f0000000040)='.\x00', 0x0, 0xa2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x44, 0x32, 0x216822a75a8bdd29, 0xffe2, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") 2m30.480349356s ago: executing program 9 (id=7107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 2m30.237058757s ago: executing program 9 (id=7110): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x1) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x200}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = gettid() r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}, @IFLA_XDP={0x4}]}, 0x40}, 0x1, 0x2}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r6 = syz_clone(0xc020500, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) tkill(r6, 0x3) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000100003040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0018001c0000001f000000060001000000", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070", @ANYRESOCT=r7], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m30.145885359s ago: executing program 50 (id=7110): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x1) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x200}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = gettid() r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}, @IFLA_XDP={0x4}]}, 0x40}, 0x1, 0x2}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r6 = syz_clone(0xc020500, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) tkill(r6, 0x3) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000100003040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0018001c0000001f000000060001000000", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070", @ANYRESOCT=r7], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1m24.783998026s ago: executing program 7 (id=7769): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8418, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x0, 0x6, 0x0, 0x1, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) (fail_nth: 7) 1m24.184722453s ago: executing program 7 (id=7774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1m23.957032742s ago: executing program 7 (id=7776): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r0, 0x10, 0x0, @in={0x2, 0x4e23, @remote}}}, 0x90) 1m23.733022591s ago: executing program 7 (id=7779): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="e90c610f93a2aaaaaaaaaa0f080048ba00280067000006019078ffffffff7f000001"], 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="26000000ffffffffffffffff", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x3f) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x28, 0x0, 0x1, 0x0, 0x3, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x2}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x90, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") open(0x0, 0x10000, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x56ac, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x3eb}}], 0x1, 0x8001) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) pwritev(r3, &(0x7f00000000c0)=[{0x0}], 0x1, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='0'], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe, r6}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 1m22.920187435s ago: executing program 7 (id=7785): ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x2c020400) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 1m22.34307217s ago: executing program 7 (id=7789): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r0, 0x10, 0x0, @in={0x2, 0x4e23, @remote}}}, 0x90) 1m22.243649252s ago: executing program 51 (id=7789): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r0, 0x10, 0x0, @in={0x2, 0x4e23, @remote}}}, 0x90) 5.708348426s ago: executing program 3 (id=8483): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffefffffff7ffffc]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xbd7, &(0x7f0000000040)={0x0, 0xe14f, 0x8, 0x1, 0x4000032f, 0x0, r0}, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0xa, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/203, 0xcb}], 0x1}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8b19, &(0x7f0000000000)) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) 3.394199713s ago: executing program 6 (id=8501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_clone(0x20400, 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)="d048f099571a466a13ae9409201d3d274565688e534f0c0a4a5a7f9093fa0019c73a7322f56d94cd9a247f04eb5b5a18e1a6fdd144a4fe30e11acacfab4e508706d8c27c88724367aacce75b1ab77c56cb63422de12482af0e7d974d323ce852557ce9ebb1009b499315f04a855070103bf46e24fb0e7a6f4e12a36b3f1903d6e06840bf7cb98f1464392db8c8a19aaede60cedbc5c303ab10aa883f9ec910c0164438ce04ba05b1ce655f6feaf22fd9b39c649da2d1928a7f74f6b3006f7c9c2501102100301a19ba2c62f0fe00b720d87bd42e71977688f7188b446159b5ad319d4528a52318fd") ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000440)=0x0) rt_sigqueueinfo(r6, 0x2a, &(0x7f0000000480)={0x15, 0x1, 0x6}) write(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x413, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8814}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r8}, 0x20) sendmmsg$inet6(r8, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0c009900020000005600000124000d80200003801400030001000200e1fd0000030003003ef309000500060001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, r7, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7}, @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{}]}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x6}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x24}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0xfffffffffffffd9e, 0x8, 0xff}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x5}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x14, 0x24, [{0x4}, {0x18}, {0x5, 0x1}, {0x12, 0x1}, {0x24}, {0x4}, {0x1}, {0x24, 0x1}, {0x28}, {0xc}, {0x18, 0x1}, {0x12}, {0xb, 0x1}, {0x3}, {0x6c}, {0x6c}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004001}, 0x20040015) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x22008094}, 0x4000800) 2.847017884s ago: executing program 4 (id=8506): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xe, 0x200, &(0x7f0000003c40)="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"}) r1 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x800313}, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000103}) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r6 = request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3, 0x14}, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) set_mempolicy(0x6005, &(0x7f00000001c0)=0x1003, 0x4) add_key(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000700)="2016852cae5c48814a5b2e87e8f922cba21ad64b795ccd3795e369847800e8a5e5801d80b38b85e60ac13f4ccc016bff46e48af1916fb93a133a19d0db814c056c29297f189bf32ce2d971dee915dcb84e082d6280265918b6c8646f8e5a6936079dd0726fb5db5fbc5dab16d8c434063ab1840c7e511b369260944d06a4928db59ab455115f019951343ec4f23afe5640050481734b37a3b728f715de9f071f4344da7882a377328c3c764438a759b5e3b9d044e85ae18644611bdd20efcdec75e54c2e3d85ede1f2ee45ac85449ce6ad697471eb971d8b281a4ca068929a559579c30172bfb0f7b7db58d95631cbab40dac3", 0xf3, r6) r7 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) close_range(r7, r7, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xffffffff, 0x1, "346b00000000000045564cdc00", 0x0, 0x1002}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x3) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0xff03, 0x3c8, 0x1f8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private=0xa010100, @multicast1, 0xffffffff, 0xffffff00, 0x4, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, {[0xff, 0x0, 0x0, 0xff, 0x1fe]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x8, 0x0, 0x6, 0x3, 0x8, 0x1000, 'nr0\x00', 'vlan1\x00', {0xff}, {}, 0x0, 0x400}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@arp={@broadcast, @private=0xa010102, 0xff, 0x0, 0x8, 0xd, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x5, 0x9, 0xffff, 0x8, 0x65c, 'veth0_to_bond\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x488}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @remote, 0x4}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 0x0, 0x0, {@mac=@multicast, {[0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x9ee8, 0x4f, 0x4, 0xfff, 0x2, 0x1, 'veth0_to_batadv\x00', 'rose0\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r12, r12, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000900)={{{@in=@dev={0xac, 0x14, 0x14, 0x33}, @in=@multicast2, 0x4e22, 0x927, 0x4e22, 0x3, 0x2, 0x80, 0x80, 0x32, r11, r12}, {0x92, 0x6d18, 0x9, 0x3, 0x5, 0x8000000000000000, 0x7, 0x9}, {0x9, 0x4, 0x1, 0x8001}, 0xff2b, 0x8000, 0x1, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d2, 0x33}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x1, 0xd6, 0x1, 0x101, 0x3fd}}, 0xe8) 2.747219017s ago: executing program 6 (id=8508): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$eJzs3c1rHG8dAPDvbF42SauJIGh7CggaKN2YGlsFDxEPIlgo6Nk2bLahZpMt2U1pQqDpQfAiqHgQ9NKzL/UgePXlqv+EeJAW0TRYT7oys7t53d0kbXa3/fXzgck8M/PMPPPN88yzz+4MuwF8sKbTP7mIKxHxwyRisrk+iYiRLDUcsdDI93p3u5hOSdTr3/pnkuX57aWDYyXN+aXmwqcj4o/fi7iWO17qeHNeLq03U7O11Yez1c2t6w9WF5dLy6W1m3Pz8zduffHWzZN7val//2Xr8ssfff1zv14Yjk89/8GfkliIy81te7vbxbc8/AnTMd38n4yk/8IjvnbRhQ1YMugT4I2kl+ZQ4yqPKzEZQ1mqg7e9AAGAd8KTiKgDAB+Y5LTX/yFDBAD4aGl9DrC3u11sTYP9RKK//vHViBhrxN+6v9nYMty8ZzeW3Qed2EuO3BlJImLqAsqfjoif/+47v0yn6NF9SIB2dp425nu7+WP9f5L2f6OnHyHfccvnu+1Wb+w3fWy1/g/65/fp+OdLJ8d/V/cf6BnL/h4b/4zl21y7b+L06z/3osOuZ+ibTpeO/75y6Nm2g/Hf/kNrU0PNpY9lY76R5P6Dcint2z4eETMxkk+X57Ks7Z+Cmnn131edyj88/vvXj7/7i7T8dH6QI/diOB/1xnN5/8vG60uLtcWLiD2L/2nE1eF28Sf749/kSP0v7Ed6p+NRj1bNN778/Z91ypnGn8bbmk7G31v1ZxGfbVv/B3WZdH0+cTZrDrOtRtHGb/7204lO5R/Ufz6bp+W33gv0Q1r/E93jn0pT1c2tlcVyubRePX8Zf342+YdO2w63//bxZ+3/iLT9jybfztKtlvZ4sVZbn4sYTb55cv2Ng31by638afwzn2l//bdv/42+IH1PeG9/qbvhl6O/ah6qbfyZnU7x91Ya/9K56r9Lot7c59im569XhjqVf7b6n89SM801Z+n/TjnTt2jNAAAAAAAAAAAAAAAAAAAAAAAAAHB+uYi4HEmusJ/O5QqFxm94fzImcuVKtXbtfmVjbSmy38qeipFc66suJw99H+pc8/vwW8s3ji1/ISI+ERE/yY9ny4Vipbw06OABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOnS0d//f5LOCoXGtr/nB312AEDPjA36BACAvvP6DwAfnvO9/o/37DwAgP459/v/etKbEwEA+ubMr//3enseAED/uP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAj925fTud6v/Z3S6my0uPNjdWKo+uL5WqK4XVjWKhWFl/WFiuVJbLpUKxstrxQDuNWblSeTgfaxuPZ2ulam22url1d7WysVa7+2B1cbl0tzTSt8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oyqm1sri+VyaV2iS2K8NN45TxIRAz/D0xJpXV/kAYff0ZB3/jqSteuumWPqvWn8o13yJBdZ1vjxNYd7ifFBdE0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA74X/BwAA///YTBJy") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', '', [], 0xa, "adcb42add2db001be3c02bd9a8668bfa58107e21a0fd805eae92e896845c204fbcb8ca65955228cf984c1fd3ac5a7df3203ad9014f15a42304b3646ae37976d9f5a14ec00a7841e7d1"}, 0x4d) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x8000000000000001, &(0x7f0000000240)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.608749995s ago: executing program 4 (id=8510): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x400, 0x70bd2b, 0x0, {{}, {}, {0x3, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x48010) 2.594582367s ago: executing program 3 (id=8511): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x64}}, 0x0) r1 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="000088f7ffffffffffffaaaaaaaaaaaa080045e500001fe1e0000001"], 0x32) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r1, 0x498d, 0x3, 0x20, 0x0, 0x0) 2.33333654s ago: executing program 2 (id=8512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r1, &(0x7f0000032280)=""/102369, 0x18fe1, 0x200) 2.33315057s ago: executing program 4 (id=8513): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 2.283523457s ago: executing program 1 (id=8514): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@nombcache}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020207500feff0000820095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfa, &(0x7f0000000600)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) io_submit(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1, 0xdd, 0xfffffffffffffffd, 0x1, 0x4, 0xb}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x48800) setresgid(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r7) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={r4, r5, r7}, 0xc) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 2.230440713s ago: executing program 6 (id=8515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) fsopen(0x0, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r0, 0x2e, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket(0x2c, 0x1, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x1494) 2.126166757s ago: executing program 2 (id=8516): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faf7ffff00000000000000008500000007000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) 2.054605866s ago: executing program 6 (id=8517): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) write$P9_RGETLOCK(r1, &(0x7f0000000640)=ANY=[], 0x200002e6) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.02593729s ago: executing program 4 (id=8518): r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x77a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x100, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1.763514103s ago: executing program 2 (id=8519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r3, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r4, 0x40187014, &(0x7f0000000180)) 1.621188762s ago: executing program 4 (id=8520): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xe, 0x200, &(0x7f0000003c40)="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"}) r1 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x800313}, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000103}) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r6 = request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3, 0x14}, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) set_mempolicy(0x6005, &(0x7f00000001c0)=0x1003, 0x4) add_key(&(0x7f0000000080)='cifs.spnego\x00', 0x0, &(0x7f0000000700)="2016852cae5c48814a5b2e87e8f922cba21ad64b795ccd3795e369847800e8a5e5801d80b38b85e60ac13f4ccc016bff46e48af1916fb93a133a19d0db814c056c29297f189bf32ce2d971dee915dcb84e082d6280265918b6c8646f8e5a6936079dd0726fb5db5fbc5dab16d8c434063ab1840c7e511b369260944d06a4928db59ab455115f019951343ec4f23afe5640050481734b37a3b728f715de9f071f4344da7882a377328c3c764438a759b5e3b9d044e85ae18644611bdd20efcdec75e54c2e3d85ede1f2ee45ac85449ce6ad697471eb971d8b281a4ca068929a559579c30172bfb0f7b7db58d95631cbab40dac3", 0xf3, r6) r7 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) close_range(r7, r7, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xffffffff, 0x1, "346b00000000000045564cdc00", 0x0, 0x1002}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x3) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0xff03, 0x3c8, 0x1f8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private=0xa010100, @multicast1, 0xffffffff, 0xffffff00, 0x4, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, {[0xff, 0x0, 0x0, 0xff, 0x1fe]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x8, 0x0, 0x6, 0x3, 0x8, 0x1000, 'nr0\x00', 'vlan1\x00', {0xff}, {}, 0x0, 0x400}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@arp={@broadcast, @private=0xa010102, 0xff, 0x0, 0x8, 0xd, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x5, 0x9, 0xffff, 0x8, 0x65c, 'veth0_to_bond\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x488}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @remote, 0x4}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 0x0, 0x0, {@mac=@multicast, {[0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x9ee8, 0x4f, 0x4, 0xfff, 0x2, 0x1, 'veth0_to_batadv\x00', 'rose0\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r12, r12, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000900)={{{@in=@dev={0xac, 0x14, 0x14, 0x33}, @in=@multicast2, 0x4e22, 0x927, 0x4e22, 0x3, 0x2, 0x80, 0x80, 0x32, r11, r12}, {0x92, 0x6d18, 0x9, 0x3, 0x5, 0x8000000000000000, 0x7, 0x9}, {0x9, 0x4, 0x1, 0x8001}, 0xff2b, 0x8000, 0x1, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d2, 0x33}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x1, 0xd6, 0x1, 0x101, 0x3fd}}, 0xe8) 1.55652169s ago: executing program 4 (id=8521): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffefffffff7ffffc]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xbd7, &(0x7f0000000040)={0x0, 0xe14f, 0x8, 0x1, 0x4000032f, 0x0, r0}, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0xa, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/203, 0xcb}], 0x1}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8b19, &(0x7f0000000000)) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) 1.347727317s ago: executing program 1 (id=8522): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x3a, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @ib={0x1b, 0xc, 0x0, {"ce8d079e1906c21ee125ea8ad69f46af"}, 0x8, 0x10, 0x41f9}, @in6={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}, 0x118) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) 1.32503951s ago: executing program 3 (id=8523): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.231773442s ago: executing program 3 (id=8524): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r7, 0x29, 0x4d, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7d, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001d00000000001400", @ANYRES64=r8], 0x38}}, 0x0) 1.129274855s ago: executing program 1 (id=8525): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000007f6252dd42b6726c26700d30bd4a1788e0e5076364690496124d6714dbe8c1810519b9c0dfcc3e62972aa560cff80545b12558df5a887dbec936cc12cb525c6d0cfdf4280fe68a8695ece543741701c498083c6f12d8c2e9f6b2c45c819cd4379d1104a0a8f3d8a863ac80eaed43697990269aeb8272c8b5727374219da1a34704da02dd1dda4d950b8b3dd27f"], 0x8) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4004004, &(0x7f0000000180)={0xc9, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000080fedbdf250a8080"], 0x24}}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000180)=0x7f, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x8804) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x60, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x2000, 0x0, 0x0, 0x0, {0x0, 0x6, 0x0, 0x9, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x20}}, @void, @void, @void}}]]}, 0x60}}, 0x0) set_mempolicy(0x8000, &(0x7f00000001c0)=0x1003, 0x4) 1.09266083s ago: executing program 6 (id=8526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r1, &(0x7f0000032280)=""/102369, 0x18fe1, 0x200) 1.003528531s ago: executing program 1 (id=8527): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) fsopen(0x0, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r0, 0x2e, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket(0x2c, 0x1, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x1494) 917.261602ms ago: executing program 3 (id=8528): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESDEC], 0xffdd) 845.278342ms ago: executing program 6 (id=8529): socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400c004}, 0x20000016) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000740)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f00000000c0)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000000400)={r4, @in={{0x2, 0x4e23, @empty}}, 0x4000}, 0x90) 803.169847ms ago: executing program 2 (id=8530): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000100210d0000aaa8fa017242ba9380d424000000000000002900000005000000", 0xfe60) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a40003006272", @ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000140)={@multicast1=0x1c, @empty=0xe0000300, 0x1f, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) recvmsg$can_bcm(r5, &(0x7f0000000300)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/184, 0xb8}, {&(0x7f0000000340)=""/168, 0xa8}], 0x2, &(0x7f00000002c0)=""/9, 0x9}, 0x40002001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) ioprio_get$pid(0x2, 0x0) syz_clone3(&(0x7f0000000440)={0x31880000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f0000001700)}, 0x58) 800.537637ms ago: executing program 1 (id=8531): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xe, 0x200, &(0x7f0000003c40)="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"}) r1 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x800313}, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000103}) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r6 = request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3, 0x14}, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) set_mempolicy(0x6005, &(0x7f00000001c0)=0x1003, 0x4) add_key(&(0x7f0000000080)='cifs.spnego\x00', 0x0, &(0x7f0000000700)="2016852cae5c48814a5b2e87e8f922cba21ad64b795ccd3795e369847800e8a5e5801d80b38b85e60ac13f4ccc016bff46e48af1916fb93a133a19d0db814c056c29297f189bf32ce2d971dee915dcb84e082d6280265918b6c8646f8e5a6936079dd0726fb5db5fbc5dab16d8c434063ab1840c7e511b369260944d06a4928db59ab455115f019951343ec4f23afe5640050481734b37a3b728f715de9f071f4344da7882a377328c3c764438a759b5e3b9d044e85ae18644611bdd20efcdec75e54c2e3d85ede1f2ee45ac85449ce6ad697471eb971d8b281a4ca068929a559579c30172bfb0f7b7db58d95631cbab40dac3", 0xf3, r6) r7 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) close_range(r7, r7, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xffffffff, 0x1, "346b00000000000045564cdc00", 0x0, 0x1002}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x3) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0xff03, 0x3c8, 0x1f8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private=0xa010100, @multicast1, 0xffffffff, 0xffffff00, 0x4, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, {[0xff, 0x0, 0x0, 0xff, 0x1fe]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x8, 0x0, 0x6, 0x3, 0x8, 0x1000, 'nr0\x00', 'vlan1\x00', {0xff}, {}, 0x0, 0x400}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@arp={@broadcast, @private=0xa010102, 0xff, 0x0, 0x8, 0xd, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x5, 0x9, 0xffff, 0x8, 0x65c, 'veth0_to_bond\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x488}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @remote, 0x4}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 0x0, 0x0, {@mac=@multicast, {[0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x9ee8, 0x4f, 0x4, 0xfff, 0x2, 0x1, 'veth0_to_batadv\x00', 'rose0\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r12, r12, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000900)={{{@in=@dev={0xac, 0x14, 0x14, 0x33}, @in=@multicast2, 0x4e22, 0x927, 0x4e22, 0x3, 0x2, 0x80, 0x80, 0x32, r11, r12}, {0x92, 0x6d18, 0x9, 0x3, 0x5, 0x8000000000000000, 0x7, 0x9}, {0x9, 0x4, 0x1, 0x8001}, 0xff2b, 0x8000, 0x1, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d2, 0x33}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x1, 0xd6, 0x1, 0x101, 0x3fd}}, 0xe8) 524.863343ms ago: executing program 1 (id=8532): prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x1, {0xa, 0x4e22, 0x63b15430, @empty}}}, 0x3a) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) read$ptp(r2, &(0x7f0000001580)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000014c0)={[{@data_err_ignore}, {@quota}, {@sysvgroups}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@noinit_itable}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x57b, &(0x7f0000003280)="$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") syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x24}}, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) 241.210979ms ago: executing program 2 (id=8533): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x64}}, 0x0) 136.974903ms ago: executing program 2 (id=8534): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf251e00000010002f800c0002000202aaaaaaaaaaaa08000300", @ANYRES32=r2, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000891}, 0x20004044) r4 = socket$inet6(0xa, 0x3, 0x5) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x400, 0x1, 0xff, 0x1d, 0x0, 0x9}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x1, r7, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) io_uring_enter(r8, 0x27e2, 0x0, 0x0, 0x0, 0x0) dup3(r7, r6, 0x80000) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x33}, 0x0, 0x238, 0x258, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x7, {0x4}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x7, 0x69, 0x4, 0x0, 0x1000, 0x6, 0x3}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x450) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000", @ANYRES32=0x0, @ANYRES32], 0x50) r12 = socket$kcm(0x10, 0x2, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e0000000400000004000000020000000000", @ANYBLOB='\x00\x00\x00', @ANYRESHEX], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r13, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=8535): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="1a1023fdf989fa569d092a43e3326dddbcb4a5932c7afd440b95f760e6fa03496e8db8313f1f2e448b120bf8bcdf4bcbde2e6e0234b46f63b6a9808453dba04e8fd2b203a4371a6af730994bd772f87bfcc95bbce210349016605e91017ad467d24f1e806d04116e2d71dae8eea55dea94f0d711b3863d8007be5d2bf7cfc7f79249dc3a6d05e8050e3da6d126755619ac28244df3f721870a887c53ab43"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000001600)=""/254, 0xfe}, {&(0x7f0000000480)=""/36, 0x24}], 0x3}}], 0x1, 0x2, 0x0) kernel console output (not intermixed with test programs): tdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.267511][T14248] System zones: 0-2, 18-18, 34-35 [ 584.274484][T14248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.553321][ T7576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.581264][T14269] tmpfs: Cannot disable swap on remount [ 584.603910][T14290] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7999'. [ 584.612989][T14290] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7999'. [ 584.622101][T14290] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7999'. [ 584.840480][T14307] EXT4-fs: Ignoring removed bh option [ 584.859486][T14307] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 584.878565][T14308] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.8004: Failed to acquire dquot type 0 [ 584.878883][T14308] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 584.898870][T14307] EXT4-fs (loop3): 1 truncate cleaned up [ 584.899391][T14307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.912379][T14308] EXT4-fs (loop1): 1 truncate cleaned up [ 584.912831][T14308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.913087][ T29] kauditd_printk_skb: 1046 callbacks suppressed [ 584.913101][ T29] audit: type=1400 audit(2000002059.699:50774): avc: denied { setopt } for pid=14306 comm="syz.6.8005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 584.913131][ T29] audit: type=1400 audit(2000002059.699:50775): avc: denied { mount } for pid=14305 comm="syz.1.8004" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 584.914164][ T29] audit: type=1400 audit(2000002059.709:50776): avc: denied { read write } for pid=14305 comm="syz.1.8004" name="loop1" dev="devtmpfs" ino=1583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 584.914200][ T29] audit: type=1400 audit(2000002059.709:50777): avc: denied { open } for pid=14305 comm="syz.1.8004" path="/dev/loop1" dev="devtmpfs" ino=1583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 584.926829][ T29] audit: type=1400 audit(2000002059.720:50778): avc: denied { write } for pid=14300 comm="syz.2.8003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 584.935632][T14317] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8003'. [ 584.987462][ T29] audit: type=1400 audit(2000002059.783:50779): avc: denied { ioctl } for pid=14302 comm="syz.3.8002" path="/31/file0/file1" dev="loop3" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 585.016137][ T29] audit: type=1400 audit(2000002059.814:50780): avc: denied { recv } for pid=3309 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 585.016249][ T29] audit: type=1400 audit(2000002059.814:50781): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 585.041578][ T29] audit: type=1400 audit(2000002059.846:50782): avc: denied { map_create } for pid=14302 comm="syz.3.8002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 585.042296][ T29] audit: type=1400 audit(2000002059.846:50783): avc: denied { map_create } for pid=14302 comm="syz.3.8002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 585.307277][T14307] syzkaller0: entered promiscuous mode [ 585.307343][T14307] syzkaller0: entered allmulticast mode [ 585.323010][T14308] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.8004: Failed to acquire dquot type 0 [ 585.362701][T14308] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.8004: Failed to acquire dquot type 0 [ 585.393438][T27284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.422269][T14328] 9pnet_fd: Insufficient options for proto=fd [ 585.613890][T14329] netlink: 'syz.6.8007': attribute type 21 has an invalid length. [ 585.613911][T14329] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8007'. [ 585.638668][T12470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.989578][T14358] set_capacity_and_notify: 2 callbacks suppressed [ 585.989592][T14358] loop3: detected capacity change from 0 to 512 [ 586.067255][T14358] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 586.076043][T14358] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 586.132793][ T6363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.181480][T14358] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 44 vs 41 free clusters [ 586.225544][T14358] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.8012: Failed to acquire dquot type 1 [ 586.237230][T14358] EXT4-fs (loop3): 1 truncate cleaned up [ 586.249511][T14358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.288658][T14358] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.8012: iget: bad i_size value: 360287970189639690 [ 586.307194][T14337] loop6: detected capacity change from 0 to 512 [ 586.326100][T14337] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 586.335304][T14337] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 586.385168][T14337] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 586.403597][T14337] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 586.416655][T14337] System zones: 0-2, 18-18, 34-35 [ 586.429220][T14337] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.445303][T14342] lo speed is unknown, defaulting to 1000 [ 586.451573][T14342] vcan0 speed is unknown, defaulting to 1000 [ 586.507729][T12470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.763818][T27243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.922091][T14342] chnl_net:caif_netlink_parms(): no params data found [ 587.130489][T14342] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.137770][T14342] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.172359][T14342] bridge_slave_0: entered allmulticast mode [ 587.179046][T14342] bridge_slave_0: entered promiscuous mode [ 587.191840][T14342] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.199137][T14342] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.216937][T14342] bridge_slave_1: entered allmulticast mode [ 587.224602][T14342] bridge_slave_1: entered promiscuous mode [ 587.284961][T14342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.314637][T14342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.622015][T14342] team0: Port device team_slave_0 added [ 587.647202][T14342] team0: Port device team_slave_1 added [ 587.671212][T14342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.678255][T14342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.704255][T14342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.717930][T14342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.724959][T14342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.750964][T14342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.815608][T14342] hsr_slave_0: entered promiscuous mode [ 587.822268][T14342] hsr_slave_1: entered promiscuous mode [ 587.828140][T14342] debugfs: 'hsr0' already exists in 'hsr' [ 587.833961][T14342] Cannot create hsr debugfs directory [ 587.939056][T14342] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.982996][T14342] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.030602][T14342] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.135282][T14342] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.289561][T14342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 588.315774][T14342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 588.348927][T14342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 588.360537][T14693] loop2: detected capacity change from 0 to 512 [ 588.371413][T14342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 588.406899][T14693] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 588.416058][T14693] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 588.472107][T14693] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 588.510832][T14693] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 588.534595][T14693] System zones: 0-2, 18-18, 34-35 [ 588.549088][T14693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.810691][ T7576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.935679][T14342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.081320][T14342] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.204204][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.211341][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.250032][T14755] tmpfs: Cannot disable swap on remount [ 589.298526][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.305673][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.681308][ T29] kauditd_printk_skb: 1352 callbacks suppressed [ 589.681324][ T29] audit: type=1400 audit(2000002064.717:51984): avc: denied { search } for pid=14777 comm="sed" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 589.710052][ T29] audit: type=1400 audit(2000002064.717:51985): avc: denied { read } for pid=14777 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 589.749851][T14776] tipc: Enabling of bearer rejected, failed to enable media [ 589.849329][ T29] audit: type=1400 audit(2000002064.717:51986): avc: denied { read open } for pid=14777 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 589.874991][ T29] audit: type=1400 audit(2000002064.717:51987): avc: denied { getattr } for pid=14777 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 589.900594][ T29] audit: type=1400 audit(2000002064.780:51988): avc: denied { module_request } for pid=14342 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 589.922950][ T29] audit: type=1400 audit(2000002064.790:51989): avc: denied { prog_load } for pid=14778 comm="syz.3.8038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 589.942276][ T29] audit: type=1400 audit(2000002064.801:51990): avc: denied { bpf } for pid=14778 comm="syz.3.8038" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 589.963024][ T29] audit: type=1400 audit(2000002064.801:51991): avc: denied { recv } for pid=14778 comm="syz.3.8038" saddr=172.20.20.170 src=20001 daddr=172.20.20.170 dest=36572 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 589.988821][ T29] audit: type=1400 audit(2000002064.832:51992): avc: denied { read write } for pid=7576 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 590.013143][ T29] audit: type=1400 audit(2000002064.832:51993): avc: denied { open } for pid=7576 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 590.219823][T14342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.611850][T14342] veth0_vlan: entered promiscuous mode [ 590.651578][T14342] veth1_vlan: entered promiscuous mode [ 590.689732][T14829] netlink: 'syz.2.8047': attribute type 1 has an invalid length. [ 590.758856][T14857] macvlan0: entered promiscuous mode [ 590.764319][T14857] macvlan0: entered allmulticast mode [ 590.820529][T14857] bond1: entered promiscuous mode [ 590.837536][T14857] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 590.871474][T14857] bond1: left promiscuous mode [ 590.911023][T14342] veth0_macvtap: entered promiscuous mode [ 590.921684][T14342] veth1_macvtap: entered promiscuous mode [ 590.951309][T14342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.023578][T14342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.057139][T14875] loop3: detected capacity change from 0 to 512 [ 591.074543][T14875] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 591.107475][T14875] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 591.118373][ T7410] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.147209][T14875] System zones: 1-12 [ 591.171312][ T7410] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.183622][T14875] EXT4-fs (loop3): 1 truncate cleaned up [ 591.208397][T14875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.221583][ T7410] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.236164][T14638] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.285589][T14875] EXT4-fs warning (device loop3): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 591.307306][T14875] EXT4-fs warning (device loop3): ext4_group_extend:1891: can't read last block, resize aborted [ 591.348061][T12470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.910107][T14894] tmpfs: Cannot disable swap on remount [ 592.057424][T14911] FAULT_INJECTION: forcing a failure. [ 592.057424][T14911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.070643][T14911] CPU: 0 UID: 0 PID: 14911 Comm: syz.3.8057 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 592.070680][T14911] Tainted: [W]=WARN [ 592.070688][T14911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.070701][T14911] Call Trace: [ 592.070714][T14911] [ 592.070722][T14911] __dump_stack+0x1d/0x30 [ 592.070762][T14911] dump_stack_lvl+0x95/0xd0 [ 592.070787][T14911] dump_stack+0x15/0x1b [ 592.070864][T14911] should_fail_ex+0x263/0x280 [ 592.070905][T14911] should_fail+0xb/0x20 [ 592.070930][T14911] should_fail_usercopy+0x1a/0x20 [ 592.070961][T14911] _copy_to_iter+0xd2/0xea0 [ 592.070998][T14911] ? sk_msg_recvmsg+0x820/0x900 [ 592.071040][T14911] ? __slab_free+0x284/0x290 [ 592.071083][T14911] copy_page_to_iter+0x18f/0x2d0 [ 592.071251][T14911] sk_msg_recvmsg+0x1e4/0x900 [ 592.071287][T14911] unix_bpf_recvmsg+0x2cc/0x7c0 [ 592.071374][T14911] unix_stream_recvmsg+0xeb/0x130 [ 592.071492][T14911] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 592.071534][T14911] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 592.071573][T14911] sock_recvmsg+0x139/0x160 [ 592.071671][T14911] ____sys_recvmsg+0xf5/0x280 [ 592.071718][T14911] ___sys_recvmsg+0x11f/0x3b0 [ 592.071768][T14911] __x64_sys_recvmsg+0xd1/0x160 [ 592.071836][T14911] x64_sys_call+0x2cbf/0x3000 [ 592.071863][T14911] do_syscall_64+0xc0/0x2a0 [ 592.071894][T14911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.071916][T14911] RIP: 0033:0x7fb35f08acb9 [ 592.071936][T14911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.071956][T14911] RSP: 002b:00007fb35dae7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 592.072122][T14911] RAX: ffffffffffffffda RBX: 00007fb35f305fa0 RCX: 00007fb35f08acb9 [ 592.072136][T14911] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 592.072187][T14911] RBP: 00007fb35dae7090 R08: 0000000000000000 R09: 0000000000000000 [ 592.072203][T14911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.072219][T14911] R13: 00007fb35f306038 R14: 00007fb35f305fa0 R15: 00007ffda60f8fa8 [ 592.072257][T14911] [ 592.440849][T14922] loop6: detected capacity change from 0 to 128 [ 592.539995][T14936] loop1: detected capacity change from 0 to 512 [ 592.600522][T14936] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8063: bg 0: block 393: padding at end of block bitmap is not set [ 592.670643][T14936] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 592.692880][T14936] EXT4-fs (loop1): 2 truncates cleaned up [ 592.711361][T14936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.893333][T14342] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.110359][T14972] loop6: detected capacity change from 0 to 1024 [ 593.197882][T14972] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.218164][T14962] tmpfs: Cannot disable swap on remount [ 593.300059][T27243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.645107][T14990] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8073'. [ 593.772209][T14993] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8075'. [ 593.775227][T14990] loop6: detected capacity change from 0 to 764 [ 594.106638][T15008] SELinux: policydb magic number 0x67632f2e does not match expected magic number 0xf97cff8c [ 594.119638][T15008] SELinux: failed to load policy [ 594.151979][T15015] loop3: detected capacity change from 0 to 1024 [ 594.219906][T15015] EXT4-fs: Ignoring removed orlov option [ 594.263444][T15015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.335773][T15033] loop1: detected capacity change from 0 to 1024 [ 594.364752][T15015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8080'. [ 594.441339][T15033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.474015][ T29] kauditd_printk_skb: 1430 callbacks suppressed [ 594.474040][ T29] audit: type=1400 audit(2000002069.714:53169): avc: denied { read write } for pid=27243 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 594.504949][ T29] audit: type=1400 audit(2000002069.714:53170): avc: denied { open } for pid=27243 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 594.529661][ T29] audit: type=1400 audit(2000002069.735:53171): avc: denied { recv } for pid=3308 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 594.555556][ T29] audit: type=1400 audit(2000002069.735:53172): avc: denied { recv } for pid=3308 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 594.581270][ T29] audit: type=1400 audit(2000002069.745:53173): avc: denied { ioctl } for pid=27243 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 594.666697][ T29] audit: type=1400 audit(2000002069.840:53174): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 594.690367][ T29] audit: type=1400 audit(2000002069.840:53175): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 594.714232][ T29] audit: type=1400 audit(2000002069.892:53176): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 594.739466][ T29] audit: type=1400 audit(2000002069.903:53177): avc: denied { mount } for pid=15031 comm="syz.1.8083" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 594.761445][ T29] audit: type=1400 audit(2000002069.903:53178): avc: denied { read write } for pid=15031 comm="syz.1.8083" name="loop1" dev="devtmpfs" ino=1583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 594.822317][T14342] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.942344][T12470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.187232][T15062] loop4: detected capacity change from 0 to 1764 [ 595.217621][T15065] loop3: detected capacity change from 0 to 256 [ 595.230100][T15062] iso9660: Unknown parameter 'gie' [ 595.261822][T15065] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000ÿÿÿÿÿÿÿÿ' [ 595.803322][T15095] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8095'. [ 595.857521][T15098] loop6: detected capacity change from 0 to 512 [ 595.896474][T15098] EXT4-fs: Ignoring removed bh option [ 595.896997][T15098] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 595.944006][T15098] EXT4-fs (loop6): 1 truncate cleaned up [ 595.946323][T15098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.041562][T15108] loop4: detected capacity change from 0 to 1024 [ 596.060990][T15108] EXT4-fs: Ignoring removed orlov option [ 596.105722][T15108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.170438][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8099'. [ 596.194586][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8099'. [ 596.250725][T15120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8100'. [ 596.302080][T15098] syzkaller0: entered promiscuous mode [ 596.307627][T15098] syzkaller0: entered allmulticast mode [ 596.322874][T15120] loop3: detected capacity change from 0 to 512 [ 596.342339][T15120] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 596.383869][T15120] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.8100: corrupted in-inode xattr: e_value out of bounds [ 596.389556][T15120] EXT4-fs (loop3): Remounting filesystem read-only [ 596.392322][T15120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.424880][ T6363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.476952][T27243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.582137][T15144] loop4: detected capacity change from 0 to 256 [ 596.589999][T15144] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 596.607075][T15144] FAT-fs (loop4): Directory bread(block 64) failed [ 596.607103][T15144] FAT-fs (loop4): Directory bread(block 65) failed [ 596.607198][T15144] FAT-fs (loop4): Directory bread(block 66) failed [ 596.607247][T15144] FAT-fs (loop4): Directory bread(block 67) failed [ 596.607269][T15144] FAT-fs (loop4): Directory bread(block 68) failed [ 596.607286][T15144] FAT-fs (loop4): Directory bread(block 69) failed [ 596.607307][T15144] FAT-fs (loop4): Directory bread(block 70) failed [ 596.607328][T15144] FAT-fs (loop4): Directory bread(block 71) failed [ 596.607435][T15144] FAT-fs (loop4): Directory bread(block 72) failed [ 596.607456][T15144] FAT-fs (loop4): Directory bread(block 73) failed [ 596.710249][T15147] loop6: detected capacity change from 0 to 1024 [ 596.758923][T15147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.823641][T27243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.050731][T12470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.118456][T15165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8106'. [ 597.353694][T15176] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8109'. [ 597.452883][T15158] tmpfs: Cannot disable swap on remount [ 597.738393][T15196] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8116'. [ 598.223540][T15219] loop1: detected capacity change from 0 to 1024 [ 598.252795][T15219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.300658][T15213] netlink: 'syz.2.8111': attribute type 1 has an invalid length. [ 598.421435][T14342] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.152456][T15244] tmpfs: Cannot disable swap on remount [ 599.249171][ T29] kauditd_printk_skb: 1138 callbacks suppressed [ 599.249187][ T29] audit: type=1400 audit(2000002074.753:54317): avc: denied { read write } for pid=27243 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.280103][ T29] audit: type=1400 audit(2000002074.753:54318): avc: denied { open } for pid=27243 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.381494][T15269] loop3: detected capacity change from 0 to 1024 [ 599.389977][ T29] audit: type=1400 audit(2000002074.795:54319): avc: denied { ioctl } for pid=27243 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.415834][ T29] audit: type=1400 audit(2000002074.816:54320): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 599.440937][ T29] audit: type=1400 audit(2000002074.816:54321): avc: denied { recv } for pid=3313 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 599.466126][ T29] audit: type=1400 audit(2000002074.816:54322): avc: denied { recv } for pid=3313 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 599.491403][ T29] audit: type=1400 audit(2000002074.826:54323): avc: denied { read write } for pid=12470 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.515866][ T29] audit: type=1400 audit(2000002074.826:54324): avc: denied { open } for pid=12470 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.540197][ T29] audit: type=1400 audit(2000002074.826:54325): avc: denied { ioctl } for pid=12470 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.566002][ T29] audit: type=1400 audit(2000002074.847:54326): avc: denied { create } for pid=15264 comm="syz.3.8131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 599.654212][T15267] geneve3: entered promiscuous mode [ 599.662516][T15267] geneve3: entered allmulticast mode [ 599.670890][T15269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.706620][T15272] geneve3: entered promiscuous mode [ 599.712024][T15272] geneve3: entered allmulticast mode [ 599.758411][T15287] loop1: detected capacity change from 0 to 512 [ 600.012996][T12470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.035981][T15310] __nla_validate_parse: 2 callbacks suppressed [ 600.036000][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8136'. [ 600.511328][T15336] netlink: 'syz.6.8144': attribute type 1 has an invalid length. [ 600.776432][T15377] FAULT_INJECTION: forcing a failure. [ 600.776432][T15377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.789574][T15377] CPU: 0 UID: 0 PID: 15377 Comm: syz.2.8145 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 600.789672][T15377] Tainted: [W]=WARN [ 600.789680][T15377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 600.789696][T15377] Call Trace: [ 600.789704][T15377] [ 600.789712][T15377] __dump_stack+0x1d/0x30 [ 600.789742][T15377] dump_stack_lvl+0x95/0xd0 [ 600.789806][T15377] dump_stack+0x15/0x1b [ 600.789825][T15377] should_fail_ex+0x263/0x280 [ 600.789852][T15377] should_fail+0xb/0x20 [ 600.789932][T15377] should_fail_usercopy+0x1a/0x20 [ 600.789957][T15377] _copy_to_user+0x20/0xa0 [ 600.789989][T15377] bpf_test_finish+0x34d/0x500 [ 600.790028][T15377] bpf_prog_test_run_skb+0xcb1/0xf50 [ 600.790142][T15377] ? __fget_files+0x184/0x1c0 [ 600.790224][T15377] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 600.790254][T15377] bpf_prog_test_run+0x204/0x340 [ 600.790280][T15377] __sys_bpf+0x4c0/0x7b0 [ 600.790393][T15377] __x64_sys_bpf+0x41/0x50 [ 600.790502][T15377] x64_sys_call+0x28e1/0x3000 [ 600.790536][T15377] do_syscall_64+0xc0/0x2a0 [ 600.790636][T15377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.790705][T15377] RIP: 0033:0x7f1e3ea9acb9 [ 600.790724][T15377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.790743][T15377] RSP: 002b:00007f1e3d4f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 600.790761][T15377] RAX: ffffffffffffffda RBX: 00007f1e3ed15fa0 RCX: 00007f1e3ea9acb9 [ 600.790783][T15377] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 600.790798][T15377] RBP: 00007f1e3d4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 600.790813][T15377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.790829][T15377] R13: 00007f1e3ed16038 R14: 00007f1e3ed15fa0 R15: 00007ffe70f4fd48 [ 600.790851][T15377] [ 600.866801][T15381] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8145'. [ 601.204890][T15391] loop4: detected capacity change from 0 to 1024 [ 601.214259][T15397] ip6t_srh: unknown srh invflags 4000 [ 601.248576][T15396] loop2: detected capacity change from 0 to 512 [ 601.267052][T15391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.338520][T15396] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.8151: corrupted inode contents [ 601.375138][T15407] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.426521][T15396] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 601.449815][T15407] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.497838][T15396] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.8151: corrupted inode contents [ 601.512961][T15396] EXT4-fs error (device loop2): ext4_evict_inode:301: inode #15: comm syz.2.8151: mark_inode_dirty error [ 601.543952][T15396] EXT4-fs (loop2): 1 orphan inode deleted [ 601.560272][T15407] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.561391][T15396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.636957][T15396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8151'. [ 601.647417][T15396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8151'. [ 601.668005][T15407] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.734767][ T6363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.766454][T15396] lo speed is unknown, defaulting to 1000 [ 601.797981][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.818291][T15396] vcan0 speed is unknown, defaulting to 1000 [ 601.872369][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.910854][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.974069][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.210385][ T7576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.280129][T15475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8157'. [ 602.387667][T15477] loop4: detected capacity change from 0 to 1024 [ 602.418030][T15477] EXT4-fs: Ignoring removed orlov option [ 602.482186][T15477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.544774][T15477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8158'. [ 602.583759][T15490] loop2: detected capacity change from 0 to 256 [ 602.595034][T15477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8158'. [ 602.599281][T15490] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 602.633872][T15490] FAT-fs (loop2): Directory bread(block 64) failed [ 602.640567][T15490] FAT-fs (loop2): Directory bread(block 65) failed [ 602.647396][T15490] FAT-fs (loop2): Directory bread(block 66) failed [ 602.654435][T15490] FAT-fs (loop2): Directory bread(block 67) failed [ 602.661446][T15490] FAT-fs (loop2): Directory bread(block 68) failed [ 602.668066][T15490] FAT-fs (loop2): Directory bread(block 69) failed [ 602.674768][T15490] FAT-fs (loop2): Directory bread(block 70) failed [ 602.681654][T15490] FAT-fs (loop2): Directory bread(block 71) failed [ 602.692738][T15490] FAT-fs (loop2): Directory bread(block 72) failed [ 602.744469][T15492] lo speed is unknown, defaulting to 1000 [ 602.746034][T15490] FAT-fs (loop2): Directory bread(block 73) failed [ 602.768500][T15492] vcan0 speed is unknown, defaulting to 1000 [ 603.052919][T15513] loop6: detected capacity change from 0 to 1024 [ 603.053669][T15507] geneve2: entered promiscuous mode [ 603.111319][T15513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.227354][T27243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.249677][T15535] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8164'. [ 603.351067][T15535] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8164'. [ 603.389977][ T6363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.564391][T15552] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8169'. [ 604.028577][ T29] kauditd_printk_skb: 744 callbacks suppressed [ 604.028638][ T29] audit: type=1400 audit(2000002079.771:55071): avc: denied { bind } for pid=15569 comm="syz.4.8173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 604.151016][ T29] audit: type=1400 audit(2000002079.823:55072): avc: denied { allowed } for pid=15569 comm="syz.4.8173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 604.170611][ T29] audit: type=1400 audit(2000002079.823:55073): avc: denied { create } for pid=15569 comm="syz.4.8173" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 604.192423][ T29] audit: type=1400 audit(2000002079.823:55074): avc: denied { map } for pid=15569 comm="syz.4.8173" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=111950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 604.216939][ T29] audit: type=1400 audit(2000002079.823:55075): avc: denied { read write } for pid=15569 comm="syz.4.8173" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=111950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 604.242125][ T29] audit: type=1400 audit(2000002079.834:55076): avc: denied { read } for pid=15569 comm="syz.4.8173" path="socket:[111945]" dev="sockfs" ino=111945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 604.266059][ T29] audit: type=1400 audit(2000002079.844:55077): avc: denied { open } for pid=15574 comm="syz.6.8174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 604.285525][ T29] audit: type=1400 audit(2000002079.844:55078): avc: denied { perfmon } for pid=15574 comm="syz.6.8174" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 604.306593][ T29] audit: type=1400 audit(2000002079.844:55079): avc: denied { recv } for pid=15574 comm="syz.6.8174" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 604.332241][ T29] audit: type=1400 audit(2000002079.844:55080): avc: denied { create } for pid=15574 comm="syz.6.8174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 604.467173][T15580] loop6: detected capacity change from 0 to 1024 [ 604.637205][T15580] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.021328][T27243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.098398][T15608] __nla_validate_parse: 1 callbacks suppressed [ 605.098484][T15608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8180'. [ 605.117505][T15609] loop3: detected capacity change from 0 to 512 [ 605.125694][T15609] EXT4-fs: Ignoring removed bh option [ 605.133107][T15609] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 605.155160][T15614] program syz.4.8180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 605.169259][T15608] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8180'. [ 605.181382][T15609] EXT4-fs (loop3): 1 truncate cleaned up [ 605.194147][T15609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.242560][ C1] sd 0:0:1:0: [sda] tag#3855 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 605.253064][ C1] sd 0:0:1:0: [sda] tag#3855 CDB: Read(10) 28 08 f9 9a 33 64 0a 01 [ 605.269305][T15609] syzkaller0: entered promiscuous mode [ 605.275016][T15609] syzkaller0: entered allmulticast mode [ 605.297424][T15621] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8181'. [ 605.420401][T12470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.695787][T15652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8188'. [ 605.802309][T15661] loop1: detected capacity change from 0 to 1024 [ 605.903522][T15661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.994099][T15678] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8195'. [ 606.050250][T15679] loop3: detected capacity change from 0 to 512 [ 606.109500][T15679] EXT4-fs: Ignoring removed bh option [ 606.135772][T15679] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 606.156967][T15679] EXT4-fs (loop3): 1 truncate cleaned up [ 606.157608][T15679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.292056][T14342] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.343284][T15679] syzkaller0: entered promiscuous mode [ 606.349696][T15679] syzkaller0: entered allmulticast mode [ 606.735289][T12470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.964527][T15704] loop6: detected capacity change from 0 to 512 [ 607.501932][T15754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8210'. [ 607.507129][T15751] loop6: detected capacity change from 0 to 1024 [ 607.615235][T15751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.721668][T15766] loop1: detected capacity change from 0 to 1024 [ 607.729698][T15766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 607.755761][T27243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.776085][T15766] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 607.784324][T15766] System zones: 0-1, 3-36 [ 607.791441][T15766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.914682][T15773] loop3: detected capacity change from 0 to 2048 [ 607.959113][T15783] 9p: Bad value for 'rfdno' [ 607.966290][T15773] loop3: p3 p4 < > [ 607.970241][T15773] loop3: p3 size 861184 extends beyond EOD, truncated [ 607.999247][T14342] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.089735][T15773] lo speed is unknown, defaulting to 1000 [ 608.095839][T15773] vcan0 speed is unknown, defaulting to 1000 [ 608.291020][T15806] tmpfs: Bad value for 'mpol' [ 608.349178][T15806] loop1: detected capacity change from 0 to 128 [ 608.404201][T15806] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 608.451767][T15806] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.465949][T15806] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 608.546799][T15790] loop4: detected capacity change from 0 to 512 [ 608.599540][T15790] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 608.608731][T15790] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 608.691179][T15790] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 608.711634][T15790] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 608.732419][T15790] System zones: 0-2, 18-18, 34-35 [ 608.738180][T15790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.796294][ T29] kauditd_printk_skb: 1048 callbacks suppressed [ 608.796325][ T29] audit: type=1400 audit(2000002084.778:56129): avc: denied { create } for pid=15842 comm="syz.1.8223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 608.904527][ T29] audit: type=1400 audit(2000002084.799:56130): avc: denied { recv } for pid=17914 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 608.929755][ T29] audit: type=1400 audit(2000002084.799:56131): avc: denied { recv } for pid=17914 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 608.954953][ T29] audit: type=1400 audit(2000002084.799:56132): avc: denied { recv } for pid=17914 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 608.980336][ T29] audit: type=1400 audit(2000002084.799:56133): avc: denied { recv } for pid=17914 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 609.005524][ T29] audit: type=1400 audit(2000002084.799:56134): avc: denied { read write } for pid=27243 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 609.029974][ T29] audit: type=1400 audit(2000002084.810:56135): avc: denied { open } for pid=27243 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 609.054340][ T29] audit: type=1400 audit(2000002084.810:56136): avc: denied { ioctl } for pid=27243 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 609.080201][ T29] audit: type=1400 audit(2000002084.810:56137): avc: denied { open } for pid=15833 comm="syz.2.8221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 609.099698][ T29] audit: type=1400 audit(2000002084.810:56138): avc: denied { perfmon } for pid=15833 comm="syz.2.8221" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 609.241337][ T6363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.265586][T15866] loop3: detected capacity change from 0 to 1024 [ 609.310239][T15866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.640299][T15889] netlink: 'syz.4.8230': attribute type 4 has an invalid length. [ 609.648108][T15889] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8230'. [ 609.662258][T15890] hub 6-0:1.0: USB hub found [ 609.693116][T12470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.702345][T15890] hub 6-0:1.0: 8 ports detected [ 610.078815][T15906] loop2: detected capacity change from 0 to 8192 [ 610.177038][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8237'. [ 610.274087][T15928] loop6: detected capacity change from 0 to 764 [ 610.300101][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8237'. [ 610.323695][T15928] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 610.378160][T15935] EXT4-fs: Ignoring removed nomblk_io_submit option [ 610.424088][T15935] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 610.496256][T15935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.560456][T15935] bridge0: entered promiscuous mode [ 610.655440][ T7576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.740217][T15953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.981690][T14342] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.145704][T15978] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8246'. [ 611.381262][T15971] lo speed is unknown, defaulting to 1000 [ 611.387638][T15971] vcan0 speed is unknown, defaulting to 1000 [ 611.509545][T15971] chnl_net:caif_netlink_parms(): no params data found [ 611.563858][T15971] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.571070][T15971] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.579460][T15971] bridge_slave_0: entered allmulticast mode [ 611.586263][T15971] bridge_slave_0: entered promiscuous mode [ 611.594562][T15971] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.602365][T15971] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.643292][T15971] bridge_slave_1: entered allmulticast mode [ 611.659672][T15971] bridge_slave_1: entered promiscuous mode [ 611.778447][T15971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.811380][T15971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.888174][T15971] team0: Port device team_slave_0 added [ 611.902398][T15971] team0: Port device team_slave_1 added [ 612.011599][T15971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.018643][T15971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.044620][T15971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.161935][T15971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.169042][T15971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.195571][T15971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.359304][T15971] hsr_slave_0: entered promiscuous mode [ 612.383425][T15971] hsr_slave_1: entered promiscuous mode [ 612.405997][T15971] debugfs: 'hsr0' already exists in 'hsr' [ 612.411864][T15971] Cannot create hsr debugfs directory [ 612.422835][T16199] set_capacity_and_notify: 2 callbacks suppressed [ 612.422850][T16199] loop2: detected capacity change from 0 to 1024 [ 612.482313][T16199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.662962][ T7576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.765079][T16260] loop2: detected capacity change from 0 to 1024 [ 612.797621][T16260] EXT4-fs: Ignoring removed orlov option [ 612.845695][T16260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.864284][T15971] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.874147][T15971] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.978505][T15971] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.988385][T15971] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.019348][T16260] lo speed is unknown, defaulting to 1000 [ 613.055727][T16260] vcan0 speed is unknown, defaulting to 1000 [ 613.064161][T15971] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.074076][T15971] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.159904][T15971] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.169766][T15971] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.197445][T16297] loop1: detected capacity change from 0 to 512 [ 613.332290][T16302] loop3: detected capacity change from 0 to 512 [ 613.374342][T16302] EXT4-fs: Ignoring removed nobh option [ 613.428045][T15971] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 613.450213][T16302] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 613.466343][T15971] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 613.485865][T15971] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 613.490830][T16302] System zones: 1-12 [ 613.504023][T15971] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 613.520648][T16302] EXT4-fs (loop3): orphan cleanup on readonly fs [ 613.540612][T16302] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 613.571194][ T29] kauditd_printk_skb: 669 callbacks suppressed [ 613.571212][ T29] audit: type=1326 audit(2000002089.786:56808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16346 comm="syz.1.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f28f1d4acb9 code=0x7ffc0000 [ 613.601171][ T29] audit: type=1326 audit(2000002089.786:56809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16346 comm="syz.1.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f1d4acb9 code=0x7ffc0000 [ 613.624853][ T29] audit: type=1400 audit(2000002089.797:56810): avc: denied { read } for pid=15971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 613.645944][ T29] audit: type=1400 audit(2000002089.797:56811): avc: denied { write } for pid=15971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 613.647356][T16302] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.8261: corrupted inode contents [ 613.749543][ T29] audit: type=1400 audit(2000002089.807:56812): avc: denied { create } for pid=16347 comm="syz.4.8258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 613.769668][ T29] audit: type=1400 audit(2000002089.807:56813): avc: denied { setopt } for pid=16347 comm="syz.4.8258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 613.789584][ T29] audit: type=1400 audit(2000002089.828:56814): avc: denied { map } for pid=16347 comm="syz.4.8258" path="socket:[112912]" dev="sockfs" ino=112912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 613.813341][ T29] audit: type=1400 audit(2000002089.828:56815): avc: denied { read write accept } for pid=16347 comm="syz.4.8258" path="socket:[112912]" dev="sockfs" ino=112912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 613.820689][T16302] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.8261: mark_inode_dirty error [ 613.838257][ T29] audit: type=1400 audit(2000002089.880:56816): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 613.838294][ T29] audit: type=1400 audit(2000002089.880:56817): avc: denied { create } for pid=16347 comm="syz.4.8258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 613.918619][T16302] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.8261: corrupted inode contents [ 613.931608][T16302] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.8261: mark_inode_dirty error [ 613.952908][T16302] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.8261: mark inode dirty (error -117) [ 614.011035][ T7576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.023427][T16302] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 614.108112][T16302] EXT4-fs (loop3): 1 orphan inode deleted [ 614.152087][T16302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 614.168369][T15971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.190065][T16370] loop4: detected capacity change from 0 to 1024 [ 614.242546][T16370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.293724][T15971] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.313983][T12470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.332246][ T7408] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.339434][ T7408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.445599][ T7408] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.452746][ T7408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.711888][ T6363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.037577][T15971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.717494][T16433] loop4: detected capacity change from 0 to 512 [ 615.782453][T16433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.785546][T16440] loop2: detected capacity change from 0 to 1024 [ 615.838011][T16440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.916543][T16433] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.182663][T15971] veth0_vlan: entered promiscuous mode [ 616.216852][T16420] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 616.254416][T16463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.261902][T16463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.290390][ T7576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.323918][T16420] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 616.324322][T16463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.336218][T16420] EXT4-fs (loop4): This should not happen!! Data will be lost [ 616.336218][T16420] [ 616.336240][T16420] EXT4-fs (loop4): Total free blocks count 0 [ 616.343709][T16463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.353492][T16420] EXT4-fs (loop4): Free/Dirty block details [ 616.372468][T16420] EXT4-fs (loop4): free_blocks=65280 [ 616.377832][T16420] EXT4-fs (loop4): dirty_blocks=2 [ 616.382946][T16420] EXT4-fs (loop4): Block reservation details [ 616.389141][T16420] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 616.405786][T16433] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 28 [ 616.467268][T16456] delete_channel: no stack [ 616.499971][T15971] veth1_vlan: entered promiscuous mode [ 616.607342][T16453] delete_channel: no stack [ 616.669124][T15971] veth0_macvtap: entered promiscuous mode [ 616.712900][T15971] veth1_macvtap: entered promiscuous mode [ 616.740614][T16484] FAULT_INJECTION: forcing a failure. [ 616.740614][T16484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.753770][T16484] CPU: 1 UID: 0 PID: 16484 Comm: syz.4.8286 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 616.753807][T16484] Tainted: [W]=WARN [ 616.753816][T16484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 616.753830][T16484] Call Trace: [ 616.753871][T16484] [ 616.753881][T16484] __dump_stack+0x1d/0x30 [ 616.753926][T16484] dump_stack_lvl+0x95/0xd0 [ 616.753960][T16484] dump_stack+0x15/0x1b [ 616.753980][T16484] should_fail_ex+0x263/0x280 [ 616.754018][T16484] should_fail+0xb/0x20 [ 616.754044][T16484] should_fail_usercopy+0x1a/0x20 [ 616.754077][T16484] _copy_to_user+0x20/0xa0 [ 616.754152][T16484] simple_read_from_buffer+0xb5/0x130 [ 616.754191][T16484] proc_fail_nth_read+0x10e/0x150 [ 616.754228][T16484] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 616.754300][T16484] vfs_read+0x1ab/0x7f0 [ 616.754340][T16484] ? __sys_bpf+0x50f/0x7b0 [ 616.754370][T16484] ksys_read+0xdc/0x1a0 [ 616.754398][T16484] __x64_sys_read+0x40/0x50 [ 616.754417][T16484] x64_sys_call+0x2889/0x3000 [ 616.754513][T16484] do_syscall_64+0xc0/0x2a0 [ 616.754546][T16484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.754573][T16484] RIP: 0033:0x7fd72adeb58e [ 616.754594][T16484] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 616.754614][T16484] RSP: 002b:00007fd729886fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 616.754717][T16484] RAX: ffffffffffffffda RBX: 00007fd7298876c0 RCX: 00007fd72adeb58e [ 616.754730][T16484] RDX: 000000000000000f RSI: 00007fd7298870a0 RDI: 0000000000000004 [ 616.754742][T16484] RBP: 00007fd729887090 R08: 0000000000000000 R09: 0000000000000000 [ 616.754754][T16484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.754766][T16484] R13: 00007fd72b0a6038 R14: 00007fd72b0a5fa0 R15: 00007ffd82c56df8 [ 616.754789][T16484] [ 616.843907][T15971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.984086][T16491] loop2: detected capacity change from 0 to 512 [ 616.999344][T16491] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 617.006787][T15971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.008606][T16491] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 617.094195][ T7410] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.104447][ T7410] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.114215][T16491] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 617.137130][ T7410] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.146033][T16491] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 617.154962][T16491] System zones: 0-2, 18-18, 34-35 [ 617.161287][ T7410] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.175610][T16491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.179196][T16506] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8290'. [ 617.451578][ T7576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.518175][T16518] loop1: detected capacity change from 0 to 1024 [ 617.556990][T16524] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.566859][T16524] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.589649][T16518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.614488][T16526] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.655364][T16524] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.665325][T16524] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.724494][T16526] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.768741][T16524] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.778676][T16524] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.888521][T16526] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.910683][T14342] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.947267][T16524] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.957162][T16524] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.033981][T16526] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.132192][T32505] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.140603][T32505] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.161385][T16560] loop1: detected capacity change from 0 to 1024 [ 618.206924][ T407] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.215209][ T407] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.240110][T16567] loop3: detected capacity change from 0 to 512 [ 618.249258][ T2590] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.257622][ T2590] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.316829][ T2590] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.317162][T16567] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 618.325457][ T2590] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.347164][ T2590] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.388138][ T29] kauditd_printk_skb: 1102 callbacks suppressed [ 618.388156][ T29] audit: type=1400 audit(2000002094.857:57875): avc: denied { module_request } for pid=16583 comm="syz.4.8300" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 618.416711][T32505] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.444453][ T407] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.462149][ T407] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.481468][T16567] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 618.520815][ T29] audit: type=1400 audit(2000002094.857:57876): avc: denied { unmount } for pid=14342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 618.540757][ T29] audit: type=1400 audit(2000002094.909:57877): avc: denied { recv } for pid=3309 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 618.566484][ T29] audit: type=1400 audit(2000002094.909:57878): avc: denied { recv } for pid=3309 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 618.592342][ T29] audit: type=1400 audit(2000002094.909:57879): avc: denied { recv } for pid=3309 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 618.617476][ T29] audit: type=1400 audit(2000002094.941:57880): avc: denied { read write } for pid=14342 comm="syz-executor" name="loop1" dev="devtmpfs" ino=1583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 618.618897][T16597] netlink: 664 bytes leftover after parsing attributes in process `syz.3.8299'. [ 618.643856][ T29] audit: type=1400 audit(2000002094.941:57881): avc: denied { open } for pid=14342 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=1583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 618.675875][ T29] audit: type=1400 audit(2000002094.941:57882): avc: denied { ioctl } for pid=14342 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=1583 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 618.701736][ T29] audit: type=1400 audit(2000002094.941:57883): avc: denied { mount } for pid=16566 comm="syz.3.8299" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 618.723604][ T29] audit: type=1400 audit(2000002094.972:57884): avc: denied { prog_load } for pid=16583 comm="syz.4.8300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 618.807414][T16607] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8301'. [ 618.861852][T16608] loop2: detected capacity change from 0 to 512 [ 618.904829][T16608] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 618.914038][T16608] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 619.018042][T16608] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 619.030485][T16616] netlink: 'syz.1.8304': attribute type 13 has an invalid length. [ 619.075880][T16608] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 619.084108][T16608] System zones: 0-2, 18-18, 34-35 [ 619.094188][T16616] FAULT_INJECTION: forcing a failure. [ 619.094188][T16616] name failslab, interval 1, probability 0, space 0, times 0 [ 619.106990][T16616] CPU: 1 UID: 0 PID: 16616 Comm: syz.1.8304 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 619.107022][T16616] Tainted: [W]=WARN [ 619.107029][T16616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.107085][T16616] Call Trace: [ 619.107094][T16616] [ 619.107104][T16616] __dump_stack+0x1d/0x30 [ 619.107134][T16616] dump_stack_lvl+0x95/0xd0 [ 619.107233][T16616] dump_stack+0x15/0x1b [ 619.107255][T16616] should_fail_ex+0x263/0x280 [ 619.107278][T16616] should_failslab+0x8c/0xb0 [ 619.107299][T16616] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 619.107350][T16616] ? __alloc_skb+0x2f0/0x4b0 [ 619.107403][T16616] __alloc_skb+0x2f0/0x4b0 [ 619.107427][T16616] ? __alloc_skb+0x219/0x4b0 [ 619.107567][T16616] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 619.107607][T16616] ? ib_device_get_by_netdev+0x219/0x260 [ 619.107679][T16616] ? __rcu_read_unlock+0x4e/0x70 [ 619.107777][T16616] rtmsg_ifinfo+0x6d/0x110 [ 619.107820][T16616] netif_state_change+0x1d9/0x250 [ 619.107844][T16616] do_setlink+0x276d/0x2940 [ 619.107946][T16616] ? _raw_spin_unlock+0x26/0x50 [ 619.107972][T16616] ? finish_task_switch+0x79/0x280 [ 619.108005][T16616] ? __schedule+0x82d/0xc90 [ 619.108036][T16616] rtnl_newlink+0xdb5/0x1370 [ 619.108091][T16616] ? avc_compute_av+0x383/0x460 [ 619.108111][T16616] ? avc_perm_nonode+0x82/0xe0 [ 619.108130][T16616] ? __rcu_read_unlock+0x4e/0x70 [ 619.108205][T16616] ? avc_has_perm_noaudit+0xab/0x130 [ 619.108262][T16616] ? cred_has_capability+0x224/0x290 [ 619.108383][T16616] ? selinux_capable+0x31/0x40 [ 619.108406][T16616] ? security_capable+0x7b/0x90 [ 619.108444][T16616] ? ns_capable+0x7c/0xb0 [ 619.108504][T16616] ? __pfx_rtnl_newlink+0x10/0x10 [ 619.108527][T16616] rtnetlink_rcv_msg+0x64b/0x720 [ 619.108559][T16616] netlink_rcv_skb+0x123/0x220 [ 619.108598][T16616] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 619.108688][T16616] rtnetlink_rcv+0x1c/0x30 [ 619.108708][T16616] netlink_unicast+0x5c0/0x690 [ 619.108773][T16616] netlink_sendmsg+0x5c8/0x6f0 [ 619.108794][T16616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.108822][T16616] __sock_sendmsg+0x145/0x170 [ 619.108850][T16616] ____sys_sendmsg+0x31e/0x4a0 [ 619.108889][T16616] ___sys_sendmsg+0x195/0x1e0 [ 619.108941][T16616] __x64_sys_sendmsg+0xd4/0x160 [ 619.109032][T16616] x64_sys_call+0x17ba/0x3000 [ 619.109054][T16616] do_syscall_64+0xc0/0x2a0 [ 619.109094][T16616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.109115][T16616] RIP: 0033:0x7f28f1d4acb9 [ 619.109130][T16616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.109265][T16616] RSP: 002b:00007f28f07a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.109284][T16616] RAX: ffffffffffffffda RBX: 00007f28f1fc5fa0 RCX: 00007f28f1d4acb9 [ 619.109298][T16616] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000003 [ 619.109310][T16616] RBP: 00007f28f07a7090 R08: 0000000000000000 R09: 0000000000000000 [ 619.109320][T16616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 619.109378][T16616] R13: 00007f28f1fc6038 R14: 00007f28f1fc5fa0 R15: 00007ffde45186b8 [ 619.109473][T16616] [ 619.433358][T16624] loop3: detected capacity change from 0 to 512 [ 619.512555][T16624] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 619.554914][T16624] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.8305: corrupted inode contents [ 619.664289][T16624] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.8305: mark_inode_dirty error [ 619.697020][T16616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 619.718672][T16636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8308'. [ 619.727815][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8308'. [ 619.742813][T16624] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.8305: corrupted inode contents [ 619.743906][T16624] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.8305: mark_inode_dirty error [ 619.991858][T16655] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.065925][T16655] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.179242][T16674] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8314'. [ 620.197290][T16655] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.271800][T16655] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.331516][T16685] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.8316'. [ 620.343901][T16683] loop6: detected capacity change from 0 to 512 [ 620.390983][ T7408] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.413336][T16683] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 620.422490][T16683] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 620.477351][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.502475][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.504534][T16683] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 620.531055][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.543229][T16683] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 620.586315][T16683] System zones: 0-2, 18-18, 34-35 [ 621.128940][T16737] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8327'. [ 621.216186][T16740] lo speed is unknown, defaulting to 1000 [ 621.241825][T16740] vcan0 speed is unknown, defaulting to 1000 [ 621.293989][T16749] netlink: 292 bytes leftover after parsing attributes in process `syz.1.8328'. [ 621.464189][T16772] loop1: detected capacity change from 0 to 1024 [ 621.809369][T16791] loop6: detected capacity change from 0 to 512 [ 621.842639][T16791] EXT4-fs: Ignoring removed oldalloc option [ 621.861290][T16795] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.940240][T16791] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.8331: Parent and EA inode have the same ino 15 [ 622.012256][T16795] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.093896][T16791] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 622.168862][T16791] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.8331: Parent and EA inode have the same ino 15 [ 622.191307][T16795] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.226950][T16791] EXT4-fs (loop6): 1 orphan inode deleted [ 622.263730][T16817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.267719][T16791] EXT4-fs mount: 12 callbacks suppressed [ 622.267736][T16791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.313766][T16795] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.403856][T16650] loop4: detected capacity change from 0 to 2048 [ 622.445825][T16807] delete_channel: no stack [ 622.593454][T15971] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.615354][ T3408] kernel read not supported for file /syz2 (pid: 3408 comm: kworker/0:3) [ 622.747872][T16850] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8338'. [ 622.967756][T16864] pim6reg: entered allmulticast mode [ 623.039995][T16864] pim6reg: left allmulticast mode [ 623.047941][T16875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8339'. [ 623.108502][T16873] lo speed is unknown, defaulting to 1000 [ 623.142375][T16873] vcan0 speed is unknown, defaulting to 1000 [ 623.159656][ T29] kauditd_printk_skb: 1125 callbacks suppressed [ 623.159675][ T29] audit: type=1400 audit(2000002099.864:59010): avc: denied { recv } for pid=16853 comm="syz.3.8339" daddr=255.255.255.255 dest=20000 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 623.214618][T16890] FAULT_INJECTION: forcing a failure. [ 623.214618][T16890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.227877][T16890] CPU: 1 UID: 0 PID: 16890 Comm: syz.6.8344 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 623.227911][T16890] Tainted: [W]=WARN [ 623.227998][T16890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 623.228010][T16890] Call Trace: [ 623.228018][T16890] [ 623.228028][T16890] __dump_stack+0x1d/0x30 [ 623.228133][T16890] dump_stack_lvl+0x95/0xd0 [ 623.228154][T16890] dump_stack+0x15/0x1b [ 623.228173][T16890] should_fail_ex+0x263/0x280 [ 623.228278][T16890] should_fail+0xb/0x20 [ 623.228343][T16890] should_fail_usercopy+0x1a/0x20 [ 623.228369][T16890] _copy_to_user+0x20/0xa0 [ 623.228401][T16890] simple_read_from_buffer+0xb5/0x130 [ 623.228444][T16890] proc_fail_nth_read+0x10e/0x150 [ 623.228552][T16890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 623.228585][T16890] vfs_read+0x1ab/0x7f0 [ 623.228619][T16890] ? __rcu_read_unlock+0x4e/0x70 [ 623.228676][T16890] ? __fget_files+0x184/0x1c0 [ 623.228702][T16890] ? mutex_lock+0x57/0x90 [ 623.228757][T16890] ksys_read+0xdc/0x1a0 [ 623.228814][T16890] __x64_sys_read+0x40/0x50 [ 623.228898][T16890] x64_sys_call+0x2889/0x3000 [ 623.228922][T16890] do_syscall_64+0xc0/0x2a0 [ 623.228943][T16890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.228968][T16890] RIP: 0033:0x7fb19a7fb58e [ 623.229005][T16890] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 623.229057][T16890] RSP: 002b:00007fb199296fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 623.229082][T16890] RAX: ffffffffffffffda RBX: 00007fb1992976c0 RCX: 00007fb19a7fb58e [ 623.229098][T16890] RDX: 000000000000000f RSI: 00007fb1992970a0 RDI: 0000000000000004 [ 623.229121][T16890] RBP: 00007fb199297090 R08: 0000000000000000 R09: 0000000000000000 [ 623.229133][T16890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.229149][T16890] R13: 00007fb19aab6038 R14: 00007fb19aab5fa0 R15: 00007fffa064c048 [ 623.229176][T16890] [ 623.230400][ T29] audit: type=1400 audit(2000002099.864:59011): avc: denied { recv } for pid=16853 comm="syz.3.8339" daddr=255.255.255.255 dest=20000 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 623.451020][ T29] audit: type=1400 audit(2000002099.896:59012): avc: denied { recv } for pid=16871 comm="syz.4.8342" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 623.476629][ T29] audit: type=1400 audit(2000002099.896:59013): avc: denied { recv } for pid=16871 comm="syz.4.8342" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 623.502294][ T29] audit: type=1400 audit(2000002099.917:59014): avc: denied { recv } for pid=3308 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 623.527985][ T29] audit: type=1400 audit(2000002099.917:59015): avc: denied { recv } for pid=3308 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 623.553775][ T29] audit: type=1400 audit(2000002099.917:59016): avc: denied { read write } for pid=16889 comm="syz.6.8344" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 623.578165][ T29] audit: type=1400 audit(2000002099.917:59017): avc: denied { open } for pid=16889 comm="syz.6.8344" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 623.603518][ T29] audit: type=1400 audit(2000002099.917:59018): avc: denied { recv } for pid=16853 comm="syz.3.8339" daddr=255.255.255.255 dest=20000 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 623.662252][ T29] audit: type=1400 audit(2000002099.938:59019): avc: denied { read write } for pid=7576 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 623.692001][T16902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8345'. [ 623.701058][T16902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8345'. [ 623.799257][T16921] netlink: 7 bytes leftover after parsing attributes in process `syz.6.8346'. [ 623.808281][T16921] netlink: 88 bytes leftover after parsing attributes in process `syz.6.8346'. [ 623.925477][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8347'. [ 623.937704][T16931] loop6: detected capacity change from 0 to 764 [ 623.971861][T16931] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 624.492301][T14638] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.524009][T14638] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.557581][T14638] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.607055][T14638] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.883866][T16989] loop1: detected capacity change from 0 to 512 [ 624.964962][T16989] loop1: detected capacity change from 0 to 1024 [ 625.011432][T16989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.172284][T17022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8365'. [ 625.184461][T14342] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.246997][T17001] delete_channel: no stack [ 625.273021][T17022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8365'. [ 625.349259][T17033] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.429652][T17033] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.447935][T17044] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8368'. [ 625.515827][T17045] loop2: detected capacity change from 0 to 512 [ 625.555277][T17045] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 625.610348][T17045] EXT4-fs (loop2): orphan cleanup on readonly fs [ 625.621222][T17045] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.8370: bg 0: block 16: invalid block bitmap [ 625.672048][T17033] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.672098][T17045] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 625.672512][T17045] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.8370: attempt to clear invalid blocks 1669132790 len 1 [ 625.741201][T17045] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.8370: invalid indirect mapped block 4294967295 (level 1) [ 625.774430][T17033] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.777889][T17045] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.8370: invalid indirect mapped block 4294967295 (level 2) [ 625.823802][T17045] EXT4-fs (loop2): 1 truncate cleaned up [ 625.837096][T17045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 625.923831][ T7576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.270884][T17126] vti0: entered allmulticast mode [ 626.426282][T17139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.433801][T17139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.556011][T17154] loop6: detected capacity change from 0 to 256 [ 626.620951][T17125] delete_channel: no stack [ 627.148532][T17195] SELinux: failed to load policy [ 627.166882][T17195] loop4: detected capacity change from 0 to 1024 [ 627.175123][T17195] EXT4-fs: Ignoring removed nobh option [ 627.180767][T17195] EXT4-fs: Ignoring removed bh option [ 627.244199][T17195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.326686][T17210] loop3: detected capacity change from 0 to 512 [ 627.350457][ T6363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.364345][T17210] EXT4-fs: inline encryption not supported [ 627.371360][T17210] ext4: Bad value for 'debug_want_extra_isize' [ 627.429786][T17210] loop3: detected capacity change from 0 to 2048 [ 627.455204][T17221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.516597][T17221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.717104][T17239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.724620][T17239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.768304][T17239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.776852][T17239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.895603][T17231] delete_channel: no stack [ 627.944373][ T29] kauditd_printk_skb: 1299 callbacks suppressed [ 627.944388][ T29] audit: type=1400 audit(2000002104.882:60319): avc: denied { create } for pid=17255 comm="syz.6.8396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 628.020785][ T29] audit: type=1400 audit(2000002104.914:60320): avc: denied { write } for pid=17255 comm="syz.6.8396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 628.041594][ T29] audit: type=1400 audit(2000002104.914:60321): avc: denied { open } for pid=17255 comm="syz.6.8396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 628.061599][ T29] audit: type=1400 audit(2000002104.914:60322): avc: denied { perfmon } for pid=17255 comm="syz.6.8396" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 628.082752][ T29] audit: type=1400 audit(2000002104.914:60323): avc: denied { kernel } for pid=17255 comm="syz.6.8396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 628.103326][ T29] audit: type=1400 audit(2000002104.914:60324): avc: denied { read } for pid=17255 comm="syz.6.8396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 628.122785][ T29] audit: type=1400 audit(2000002104.935:60325): avc: denied { read write } for pid=15971 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.147259][ T29] audit: type=1400 audit(2000002104.935:60326): avc: denied { open } for pid=15971 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.171648][ T29] audit: type=1400 audit(2000002104.935:60327): avc: denied { ioctl } for pid=15971 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.197459][ T29] audit: type=1400 audit(2000002104.956:60328): avc: denied { read write } for pid=12470 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.238350][T17262] loop3: detected capacity change from 0 to 2048 [ 628.276183][T17262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 628.312718][T17262] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.598910][T17284] loop6: detected capacity change from 0 to 512 [ 628.627445][T17284] EXT4-fs: Ignoring removed oldalloc option [ 628.634581][T14643] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.675597][T17284] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.8402: Parent and EA inode have the same ino 15 [ 628.697035][T17284] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.8402: Parent and EA inode have the same ino 15 [ 628.709799][T17284] EXT4-fs (loop6): 1 orphan inode deleted [ 628.716173][T17284] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.791116][ T2590] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.836256][ T2590] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.863730][T15971] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.883927][ T2590] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.110946][T17331] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 629.154293][T14641] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:20: bg 0: block 345: padding at end of block bitmap is not set [ 629.203684][T14641] EXT4-fs (loop3): Remounting filesystem read-only [ 629.210365][ T37] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 629.256304][T17316] delete_channel: no stack [ 629.359855][T12470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.525770][T17349] loop2: detected capacity change from 0 to 8192 [ 629.570907][T17349] loop2: p1 p2 p3 p4 [ 629.576649][T17349] loop2: p1 size 262144 extends beyond EOD, truncated [ 629.614506][T17349] loop2: p2 start 4293394690 is beyond EOD, truncated [ 629.621452][T17349] loop2: p3 size 100663552 extends beyond EOD, truncated [ 629.660001][T17349] loop2: p4 size 50331648 extends beyond EOD, truncated [ 629.711212][ T3008] loop2: p1 p2 p3 p4 [ 629.715612][ T3008] loop2: p1 size 262144 extends beyond EOD, truncated [ 629.724724][ T3008] loop2: p2 start 4293394690 is beyond EOD, truncated [ 629.731530][ T3008] loop2: p3 size 100663552 extends beyond EOD, truncated [ 629.748506][T17349] __nla_validate_parse: 1 callbacks suppressed [ 629.748525][T17349] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8413'. [ 629.766276][ T3008] loop2: p4 size 50331648 extends beyond EOD, truncated [ 629.789157][T17376] loop3: detected capacity change from 0 to 512 [ 629.809624][T17376] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 629.858135][T17376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.892507][T17376] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 629.920479][T17376] FAULT_INJECTION: forcing a failure. [ 629.920479][T17376] name failslab, interval 1, probability 0, space 0, times 0 [ 629.933237][T17376] CPU: 0 UID: 0 PID: 17376 Comm: syz.3.8415 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 629.933291][T17376] Tainted: [W]=WARN [ 629.933390][T17376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 629.933406][T17376] Call Trace: [ 629.933414][T17376] [ 629.933424][T17376] __dump_stack+0x1d/0x30 [ 629.933454][T17376] dump_stack_lvl+0x95/0xd0 [ 629.933476][T17376] dump_stack+0x15/0x1b [ 629.933554][T17376] should_fail_ex+0x263/0x280 [ 629.933593][T17376] should_failslab+0x8c/0xb0 [ 629.933616][T17376] kmem_cache_alloc_noprof+0x68/0x490 [ 629.933641][T17376] ? __es_insert_extent+0x508/0xee0 [ 629.933699][T17376] __es_insert_extent+0x508/0xee0 [ 629.933733][T17376] ext4_es_insert_extent+0x467/0x1c70 [ 629.933794][T17376] ext4_map_blocks+0x941/0xd70 [ 629.933830][T17376] _ext4_get_block+0x117/0x370 [ 629.933901][T17376] ext4_get_block_unwritten+0x2a/0xb0 [ 629.933938][T17376] ext4_block_write_begin+0x650/0xcf0 [ 629.933975][T17376] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 629.934027][T17376] ? folio_mapping+0xb9/0xe0 [ 629.934047][T17376] ext4_write_begin+0x636/0xe90 [ 629.934086][T17376] ext4_da_write_begin+0x1f0/0x6b0 [ 629.934117][T17376] ? inode_to_bdi+0x47/0xa0 [ 629.934183][T17376] ? balance_dirty_pages_ratelimited_flags+0x420/0x800 [ 629.934288][T17376] generic_perform_write+0x183/0x490 [ 629.934386][T17376] ext4_buffered_write_iter+0x1ee/0x3c0 [ 629.934422][T17376] ? ext4_file_write_iter+0x100/0xf70 [ 629.934520][T17376] ext4_file_write_iter+0x380/0xf70 [ 629.934582][T17376] ? kstrtouint_from_user+0xa8/0xf0 [ 629.934607][T17376] ? __rcu_read_unlock+0x4e/0x70 [ 629.934684][T17376] ? avc_policy_seqno+0x15/0x30 [ 629.934704][T17376] ? selinux_file_permission+0x1e1/0x320 [ 629.934737][T17376] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 629.934827][T17376] vfs_write+0x5a6/0x9f0 [ 629.934854][T17376] __x64_sys_pwrite64+0xfd/0x150 [ 629.934874][T17376] x64_sys_call+0x9f7/0x3000 [ 629.934953][T17376] do_syscall_64+0xc0/0x2a0 [ 629.934981][T17376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.935029][T17376] RIP: 0033:0x7fb35f08acb9 [ 629.935050][T17376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.935071][T17376] RSP: 002b:00007fb35dae7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 629.935138][T17376] RAX: ffffffffffffffda RBX: 00007fb35f305fa0 RCX: 00007fb35f08acb9 [ 629.935152][T17376] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000005 [ 629.935167][T17376] RBP: 00007fb35dae7090 R08: 0000000000000000 R09: 0000000000000000 [ 629.935181][T17376] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000002 [ 629.935220][T17376] R13: 00007fb35f306038 R14: 00007fb35f305fa0 R15: 00007ffda60f8fa8 [ 629.935240][T17376] [ 630.284078][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 630.338660][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 630.371747][T12470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.384414][ T5489] udevd[5489]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 630.486233][T17399] netlink: 'syz.3.8418': attribute type 1 has an invalid length. [ 630.539445][T17399] 8021q: adding VLAN 0 to HW filter on device bond2 [ 630.605879][T17442] bond2: (slave geneve2): making interface the new active one [ 630.641043][T17442] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 630.768526][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 630.778600][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 630.799434][T17914] udevd[17914]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 631.124688][T17479] loop4: detected capacity change from 0 to 512 [ 631.147343][T17479] EXT4-fs: Ignoring removed oldalloc option [ 631.158826][T17468] delete_channel: no stack [ 631.199028][T17479] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.8425: Parent and EA inode have the same ino 15 [ 631.315853][T17479] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.8425: Parent and EA inode have the same ino 15 [ 631.392223][T17479] EXT4-fs (loop4): 1 orphan inode deleted [ 631.408539][T17479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.434414][ T7409] bridge_slave_1: left allmulticast mode [ 631.440235][ T7409] bridge_slave_1: left promiscuous mode [ 631.445934][ T7409] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.498390][ T7409] bridge_slave_0: left allmulticast mode [ 631.504216][ T7409] bridge_slave_0: left promiscuous mode [ 631.509933][ T7409] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.713700][T17507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8428'. [ 631.764285][ T7409] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 631.987205][T17516] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 632.152891][ T7409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.171682][ T7409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.185986][ T7409] bond0 (unregistering): Released all slaves [ 632.209481][ T7409] bond1 (unregistering): Released all slaves [ 632.239230][ T7409] bond2 (unregistering): Released all slaves [ 632.269387][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8427'. [ 632.303187][ T6363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.351911][ T7409] tipc: Left network mode [ 632.358853][ T7409] IPVS: stopping backup sync thread 2802 ... [ 632.407493][T17528] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.471635][T17528] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.522250][ T7409] hsr_slave_0: left promiscuous mode [ 632.538787][ T7409] hsr_slave_1: left promiscuous mode [ 632.547985][ T7409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.555495][ T7409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.571453][ T7409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.578976][ T7409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.597812][ T7409] veth0_virt_wifi: left promiscuous mode [ 632.617237][ T7409] veth0_macvtap: left promiscuous mode [ 632.645378][ T7409] veth1_vlan: left promiscuous mode [ 632.679430][ T7409] veth0_vlan: left promiscuous mode [ 632.716661][ T29] kauditd_printk_skb: 824 callbacks suppressed [ 632.716679][ T29] audit: type=1400 audit(2000002365.896:61153): avc: denied { read write } for pid=17548 comm="syz.3.8437" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 632.747234][ T29] audit: type=1400 audit(2000002365.896:61154): avc: denied { open } for pid=17548 comm="syz.3.8437" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 632.850832][ T29] audit: type=1400 audit(2000002365.917:61155): avc: denied { ioctl } for pid=17548 comm="syz.3.8437" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 632.876713][ T29] audit: type=1400 audit(2000002365.917:61156): avc: denied { recv } for pid=15971 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 632.902519][ T29] audit: type=1400 audit(2000002365.917:61157): avc: denied { recv } for pid=15971 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 632.928307][ T29] audit: type=1400 audit(2000002365.917:61158): avc: denied { recv } for pid=15971 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 632.954518][ T29] audit: type=1400 audit(2000002365.917:61159): avc: denied { recv } for pid=15971 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 632.980306][ T29] audit: type=1400 audit(2000002365.928:61160): avc: denied { open } for pid=17548 comm="syz.3.8437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 632.999729][ T29] audit: type=1400 audit(2000002365.928:61161): avc: denied { perfmon } for pid=17548 comm="syz.3.8437" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 633.020829][ T29] audit: type=1400 audit(2000002365.938:61162): avc: denied { kernel } for pid=17548 comm="syz.3.8437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 633.076217][T17555] loop3: detected capacity change from 0 to 512 [ 633.136563][T17555] EXT4-fs: Ignoring removed bh option [ 633.160434][T17555] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 633.181167][ T7409] team_slave_1 (unregistering): left promiscuous mode [ 633.190884][ T7409] team0 (unregistering): Port device team_slave_1 removed [ 633.199537][T17555] EXT4-fs (loop3): 1 truncate cleaned up [ 633.208250][ T7409] team_slave_0 (unregistering): left promiscuous mode [ 633.216444][T17555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.248236][ T7409] team0 (unregistering): Port device team_slave_0 removed [ 633.355727][T17552] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8438'. [ 633.408389][T17555] syzkaller0: entered promiscuous mode [ 633.413981][T17555] syzkaller0: entered allmulticast mode [ 633.437213][T17528] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.508444][T17528] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.549289][T12470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.582168][T32505] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.627170][T32505] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.670114][T32505] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.686974][ T7409] IPVS: stop unused estimator thread 0... [ 633.707463][T32505] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.734810][T17584] sctp: [Deprecated]: syz.3.8442 (pid 17584) Use of int in max_burst socket option. [ 633.734810][T17584] Use struct sctp_assoc_value instead [ 633.839623][T17594] loop4: detected capacity change from 0 to 512 [ 633.847674][T17594] EXT4-fs: Ignoring removed oldalloc option [ 633.920999][T17594] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.8444: Parent and EA inode have the same ino 15 [ 634.015212][T17594] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.8444: Parent and EA inode have the same ino 15 [ 634.073570][T17612] loop6: detected capacity change from 0 to 1024 [ 634.087059][T17594] EXT4-fs (loop4): 1 orphan inode deleted [ 634.097679][T17612] EXT4-fs: Ignoring removed mblk_io_submit option [ 634.118075][T17594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.183152][T17612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.323922][T17612] lo speed is unknown, defaulting to 1000 [ 634.351610][T17612] vcan0 speed is unknown, defaulting to 1000 [ 634.410366][ T6363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.551071][T17631] 9p: Bad value for 'rfdno' [ 634.744094][T15971] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.083421][T17680] loop1: detected capacity change from 0 to 1024 [ 635.160670][T17680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.214024][T17695] loop3: detected capacity change from 0 to 512 [ 635.350097][T14342] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.089334][T17749] loop4: detected capacity change from 0 to 512 [ 636.110709][T17749] EXT4-fs: Ignoring removed bh option [ 636.132913][T17749] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 636.167147][T17749] EXT4-fs (loop4): 1 truncate cleaned up [ 636.182945][T17749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.214894][T17749] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.307861][T17758] delete_channel: no stack [ 636.372231][T17753] delete_channel: no stack [ 636.417064][T17764] loop4: detected capacity change from 0 to 1024 [ 636.480014][T17764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.508295][T17767] lo speed is unknown, defaulting to 1000 [ 636.543117][T17767] vcan0 speed is unknown, defaulting to 1000 [ 636.558850][T17776] loop1: detected capacity change from 0 to 1024 [ 636.591756][T17776] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 636.604453][ T6363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.622082][T17779] loop3: detected capacity change from 0 to 256 [ 636.650947][T17776] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8801e019, mo2=0000] [ 636.676721][T17779] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 636.696474][T17776] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.8475: lblock 2 mapped to illegal pblock 2 (length 1) [ 636.753428][T17776] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.8475: lblock 0 mapped to illegal pblock 48 (length 1) [ 636.803137][T17779] netlink: 'syz.3.8477': attribute type 83 has an invalid length. [ 636.828212][T17776] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.8475: Failed to acquire dquot type 0 [ 636.874666][T17776] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 636.939875][T17776] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.8475: mark_inode_dirty error [ 637.000024][T17776] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 637.060431][T17776] EXT4-fs (loop1): 1 orphan inode deleted [ 637.079589][T32505] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 637.093590][T17776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.159312][T32505] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:28: Failed to release dquot type 0 [ 637.218632][T17776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.274956][T17776] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.8475: Invalid inode table block 1 in block_group 0 [ 637.320357][T17834] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8484'. [ 637.343383][T17776] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 637.369070][T17834] netlink: 'syz.6.8484': attribute type 11 has an invalid length. [ 637.405303][T17776] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz.1.8475: mark_inode_dirty error [ 637.493010][ T29] kauditd_printk_skb: 1474 callbacks suppressed [ 637.493027][ T29] audit: type=1400 audit(2000002370.904:62634): avc: denied { read write } for pid=17765 comm="syz.1.8475" name="loop1" dev="devtmpfs" ino=1583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 637.523883][ T29] audit: type=1400 audit(2000002370.904:62635): avc: denied { open } for pid=17765 comm="syz.1.8475" path="/dev/loop1" dev="devtmpfs" ino=1583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 637.548672][ T29] audit: type=1400 audit(2000002370.904:62636): avc: denied { ioctl } for pid=17765 comm="syz.1.8475" path="/dev/loop1" dev="devtmpfs" ino=1583 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 637.627364][ T29] audit: type=1400 audit(2000002370.967:62637): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=40650 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 637.652527][ T29] audit: type=1400 audit(2000002370.967:62638): avc: denied { recv } for pid=17818 comm="syz.4.8482" saddr=172.20.20.27 src=20001 daddr=172.20.20.27 dest=20001 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 637.678551][ T29] audit: type=1400 audit(2000002370.967:62639): avc: denied { recv } for pid=17818 comm="syz.4.8482" saddr=172.20.20.27 src=20001 daddr=172.20.20.27 dest=20001 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 637.704050][ T29] audit: type=1400 audit(2000002370.967:62640): avc: denied { recv } for pid=17818 comm="syz.4.8482" saddr=172.20.20.27 src=20001 daddr=172.20.20.27 dest=20001 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 637.729534][ T29] audit: type=1400 audit(2000002370.967:62641): avc: denied { recv } for pid=17818 comm="syz.4.8482" saddr=172.20.20.27 src=20001 daddr=172.20.20.27 dest=20001 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 637.755060][ T29] audit: type=1400 audit(2000002370.967:62642): avc: denied { recv } for pid=17818 comm="syz.4.8482" saddr=172.20.20.27 src=20001 daddr=172.20.20.27 dest=20001 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 637.780510][ T29] audit: type=1400 audit(2000002370.967:62643): avc: denied { recv } for pid=17818 comm="syz.4.8482" saddr=172.20.20.27 src=20001 daddr=172.20.20.27 dest=20001 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 638.025327][T17848] FAULT_INJECTION: forcing a failure. [ 638.025327][T17848] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 638.038660][T17848] CPU: 0 UID: 0 PID: 17848 Comm: syz.1.8487 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 638.038695][T17848] Tainted: [W]=WARN [ 638.038703][T17848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 638.038780][T17848] Call Trace: [ 638.038786][T17848] [ 638.038794][T17848] __dump_stack+0x1d/0x30 [ 638.038820][T17848] dump_stack_lvl+0x95/0xd0 [ 638.038841][T17848] dump_stack+0x15/0x1b [ 638.038867][T17848] should_fail_ex+0x263/0x280 [ 638.038893][T17848] should_fail_alloc_page+0xf2/0x100 [ 638.038916][T17848] __alloc_frozen_pages_noprof+0x108/0x350 [ 638.038955][T17848] alloc_pages_mpol+0xb3/0x260 [ 638.039045][T17848] alloc_pages_noprof+0x8f/0x130 [ 638.039081][T17848] pte_alloc_one+0x1e/0xd0 [ 638.039117][T17848] __pte_alloc+0x32/0x2c0 [ 638.039221][T17848] handle_mm_fault+0x2057/0x3030 [ 638.039256][T17848] ? mt_find+0x291/0x3b0 [ 638.039309][T17848] do_user_addr_fault+0x3fd/0x1050 [ 638.039345][T17848] exc_page_fault+0x62/0xa0 [ 638.039379][T17848] asm_exc_page_fault+0x26/0x30 [ 638.039402][T17848] RIP: 0010:__get_user_8+0x14/0x30 [ 638.039447][T17848] Code: ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca e9 3f 0a 02 00 90 90 90 90 90 90 90 90 90 [ 638.039464][T17848] RSP: 0018:ffffc90002bafeb0 EFLAGS: 00050283 [ 638.039501][T17848] RAX: 0000200000000040 RBX: ffffc90002baff00 RCX: ffffffff81d22b32 [ 638.039518][T17848] RDX: 00007ffffffff000 RSI: 0000000000000000 RDI: ffffc90002baff90 [ 638.039533][T17848] RBP: ffffc90002baff48 R08: 0001c90002baff97 R09: 0000000000000000 [ 638.039589][T17848] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 638.039599][T17848] R13: 0000000000000000 R14: 0000200000000040 R15: 0000000000000401 [ 638.039615][T17848] ? __x64_sys_msgsnd+0x52/0xc0 [ 638.039735][T17848] __x64_sys_msgsnd+0x5f/0xc0 [ 638.039767][T17848] x64_sys_call+0x180f/0x3000 [ 638.039797][T17848] do_syscall_64+0xc0/0x2a0 [ 638.039865][T17848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.039890][T17848] RIP: 0033:0x7f28f1d4acb9 [ 638.039908][T17848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.039994][T17848] RSP: 002b:00007f28f07a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 638.040012][T17848] RAX: ffffffffffffffda RBX: 00007f28f1fc5fa0 RCX: 00007f28f1d4acb9 [ 638.040050][T17848] RDX: 0000000000000401 RSI: 0000200000000040 RDI: 0000000000000000 [ 638.040112][T17848] RBP: 00007f28f07a7090 R08: 0000000000000000 R09: 0000000000000000 [ 638.040126][T17848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.040137][T17848] R13: 00007f28f1fc6038 R14: 00007f28f1fc5fa0 R15: 00007ffde45186b8 [ 638.040156][T17848] [ 638.483002][T17851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8490'. [ 638.680577][T17862] nfs: Unknown parameter ' ' [ 638.907637][T17875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8493'. [ 639.361658][T17897] FAULT_INJECTION: forcing a failure. [ 639.361658][T17897] name failslab, interval 1, probability 0, space 0, times 0 [ 639.374411][T17897] CPU: 1 UID: 0 PID: 17897 Comm: syz.2.8500 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 639.374467][T17897] Tainted: [W]=WARN [ 639.374475][T17897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 639.374490][T17897] Call Trace: [ 639.374498][T17897] [ 639.374546][T17897] __dump_stack+0x1d/0x30 [ 639.374683][T17897] dump_stack_lvl+0x95/0xd0 [ 639.374782][T17897] dump_stack+0x15/0x1b [ 639.374832][T17897] should_fail_ex+0x263/0x280 [ 639.374927][T17897] should_failslab+0x8c/0xb0 [ 639.374952][T17897] kmem_cache_alloc_noprof+0x68/0x490 [ 639.374977][T17897] ? security_inode_alloc+0x37/0x100 [ 639.375004][T17897] security_inode_alloc+0x37/0x100 [ 639.375027][T17897] inode_init_always_gfp+0x4b7/0x500 [ 639.375076][T17897] ? __pfx_sock_alloc_inode+0x10/0x10 [ 639.375102][T17897] alloc_inode+0x58/0x170 [ 639.375188][T17897] __sock_create+0x120/0x580 [ 639.375267][T17897] ? mutex_lock+0x57/0x90 [ 639.375298][T17897] ? mutex_unlock+0x4e/0x90 [ 639.375402][T17897] ? fput+0x8f/0xc0 [ 639.375426][T17897] __sys_socket+0xaf/0x180 [ 639.375447][T17897] __x64_sys_socket+0x3f/0x50 [ 639.375468][T17897] x64_sys_call+0x127b/0x3000 [ 639.375494][T17897] do_syscall_64+0xc0/0x2a0 [ 639.375555][T17897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.375623][T17897] RIP: 0033:0x7f1e3ea9acb9 [ 639.375642][T17897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.375664][T17897] RSP: 002b:00007f1e3d4f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 639.375686][T17897] RAX: ffffffffffffffda RBX: 00007f1e3ed15fa0 RCX: 00007f1e3ea9acb9 [ 639.375735][T17897] RDX: 0000000000000004 RSI: 0000000000000003 RDI: 0000000000000010 [ 639.375748][T17897] RBP: 00007f1e3d4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 639.375763][T17897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.375778][T17897] R13: 00007f1e3ed16038 R14: 00007f1e3ed15fa0 R15: 00007ffe70f4fd48 [ 639.375802][T17897] [ 639.375824][T17897] socket: no more sockets [ 639.654787][T17901] loop6: detected capacity change from 0 to 512 [ 639.698162][T17901] EXT4-fs: Ignoring removed oldalloc option [ 639.715505][T17901] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.8501: Parent and EA inode have the same ino 15 [ 639.741507][T17901] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.8501: Parent and EA inode have the same ino 15 [ 639.825698][T17901] EXT4-fs (loop6): 1 orphan inode deleted [ 639.882862][T17901] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.099386][T15971] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.314114][T17931] loop6: detected capacity change from 0 to 2048 [ 640.392492][T17931] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 640.411775][T17931] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 640.429210][T17931] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 640.441486][T17931] EXT4-fs (loop6): This should not happen!! Data will be lost [ 640.441486][T17931] [ 640.451169][T17931] EXT4-fs (loop6): Total free blocks count 0 [ 640.457206][T17931] EXT4-fs (loop6): Free/Dirty block details [ 640.463165][T17931] EXT4-fs (loop6): free_blocks=2415919104 [ 640.468933][T17931] EXT4-fs (loop6): dirty_blocks=16 [ 640.474066][T17931] EXT4-fs (loop6): Block reservation details [ 640.480135][T17931] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 640.601556][T15971] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 640.714188][T17953] loop1: detected capacity change from 0 to 512 [ 640.736021][T17953] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 640.786830][T17953] EXT4-fs (loop1): 1 truncate cleaned up [ 640.812984][T17953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.908065][T17953] EXT4-fs (loop1): Online resizing not supported with sparse_super2 [ 640.982390][T17969] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 641.000492][T17969] vhci_hcd vhci_hcd.2: invalid port number 96 [ 641.006627][T17969] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 641.161230][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8518'. [ 641.539379][T14342] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.810150][T18007] netlink: 'syz.3.8524': attribute type 29 has an invalid length. [ 641.975917][T18025] loop3: detected capacity change from 0 to 512 [ 641.999338][T18025] EXT4-fs: Ignoring removed bh option [ 642.038455][T18025] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 642.088523][T18025] EXT4-fs (loop3): 1 truncate cleaned up [ 642.108045][T18025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.203221][T18038] syz_tun: entered allmulticast mode [ 642.263088][ T29] kauditd_printk_skb: 1439 callbacks suppressed [ 642.263106][ T29] audit: type=1400 audit(2000002375.912:63942): avc: denied { ioctl } for pid=18032 comm="syz.1.8531" path="socket:[117076]" dev="sockfs" ino=117076 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 642.329446][T18025] syzkaller0: entered promiscuous mode [ 642.335106][T18025] syzkaller0: entered allmulticast mode [ 642.350397][ T29] audit: type=1400 audit(2000002375.922:63943): avc: denied { read } for pid=18029 comm="syz.6.8529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 642.370936][ T29] audit: type=1400 audit(2000002375.954:63944): avc: denied { setopt } for pid=18032 comm="syz.1.8531" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 642.391692][ T29] audit: type=1400 audit(2000002375.954:63945): avc: denied { read } for pid=18029 comm="syz.6.8529" dev="nsfs" ino=4026533499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 642.413561][ T29] audit: type=1400 audit(2000002375.954:63946): avc: denied { open } for pid=18029 comm="syz.6.8529" path="net:[4026533499]" dev="nsfs" ino=4026533499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 642.437176][ T29] audit: type=1400 audit(2000002375.954:63947): avc: denied { create } for pid=18029 comm="syz.6.8529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 642.457872][ T29] audit: type=1400 audit(2000002375.954:63948): avc: denied { recv } for pid=18032 comm="syz.1.8531" saddr=172.20.20.170 src=20001 daddr=172.20.20.170 dest=20001 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 642.483557][ T29] audit: type=1400 audit(2000002375.954:63949): avc: denied { recv } for pid=18032 comm="syz.1.8531" saddr=172.20.20.170 src=20001 daddr=172.20.20.170 dest=20001 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 642.509337][ T29] audit: type=1400 audit(2000002375.964:63950): avc: denied { open } for pid=18029 comm="syz.6.8529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 642.528774][ T29] audit: type=1400 audit(2000002375.964:63951): avc: denied { perfmon } for pid=18029 comm="syz.6.8529" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 642.610150][T18047] loop1: detected capacity change from 0 to 256 [ 642.696071][T18047] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 642.704924][T18047] FAT-fs (loop1): Filesystem has been set read-only [ 642.711600][T18047] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 642.720392][T18047] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 642.725382][T18046] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 642.729562][T18047] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 642.746697][T18047] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 642.755566][T18047] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 642.764399][T18047] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 642.773209][T18047] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 642.781943][T18047] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 642.841977][T18049] syz_tun: left allmulticast mode [ 642.887778][T12470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.935259][T12470] ================================================================== [ 642.943394][T12470] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 642.951157][T12470] [ 642.953499][T12470] read-write to 0xffff888237c27550 of 8 bytes by task 18047 on cpu 0: [ 642.961672][T12470] find_get_block_common+0x498/0x8e0 [ 642.966992][T12470] bdev_getblk+0x4d/0x3f0 [ 642.971380][T12470] __bread_gfp+0x51/0x240 [ 642.975738][T12470] fat12_ent_bread+0xd0/0x380 [ 642.980440][T12470] fat_ent_read+0x3b3/0x5c0 [ 642.984966][T12470] fat_get_cluster+0x4de/0x820 [ 642.989777][T12470] fat_get_mapped_cluster+0xe4/0x240 [ 642.995117][T12470] fat_bmap+0x254/0x280 [ 642.999309][T12470] fat_get_block+0xd3/0x5e0 [ 643.003853][T12470] block_read_full_folio+0x1fd/0x6a0 [ 643.009174][T12470] do_mpage_readpage+0xcdc/0xe00 [ 643.014135][T12470] mpage_read_folio+0xbd/0x130 [ 643.018928][T12470] fat_read_folio+0x1c/0x30 [ 643.023623][T12470] filemap_read_folio+0x2e/0x110 [ 643.028592][T12470] filemap_fault+0x5bc/0xbb0 [ 643.033222][T12470] __do_fault+0xbc/0x200 [ 643.037507][T12470] handle_mm_fault+0x11d7/0x3030 [ 643.042475][T12470] __get_user_pages+0x1023/0x1ea0 [ 643.047526][T12470] __mm_populate+0x242/0x390 [ 643.052142][T12470] vm_mmap_pgoff+0x23b/0x2d0 [ 643.056753][T12470] ksys_mmap_pgoff+0x267/0x310 [ 643.061555][T12470] x64_sys_call+0x16bb/0x3000 [ 643.066252][T12470] do_syscall_64+0xc0/0x2a0 [ 643.070777][T12470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.076723][T12470] [ 643.079069][T12470] read to 0xffff888237c27550 of 8 bytes by task 12470 on cpu 1: [ 643.086725][T12470] has_bh_in_lru+0x35/0x1f0 [ 643.091276][T12470] __lru_add_drain_all+0x287/0x450 [ 643.096435][T12470] lru_add_drain_all+0x10/0x20 [ 643.101233][T12470] invalidate_bdev+0x47/0x70 [ 643.105845][T12470] ext4_put_super+0x624/0x7d0 [ 643.110540][T12470] generic_shutdown_super+0xe6/0x210 [ 643.115873][T12470] kill_block_super+0x2a/0x70 [ 643.120570][T12470] ext4_kill_sb+0x42/0x80 [ 643.124911][T12470] deactivate_locked_super+0x75/0x1c0 [ 643.130313][T12470] deactivate_super+0x97/0xa0 [ 643.135026][T12470] cleanup_mnt+0x2bb/0x330 [ 643.139463][T12470] __cleanup_mnt+0x19/0x20 [ 643.143905][T12470] task_work_run+0x130/0x1a0 [ 643.148527][T12470] exit_to_user_mode_loop+0x1f7/0x6f0 [ 643.153924][T12470] do_syscall_64+0x1d3/0x2a0 [ 643.158538][T12470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.164456][T12470] [ 643.166796][T12470] value changed: 0x0000000000000000 -> 0xffff888107cc1410 [ 643.173920][T12470] [ 643.176283][T12470] Reported by Kernel Concurrency Sanitizer on: [ 643.182459][T12470] CPU: 1 UID: 0 PID: 12470 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 643.194029][T12470] Tainted: [W]=WARN [ 643.197845][T12470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 643.207913][T12470] ================================================================== [ 643.534951][T18068] netlink: 'syz.2.8534': attribute type 39 has an invalid length. [ 643.604471][T18060] lo speed is unknown, defaulting to 1000 [ 643.611679][T18060] vcan0 speed is unknown, defaulting to 1000