last executing test programs: 5m52.434822058s ago: executing program 4 (id=143): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x800) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000640)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x49, 0x8, 0x357}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14fce400", @ANYRES64=r2, @ANYBLOB="010028bd7000fcdbdf251b000000", @ANYRES8=r0, @ANYRES32=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d562c31630100000000000000b52f0d6086e274aa97a91fa46cdcefe7534fda04ca542b4c4904446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95238403007cb9806b9641253a7b99504c950fcba378fae7ec90b6da825996012194da80cc7621803fe840ccedca203b30524e6258edbfe64d0900cdf79924bfb82ad5cfe25853d4f3a2841f7d7e692bfb1387c1211d00d4cace5a0ae3fad859bc7cb33f20922abe3780b6d07d9dde639e27dc79daef403b188d618ab4928773db8f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5m51.542429991s ago: executing program 4 (id=149): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x800) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000640)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x49, 0x8, 0x357}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d562c31630100000000000000b52f0d6086e274aa97a91fa46cdcefe7534fda04ca542b4c4904446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95238403007cb9806b9641253a7b99504c950fcba378fae7ec90b6da825996012194da80cc7621803fe840ccedca203b30524e6258edbfe64d0900cdf79924bfb82ad5cfe25853d4f3a2841f7d7e692bfb1387c1211d00d4cace5a0ae3fad859bc7cb33f20922abe3780b6d07d9dde639e27dc79daef403b188d618ab4928773db8f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5m50.560705878s ago: executing program 4 (id=158): utimes(0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8) timer_create(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xa}, {0x0, [0x5f, 0x61, 0x61, 0x5f, 0x0, 0x0, 0x30, 0x2e]}}, &(0x7f0000000740)=""/221, 0x22, 0xdd, 0x1, 0x6}, 0x28) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x38728a2, &(0x7f0000000140)={[{}]}) r3 = syz_genetlink_get_family_id$ieee802154(0x0, r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, r3, 0xe29, 0x70bd29, 0x5dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "53e0e85290ceb080fb816d3cdadf198b"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvmsg(r4, &(0x7f0000000ec0)={&(0x7f0000000440)=@un=@abs, 0x80, &(0x7f0000000d40)=[{&(0x7f00000006c0)=""/29, 0x1d}, {&(0x7f00000009c0)=""/148, 0x94}, {&(0x7f0000000b80)=""/237, 0xed}, {&(0x7f0000000c80)=""/46, 0x2e}, {&(0x7f0000000cc0)=""/22, 0x16}], 0x5}, 0x8001) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) 5m50.450698252s ago: executing program 4 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000006000000000000000600", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000020bf91000000000000b7020000020000008500000084000000b7000000000000009500000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r3, 0x0, 0x0, 0xffffffff8) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="4700000001003f", 0x7) socketpair(0x11, 0x2, 0x2, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbae, &(0x7f00000017c0)="$eJzs3M1vFGUYAPBnptsvWmkxRoWY2MSgRuNSKMGEE3g2aiIHj9R2S5ouH7Y1sQ2Hgnf1YIwHEsOfYOJdLp5MPOBB0X+AGIkhegEOa2Y/SmW7Sy27O6X8fsm787777s7zPDuw806y0wCeWBPZQxqxPyJOJxFj9efTiBio9oYi1mqvu3v74kzWkqhU3v8riSQi7ty+ONPYV1LfjtQHQxFx/a0knv60Oe7SyurCdLlcWqyPDy2fvXBoaWX1jfmz02dKZ0rnjk69eXTq2NRUB2u9eeHDr1/4+Z2XL1/9bPLdr/b+mMSJGK3PbayjUyZiYv0zyfTXt4WImO50sJz01evZWGdSyDEhAADaSjes4Z6NseiL+4u3sfjhl1yTAwAAADqi0hdRAQAAAHa5xPU/AAAA7HKN3wHcuX1xptHy/UVCb906GRHjtfob9zfXZgqxVt0OVe/b3fN3Ehtva01qb3tkE1mk734qZS26dB9yO2uXIuL5zY5/Uq1/vHoXd3P9aURMdiD+xAPjx6n+Ex2In3f9ADyZrp2snciaz3/p+vonNjn/FTY5d21H3ue/xvrvbtP67379fS3Wf+9tMcaBe69dbzW3cf33wee/zWbxs+0jFfU/3LoUcaCwWf3Jev1Ji/pPbzHGyMzNK63msvqzehut1/VXrkYcrK7mmutvSNr9faJDc/Pl0mTtcZP9rxxrH3/j8c9aFr9xLdAL2fHfE9s7/he2GGP8uT/3t5p7eP3pHwPJqWpvoP7MJ9PLy4uHIwaSt5ufP9I+l8ZrGvvI6n/1pfb//zerP/tOWKt/Dtm/nkv1bTa+/EDMkYNHvt1+/d2V1T+7zeP/xRZjfPP9lY9azeVdPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPhzQiRiNJi+v9NC0WI0Yi4pnYk5bPLy2/Pnf+43Oz2VzEePSnc/Pl0mREjNXGSTY+XO3fHx95YDwVEfsi4sux4eq4OHO+PJt38QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwbiYjRSNJiRKQR8c9YmhaLeWcFAAAAdNx43gkAAAAAXef6HwAAAHa/puv/wn9GQ73MBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF1p34vXbiQRsXZ8uNoyA/W5/lwzA7ot3fY7K5WOJgL0XF/eCQC5KWzoVyrO6fAkcY0PJA+ZH6pvf2+aGexKPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsTK/sv3YjiYi148PVlhmoz/XnmhnQbWneCQC56Ws3mfQuD6D3CnknAOTGNT5QW+rfq9Q0zw+1fOdgN9MCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYIcZrbYkLUZEWu2nabEY8VREjEd/MjdfLk1GxN6I+HWsfzAbH847aQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpuaWV1YbpcLi3qbLdz71TEDkhDZ2d1hqPrIQa7WUXe30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORhaWV1YbpcLi0u5Z0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkLelldWF6XK5tNjFTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQn38DAAD//yk3EKU=") r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000400)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5S\xd1#{\xc2L\xee\xf3\xe4\x18\x0f}\xe2\xab\xe4\x99)\xbfF\xc1\n\xa3\xb3A\x02\xe0\xba\x14\x87\xd7[\xd5-\xf7\r\xc7D\x7f4\x8b{\xfa\xa5\xa5\xd7M\x9b-\x03\x8a\x93S\x7f\xc6\x97\x12\x03R@\xf0\xfeG\xab;\x05\x9a{J\xcf#\xd6\xcaU\fO\xed\x1d\xa6\x12\xf0]\x92\xc4\xc7\xaf\xb5Ow)\xd8*\xc6\xef*\x8e\x13\xea\x1a\xac-\xa03\'Jy\xd3\xbfp\xaf\xa0\x97$\xb6\a\x99U+O8\xd1\x92\x18\xf7\xd3\x86\xc2\xaa\x05\xc0s\x8a\x005VnAXw\x00\x00\x00\x00', 0x3a, './file2', 0x3a, [0x46, 0x43, 0x4f, 0x43, 0x50, 0x43]}, 0xef) mount(0x0, 0x0, 0x0, 0x2200020, 0x0) 5m49.635734191s ago: executing program 4 (id=162): syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 5m49.323646266s ago: executing program 4 (id=167): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x1e, 0x0, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x80000003, @local, 0x2}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000d00)=0x108) perf_event_open(&(0x7f0000000040)={0x2, 0xd6, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000000000c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setitimer(0x2, &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x6, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000e40)={[{@noload}, {@noblock_validity}, {@discard}, {@norecovery}, {@abort, 0x0}, {@noauto_da_alloc}, {@dioread_nolock}, {@noquota}, {@nodioread_nolock}, {@auto_da_alloc}, {@resuid}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@data_ordered}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x6, 0x50c, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000f40)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=r2, @ANYBLOB="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"], 0x1, 0x222, &(0x7f0000001080)="$eJzs3btuE00UAODjS3z59RfpkJCQFiigioAnCEJBQlhCCnIBXSRSxVW28aZJHoNX4L14AJQqDVrkrNc37OAY2ZbR9zU52TNndmbHXm/jcR6F7w++RqtViephHMZNJfajGqWrmFX/7QgAsDtu8jx+5IX7V3sOAIBdtMTn/88NDwkAWLOPnz6/f93pHB0nSSvi+qrf7XeLv0X+7bvO0Yvk1v646rrf79ZG+ZfJ7LPDIL8X/w3zr4r6ZJRuRES3Ec+fFvlB7s2HTjJd34wva547AAAAAAAAAAAAAAAAAAAAAABsy6NISnP39zk4mM23h/niv4n9gWb276nHw3J74PH2QPnlJiYFAAAAAAAAAAAAAAAAAAAAOybNLs5Oer3T83HQjIjJI/U5bRYHlWHHSzVOs9ryPa8lqMZq5e3hNFc4aWV4ibLGoH5dE2zPX9zFQXW0cFHf8qL8dZDMS0XEk/t22CyXuRYR06l2VO4oz/NBMP9dUG6LsbB88MJY2PPtcJ4dr3p9bvI87317fJ5mkd/ZeHyPaG7iRgQAAAAAAAAAAAAAAAAAAETamPxe8bRWbRsjAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDNS7OL8lf+L85Oer3T8zRbOriMiP/jj43Lc+1Fa3sTBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4J/2KwAA//9PyhF9") r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000378000/0x2000)=nil, 0x2000, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000"], 0x40c4}}, 0x0) 5m49.279241148s ago: executing program 32 (id=167): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x1e, 0x0, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x80000003, @local, 0x2}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000800)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000e40000009e1ed0886f34f65282cd87a2a453553de9f4ec3c6fb3685ef6c9fc3cd3ce3992f00a8e74f92a399b166df52fea4f3d7fc1d3b13a2856afcab2ec738ca37df2384e37bc00313c22ace5a9a4d5c30579e5490cc60b5d81e25bd172ded311eeafbba91a03d7bae23b93f55dc0bf5d1c6eb3e4138988dad3f8437f432e6e6e0fe0e56b10fbf102eea3deacfb2048a2eec4f35ab194152c85cc1b1aa0f1b94bca625e6e41ef6c9ada99ccbb6144f2b60f9e5f08d6723f76341ff0257b62ffcc77b4aa89ffa86954de64335ad86cf912ac02986e95abdee34d33d38f798771fe83e9d703ac95097fbc2afb490dc8ddd5ba61480f897f929dba00706b2de3f2f3a6f0b41887ffdc0e7c77c61aef5b7071101541afc961163cc4dccdb2b048a545b7a4"], &(0x7f0000000d00)=0x108) perf_event_open(&(0x7f0000000040)={0x2, 0xd6, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000000000c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setitimer(0x2, &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x6, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000e40)={[{@noload}, {@noblock_validity}, {@discard}, {@norecovery}, {@abort, 0x0}, {@noauto_da_alloc}, {@dioread_nolock}, {@noquota}, {@nodioread_nolock}, {@auto_da_alloc}, {@resuid}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@data_ordered}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x6, 0x50c, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000f40)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=r2, @ANYBLOB="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"], 0x1, 0x222, &(0x7f0000001080)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000378000/0x2000)=nil, 0x2000, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000"], 0x40c4}}, 0x0) 1m3.243262001s ago: executing program 0 (id=3439): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x800) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000640)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x49, 0x8, 0x357}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14fce400", @ANYRES64=r2, @ANYRES8=r0, @ANYRES32=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d562c31630100000000000000b52f0d6086e274aa97a91fa46cdcefe7534fda04ca542b4c4904446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95238403007cb9806b9641253a7b99504c950fcba378fae7ec90b6da825996012194da80cc7621803fe840ccedca203b30524e6258edbfe64d0900cdf79924bfb82ad5cfe25853d4f3a2841f7d7e692bfb1387c1211d00d4cace5a0ae3fad859bc7cb33f20922abe3780b6d07d9dde639e27dc79daef403b188d618ab4928773db8f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m3.146946985s ago: executing program 0 (id=3440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x154}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x66, 0x80000001}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) clock_getres(0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c800}, 0xc000) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) getdents64(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) syz_usb_disconnect(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000280)={[{@block_validity}, {@nogrpid}, {@quota}]}, 0x1, 0x526, &(0x7f00000027c0)="$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") r2 = creat(&(0x7f0000000000)='./file1\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x16d0c2, 0x82) pwrite64(r3, 0x0, 0x0, 0x8000c61) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0x0, 0x0}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1m2.173187571s ago: executing program 0 (id=3463): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x800) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000640)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x49, 0x8, 0x357}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14fce400", @ANYRES64=r2, @ANYBLOB="010028bd7000fcdbdf251b000000", @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d562c31630100000000000000b52f0d6086e274aa97a91fa46cdcefe7534fda04ca542b4c4904446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95238403007cb9806b9641253a7b99504c950fcba378fae7ec90b6da825996012194da80cc7621803fe840ccedca203b30524e6258edbfe64d0900cdf79924bfb82ad5cfe25853d4f3a2841f7d7e692bfb1387c1211d00d4cace5a0ae3fad859bc7cb33f20922abe3780b6d07d9dde639e27dc79daef403b188d618ab4928773db8f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m1.921210843s ago: executing program 0 (id=3468): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x201, 0x9, 0x0, 0x3, 0x800000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) syz_emit_ethernet(0x7e, &(0x7f0000000340)={@link_local, @random="86082b9827c1", @val={@val={0x88a8, 0x6, 0x1, 0x4}, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) syz_emit_ethernet(0x96d, &(0x7f0000000800)={@local, @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x937, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x83000000, [{0x3, 0xa, "a78ce540aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0a0b000000be27df3e34066d42c60a5c15b37ada6eb0d2a053d25628546e3026b0fbc15084dbaf736b41d5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f025"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x1f, 0x5, "090000000900000036da018dff16a70b8b1400001600e18e88605aa6be1a02a326a6bce65f81ed"}, {0x1f, 0xb, "d4e77f8854c2b77855807444dd5cbd4b0ddeac8f5280f5d9178b66796b4c15a850e4078c8a61f4a1936bfd2868bfb38d16aa1129954c7c1c102f6eea58a67659ed751b2a1dea57caba3e1ce15024c25eb512471954efdf4de80d7ca3c6"}, {0x22, 0xc8, "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"}]}}}}}}, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}}, 0x4) socket(0x3a, 0x1, 0x7ff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,soft,eo=1,retrans=1,sec=krb5']) 1m1.864463786s ago: executing program 0 (id=3469): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 1m1.717348993s ago: executing program 0 (id=3471): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x0) write$ppp(r0, &(0x7f0000002440)='\nr', 0x2) 49.834069454s ago: executing program 1 (id=3688): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4000000000000004, 0x1f2], &(0x7f00000003c0)=[0x2], 0x0, 0x20000000000001f1, 0x1}}, 0x40) 49.811525295s ago: executing program 1 (id=3689): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x800) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000640)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x49, 0x8, 0x357}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES64=r2, @ANYBLOB="010028bd7000fcdbdf251b000000", @ANYRES8=r0, @ANYRES32=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d562c31630100000000000000b52f0d6086e274aa97a91fa46cdcefe7534fda04ca542b4c4904446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95238403007cb9806b9641253a7b99504c950fcba378fae7ec90b6da825996012194da80cc7621803fe840ccedca203b30524e6258edbfe64d0900cdf79924bfb82ad5cfe25853d4f3a2841f7d7e692bfb1387c1211d00d4cace5a0ae3fad859bc7cb33f20922abe3780b6d07d9dde639e27dc79daef403b188d618ab4928773db8f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 49.255651402s ago: executing program 1 (id=3706): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x8, 0xa}]}, 0x10) r1 = dup(r0) write$P9_RRENAME(r1, &(0x7f0000000240)={0x7, 0x15, 0x2}, 0x7) 48.323550785s ago: executing program 1 (id=3720): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='f'], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 48.088723277s ago: executing program 1 (id=3725): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x800) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000640)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x49, 0x8, 0x357}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES64=r2, @ANYBLOB="010028bd7000fcdbdf251b000000", @ANYRES8=r0, @ANYRES32=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d562c31630100000000000000b52f0d6086e274aa97a91fa46cdcefe7534fda04ca542b4c4904446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95238403007cb9806b9641253a7b99504c950fcba378fae7ec90b6da825996012194da80cc7621803fe840ccedca203b30524e6258edbfe64d0900cdf79924bfb82ad5cfe25853d4f3a2841f7d7e692bfb1387c1211d00d4cace5a0ae3fad859bc7cb33f20922abe3780b6d07d9dde639e27dc79daef403b188d618ab4928773db8f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 47.520438064s ago: executing program 1 (id=3730): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 47.470819656s ago: executing program 33 (id=3730): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 46.596926617s ago: executing program 34 (id=3471): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x0) write$ppp(r0, &(0x7f0000002440)='\nr', 0x2) 29.916768125s ago: executing program 3 (id=3907): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 29.916468416s ago: executing program 3 (id=3909): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0xa) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000001c0)={0xc, r1, 0x9, 0x1, 0x400, 0xfffffffffdffffff}) 29.730489074s ago: executing program 3 (id=3911): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0xc3ff, {0x0, 0x0, 0x74, r2, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 29.596964001s ago: executing program 3 (id=3914): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000020, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 29.522062524s ago: executing program 3 (id=3916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x1}, {0xffffffffffffffff, 0x5, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 29.375901961s ago: executing program 3 (id=3917): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x3a, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x1000000, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) 29.375695151s ago: executing program 35 (id=3917): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x3a, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x1000000, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) 2.632944636s ago: executing program 8 (id=4366): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.3332562s ago: executing program 5 (id=4369): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48) fchown(r0, 0x0, 0xee01) syz_clone(0x80b44440, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc1042, 0x0) fchown(r0, 0x0, 0x0) 2.291321952s ago: executing program 8 (id=4379): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x800) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000640)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x49, 0x8, 0x357}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14fce400", @ANYRES64=r2, @ANYBLOB="010028bd7000fcdbdf251b000000", @ANYRES8=r0, @ANYRES32=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.894825081s ago: executing program 8 (id=4373): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/19, 0x13}, 0x68000}], 0x1, 0x10002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.460123911s ago: executing program 7 (id=4390): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) 1.416495833s ago: executing program 5 (id=4380): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x800) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000640)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x49, 0x8, 0x357}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14fce400", @ANYRES64=r2, @ANYBLOB="010028bd7000fcdbdf251b000000", @ANYRES8=r0, @ANYRES32=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.398273714s ago: executing program 2 (id=4381): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0xdb, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500, 0x8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x800) 1.341591607s ago: executing program 2 (id=4382): io_uring_setup(0x1684, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x210000, &(0x7f0000000740)={[{@user_xattr}, {@noquota}, {@mb_optimize_scan}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x1f}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x66, 0x37, 0x36, 0x32, 0x36, 0x37, 0x38], 0x2d, [0x32, 0x31, 0x61, 0x65], 0x2d, [0x65, 0x34, 0x30, 0x30], 0x2d, [0x35, 0x64, 0x39, 0x64], 0x2d, [0x32, 0x4, 0x37, 0x63, 0x65, 0x38, 0x31, 0x60]}}}, {@context={'context', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, '..[,.!!'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$!{'}}]}, 0x3, 0x5bd, &(0x7f0000001040)="$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") add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28) 1.341040107s ago: executing program 7 (id=4383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.26732244s ago: executing program 6 (id=4385): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x800) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000640)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x49, 0x8, 0x357}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14fce400", @ANYRES64=r2, @ANYBLOB="010028bd7000fcdbdf251b000000", @ANYRES8=r0, @ANYRES32=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.198118654s ago: executing program 2 (id=4386): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x0, 0x0, 0x39, 0x0, "bb02a3c30400e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324dc0a1d3aaee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 986.762393ms ago: executing program 5 (id=4387): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0xe9) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 981.092124ms ago: executing program 7 (id=4388): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001029bd7000fcffffff000000", @ANYRES32=0x0, @ANYBLOB="80210000000000001400030077"], 0x40}}, 0x20040084) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000308050000000000"], 0x28}}, 0x0) write(r0, &(0x7f0000000000)="0100000000000007e0", 0x9) 971.981244ms ago: executing program 8 (id=4389): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x800) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000640)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x49, 0x8, 0x357}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14fce400", @ANYRES64=r2, @ANYBLOB="010028bd7000fcdbdf251b000000", @ANYRES8=r0, @ANYRES32=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d562c31630100000000000000b52f0d6086e274aa97a91fa46cdcefe7534fda04ca542b4c4904446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95238403007cb9806b9641253a7b99504c950fcba378fae7ec90b6da825996012194da80cc7621803fe840ccedca203b30524e6258edbfe64d0900cdf79924bfb82ad5cfe25853d4f3a2841f7d7e692bfb1387c1211d00d4cace5a0ae3fad859bc7cb33f20922abe3780b6d07d9dde639e27dc79daef403b188d618ab4928773db8f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 906.264087ms ago: executing program 7 (id=4391): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x800) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000640)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x49, 0x8, 0x357}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14fce400", @ANYRES64, @ANYBLOB="010028bd7000fcdbdf251b000000", @ANYRES8=r0, @ANYRES32=r3], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d562c31630100000000000000b52f0d6086e274aa97a91fa46cdcefe7534fda04ca542b4c4904446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95238403007cb9806b9641253a7b99504c950fcba378fae7ec90b6da825996012194da80cc7621803fe840ccedca203b30524e6258edbfe64d0900cdf79924bfb82ad5cfe25853d4f3a2841f7d7e692bfb1387c1211d00d4cace5a0ae3fad859bc7cb33f20922abe3780b6d07d9dde639e27dc79daef403b188d618ab4928773db8f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 905.569137ms ago: executing program 5 (id=4392): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x4, 0x8, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7ff, 0x1}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000800", @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 872.051329ms ago: executing program 6 (id=4393): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mknod$loop(0x0, 0xc000, 0x1) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffe4) 858.326099ms ago: executing program 5 (id=4394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 725.630396ms ago: executing program 2 (id=4395): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x9, 0xcffe, 0xe, "0062ba7d8200000016001b000200f705096604"}) r1 = syz_open_pts(r0, 0xa0200) r2 = dup3(r1, r0, 0x80000) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000040)={0x7, 0x4, 0x2, 0x3, 0x16, "e533991cd00ee11a"}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000140)) 581.437413ms ago: executing program 6 (id=4396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xd}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x80) 529.375255ms ago: executing program 8 (id=4397): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0xa) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000001c0)={0xc, r1, 0x9, 0x1, 0x400, 0xfffffffffdffffff}) 515.275716ms ago: executing program 7 (id=4398): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 463.527108ms ago: executing program 2 (id=4399): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x800) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000640)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x49, 0x8, 0x357}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14fce400", @ANYRES64=r2, @ANYBLOB="010028bd7000fcdbdf251b000000", @ANYRES8=r0, @ANYRES32=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 414.75883ms ago: executing program 8 (id=4400): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x8}, 0x10c0ec, 0x3, 0x40b7, 0x3, 0x9, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) socket$l2tp6(0xa, 0x2, 0x73) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3022010, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7ef, &(0x7f0000002440)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x10) fallocate(r0, 0x0, 0x0, 0x8800000) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='\na', 0x2) 323.712695ms ago: executing program 7 (id=4401): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x800) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000640)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x49, 0x8, 0x357}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14fce400", @ANYRES64=r2, @ANYBLOB="010028bd7000fcdbdf251b000000", @ANYRES8=r0, @ANYRES32=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 322.726595ms ago: executing program 6 (id=4402): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0xff, 0x0, 0x7, 0x520, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x7, 0x8, 0x20005, 0xffff, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x10408, 0x1, 0x0, 0x3, 0x800002, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0x0, 0xfffffffffffffd6b}, &(0x7f00000000c0)=ANY=[], 0x0, 0x0) 219.52359ms ago: executing program 6 (id=4403): socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf, 0xd}, {0x0, 0xc}}}, 0x24}}, 0x4004004) 211.87901ms ago: executing program 2 (id=4404): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000980)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x3, 0x7dfe}, 0x8) 136.771753ms ago: executing program 5 (id=4405): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x800) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000640)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x49, 0x8, 0x357}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14fce400", @ANYRES64=r2, @ANYBLOB="010028bd7000fcdbdf251b000000", @ANYRES8=r0, @ANYRES32=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 6 (id=4406): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x800) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000640)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x49, 0x8, 0x357}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14fce400", @ANYRES64=r2, @ANYBLOB="010028bd7000fcdbdf251b000000", @ANYRES8=r0, @ANYRES32=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d562c31630100000000000000b52f0d6086e274aa97a91fa46cdcefe7534fda04ca542b4c4904446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95238403007cb9806b9641253a7b99504c950fcba378fae7ec90b6da825996012194da80cc7621803fe840ccedca203b30524e6258edbfe64d0900cdf79924bfb82ad5cfe25853d4f3a2841f7d7e692bfb1387c1211d00d4cace5a0ae3fad859bc7cb33f20922abe3780b6d07d9dde639e27dc79daef403b188d618ab4928773db8f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): s suppressed [ 366.255569][T15201] --map-set only usable from mangle table [ 366.257020][ T29] audit: type=1400 audit(2000000042.290:5140): avc: denied { mounton } for pid=15200 comm="syz.3.3618" path="/proc/1759/task" dev="proc" ino=48172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 366.431371][T15184] EXT4-fs error (device loop2): __ext4_remount:6872: comm syz.2.3610: Abort forced by user [ 366.431525][T15184] EXT4-fs (loop2): Remounting filesystem read-only [ 366.431542][T15184] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 366.558795][T15215] nfs4: Unknown parameter 'eo' [ 366.615168][T15219] nfs4: Unknown parameter 'eo' [ 366.714708][T15223] --map-set only usable from mangle table [ 366.721475][T15221] --map-set only usable from mangle table [ 366.961041][T15231] --map-set only usable from mangle table [ 367.307757][T15247] --map-set only usable from mangle table [ 367.397668][T15252] netlink: 'syz.1.3635': attribute type 10 has an invalid length. [ 367.677198][T15278] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 367.677227][T15278] syzkaller1: Linktype set failed because interface is up [ 367.754963][T15275] --map-set only usable from mangle table [ 367.785711][T15288] loop1: detected capacity change from 0 to 512 [ 367.812785][T15288] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.3643: bg 0: block 5: invalid block bitmap [ 367.812825][T15288] loop1: lost filesystem error report for type 5 error -117 [ 367.813007][T15288] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 367.813033][T15288] loop1: lost filesystem error report for type 5 error -117 [ 367.813153][T15288] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3643: invalid indirect mapped block 3 (level 2) [ 367.813182][T15288] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 367.813402][T15288] EXT4-fs (loop1): 1 orphan inode deleted [ 367.813424][T15288] EXT4-fs (loop1): 1 truncate cleaned up [ 368.010321][T15305] nfs4: Unknown parameter 'eo' [ 368.026531][T15302] nfs4: Unknown parameter 'eo' [ 368.101898][T15313] nfs4: Unknown parameter 'eo' [ 368.168634][T15317] SELinux: invalid class [ 368.175778][T15317] SELinux: failed to load policy [ 368.280705][T15331] nfs4: Unknown parameter 'eo' [ 368.586157][T15369] nfs4: Unknown parameter 'eo' [ 368.622644][ T29] audit: type=1400 audit(2000000044.660:5141): avc: denied { watch } for pid=15377 comm="syz.5.3659" path="/752/file0" dev="tmpfs" ino=4204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 368.681380][T15386] --map-set only usable from mangle table [ 369.061023][T15418] --map-set only usable from mangle table [ 369.091037][T15423] nfs4: Unknown parameter 'eo' [ 369.333978][T15449] --map-set only usable from mangle table [ 369.356969][T15451] loop3: detected capacity change from 0 to 512 [ 369.442552][T15456] SELinux: DCCP has been removed, pid=15456 comm=syz.3.3670 [ 369.576595][T15466] nfs4: Unknown parameter 'eo' [ 369.588369][T15468] --map-set only usable from mangle table [ 370.816610][ T29] audit: type=1400 audit(2000000046.850:5142): avc: denied { firmware_load } for pid=15526 comm="syz.5.3697" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 370.971577][T15538] nfs4: Unknown parameter 'eo' [ 371.032115][T15544] netlink: 'syz.5.3705': attribute type 21 has an invalid length. [ 371.032147][T15544] IPv6: NLM_F_CREATE should be specified when creating new route [ 371.262815][ T29] audit: type=1400 audit(2000000047.200:5143): avc: denied { watch_reads } for pid=15559 comm="syz.5.3711" path="/775" dev="tmpfs" ino=4327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 371.331252][T15562] set_target_v3_check_hooks: 7 callbacks suppressed [ 371.331431][T15562] --map-set only usable from mangle table [ 371.340672][T15564] --map-set only usable from mangle table [ 371.668884][T15569] nfs4: Unknown parameter 'eo' [ 371.703826][T15577] --map-set only usable from mangle table [ 371.706686][T15574] --map-set only usable from mangle table [ 371.712518][T15578] loop3: detected capacity change from 0 to 1024 [ 371.774122][T15578] ext4 filesystem being mounted at /670/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.776607][ T29] audit: type=1400 audit(2000000047.810:5144): avc: denied { write } for pid=15576 comm="syz.3.3718" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.777046][T15578] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 3: comm syz.3.3718: lblock 3 mapped to illegal pblock 3 (length 2) [ 371.777948][T15578] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.3718: lblock 0 mapped to illegal pblock 0 (length 3) [ 371.778226][T15578] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 371.778257][T15578] EXT4-fs (loop3): This should not happen!! Data will be lost [ 371.778257][T15578] [ 371.779080][T15578] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 4: comm syz.3.3718: lblock 4 mapped to illegal pblock 4 (length 1) [ 371.779454][T15578] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 371.779486][T15578] EXT4-fs (loop3): This should not happen!! Data will be lost [ 371.779486][T15578] [ 371.917620][ T3304] EXT4-fs unmount: 36 callbacks suppressed [ 371.917642][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 372.125907][T15587] loop1: detected capacity change from 0 to 8192 [ 372.141264][T15590] --map-set only usable from mangle table [ 372.152479][T15594] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 372.152513][T15594] SELinux: failed to load policy [ 372.357805][T15603] --map-set only usable from mangle table [ 372.447523][ T3299] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 372.447547][ T3299] FAT-fs (loop1): Filesystem has been set read-only [ 372.587097][T13990] syz_tun (unregistering): left allmulticast mode [ 372.681330][T15613] --map-set only usable from mangle table [ 372.709688][T15612] loop3: detected capacity change from 0 to 512 [ 372.738380][T15612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.738506][T15612] ext4 filesystem being mounted at /674/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.771626][ T29] audit: type=1400 audit(2000000048.810:5145): avc: denied { write } for pid=15611 comm="syz.3.3729" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 372.775911][ T29] audit: type=1400 audit(2000000048.810:5146): avc: denied { write } for pid=15611 comm="syz.3.3729" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 372.860975][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.996892][ T29] audit: type=1400 audit(2000000049.030:5147): avc: denied { mounton } for pid=15621 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 373.600329][T15621] wg1 speed is unknown, defaulting to 1000 [ 373.846898][T12248] syz_tun (unregistering): left allmulticast mode [ 373.855590][T15654] --map-set only usable from mangle table [ 373.905231][T15621] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.905265][T15621] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.905345][T15621] bridge_slave_0: entered allmulticast mode [ 373.905867][T15621] bridge_slave_0: entered promiscuous mode [ 373.933087][T15621] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.933130][T15621] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.933280][T15621] bridge_slave_1: entered allmulticast mode [ 373.933838][T15621] bridge_slave_1: entered promiscuous mode [ 373.972500][T15621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.973732][T15621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.060665][T15668] --map-set only usable from mangle table [ 374.062682][T15621] team0: Port device team_slave_0 added [ 374.063723][T15621] team0: Port device team_slave_1 added [ 374.075795][T15621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.075815][T15621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.075917][T15621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.076605][T15621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.076621][T15621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.076702][T15621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.094885][T15621] hsr_slave_0: entered promiscuous mode [ 374.095372][T15621] hsr_slave_1: entered promiscuous mode [ 374.095634][T15621] debugfs: 'hsr0' already exists in 'hsr' [ 374.095652][T15621] Cannot create hsr debugfs directory [ 374.146088][T15675] loop2: detected capacity change from 0 to 128 [ 374.147891][T15675] FAT-fs (loop2): bogus sectors per cluster 7 [ 374.147948][T15675] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 374.147998][T15675] FAT-fs (loop2): Can't find a valid FAT filesystem [ 374.385376][T15650] wg1 speed is unknown, defaulting to 1000 [ 374.429788][T15679] --map-set only usable from mangle table [ 374.471285][T15621] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 374.493492][T15621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 374.495105][T15621] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 374.515309][T15621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 374.546889][T15621] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 374.549309][T15621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 374.550016][T15621] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 374.551992][T15621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 374.593431][T15650] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.593521][T15650] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.593584][T15650] bridge_slave_0: entered allmulticast mode [ 374.594102][T15650] bridge_slave_0: entered promiscuous mode [ 374.600397][T15621] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.600562][T15621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.600841][T15621] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.600944][T15621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.683452][T15650] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.683490][T15650] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.683680][T15650] bridge_slave_1: entered allmulticast mode [ 374.684429][T15650] bridge_slave_1: entered promiscuous mode [ 374.726167][T15650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.727863][T15650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.763354][T15650] team0: Port device team_slave_0 added [ 374.767081][T15621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.786212][ T94] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.787353][ T94] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.810450][T15650] team0: Port device team_slave_1 added [ 374.855341][T15621] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.871537][T15650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.871553][T15650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.871634][T15650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.873797][T15650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.873874][T15650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.873904][T15650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.929351][ T1925] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.929480][ T1925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.932524][ T1925] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.932619][ T1925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.023890][T15650] hsr_slave_0: entered promiscuous mode [ 375.024318][T15650] hsr_slave_1: entered promiscuous mode [ 375.024621][T15650] debugfs: 'hsr0' already exists in 'hsr' [ 375.024642][T15650] Cannot create hsr debugfs directory [ 375.167876][T15650] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 375.171836][T15650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 375.172589][T15650] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 375.181244][T15650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 375.181928][T15650] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 375.183714][T15725] loop2: detected capacity change from 0 to 512 [ 375.185838][T15725] ext4: Unknown parameter 'dont_hash' [ 375.187253][T15650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 375.188043][T15650] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 375.190659][T15650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 375.329529][T15621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.385310][T15650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.401521][T15650] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.417019][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.417058][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.436287][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.436331][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.557135][T15621] veth0_vlan: entered promiscuous mode [ 375.560013][T15621] veth1_vlan: entered promiscuous mode [ 375.573651][T15621] veth0_macvtap: entered promiscuous mode [ 375.584958][T15621] veth1_macvtap: entered promiscuous mode [ 375.591965][T15621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.597222][T15621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.634353][T15769] nfs4: Unknown parameter 'eo' [ 375.676303][ T29] audit: type=1400 audit(2000000051.710:5148): avc: denied { mounton } for pid=15621 comm="syz-executor" path="/root/syzkaller.SsjuoR/syz-tmp" dev="sda1" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 375.676337][ T29] audit: type=1400 audit(2000000051.710:5149): avc: denied { mount } for pid=15621 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 375.705293][ T29] audit: type=1400 audit(2000000051.740:5150): avc: denied { mounton } for pid=15621 comm="syz-executor" path="/root/syzkaller.SsjuoR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 375.727806][ T94] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.728456][ T29] audit: type=1400 audit(2000000051.770:5151): avc: denied { mounton } for pid=15621 comm="syz-executor" path="/root/syzkaller.SsjuoR/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=49797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 375.734630][ T94] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.735222][ T94] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.737627][ T94] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.779916][T15773] loop2: detected capacity change from 0 to 512 [ 375.831383][T15773] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.3758: bg 0: block 4: invalid block bitmap [ 375.831478][T15773] loop2: lost filesystem error report for type 5 error -117 [ 375.831732][T15773] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 375.831837][T15773] loop2: lost filesystem error report for type 5 error -117 [ 375.831993][T15773] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3758: invalid indirect mapped block 1 (level 1) [ 375.832054][T15773] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 375.832445][T15773] EXT4-fs (loop2): 1 truncate cleaned up [ 375.832935][T15773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.833133][ T29] audit: type=1400 audit(2000000051.870:5152): avc: denied { mounton } for pid=15621 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 375.833233][ T29] audit: type=1400 audit(2000000051.870:5153): avc: denied { mount } for pid=15621 comm="syz-executor" name="/" dev="gadgetfs" ino=4678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 375.835597][ T29] audit: type=1400 audit(2000000051.870:5154): avc: denied { write } for pid=15772 comm="syz.2.3758" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 375.835644][ T29] audit: type=1400 audit(2000000051.870:5155): avc: denied { read } for pid=15772 comm="syz.2.3758" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 375.835704][ T29] audit: type=1400 audit(2000000051.870:5156): avc: denied { open } for pid=15772 comm="syz.2.3758" path="/766/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 375.854713][T15650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.022125][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.337131][T15809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.337250][T15809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.393783][T15650] veth0_vlan: entered promiscuous mode [ 376.396246][T15650] veth1_vlan: entered promiscuous mode [ 376.453416][T15650] veth0_macvtap: entered promiscuous mode [ 376.455549][T15650] veth1_macvtap: entered promiscuous mode [ 376.461516][T15650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.466303][T15650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.470104][ T38] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.470224][ T38] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.470317][ T38] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.470354][ T38] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.517992][T15822] set_target_v3_check_hooks: 8 callbacks suppressed [ 376.518009][T15822] --map-set only usable from mangle table [ 377.122847][T15827] wg1 speed is unknown, defaulting to 1000 [ 377.175819][T15821] pim6reg: entered allmulticast mode [ 377.184680][T15838] netlink: 'syz.3.3770': attribute type 3 has an invalid length. [ 377.233433][T15821] pim6reg: left allmulticast mode [ 377.321185][T15845] --map-set only usable from mangle table [ 377.331651][T15821] loop7: detected capacity change from 0 to 8192 [ 377.353967][T15841] md: could not open device unknown-block(1,0). [ 377.373542][T15849] md: could not open device unknown-block(1,1). [ 377.544345][T15857] [ 377.569053][T15859] loop3: detected capacity change from 0 to 128 [ 377.584034][T15859] FAT-fs (loop3): bogus sectors per cluster 7 [ 377.584053][T15859] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 377.584067][T15859] FAT-fs (loop3): Can't find a valid FAT filesystem [ 377.605120][T15859] loop3: detected capacity change from 0 to 512 [ 377.648254][T15859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.661710][ T29] audit: type=1400 audit(2000000053.690:5157): avc: denied { write } for pid=15858 comm="syz.3.3777" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.733835][T15864] --map-set only usable from mangle table [ 377.776843][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.888771][T15872] xt_hashlimit: size too large, truncated to 1048576 [ 377.915286][T15878] md: md0 stopped. [ 378.083062][T15879] wg1 speed is unknown, defaulting to 1000 [ 378.341469][T15894] --map-set only usable from mangle table [ 378.346335][T15897] loop7: detected capacity change from 0 to 1024 [ 378.362856][T15897] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 378.364587][T15897] JBD2: no valid journal superblock found [ 378.364673][T15897] EXT4-fs (loop7): Could not load journal inode [ 379.034547][T15905] ./dev/sda1: Can't lookup blockdev [ 379.203773][T15908] --map-set only usable from mangle table [ 379.241590][T15916] FAULT_INJECTION: forcing a failure. [ 379.241590][T15916] name failslab, interval 1, probability 0, space 0, times 0 [ 379.241713][T15916] CPU: 0 UID: 0 PID: 15916 Comm: syz.2.3797 Not tainted syzkaller #0 PREEMPT(lazy) [ 379.241746][T15916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 379.241759][T15916] Call Trace: [ 379.241765][T15916] [ 379.241773][T15916] __dump_stack+0x1d/0x30 [ 379.241865][T15916] dump_stack_lvl+0x95/0xd0 [ 379.241927][T15916] dump_stack+0x15/0x1b [ 379.242022][T15916] should_fail_ex+0x262/0x280 [ 379.242049][T15916] should_failslab+0x8c/0xb0 [ 379.242089][T15916] __kvmalloc_node_noprof+0x168/0x5c0 [ 379.242208][T15916] ? io_rsrc_data_alloc+0x2d/0x70 [ 379.242319][T15916] ? io_rsrc_data_alloc+0x2d/0x70 [ 379.242359][T15916] io_rsrc_data_alloc+0x2d/0x70 [ 379.242492][T15916] io_alloc_file_tables+0x21/0x90 [ 379.242519][T15916] io_sqe_files_register+0x12e/0x4e0 [ 379.242557][T15916] __se_sys_io_uring_register+0xe7e/0x1330 [ 379.242662][T15916] ? __se_sys_futex+0x2f6/0x370 [ 379.242729][T15916] ? restore_fpregs_from_fpstate+0x61/0x110 [ 379.242763][T15916] __x64_sys_io_uring_register+0x55/0x70 [ 379.242811][T15916] x64_sys_call+0x1ff6/0x2550 [ 379.242837][T15916] do_syscall_64+0x112/0x360 [ 379.242906][T15916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.242938][T15916] RIP: 0033:0x7fa3f631e159 [ 379.242957][T15916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.242977][T15916] RSP: 002b:00007fa3f4d77028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 379.243005][T15916] RAX: ffffffffffffffda RBX: 00007fa3f65a5fa0 RCX: 00007fa3f631e159 [ 379.243019][T15916] RDX: 0000200000002d40 RSI: 0000000000000002 RDI: 0000000000000003 [ 379.243032][T15916] RBP: 00007fa3f63b503b R08: 0000000000000000 R09: 0000000000000000 [ 379.243104][T15916] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 379.243119][T15916] R13: 00007fa3f65a6038 R14: 00007fa3f65a5fa0 R15: 00007ffd7b19b738 [ 379.243140][T15916] [ 379.356940][T15913] loop6: detected capacity change from 0 to 1024 [ 379.363325][T15913] EXT4-fs: Ignoring removed oldalloc option [ 379.367276][T15913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 379.367485][T15913] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 379.367561][T15913] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 379.540643][T15922] loop7: detected capacity change from 0 to 512 [ 379.572213][T15927] --map-set only usable from mangle table [ 379.657411][T15932] loop3: detected capacity change from 0 to 1024 [ 379.751530][T15922] syz.7.3800: attempt to access beyond end of device [ 379.751530][T15922] loop7: rw=2049, sector=528, nr_sectors = 32 limit=512 [ 379.751605][T15922] syz.7.3800: attempt to access beyond end of device [ 379.751605][T15922] loop7: rw=2049, sector=592, nr_sectors = 32 limit=512 [ 379.751742][T15922] syz.7.3800: attempt to access beyond end of device [ 379.751742][T15922] loop7: rw=2049, sector=656, nr_sectors = 32 limit=512 [ 379.751936][T15922] syz.7.3800: attempt to access beyond end of device [ 379.751936][T15922] loop7: rw=2049, sector=720, nr_sectors = 32 limit=512 [ 379.751997][T15922] syz.7.3800: attempt to access beyond end of device [ 379.751997][T15922] loop7: rw=2049, sector=784, nr_sectors = 32 limit=512 [ 379.752095][T15922] syz.7.3800: attempt to access beyond end of device [ 379.752095][T15922] loop7: rw=2049, sector=848, nr_sectors = 32 limit=512 [ 379.752250][T15922] syz.7.3800: attempt to access beyond end of device [ 379.752250][T15922] loop7: rw=2049, sector=912, nr_sectors = 32 limit=512 [ 379.752310][T15922] syz.7.3800: attempt to access beyond end of device [ 379.752310][T15922] loop7: rw=2049, sector=976, nr_sectors = 32 limit=512 [ 379.752423][T15922] syz.7.3800: attempt to access beyond end of device [ 379.752423][T15922] loop7: rw=2049, sector=1040, nr_sectors = 32 limit=512 [ 379.752540][T15922] syz.7.3800: attempt to access beyond end of device [ 379.752540][T15922] loop7: rw=2049, sector=1104, nr_sectors = 32 limit=512 [ 379.783861][T15932] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 379.812550][T15932] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.3804: lblock 2 mapped to illegal pblock 2 (length 1) [ 379.812768][T15932] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 379.813056][T15932] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 379.813112][T15932] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.3804: lblock 0 mapped to illegal pblock 48 (length 1) [ 379.813227][T15932] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 379.813516][T15932] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 379.813569][T15932] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.3804: Failed to acquire dquot type 0 [ 379.813636][T15932] loop3: lost filesystem error report for type 5 error -117 [ 379.813916][T15932] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 379.813982][T15932] loop3: lost filesystem error report for type 5 error -117 [ 379.814755][T15932] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.3804: mark_inode_dirty error [ 379.814862][T15932] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 379.815115][T15932] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 379.815285][T15932] EXT4-fs (loop3): 1 orphan inode deleted [ 379.816494][T15932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.909660][ T70] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 379.910162][ T70] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 379.910216][ T70] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:4: Failed to release dquot type 0 [ 379.976872][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.977586][ T3304] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 379.977741][ T3304] loop3: lost filesystem error report for type 5 error -117 [ 379.977942][ T3304] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 379.978041][ T3304] loop3: lost filesystem error report for type 5 error -117 [ 379.978305][ T3304] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 379.978445][ T3304] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 379.978667][ T3304] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 379.978730][ T3304] loop3: lost filesystem error report for type 5 error -117 [ 380.341734][T15947] loop2: detected capacity change from 0 to 1024 [ 380.342986][T15947] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 380.344101][T15947] JBD2: no valid journal superblock found [ 380.344110][T15947] EXT4-fs (loop2): Could not load journal inode [ 380.354452][T15946] --map-set only usable from mangle table [ 380.615607][T15930] wg1 speed is unknown, defaulting to 1000 [ 380.671409][T15958] loop7: detected capacity change from 0 to 8192 [ 380.680435][ T29] audit: type=1400 audit(2000000056.690:5158): avc: denied { mounton } for pid=15957 comm="syz.7.3811" path="/9/bus/bus" dev="loop7" ino=4199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 381.127444][T15973] batman_adv: batadv0: Adding interface: syzkaller0 [ 381.127460][T15973] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.128419][T15973] batman_adv: batadv0: Interface activated: syzkaller0 [ 381.134640][T15971] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 381.325704][T15971] batman_adv: batadv0: Removing interface: syzkaller0 [ 381.375560][T15977] loop6: detected capacity change from 0 to 512 [ 381.404712][T15977] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 381.426297][T15977] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.426381][T15977] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.443573][T15650] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 381.443602][T15650] FAT-fs (loop7): Filesystem has been set read-only [ 381.511958][T15986] --map-set only usable from mangle table [ 381.522640][T15621] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.565842][T15988] --map-set only usable from mangle table [ 381.664754][T16001] --map-set only usable from mangle table [ 381.841657][T16008] --map-set only usable from mangle table [ 381.842624][T16006] --map-set only usable from mangle table [ 382.143353][T16014] pim6reg: entered allmulticast mode [ 382.158809][T16014] pim6reg: left allmulticast mode [ 382.354806][T16026] loop7: detected capacity change from 0 to 512 [ 382.361039][T16026] EXT4-fs error (device loop7): ext4_validate_block_bitmap:436: comm syz.7.3831: bg 0: block 4: invalid block bitmap [ 382.361119][T16026] loop7: lost filesystem error report for type 5 error -117 [ 382.361303][T16026] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 382.361322][T16026] loop7: lost filesystem error report for type 5 error -117 [ 382.361507][T16026] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3831: invalid indirect mapped block 1 (level 1) [ 382.361601][T16026] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 382.361949][T16026] EXT4-fs (loop7): 1 truncate cleaned up [ 382.362439][T16026] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.404253][ T29] audit: type=1400 audit(2000000058.380:5159): avc: denied { write } for pid=16025 comm="syz.7.3831" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 382.431259][T16031] --map-set only usable from mangle table [ 382.514876][T15650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.532345][T16036] --map-set only usable from mangle table [ 382.577194][T16040] --map-set only usable from mangle table [ 382.802524][T16051] loop2: detected capacity change from 0 to 512 [ 382.840678][T16054] --map-set only usable from mangle table [ 382.869537][T16051] EXT4-fs (loop2): 1 orphan inode deleted [ 382.876487][T16051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.878152][T16051] ext4 filesystem being mounted at /779/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.896801][ T51] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 382.896838][ T51] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 1 [ 382.911862][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.095013][T16061] --map-set only usable from mangle table [ 383.192673][T16075] loop7: detected capacity change from 0 to 1024 [ 383.207583][T16075] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.264221][ T29] audit: type=1400 audit(2000000059.300:5160): avc: denied { write } for pid=16074 comm="syz.7.3845" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 383.273981][T16080] --map-set only usable from mangle table [ 383.293301][ T29] audit: type=1400 audit(2000000059.310:5161): avc: denied { map } for pid=16074 comm="syz.7.3845" path="/16/file2/blkio.throttle.io_service_bytes" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 383.294918][T16074] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 383.340863][T16074] EXT4-fs (loop7): Remounting filesystem read-only [ 383.340998][T16074] EXT4-fs (loop7): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 383.344590][ T29] audit: type=1400 audit(2000000059.310:5162): avc: denied { write } for pid=16074 comm="syz.7.3845" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 383.514391][T16083] loop6: detected capacity change from 0 to 512 [ 383.572016][T16083] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.3847: bg 0: block 4: invalid block bitmap [ 383.572136][T16083] loop6: lost filesystem error report for type 5 error -117 [ 383.578475][T16083] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 383.578634][T16083] loop6: lost filesystem error report for type 5 error -117 [ 383.580172][T16083] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3847: invalid indirect mapped block 1 (level 1) [ 383.580323][T16083] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 383.593388][ C0] EXT4-fs (loop6): error count since last fsck: 3 [ 383.593416][ C0] EXT4-fs (loop6): initial error at time 2000000059: ext4_validate_block_bitmap:436 [ 383.593443][ C0] EXT4-fs (loop6): last error at time 2000000059: ext4_free_branches:1023: inode 11 [ 383.668020][T16083] EXT4-fs (loop6): 1 truncate cleaned up [ 383.670015][T16083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.689443][ T29] audit: type=1400 audit(2000000059.720:5163): avc: denied { write } for pid=16082 comm="syz.6.3847" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 386.375135][T15621] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.375931][T15650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.429214][ T8558] wiimote 0005:057E:0306.0002: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 386.439372][ T8558] wiimote 0005:057E:0306.0002: New device registered [ 386.445380][T16097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.458974][T16097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.463549][T16095] wiimote 0005:057E:0306.0002: Device removed [ 386.550999][T16110] --map-set only usable from mangle table [ 386.554020][T16103] fido_id[16103]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 386.563025][T16108] nfs4: Unknown parameter 'eo' [ 386.614808][T16113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3857'. [ 386.618416][T16113] macvtap1: entered promiscuous mode [ 386.618436][T16113] erspan0: entered promiscuous mode [ 386.618503][T16113] macvtap1: entered allmulticast mode [ 386.618521][T16113] erspan0: entered allmulticast mode [ 386.622340][T16113] erspan0: left allmulticast mode [ 386.622361][T16113] erspan0: left promiscuous mode [ 386.622529][T16113] macvtap1: left promiscuous mode [ 386.622546][T16113] macvtap1: left allmulticast mode [ 386.908006][T16125] set_target_v3_check_hooks: 1 callbacks suppressed [ 386.908454][T16125] --map-set only usable from mangle table [ 387.114888][T16134] --map-set only usable from mangle table [ 387.259614][T16140] --map-set only usable from mangle table [ 387.282018][T16142] nfs4: Unknown parameter 'eo' [ 387.297950][T16145] --map-set only usable from mangle table [ 387.382222][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3866'. [ 387.745085][T16164] --map-set only usable from mangle table [ 388.055375][T16174] --map-set only usable from mangle table [ 388.482703][T16184] IPv6: addrconf: prefix option has invalid lifetime [ 388.499196][T16181] nfs4: Unknown parameter 'eo' [ 388.522856][ T8558] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1) [ 388.526973][ T8558] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input9 [ 388.529445][ T8558] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input10 [ 388.531022][T16184] nfs4: Unknown parameter 'eo' [ 388.533464][ T8558] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input8 [ 388.583731][T16187] loop6: detected capacity change from 0 to 1024 [ 388.624214][T16189] nfs4: Unknown parameter 'eo' [ 388.638484][T16187] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.690621][T16196] --map-set only usable from mangle table [ 388.716401][T16186] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 388.716617][T16186] EXT4-fs (loop6): Remounting filesystem read-only [ 388.716666][T16186] EXT4-fs (loop6): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 388.716762][ T29] audit: type=1400 audit(17431.720:5164): avc: denied { write } for pid=16186 comm="syz.6.3883" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 388.717189][ T29] audit: type=1400 audit(17431.720:5165): avc: denied { write } for pid=16186 comm="syz.6.3883" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 388.842047][T15621] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.855010][T16209] --map-set only usable from mangle table [ 388.985926][T16216] IPv6: addrconf: prefix option has invalid lifetime [ 388.988038][T16216] nfs4: Unknown parameter 'eo' [ 389.015356][T16226] --map-set only usable from mangle table [ 389.697187][T16246] loop3: detected capacity change from 0 to 128 [ 389.706825][T16246] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 389.722326][ T29] audit: type=1400 audit(17432.730:5166): avc: denied { write } for pid=16245 comm="syz.3.3902" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 389.723955][ T29] audit: type=1400 audit(17432.730:5167): avc: denied { write } for pid=16245 comm="syz.3.3902" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 389.724290][ T29] audit: type=1400 audit(17432.730:5168): avc: denied { write } for pid=16245 comm="syz.3.3902" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 389.725164][ T29] audit: type=1400 audit(17432.730:5169): avc: denied { write } for pid=16245 comm="syz.3.3902" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 389.940143][T16249] loop6: detected capacity change from 0 to 2048 [ 390.094398][T16249] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.285009][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.306858][T16249] EXT4-fs error (device loop6): __ext4_remount:6872: comm syz.6.3904: Abort forced by user [ 390.309237][T16249] EXT4-fs (loop6): Remounting filesystem read-only [ 390.309281][T16249] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 390.391007][T16258] --map-set only usable from mangle table [ 390.427326][T16262] loop3: detected capacity change from 0 to 512 [ 390.498209][T16262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.520235][ T29] audit: type=1400 audit(17433.530:5170): avc: denied { write } for pid=16261 comm="syz.3.3909" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 390.524072][ T29] audit: type=1400 audit(17433.530:5171): avc: denied { write } for pid=16261 comm="syz.3.3909" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 390.592125][T15621] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.593135][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.656049][T16271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3911'. [ 390.670843][T16271] macvtap1: entered promiscuous mode [ 390.670984][T16271] erspan0: entered promiscuous mode [ 390.671055][T16271] macvtap1: entered allmulticast mode [ 390.671070][T16271] erspan0: entered allmulticast mode [ 390.675432][T16271] erspan0: left allmulticast mode [ 390.675453][T16271] erspan0: left promiscuous mode [ 390.676138][T16271] macvtap1: left promiscuous mode [ 390.676159][T16271] macvtap1: left allmulticast mode [ 390.973435][T16291] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3920'. [ 391.052756][T16299] loop7: detected capacity change from 0 to 2048 [ 391.161743][T16292] wg1 speed is unknown, defaulting to 1000 [ 391.190572][T16299] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.193709][T16299] EXT4-fs error (device loop7): __ext4_remount:6872: comm syz.7.3924: Abort forced by user [ 391.193900][T16299] EXT4-fs (loop7): Remounting filesystem read-only [ 391.193916][T16299] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 391.206932][T15650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.255482][T16292] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.255513][T16292] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.255678][T16292] bridge_slave_0: entered allmulticast mode [ 391.256060][T16292] bridge_slave_0: entered promiscuous mode [ 391.256985][T16292] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.257013][T16292] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.257084][T16292] bridge_slave_1: entered allmulticast mode [ 391.257581][T16292] bridge_slave_1: entered promiscuous mode [ 391.268954][T16292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.270138][T16292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.280656][T16292] team0: Port device team_slave_0 added [ 391.281512][T16292] team0: Port device team_slave_1 added [ 391.305036][T16292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.305078][T16292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.305209][T16292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.306417][T16292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.306459][T16292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.306546][T16292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.338813][T16292] hsr_slave_0: entered promiscuous mode [ 391.339641][T16292] hsr_slave_1: entered promiscuous mode [ 391.340295][T16292] debugfs: 'hsr0' already exists in 'hsr' [ 391.340338][T16292] Cannot create hsr debugfs directory [ 391.581930][ T29] audit: type=1326 audit(17434.590:5172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16324 comm="syz.5.3927" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34fa0e159 code=0x7ffc0000 [ 391.582483][ T29] audit: type=1326 audit(17434.590:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16324 comm="syz.5.3927" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34fa0e159 code=0x7ffc0000 [ 391.665420][T16292] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 391.667487][T16292] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.676787][T16292] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 391.697895][T16292] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 391.698604][T16292] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 391.710116][T16292] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 391.716654][T16292] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 391.729704][T16292] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 391.844376][T16292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.863054][T16292] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.874627][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.874738][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.898927][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.898964][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.052312][T16355] set_target_v3_check_hooks: 6 callbacks suppressed [ 392.052338][T16355] --map-set only usable from mangle table [ 392.067071][T16292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.219204][T16378] --map-set only usable from mangle table [ 392.243155][T16292] veth0_vlan: entered promiscuous mode [ 392.246139][T16292] veth1_vlan: entered promiscuous mode [ 392.259769][T16292] veth0_macvtap: entered promiscuous mode [ 392.262269][T16292] veth1_macvtap: entered promiscuous mode [ 392.269349][T16292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.274768][T16292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.319935][ T70] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.321363][ T94] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.341156][ T70] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.341282][ T70] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.453245][T16388] --map-set only usable from mangle table [ 392.463714][T16390] --map-set only usable from mangle table [ 392.497001][T16394] --map-set only usable from mangle table [ 392.607181][T16402] --map-set only usable from mangle table [ 392.795095][T16409] --map-set only usable from mangle table [ 392.820855][T16407] loop8: detected capacity change from 0 to 2048 [ 392.907475][T16407] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.949776][T16407] EXT4-fs error (device loop8): __ext4_remount:6872: comm syz.8.3943: Abort forced by user [ 392.956899][T16407] EXT4-fs (loop8): Remounting filesystem read-only [ 392.956922][T16407] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 392.977872][T16422] --map-set only usable from mangle table [ 393.000810][T16292] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.069525][T16431] --map-set only usable from mangle table [ 393.070741][T16429] nfs4: Unknown parameter 'eo' [ 393.164207][T16443] --map-set only usable from mangle table [ 393.347269][T16460] loop7: detected capacity change from 0 to 512 [ 393.394644][T16460] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.551838][T16470] IPv6: addrconf: prefix option has invalid lifetime [ 393.608898][T16470] nfs4: Unknown parameter 'eo' [ 393.735936][T16486] nfs4: Unknown parameter 'eo' [ 393.943894][T16501] FAULT_INJECTION: forcing a failure. [ 393.943894][T16501] name failslab, interval 1, probability 0, space 0, times 0 [ 393.943956][T16501] CPU: 1 UID: 0 PID: 16501 Comm: syz.2.3974 Not tainted syzkaller #0 PREEMPT(lazy) [ 393.943991][T16501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.944009][T16501] Call Trace: [ 393.944016][T16501] [ 393.944023][T16501] __dump_stack+0x1d/0x30 [ 393.944048][T16501] dump_stack_lvl+0x95/0xd0 [ 393.944165][T16501] dump_stack+0x15/0x1b [ 393.944191][T16501] should_fail_ex+0x262/0x280 [ 393.944305][T16501] ? rxrpc_alloc_call+0x80/0x550 [ 393.944328][T16501] should_failslab+0x8c/0xb0 [ 393.944362][T16501] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 393.944480][T16501] ? rxrpc_alloc_call+0x80/0x550 [ 393.944511][T16501] rxrpc_alloc_call+0x80/0x550 [ 393.944537][T16501] rxrpc_new_client_call+0xbf/0xe60 [ 393.944559][T16501] ? rxrpc_lookup_peer+0x48c/0x550 [ 393.944697][T16501] rxrpc_do_sendmsg+0xb52/0xe40 [ 393.944744][T16501] rxrpc_sendmsg+0x46c/0x580 [ 393.944789][T16501] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 393.944855][T16501] ____sys_sendmsg+0x532/0x580 [ 393.944908][T16501] ___sys_sendmsg+0x195/0x1e0 [ 393.944946][T16501] __x64_sys_sendmsg+0xd4/0x160 [ 393.944970][T16501] x64_sys_call+0x22ab/0x2550 [ 393.945004][T16501] do_syscall_64+0x112/0x360 [ 393.945042][T16501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.945064][T16501] RIP: 0033:0x7fa3f631e159 [ 393.945083][T16501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.945103][T16501] RSP: 002b:00007fa3f4d77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.945123][T16501] RAX: ffffffffffffffda RBX: 00007fa3f65a5fa0 RCX: 00007fa3f631e159 [ 393.945143][T16501] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 393.945196][T16501] RBP: 00007fa3f63b503b R08: 0000000000000000 R09: 0000000000000000 [ 393.945215][T16501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.945233][T16501] R13: 00007fa3f65a6038 R14: 00007fa3f65a5fa0 R15: 00007ffd7b19b738 [ 393.945256][T16501] [ 394.185032][T15650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.197094][T16510] FAULT_INJECTION: forcing a failure. [ 394.197094][T16510] name failslab, interval 1, probability 0, space 0, times 0 [ 394.197140][T16510] CPU: 1 UID: 0 PID: 16510 Comm: syz.2.3978 Not tainted syzkaller #0 PREEMPT(lazy) [ 394.197235][T16510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.197248][T16510] Call Trace: [ 394.197254][T16510] [ 394.197262][T16510] __dump_stack+0x1d/0x30 [ 394.197289][T16510] dump_stack_lvl+0x95/0xd0 [ 394.197335][T16510] dump_stack+0x15/0x1b [ 394.197371][T16510] should_fail_ex+0x262/0x280 [ 394.197402][T16510] ? sctp_add_bind_addr+0x71/0x1e0 [ 394.197437][T16510] should_failslab+0x8c/0xb0 [ 394.197527][T16510] __kmalloc_cache_noprof+0x7a/0x400 [ 394.197570][T16510] ? sctp_add_bind_addr+0x71/0x1e0 [ 394.197676][T16510] sctp_add_bind_addr+0x71/0x1e0 [ 394.197776][T16510] sctp_copy_local_addr_list+0x1b4/0x250 [ 394.197806][T16510] sctp_copy_one_addr+0x7f/0x280 [ 394.197831][T16510] sctp_bind_addr_copy+0x79/0x290 [ 394.197861][T16510] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 394.197969][T16510] sctp_connect_new_asoc+0x1c3/0x3a0 [ 394.198014][T16510] sctp_sendmsg+0x105f/0x1d00 [ 394.198105][T16510] ? __pfx_sctp_sendmsg+0x10/0x10 [ 394.198234][T16510] inet_sendmsg+0xc5/0xd0 [ 394.198271][T16510] ? __pfx_inet_sendmsg+0x10/0x10 [ 394.198296][T16510] ____sys_sendmsg+0x4e8/0x580 [ 394.198320][T16510] ___sys_sendmsg+0x195/0x1e0 [ 394.198367][T16510] __x64_sys_sendmsg+0xd4/0x160 [ 394.198419][T16510] x64_sys_call+0x22ab/0x2550 [ 394.198447][T16510] do_syscall_64+0x112/0x360 [ 394.198484][T16510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.198542][T16510] RIP: 0033:0x7fa3f631e159 [ 394.198564][T16510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.198655][T16510] RSP: 002b:00007fa3f4d77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.198746][T16510] RAX: ffffffffffffffda RBX: 00007fa3f65a5fa0 RCX: 00007fa3f631e159 [ 394.198761][T16510] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000005 [ 394.198776][T16510] RBP: 00007fa3f63b503b R08: 0000000000000000 R09: 0000000000000000 [ 394.198792][T16510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.198805][T16510] R13: 00007fa3f65a6038 R14: 00007fa3f65a5fa0 R15: 00007ffd7b19b738 [ 394.198827][T16510] [ 394.267392][T16513] IPv6: addrconf: prefix option has invalid lifetime [ 394.272779][T16513] nfs4: Unknown parameter 'eo' [ 394.500310][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3982'. [ 394.552883][T16516] nfs4: Unknown parameter 'eo' [ 394.798470][T16541] request_module fs- succeeded, but still no fs? [ 394.912777][T16548] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3992'. [ 394.954984][T16557] loop7: detected capacity change from 0 to 128 [ 394.957187][T16557] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 394.964944][T16555] nfs4: Unknown parameter 'eo' [ 394.991610][T16557] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 395.041944][ T94] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 395.206283][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4003'. [ 395.257051][T16575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4004'. [ 395.598399][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 395.598443][ T29] audit: type=1400 audit(17438.600:5212): avc: denied { write } for pid=16599 comm="syz.6.4012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 395.688004][T16600] loop7: detected capacity change from 0 to 2048 [ 395.710270][T16605] FAULT_INJECTION: forcing a failure. [ 395.710270][T16605] name failslab, interval 1, probability 0, space 0, times 0 [ 395.710402][T16605] CPU: 0 UID: 0 PID: 16605 Comm: syz.2.4014 Not tainted syzkaller #0 PREEMPT(lazy) [ 395.710488][T16605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.710503][T16605] Call Trace: [ 395.710536][T16605] [ 395.710544][T16605] __dump_stack+0x1d/0x30 [ 395.710571][T16605] dump_stack_lvl+0x95/0xd0 [ 395.710594][T16605] dump_stack+0x15/0x1b [ 395.710669][T16605] should_fail_ex+0x262/0x280 [ 395.710695][T16605] ? security_file_alloc+0x32/0xf0 [ 395.710780][T16605] should_failslab+0x8c/0xb0 [ 395.710812][T16605] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 395.710843][T16605] ? security_file_alloc+0x32/0xf0 [ 395.710887][T16605] security_file_alloc+0x32/0xf0 [ 395.710971][T16605] init_file+0x5b/0x1b0 [ 395.710993][T16605] alloc_empty_file+0x85/0x1e0 [ 395.711015][T16605] alloc_file_pseudo+0x92/0x120 [ 395.711050][T16605] sock_alloc_file+0x9c/0x1e0 [ 395.711078][T16605] __sys_socketpair+0x245/0x430 [ 395.711131][T16605] __x64_sys_socketpair+0x52/0x60 [ 395.711233][T16605] x64_sys_call+0x1bf7/0x2550 [ 395.711262][T16605] do_syscall_64+0x112/0x360 [ 395.711340][T16605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.711414][T16605] RIP: 0033:0x7fa3f631e159 [ 395.711431][T16605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.711475][T16605] RSP: 002b:00007fa3f4d77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 395.711542][T16605] RAX: ffffffffffffffda RBX: 00007fa3f65a5fa0 RCX: 00007fa3f631e159 [ 395.711558][T16605] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 395.711572][T16605] RBP: 00007fa3f63b503b R08: 0000000000000000 R09: 0000000000000000 [ 395.711586][T16605] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 395.711600][T16605] R13: 00007fa3f65a6038 R14: 00007fa3f65a5fa0 R15: 00007ffd7b19b738 [ 395.711622][T16605] [ 395.981516][T16600] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.983089][T16600] EXT4-fs error (device loop7): __ext4_remount:6872: comm syz.7.4013: Abort forced by user [ 395.983335][T16600] EXT4-fs (loop7): Remounting filesystem read-only [ 395.983355][T16600] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 395.993740][T15650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.113559][ T29] audit: type=1400 audit(17439.110:5213): avc: denied { read } for pid=16614 comm="syz.6.4019" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 396.113601][ T29] audit: type=1400 audit(17439.110:5214): avc: denied { open } for pid=16614 comm="syz.6.4019" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 396.113770][ T29] audit: type=1400 audit(17439.120:5215): avc: denied { ioctl } for pid=16614 comm="syz.6.4019" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 396.649215][T16639] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4024'. [ 396.671408][T16638] FAULT_INJECTION: forcing a failure. [ 396.671408][T16638] name failslab, interval 1, probability 0, space 0, times 0 [ 396.671439][T16638] CPU: 1 UID: 0 PID: 16638 Comm: syz.7.4020 Not tainted syzkaller #0 PREEMPT(lazy) [ 396.671540][T16638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 396.671566][T16638] Call Trace: [ 396.671575][T16638] [ 396.671586][T16638] __dump_stack+0x1d/0x30 [ 396.671615][T16638] dump_stack_lvl+0x95/0xd0 [ 396.671657][T16638] dump_stack+0x15/0x1b [ 396.671678][T16638] should_fail_ex+0x262/0x280 [ 396.671859][T16638] ? __debugfs_file_get+0x198/0x440 [ 396.671967][T16638] should_failslab+0x8c/0xb0 [ 396.671999][T16638] __kmalloc_cache_noprof+0x7a/0x400 [ 396.672031][T16638] ? avc_has_perm+0x101/0x190 [ 396.672126][T16638] ? __debugfs_file_get+0x198/0x440 [ 396.672161][T16638] __debugfs_file_get+0x198/0x440 [ 396.672193][T16638] full_proxy_open_regular+0x35/0x320 [ 396.672298][T16638] do_dentry_open+0x49f/0xa60 [ 396.672334][T16638] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 396.672376][T16638] vfs_open+0x37/0x1e0 [ 396.672451][T16638] path_openat+0xc01/0x10d0 [ 396.672487][T16638] do_file_open+0x16c/0x290 [ 396.672585][T16638] do_sys_openat2+0xa0/0x130 [ 396.672615][T16638] __x64_sys_openat+0xf2/0x120 [ 396.672727][T16638] x64_sys_call+0x1f72/0x2550 [ 396.672765][T16638] do_syscall_64+0x112/0x360 [ 396.672864][T16638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.672918][T16638] RIP: 0033:0x7fbe363ae159 [ 396.672939][T16638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.673020][T16638] RSP: 002b:00007fbe34e07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 396.673047][T16638] RAX: ffffffffffffffda RBX: 00007fbe36635fa0 RCX: 00007fbe363ae159 [ 396.673068][T16638] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 396.673125][T16638] RBP: 00007fbe3644503b R08: 0000000000000000 R09: 0000000000000000 [ 396.673139][T16638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.673242][T16638] R13: 00007fbe36636038 R14: 00007fbe36635fa0 R15: 00007fff0fe71ce8 [ 396.673269][T16638] [ 397.023114][T16655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=16655 comm=syz.8.4029 [ 397.051269][T16662] FAULT_INJECTION: forcing a failure. [ 397.051269][T16662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.051307][T16662] CPU: 1 UID: 0 PID: 16662 Comm: syz.8.4033 Not tainted syzkaller #0 PREEMPT(lazy) [ 397.051384][T16662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.051408][T16662] Call Trace: [ 397.051415][T16662] [ 397.051422][T16662] __dump_stack+0x1d/0x30 [ 397.051451][T16662] dump_stack_lvl+0x95/0xd0 [ 397.051529][T16662] dump_stack+0x15/0x1b [ 397.051558][T16662] should_fail_ex+0x262/0x280 [ 397.051593][T16662] should_fail+0xb/0x20 [ 397.051620][T16662] should_fail_usercopy+0x1a/0x20 [ 397.051645][T16662] _copy_from_user+0x1c/0xb0 [ 397.051762][T16662] sg_write+0x65a/0x7a0 [ 397.051812][T16662] ? __pfx_sg_write+0x10/0x10 [ 397.051912][T16662] vfs_write+0x254/0x9a0 [ 397.051952][T16662] ? __fget_files+0x184/0x1c0 [ 397.052056][T16662] ksys_write+0xdc/0x1a0 [ 397.052159][T16662] __x64_sys_write+0x40/0x50 [ 397.052265][T16662] x64_sys_call+0x154e/0x2550 [ 397.052292][T16662] do_syscall_64+0x112/0x360 [ 397.052342][T16662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.052365][T16662] RIP: 0033:0x7f32a523e159 [ 397.052460][T16662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.052487][T16662] RSP: 002b:00007f32a3c97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 397.052510][T16662] RAX: ffffffffffffffda RBX: 00007f32a54c5fa0 RCX: 00007f32a523e159 [ 397.052529][T16662] RDX: 0000000000000103 RSI: 0000200000000040 RDI: 0000000000000004 [ 397.052613][T16662] RBP: 00007f32a52d503b R08: 0000000000000000 R09: 0000000000000000 [ 397.052632][T16662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.052649][T16662] R13: 00007f32a54c6038 R14: 00007f32a54c5fa0 R15: 00007fff4f5d7e88 [ 397.052670][T16662] [ 397.269870][T16670] loop2: detected capacity change from 0 to 512 [ 397.280666][T16670] EXT4-fs (loop2): 1 truncate cleaned up [ 397.285096][T16670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.285953][ T29] audit: type=1400 audit(17440.290:5216): avc: denied { write } for pid=16669 comm="syz.2.4035" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.286018][ T29] audit: type=1400 audit(17440.290:5217): avc: denied { write } for pid=16669 comm="syz.2.4035" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.323492][T16666] wg1 speed is unknown, defaulting to 1000 [ 397.427077][T16682] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.4035: bg 0: block 465: padding at end of block bitmap is not set [ 397.427537][T16682] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 397.427788][T16682] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4035: invalid indirect mapped block 234881024 (level 0) [ 397.444585][T16681] tipc: Started in network mode [ 397.444661][T16681] tipc: Node identity 82327ea4568c, cluster identity 4711 [ 397.444694][T16681] tipc: Enabled bearer , priority 10 [ 397.466950][T16680] tipc: Resetting bearer [ 397.501124][T16680] tipc: Disabling bearer [ 397.618454][T16687] set_target_v3_check_hooks: 19 callbacks suppressed [ 397.618477][T16687] --map-set only usable from mangle table [ 397.627848][T16685] veth0: entered promiscuous mode [ 397.628573][T16684] veth0: left promiscuous mode [ 398.307860][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.375414][T16708] --map-set only usable from mangle table [ 398.381161][T16711] --map-set only usable from mangle table [ 398.401931][T16714] --map-set only usable from mangle table [ 398.544527][ T2149] Bluetooth: hci0: Frame reassembly failed (-84) [ 398.716001][ T29] audit: type=1400 audit(17441.720:5218): avc: denied { write } for pid=16735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.758342][ T29] audit: type=1400 audit(17441.760:5219): avc: denied { write } for pid=16746 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.853120][ T29] audit: type=1326 audit(17441.860:5220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16752 comm="syz.5.4055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34fa0e159 code=0x7ffc0000 [ 398.853523][ T29] audit: type=1326 audit(17441.860:5221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16752 comm="syz.5.4055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34fa0e159 code=0x7ffc0000 [ 398.941198][T16762] FAULT_INJECTION: forcing a failure. [ 398.941198][T16762] name failslab, interval 1, probability 0, space 0, times 0 [ 398.941232][T16762] CPU: 0 UID: 0 PID: 16762 Comm: syz.2.4057 Not tainted syzkaller #0 PREEMPT(lazy) [ 398.941267][T16762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.941341][T16762] Call Trace: [ 398.941348][T16762] [ 398.941357][T16762] __dump_stack+0x1d/0x30 [ 398.941382][T16762] dump_stack_lvl+0x95/0xd0 [ 398.941414][T16762] dump_stack+0x15/0x1b [ 398.941440][T16762] should_fail_ex+0x262/0x280 [ 398.941479][T16762] ? cred_alloc_blank+0x2a/0xe0 [ 398.941535][T16762] should_failslab+0x8c/0xb0 [ 398.941576][T16762] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 398.941615][T16762] ? cred_alloc_blank+0x2a/0xe0 [ 398.941664][T16762] cred_alloc_blank+0x2a/0xe0 [ 398.941716][T16762] keyctl_session_to_parent+0x42/0x4c0 [ 398.941755][T16762] __se_sys_keyctl+0x484/0xb70 [ 398.941853][T16762] ? xfd_validate_state+0x45/0xf0 [ 398.941909][T16762] ? restore_fpregs_from_fpstate+0x61/0x110 [ 398.942018][T16762] __x64_sys_keyctl+0x67/0x80 [ 398.942115][T16762] x64_sys_call+0x1fe0/0x2550 [ 398.942151][T16762] do_syscall_64+0x112/0x360 [ 398.942202][T16762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.942233][T16762] RIP: 0033:0x7fa3f631e159 [ 398.942336][T16762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.942428][T16762] RSP: 002b:00007fa3f4d77028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 398.942456][T16762] RAX: ffffffffffffffda RBX: 00007fa3f65a5fa0 RCX: 00007fa3f631e159 [ 398.942476][T16762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 398.942493][T16762] RBP: 00007fa3f63b503b R08: 0000000000000000 R09: 0000000000000000 [ 398.942511][T16762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.942528][T16762] R13: 00007fa3f65a6038 R14: 00007fa3f65a5fa0 R15: 00007ffd7b19b738 [ 398.942555][T16762] [ 399.073465][T16767] --map-set only usable from mangle table [ 399.328961][T16791] tipc: Started in network mode [ 399.328993][T16791] tipc: Node identity f6403393cc49, cluster identity 4711 [ 399.329036][T16791] tipc: Enabled bearer , priority 10 [ 399.334981][T16789] tipc: Resetting bearer [ 399.337728][T16789] tipc: Disabling bearer [ 399.482668][T16803] --map-set only usable from mangle table [ 399.491677][T16805] --map-set only usable from mangle table [ 399.686369][T16814] nfs4: Unknown parameter 'eo' [ 399.729863][T16818] io-wq is not configured for unbound workers [ 399.766887][T16822] --map-set only usable from mangle table [ 400.057142][T16834] --map-set only usable from mangle table [ 400.253059][T16843] nfs4: Unknown parameter 'eo' [ 400.283665][T16846] --map-set only usable from mangle table [ 400.293849][T16841] nfs4: Unknown parameter 'eo' [ 400.600316][ T3572] Bluetooth: hci0: command 0x1003 tx timeout [ 400.601373][ T7578] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 400.606339][T16730] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 401.523882][T16888] FAULT_INJECTION: forcing a failure. [ 401.523882][T16888] name failslab, interval 1, probability 0, space 0, times 0 [ 401.523984][T16888] CPU: 1 UID: 0 PID: 16888 Comm: syz.2.4097 Not tainted syzkaller #0 PREEMPT(lazy) [ 401.524093][T16888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.524110][T16888] Call Trace: [ 401.524116][T16888] [ 401.524124][T16888] __dump_stack+0x1d/0x30 [ 401.524157][T16888] dump_stack_lvl+0x95/0xd0 [ 401.524185][T16888] dump_stack+0x15/0x1b [ 401.524287][T16888] should_fail_ex+0x262/0x280 [ 401.524320][T16888] ? __kthread_create_on_node+0x80/0x240 [ 401.524366][T16888] should_failslab+0x8c/0xb0 [ 401.524472][T16888] __kmalloc_cache_noprof+0x7a/0x400 [ 401.524504][T16888] ? __kthread_create_on_node+0x80/0x240 [ 401.524608][T16888] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 401.524687][T16888] __kthread_create_on_node+0x80/0x240 [ 401.524764][T16888] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 401.524849][T16888] kthread_create_on_node+0x89/0xc0 [ 401.524935][T16888] ? _raw_spin_lock+0x53/0xa0 [ 401.524959][T16888] rxrpc_lookup_local+0x9c1/0xca0 [ 401.524998][T16888] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 401.525042][T16888] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 401.525072][T16888] rxrpc_sendmsg+0x2e2/0x580 [ 401.525115][T16888] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 401.525176][T16888] ____sys_sendmsg+0x532/0x580 [ 401.525199][T16888] ___sys_sendmsg+0x195/0x1e0 [ 401.525225][T16888] ? hrtimer_start_range_ns_common+0x55c/0x860 [ 401.525272][T16888] __x64_sys_sendmsg+0xd4/0x160 [ 401.525327][T16888] x64_sys_call+0x22ab/0x2550 [ 401.525378][T16888] do_syscall_64+0x112/0x360 [ 401.525423][T16888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.525490][T16888] RIP: 0033:0x7fa3f631e159 [ 401.525513][T16888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.525555][T16888] RSP: 002b:00007fa3f4d77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.525642][T16888] RAX: ffffffffffffffda RBX: 00007fa3f65a5fa0 RCX: 00007fa3f631e159 [ 401.525659][T16888] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 401.525672][T16888] RBP: 00007fa3f63b503b R08: 0000000000000000 R09: 0000000000000000 [ 401.525690][T16888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.525707][T16888] R13: 00007fa3f65a6038 R14: 00007fa3f65a5fa0 R15: 00007ffd7b19b738 [ 401.525748][T16888] [ 401.568076][T16875] nfs4: Unknown parameter 'eo' [ 401.866851][T16886] bond1: entered promiscuous mode [ 401.866983][T16886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.910741][T16898] FAULT_INJECTION: forcing a failure. [ 401.910741][T16898] name failslab, interval 1, probability 0, space 0, times 0 [ 401.910889][T16898] CPU: 0 UID: 0 PID: 16898 Comm: syz.6.4100 Not tainted syzkaller #0 PREEMPT(lazy) [ 401.910925][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.911005][T16898] Call Trace: [ 401.911015][T16898] [ 401.911026][T16898] __dump_stack+0x1d/0x30 [ 401.911060][T16898] dump_stack_lvl+0x95/0xd0 [ 401.911084][T16898] dump_stack+0x15/0x1b [ 401.911107][T16898] should_fail_ex+0x262/0x280 [ 401.911209][T16898] ? skb_clone+0x151/0x1f0 [ 401.911228][T16898] should_failslab+0x8c/0xb0 [ 401.911259][T16898] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 401.911357][T16898] ? skb_clone+0x151/0x1f0 [ 401.911379][T16898] skb_clone+0x151/0x1f0 [ 401.911398][T16898] __netlink_deliver_tap+0x2be/0x510 [ 401.911440][T16898] netlink_unicast+0x656/0x680 [ 401.911480][T16898] netlink_sendmsg+0x5be/0x6f0 [ 401.911521][T16898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.911615][T16898] sock_write_iter+0x2c5/0x2f0 [ 401.911700][T16898] do_iter_readv_writev+0x4f6/0x5a0 [ 401.911745][T16898] vfs_writev+0x2d3/0x8c0 [ 401.911775][T16898] do_writev+0xe9/0x210 [ 401.911928][T16898] __x64_sys_writev+0x45/0x50 [ 401.912037][T16898] x64_sys_call+0x23c9/0x2550 [ 401.912074][T16898] do_syscall_64+0x112/0x360 [ 401.912188][T16898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.912279][T16898] RIP: 0033:0x7f3c54efe159 [ 401.912297][T16898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.912347][T16898] RSP: 002b:00007f3c53957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 401.912375][T16898] RAX: ffffffffffffffda RBX: 00007f3c55185fa0 RCX: 00007f3c54efe159 [ 401.912395][T16898] RDX: 0000000000000001 RSI: 0000200000009ac0 RDI: 0000000000000003 [ 401.912437][T16898] RBP: 00007f3c54f9503b R08: 0000000000000000 R09: 0000000000000000 [ 401.912453][T16898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.912536][T16898] R13: 00007f3c55186038 R14: 00007f3c55185fa0 R15: 00007ffce572f0c8 [ 401.912556][T16898] [ 402.003327][T16901] loop2: detected capacity change from 0 to 2048 [ 402.004563][T16902] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 402.011229][T16902] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 402.182609][T16901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.186604][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 402.186716][ T29] audit: type=1400 audit(17445.190:5251): avc: denied { write } for pid=16900 comm="syz.2.4102" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 402.357556][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.393565][T16911] loop8: detected capacity change from 0 to 1764 [ 402.520333][T16921] syzkaller1: entered promiscuous mode [ 402.520433][T16921] syzkaller1: entered allmulticast mode [ 402.785090][T16930] set_target_v3_check_hooks: 6 callbacks suppressed [ 402.785145][T16930] --map-set only usable from mangle table [ 402.953984][T16936] --map-set only usable from mangle table [ 402.989495][T16938] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.989737][T16938] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.020670][T16938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.023073][T16938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.055103][ T31] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.055151][ T31] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.055195][ T31] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.055310][ T31] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.216090][ T29] audit: type=1400 audit(17446.220:5252): avc: denied { read } for pid=16944 comm="syz.5.4115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 403.245082][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4116'. [ 403.266808][T16953] FAULT_INJECTION: forcing a failure. [ 403.266808][T16953] name failslab, interval 1, probability 0, space 0, times 0 [ 403.266847][T16953] CPU: 0 UID: 0 PID: 16953 Comm: syz.8.4118 Not tainted syzkaller #0 PREEMPT(lazy) [ 403.266957][T16953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.266975][T16953] Call Trace: [ 403.266984][T16953] [ 403.267011][T16953] __dump_stack+0x1d/0x30 [ 403.267037][T16953] dump_stack_lvl+0x95/0xd0 [ 403.267065][T16953] dump_stack+0x15/0x1b [ 403.267120][T16953] should_fail_ex+0x262/0x280 [ 403.267154][T16953] should_failslab+0x8c/0xb0 [ 403.267251][T16953] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 403.267288][T16953] ? proc_alloc_inode+0x34/0x90 [ 403.267357][T16953] ? proc_alloc_inode+0x34/0x90 [ 403.267390][T16953] ? __pfx_proc_alloc_inode+0x10/0x10 [ 403.267475][T16953] proc_alloc_inode+0x34/0x90 [ 403.267504][T16953] alloc_inode+0x40/0x170 [ 403.267582][T16953] new_inode+0x1d/0xe0 [ 403.267631][T16953] proc_pid_make_inode+0x24/0x200 [ 403.267671][T16953] proc_pident_instantiate+0x44/0x180 [ 403.267728][T16953] proc_pident_lookup+0x115/0x1a0 [ 403.267759][T16953] proc_tgid_base_lookup+0x2b/0x40 [ 403.267799][T16953] __lookup_slow+0x155/0x200 [ 403.267907][T16953] lookup_slow+0x3c/0x60 [ 403.267932][T16953] link_path_walk+0xb31/0xdd0 [ 403.268026][T16953] path_openat+0xe7/0x10d0 [ 403.268069][T16953] do_file_open+0x16c/0x290 [ 403.268153][T16953] ? __pfx_proc_put_link+0x10/0x10 [ 403.268249][T16953] ? __pfx_kfree_link+0x10/0x10 [ 403.268274][T16953] do_sys_openat2+0xa0/0x130 [ 403.268312][T16953] __x64_sys_openat+0xf2/0x120 [ 403.268399][T16953] x64_sys_call+0x1f72/0x2550 [ 403.268434][T16953] do_syscall_64+0x112/0x360 [ 403.268471][T16953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.268564][T16953] RIP: 0033:0x7f32a523e159 [ 403.268644][T16953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.268670][T16953] RSP: 002b:00007f32a3c97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 403.268728][T16953] RAX: ffffffffffffffda RBX: 00007f32a54c5fa0 RCX: 00007f32a523e159 [ 403.268749][T16953] RDX: 000000000000a800 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 403.268825][T16953] RBP: 00007f32a52d503b R08: 0000000000000000 R09: 0000000000000000 [ 403.268869][T16953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.268887][T16953] R13: 00007f32a54c6038 R14: 00007f32a54c5fa0 R15: 00007fff4f5d7e88 [ 403.268915][T16953] [ 403.443352][T16956] --map-set only usable from mangle table [ 403.649490][T16959] --map-set only usable from mangle table [ 403.906908][T16968] --map-set only usable from mangle table [ 403.952821][T16970] --map-set only usable from mangle table [ 404.036744][ T29] audit: type=1400 audit(17446.980:5253): avc: denied { name_bind } for pid=16974 comm="syz.7.4125" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 404.109006][T16980] loop9: detected capacity change from 0 to 7 [ 404.109310][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 404.109351][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 404.109818][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 404.109913][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 404.115721][T16980] loop9: unable to read partition table [ 404.115748][T16980] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 404.133437][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 404.133490][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 404.133876][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 404.133960][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 404.134452][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 404.134610][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 404.135149][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 404.135235][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 404.135719][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 404.135797][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 404.169780][T16983] --map-set only usable from mangle table [ 404.413545][T16993] --map-set only usable from mangle table [ 404.539653][ T29] audit: type=1400 audit(17447.540:5254): avc: denied { execute } for pid=16998 comm="syz.6.4131" name="file0" dev="ramfs" ino=53985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 404.540436][ T29] audit: type=1400 audit(17447.550:5255): avc: denied { execute_no_trans } for pid=16998 comm="syz.6.4131" path="/file0" dev="ramfs" ino=53985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 404.593698][T17001] loop6: detected capacity change from 0 to 512 [ 404.595499][T17001] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.4132: inode has both inline data and extents flags [ 404.595535][T17001] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 404.595714][T17001] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.4132: couldn't read orphan inode 15 (err -117) [ 404.595751][T17001] loop6: lost filesystem error report for type 5 error -117 [ 404.596352][T17001] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.598252][ T29] audit: type=1400 audit(17447.600:5256): avc: denied { write } for pid=17000 comm="syz.6.4132" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.721441][T17007] --map-set only usable from mangle table [ 404.834447][T17018] FAULT_INJECTION: forcing a failure. [ 404.834447][T17018] name failslab, interval 1, probability 0, space 0, times 0 [ 404.834476][T17018] CPU: 1 UID: 0 PID: 17018 Comm: syz.8.4139 Not tainted syzkaller #0 PREEMPT(lazy) [ 404.834507][T17018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.834569][T17018] Call Trace: [ 404.834576][T17018] [ 404.834584][T17018] __dump_stack+0x1d/0x30 [ 404.834611][T17018] dump_stack_lvl+0x95/0xd0 [ 404.834638][T17018] dump_stack+0x15/0x1b [ 404.834673][T17018] should_fail_ex+0x262/0x280 [ 404.834698][T17018] should_failslab+0x8c/0xb0 [ 404.834798][T17018] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 404.834865][T17018] ? bpf_fs_alloc_inode+0x34/0x90 [ 404.834909][T17018] ? bpf_fs_alloc_inode+0x34/0x90 [ 404.834972][T17018] ? __pfx_bpf_fill_super+0x10/0x10 [ 404.834993][T17018] ? __pfx_bpf_fs_alloc_inode+0x10/0x10 [ 404.835054][T17018] bpf_fs_alloc_inode+0x34/0x90 [ 404.835095][T17018] alloc_inode+0x40/0x170 [ 404.835119][T17018] new_inode+0x1d/0xe0 [ 404.835180][T17018] ? __pfx_bpf_fill_super+0x10/0x10 [ 404.835208][T17018] bpf_fill_super+0x102/0x7f0 [ 404.835267][T17018] ? __pfx_bpf_fill_super+0x10/0x10 [ 404.835297][T17018] get_tree_nodev+0x83/0x100 [ 404.835337][T17018] bpf_get_tree+0x1c/0x30 [ 404.835364][T17018] vfs_get_tree+0x57/0x1d0 [ 404.835420][T17018] vfs_cmd_create+0x8a/0x140 [ 404.835457][T17018] vfs_fsconfig_locked+0x6f/0x210 [ 404.835561][T17018] __se_sys_fsconfig+0x671/0x7e0 [ 404.835603][T17018] __x64_sys_fsconfig+0x67/0x80 [ 404.835641][T17018] x64_sys_call+0xaa0/0x2550 [ 404.835677][T17018] do_syscall_64+0x112/0x360 [ 404.835749][T17018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.835781][T17018] RIP: 0033:0x7f32a523e159 [ 404.835803][T17018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.835871][T17018] RSP: 002b:00007f32a3c97028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 404.835900][T17018] RAX: ffffffffffffffda RBX: 00007f32a54c5fa0 RCX: 00007f32a523e159 [ 404.835921][T17018] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 404.835939][T17018] RBP: 00007f32a52d503b R08: 0000000000000000 R09: 0000000000000000 [ 404.835995][T17018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.836013][T17018] R13: 00007f32a54c6038 R14: 00007f32a54c5fa0 R15: 00007fff4f5d7e88 [ 404.836040][T17018] [ 404.855824][T15621] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.129784][T17023] --map-set only usable from mangle table [ 405.136172][T17025] loop2: detected capacity change from 0 to 512 [ 405.143424][T17025] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.4140: iget: bad i_size value: 38620345925642 [ 405.143467][T17025] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.144191][T17025] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.4140: couldn't read orphan inode 15 (err -117) [ 405.144255][T17025] loop2: lost filesystem error report for type 5 error -117 [ 405.148431][T17025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.150352][ T29] audit: type=1400 audit(17448.140:5257): avc: denied { write } for pid=17024 comm="syz.2.4140" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 405.426799][T17039] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 405.511135][T17048] nfs4: Unknown parameter 'eo' [ 405.558043][ T94] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 405.559417][ T94] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 6148 with max blocks 2048 with error 28 [ 405.559466][ T94] EXT4-fs (loop2): This should not happen!! Data will be lost [ 405.559466][ T94] [ 405.559485][ T94] EXT4-fs (loop2): Total free blocks count 0 [ 405.559502][ T94] EXT4-fs (loop2): Free/Dirty block details [ 405.559518][ T94] EXT4-fs (loop2): free_blocks=0 [ 405.559533][ T94] EXT4-fs (loop2): dirty_blocks=2952 [ 405.563289][ T94] EXT4-fs (loop2): Block reservation details [ 405.563335][ T94] EXT4-fs (loop2): i_reserved_data_blocks=2952 [ 405.615323][ T94] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 8200 with max blocks 896 with error 28 [ 405.636785][ T3308] EXT4-fs warning (device loop2): ext4_evict_inode:196: inode #18: comm syz-executor: data will be lost [ 405.736540][T17056] loop7: detected capacity change from 0 to 8192 [ 405.870613][T17074] syz_tun: entered allmulticast mode [ 405.870994][T17074] lo: entered allmulticast mode [ 405.871311][T17073] syz_tun: left allmulticast mode [ 405.871430][T17073] lo: left allmulticast mode [ 405.917273][T17076] nfs4: Unknown parameter 'eo' [ 406.044956][T17083] loop6: detected capacity change from 0 to 2048 [ 406.056926][T17083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.435780][T17101] FAULT_INJECTION: forcing a failure. [ 406.435780][T17101] name failslab, interval 1, probability 0, space 0, times 0 [ 406.435850][T17101] CPU: 0 UID: 0 PID: 17101 Comm: syz.2.4165 Not tainted syzkaller #0 PREEMPT(lazy) [ 406.435885][T17101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.435903][T17101] Call Trace: [ 406.435913][T17101] [ 406.435971][T17101] __dump_stack+0x1d/0x30 [ 406.435997][T17101] dump_stack_lvl+0x95/0xd0 [ 406.436022][T17101] dump_stack+0x15/0x1b [ 406.436051][T17101] should_fail_ex+0x262/0x280 [ 406.436083][T17101] ? __anon_vma_prepare+0xcd/0x2f0 [ 406.436208][T17101] should_failslab+0x8c/0xb0 [ 406.436249][T17101] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 406.436290][T17101] ? __anon_vma_prepare+0xcd/0x2f0 [ 406.436347][T17101] __anon_vma_prepare+0xcd/0x2f0 [ 406.436381][T17101] handle_mm_fault+0x31b6/0x3bb0 [ 406.436462][T17101] ? vma_is_secretmem+0x16/0x30 [ 406.436496][T17101] __get_user_pages+0x12e9/0x1eb0 [ 406.436527][T17101] get_user_pages_remote+0x1d5/0x6b0 [ 406.436554][T17101] ? down_read+0x77/0xb0 [ 406.436603][T17101] copy_string_kernel+0x1c6/0x460 [ 406.436644][T17101] do_execveat_common+0x650/0x8a0 [ 406.436741][T17101] __x64_sys_execveat+0x76/0xa0 [ 406.436787][T17101] x64_sys_call+0x21ae/0x2550 [ 406.436824][T17101] do_syscall_64+0x112/0x360 [ 406.436933][T17101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.436965][T17101] RIP: 0033:0x7fa3f631e159 [ 406.436988][T17101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.437010][T17101] RSP: 002b:00007fa3f4d77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 406.437031][T17101] RAX: ffffffffffffffda RBX: 00007fa3f65a5fa0 RCX: 00007fa3f631e159 [ 406.437046][T17101] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 406.437135][T17101] RBP: 00007fa3f63b503b R08: 0000000000001000 R09: 0000000000000000 [ 406.437149][T17101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.437162][T17101] R13: 00007fa3f65a6038 R14: 00007fa3f65a5fa0 R15: 00007ffd7b19b738 [ 406.437232][T17101] [ 406.677841][T17107] loop8: detected capacity change from 0 to 512 [ 406.689153][T17107] EXT4-fs (loop8): orphan cleanup on readonly fs [ 406.696181][T17107] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.4168: bad orphan inode 17 [ 406.696226][T17107] loop8: lost filesystem error report for type 5 error -117 [ 406.704436][T17107] ext4_test_bit(bit=16, block=4) = 1 [ 406.704488][T17107] is_bad_inode(inode)=0 [ 406.704511][T17107] NEXT_ORPHAN(inode)=0 [ 406.704541][T17107] max_ino=32 [ 406.704563][T17107] i_nlink=1 [ 406.705603][T17107] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 406.738108][T17107] EXT4-fs error (device loop8): ext4_readdir:280: inode #2: block 13: comm syz.8.4168: path /45/file0: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=196732, size=1024 fake=0 [ 406.775945][T16292] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.817042][T15621] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.873328][ T29] audit: type=1400 audit(17449.880:5258): avc: denied { setopt } for pid=17111 comm="syz.7.4171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 406.905110][ T29] audit: type=1400 audit(17449.910:5259): avc: denied { mounton } for pid=17118 comm="syz.2.4174" path="/" dev="tmpfs" ino=4673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 406.951049][T17121] loop6: detected capacity change from 0 to 512 [ 406.989502][T17121] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 406.989698][T17121] EXT4-fs (loop6): orphan cleanup on readonly fs [ 406.990545][T17121] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 406.990576][T17121] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.4172: Failed to acquire dquot type 1 [ 406.990614][T17121] loop6: lost filesystem error report for type 5 error -5 [ 406.991635][T17121] EXT4-fs (loop6): Remounting filesystem read-only [ 406.991922][T17121] EXT4-fs (loop6): 1 truncate cleaned up [ 406.993362][T17121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 407.004059][T17121] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 407.004220][T17121] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 407.030886][T17121] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 407.085190][T15621] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.126313][T17130] nfs4: Unknown parameter 'eo' [ 407.307550][T17152] loop7: detected capacity change from 0 to 512 [ 407.307947][T17152] EXT4-fs: Ignoring removed nobh option [ 407.323175][T17152] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 407.323229][T17152] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #13: comm syz.7.4186: inode has both inline data and extents flags [ 407.323262][T17152] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 407.325340][T17152] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.4186: couldn't read orphan inode 13 (err -117) [ 407.325376][T17152] loop7: lost filesystem error report for type 5 error -117 [ 407.325985][T17152] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.459586][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 407.459629][ T29] audit: type=1400 audit(17450.460:5261): avc: denied { write } for pid=17150 comm="syz.7.4186" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 407.459724][T17152] EXT4-fs warning (device loop7): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 407.466056][T17152] EXT4-fs warning (device loop7): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 407.534679][T15650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.547865][T17158] nfs4: Unknown parameter 'eo' [ 407.693433][ T8554] hid_parser_main: 13 callbacks suppressed [ 407.693478][ T8554] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 407.695759][ T8554] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 407.702320][T17162] nfs4: Unknown parameter 'eo' [ 407.798246][T17178] set_target_v3_check_hooks: 12 callbacks suppressed [ 407.798265][T17178] --map-set only usable from mangle table [ 408.088283][T17189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.088431][T17189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.109653][T17189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.109768][T17189] FAULT_INJECTION: forcing a failure. [ 408.109768][T17189] name failslab, interval 1, probability 0, space 0, times 0 [ 408.109804][T17189] CPU: 0 UID: 0 PID: 17189 Comm: syz.7.4198 Not tainted syzkaller #0 PREEMPT(lazy) [ 408.109837][T17189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.109855][T17189] Call Trace: [ 408.109863][T17189] [ 408.109874][T17189] __dump_stack+0x1d/0x30 [ 408.109971][T17189] dump_stack_lvl+0x95/0xd0 [ 408.110001][T17189] dump_stack+0x15/0x1b [ 408.110105][T17189] should_fail_ex+0x262/0x280 [ 408.110199][T17189] should_failslab+0x8c/0xb0 [ 408.110238][T17189] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 408.110284][T17189] ? kasprintf+0x83/0xb0 [ 408.110412][T17189] ? kasprintf+0x83/0xb0 [ 408.110445][T17189] kvasprintf+0x8a/0x110 [ 408.110487][T17189] kasprintf+0x83/0xb0 [ 408.110542][T17189] module_remove_driver+0xb2/0x130 [ 408.110571][T17189] bus_remove_driver+0x19f/0x1d0 [ 408.110610][T17189] driver_unregister+0x4e/0x80 [ 408.110711][T17189] usb_gadget_register_driver_owner+0x192/0x1a0 [ 408.110747][T17189] raw_ioctl+0xc5b/0x1df0 [ 408.110779][T17189] ? ioctl_has_perm+0x273/0x2c0 [ 408.110810][T17189] ? do_vfs_ioctl+0x848/0xe50 [ 408.110898][T17189] ? selinux_file_ioctl+0x33c/0x3c0 [ 408.110926][T17189] ? __fget_files+0x184/0x1c0 [ 408.111001][T17189] ? __pfx_raw_ioctl+0x10/0x10 [ 408.111028][T17189] __se_sys_ioctl+0xce/0x140 [ 408.111059][T17189] __x64_sys_ioctl+0x43/0x50 [ 408.111158][T17189] x64_sys_call+0x239d/0x2550 [ 408.111194][T17189] do_syscall_64+0x112/0x360 [ 408.111290][T17189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.111386][T17189] RIP: 0033:0x7fbe363addeb [ 408.111403][T17189] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 408.111435][T17189] RSP: 002b:00007fbe34e04f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.111463][T17189] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fbe363addeb [ 408.111503][T17189] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 408.111519][T17189] RBP: 00007fbe34e05fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 408.111534][T17189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.111551][T17189] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000868 [ 408.111577][T17189] [ 408.111674][T17189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.111734][T17190] loop8: detected capacity change from 0 to 512 [ 408.181567][T17190] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.280907][ T29] audit: type=1400 audit(17451.250:5262): avc: denied { write } for pid=17196 comm="syz.8.4197" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.472511][T17201] loop6: detected capacity change from 0 to 512 [ 408.544975][T16292] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.549247][T17201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.570515][T15621] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.605201][T17207] --map-set only usable from mangle table [ 408.870850][T17220] --map-set only usable from mangle table [ 409.219909][T17223] --map-set only usable from mangle table [ 409.512099][T17231] --map-set only usable from mangle table [ 409.524803][T17234] FAULT_INJECTION: forcing a failure. [ 409.524803][T17234] name failslab, interval 1, probability 0, space 0, times 0 [ 409.524898][T17234] CPU: 1 UID: 0 PID: 17234 Comm: syz.7.4211 Not tainted syzkaller #0 PREEMPT(lazy) [ 409.525006][T17234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.525019][T17234] Call Trace: [ 409.525026][T17234] [ 409.525033][T17234] __dump_stack+0x1d/0x30 [ 409.525067][T17234] dump_stack_lvl+0x95/0xd0 [ 409.525097][T17234] dump_stack+0x15/0x1b [ 409.525130][T17234] should_fail_ex+0x262/0x280 [ 409.525164][T17234] ? dst_alloc+0xbd/0x100 [ 409.525253][T17234] should_failslab+0x8c/0xb0 [ 409.525391][T17234] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 409.525432][T17234] ? dst_alloc+0xbd/0x100 [ 409.525482][T17234] dst_alloc+0xbd/0x100 [ 409.525502][T17234] ip_route_output_key_hash_rcu+0xed9/0x1320 [ 409.525607][T17234] ip_route_output_flow+0x65/0x110 [ 409.525643][T17234] udp_sendmsg+0x12ce/0x14e0 [ 409.525685][T17234] ? inode_doinit_with_dentry+0x98/0x7b0 [ 409.525720][T17234] ? inode_set_ctime_current+0x65b/0x8f0 [ 409.525822][T17234] udpv6_sendmsg+0x8ee/0x1700 [ 409.525920][T17234] ? __rcu_read_unlock+0x4e/0x70 [ 409.525976][T17234] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 409.526041][T17234] ? __pfx_inet6_sendmsg+0x10/0x10 [ 409.526074][T17234] inet6_sendmsg+0xac/0xd0 [ 409.526106][T17234] sock_write_iter+0x21c/0x2f0 [ 409.526228][T17234] ? __pfx_sock_write_iter+0x10/0x10 [ 409.526261][T17234] vfs_write+0x57f/0x9a0 [ 409.526307][T17234] ksys_write+0xdc/0x1a0 [ 409.526348][T17234] __x64_sys_write+0x40/0x50 [ 409.526436][T17234] x64_sys_call+0x154e/0x2550 [ 409.526473][T17234] do_syscall_64+0x112/0x360 [ 409.526513][T17234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.526578][T17234] RIP: 0033:0x7fbe363ae159 [ 409.526594][T17234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.526614][T17234] RSP: 002b:00007fbe34e07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 409.526641][T17234] RAX: ffffffffffffffda RBX: 00007fbe36635fa0 RCX: 00007fbe363ae159 [ 409.526661][T17234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 409.526679][T17234] RBP: 00007fbe3644503b R08: 0000000000000000 R09: 0000000000000000 [ 409.526740][T17234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.526758][T17234] R13: 00007fbe36636038 R14: 00007fbe36635fa0 R15: 00007fff0fe71ce8 [ 409.526786][T17234] [ 409.892830][T17252] batman_adv: batadv0: Adding interface: syzkaller0 [ 409.892928][T17252] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.892968][T17252] batman_adv: batadv0: Interface activated: syzkaller0 [ 409.895244][T17250] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 409.901449][T17250] batman_adv: batadv0: Removing interface: syzkaller0 [ 409.993545][T17254] --map-set only usable from mangle table [ 410.029698][T17257] loop8: detected capacity change from 0 to 8192 [ 410.054375][T17260] --map-set only usable from mangle table [ 410.109008][T17264] --map-set only usable from mangle table [ 410.268719][T17274] --map-set only usable from mangle table [ 410.411316][T17285] --map-set only usable from mangle table [ 410.599789][ T29] audit: type=1400 audit(17453.590:5263): avc: denied { read } for pid=17299 comm="syz.5.4235" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 410.612179][T17304] loop7: detected capacity change from 0 to 128 [ 410.643863][T17304] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 410.865981][T17315] nfs4: Unknown parameter 'eo' [ 410.872362][T15650] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 410.915705][T17320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4241'. [ 410.993468][T17325] nfs4: Unknown parameter 'eo' [ 411.317609][T17351] nfs4: Unknown parameter 'eo' [ 411.341483][T17353] loop6: detected capacity change from 0 to 1024 [ 411.342127][T17353] EXT4-fs: Ignoring removed bh option [ 411.360580][T17353] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.366397][ T29] audit: type=1400 audit(17454.370:5264): avc: denied { write } for pid=17352 comm="syz.6.4254" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 411.366426][T17353] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 411.368301][T17353] EXT4-fs error (device loop6): ext4_read_inline_dir:1512: inode #12: block 7: comm syz.6.4254: path /111/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 411.368504][T17353] EXT4-fs (loop6): Remounting filesystem read-only [ 411.418674][T15621] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.265254][T17417] nfs4: Unknown parameter 'eo' [ 412.436139][T17429] nfs4: Unknown parameter 'eo' [ 412.453842][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 412.583129][T17444] netlink: 'syz.6.4282': attribute type 83 has an invalid length. [ 412.710392][T17453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.710611][T17453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.853195][T17459] X25: received unknown 00 with LCI 000 [ 412.979034][ T29] audit: type=1400 audit(17455.980:5265): avc: denied { write } for pid=17464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.030745][ T29] audit: type=1400 audit(17456.040:5266): avc: denied { write } for pid=17475 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.225629][T17490] set_target_v3_check_hooks: 23 callbacks suppressed [ 413.225697][T17490] --map-set only usable from mangle table [ 413.263245][T17485] nfs4: Unknown parameter 'eo' [ 413.299953][ T29] audit: type=1400 audit(17456.290:5267): avc: denied { write } for pid=17482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.331139][ T29] audit: type=1400 audit(17456.290:5268): avc: denied { write } for pid=17502 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.343551][T17500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.348130][T17500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.374741][T17500] sysfs: cannot create duplicate filename '/module/raw_gadget/drivers/gadget:raw-gadget.1' [ 413.374807][T17500] CPU: 1 UID: 0 PID: 17500 Comm: syz.6.4291 Not tainted syzkaller #0 PREEMPT(lazy) [ 413.374862][T17500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.374881][T17500] Call Trace: [ 413.374889][T17500] [ 413.374900][T17500] __dump_stack+0x1d/0x30 [ 413.374927][T17500] dump_stack_lvl+0x95/0xd0 [ 413.374950][T17500] dump_stack+0x15/0x1b [ 413.375036][T17500] sysfs_warn_dup+0x73/0x90 [ 413.375071][T17500] sysfs_do_create_link_sd+0xa7/0x100 [ 413.375185][T17500] sysfs_create_link+0x51/0x70 [ 413.375246][T17500] module_add_driver+0x1c7/0x250 [ 413.375271][T17500] bus_add_driver+0x2a8/0x450 [ 413.375319][T17500] driver_register+0x162/0x220 [ 413.375359][T17500] usb_gadget_register_driver_owner+0x92/0x1a0 [ 413.375458][T17500] raw_ioctl+0xc5b/0x1df0 [ 413.375537][T17500] ? ioctl_has_perm+0x273/0x2c0 [ 413.375591][T17500] ? do_vfs_ioctl+0x848/0xe50 [ 413.375633][T17500] ? selinux_file_ioctl+0x33c/0x3c0 [ 413.375661][T17500] ? __fget_files+0x184/0x1c0 [ 413.375713][T17500] ? __pfx_raw_ioctl+0x10/0x10 [ 413.375749][T17500] __se_sys_ioctl+0xce/0x140 [ 413.375800][T17500] __x64_sys_ioctl+0x43/0x50 [ 413.375843][T17500] x64_sys_call+0x239d/0x2550 [ 413.375880][T17500] do_syscall_64+0x112/0x360 [ 413.375924][T17500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.375963][T17500] RIP: 0033:0x7f3c54efddeb [ 413.375980][T17500] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 413.376006][T17500] RSP: 002b:00007f3c53954f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.376035][T17500] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f3c54efddeb [ 413.376119][T17500] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 413.376138][T17500] RBP: 00007f3c53955fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 413.376219][T17500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.376233][T17500] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000868 [ 413.376253][T17500] [ 413.390008][T17500] bus_add_driver: failed to create module links for raw-gadget.1 [ 413.390090][T17500] UDC core: USB Raw Gadget: driver registration failed: -17 [ 413.390150][T17500] misc raw-gadget: fail, usb_gadget_register_driver returned -17 [ 413.428180][T17504] syzkaller1: entered promiscuous mode [ 413.428251][T17504] syzkaller1: entered allmulticast mode [ 413.456573][T17508] --map-set only usable from mangle table [ 413.561197][T17511] --map-set only usable from mangle table [ 414.302177][T17536] FAULT_INJECTION: forcing a failure. [ 414.302177][T17536] name failslab, interval 1, probability 0, space 0, times 0 [ 414.302210][T17536] CPU: 1 UID: 0 PID: 17536 Comm: syz.2.4302 Not tainted syzkaller #0 PREEMPT(lazy) [ 414.302236][T17536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.302299][T17536] Call Trace: [ 414.302309][T17536] [ 414.302319][T17536] __dump_stack+0x1d/0x30 [ 414.302363][T17536] dump_stack_lvl+0x95/0xd0 [ 414.302389][T17536] dump_stack+0x15/0x1b [ 414.302416][T17536] should_fail_ex+0x262/0x280 [ 414.302449][T17536] should_failslab+0x8c/0xb0 [ 414.302560][T17536] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 414.302604][T17536] ? security_netlbl_sid_to_secattr+0xbc/0x150 [ 414.302644][T17536] ? security_netlbl_sid_to_secattr+0xbc/0x150 [ 414.302725][T17536] kstrdup+0x3e/0xd0 [ 414.302750][T17536] security_netlbl_sid_to_secattr+0xbc/0x150 [ 414.302796][T17536] selinux_netlbl_sock_genattr+0xa8/0x260 [ 414.302839][T17536] selinux_netlbl_socket_post_create+0x66/0x100 [ 414.302884][T17536] selinux_socket_post_create+0x219/0x290 [ 414.303010][T17536] security_socket_post_create+0x59/0xa0 [ 414.303133][T17536] __sock_create+0x356/0x580 [ 414.303174][T17536] sock_create_kern+0x38/0x50 [ 414.303211][T17536] udp_sock_create4+0x68/0x2e0 [ 414.303252][T17536] rxrpc_lookup_local+0x844/0xca0 [ 414.303324][T17536] rxrpc_sendmsg+0x2e2/0x580 [ 414.303413][T17536] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 414.303489][T17536] ____sys_sendmsg+0x532/0x580 [ 414.303520][T17536] ___sys_sendmsg+0x195/0x1e0 [ 414.303545][T17536] ? hrtimer_start_range_ns_common+0x55c/0x860 [ 414.303591][T17536] __x64_sys_sendmsg+0xd4/0x160 [ 414.303661][T17536] x64_sys_call+0x22ab/0x2550 [ 414.303699][T17536] do_syscall_64+0x112/0x360 [ 414.303820][T17536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.303851][T17536] RIP: 0033:0x7fa3f631e159 [ 414.303881][T17536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.303916][T17536] RSP: 002b:00007fa3f4d77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.303945][T17536] RAX: ffffffffffffffda RBX: 00007fa3f65a5fa0 RCX: 00007fa3f631e159 [ 414.303967][T17536] RDX: 00000000200008c0 RSI: 0000200000000280 RDI: 0000000000000005 [ 414.303986][T17536] RBP: 00007fa3f63b503b R08: 0000000000000000 R09: 0000000000000000 [ 414.304004][T17536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.304022][T17536] R13: 00007fa3f65a6038 R14: 00007fa3f65a5fa0 R15: 00007ffd7b19b738 [ 414.304049][T17536] [ 414.472374][T17540] --map-set only usable from mangle table [ 414.550840][T17544] FAULT_INJECTION: forcing a failure. [ 414.550840][T17544] name failslab, interval 1, probability 0, space 0, times 0 [ 414.551014][T17544] CPU: 1 UID: 0 PID: 17544 Comm: syz.6.4307 Not tainted syzkaller #0 PREEMPT(lazy) [ 414.551097][T17544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.551147][T17544] Call Trace: [ 414.551177][T17544] [ 414.551208][T17544] __dump_stack+0x1d/0x30 [ 414.551338][T17544] dump_stack_lvl+0x95/0xd0 [ 414.551411][T17544] dump_stack+0x15/0x1b [ 414.551471][T17544] should_fail_ex+0x262/0x280 [ 414.551546][T17544] ? __alloc_skb+0x2e0/0x6f0 [ 414.551682][T17544] should_failslab+0x8c/0xb0 [ 414.551845][T17544] kmem_cache_alloc_node_noprof+0x82/0x400 [ 414.551949][T17544] ? __alloc_skb+0x2e0/0x6f0 [ 414.552135][T17544] __alloc_skb+0x2e0/0x6f0 [ 414.552349][T17544] ? __alloc_skb+0x209/0x6f0 [ 414.552429][T17544] __ip6_append_data+0x1a6e/0x24c0 [ 414.552557][T17544] ? __pfx_raw6_getfrag+0x10/0x10 [ 414.552744][T17544] ? xfrm_lookup_with_ifid+0xd61/0x1570 [ 414.552870][T17544] ip6_append_data+0xd3/0x1d0 [ 414.553023][T17544] ? __pfx_raw6_getfrag+0x10/0x10 [ 414.553117][T17544] rawv6_sendmsg+0xf70/0x1150 [ 414.553236][T17544] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 414.553355][T17544] inet_sendmsg+0xc5/0xd0 [ 414.553460][T17544] ? __pfx_inet_sendmsg+0x10/0x10 [ 414.553537][T17544] ____sys_sendmsg+0x4e8/0x580 [ 414.553690][T17544] ___sys_sendmsg+0x195/0x1e0 [ 414.553827][T17544] __x64_sys_sendmsg+0xd4/0x160 [ 414.553877][T17544] x64_sys_call+0x22ab/0x2550 [ 414.553989][T17544] do_syscall_64+0x112/0x360 [ 414.554124][T17544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.554227][T17544] RIP: 0033:0x7f3c54efe159 [ 414.554283][T17544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.554359][T17544] RSP: 002b:00007f3c53957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.554426][T17544] RAX: ffffffffffffffda RBX: 00007f3c55185fa0 RCX: 00007f3c54efe159 [ 414.554491][T17544] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 414.554552][T17544] RBP: 00007f3c54f9503b R08: 0000000000000000 R09: 0000000000000000 [ 414.554677][T17544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.554720][T17544] R13: 00007f3c55186038 R14: 00007f3c55185fa0 R15: 00007ffce572f0c8 [ 414.554842][T17544] [ 414.565979][ T3572] Bluetooth: hci0: command 0x1003 tx timeout [ 414.599002][ T7578] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 414.599866][T17430] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 414.848738][T17549] --map-set only usable from mangle table [ 414.973351][T17555] nfs4: Unknown parameter 'eo' [ 415.047177][T17566] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4322'. [ 415.185110][T17570] --map-set only usable from mangle table [ 415.198325][T17572] --map-set only usable from mangle table [ 415.616638][T17582] nfs4: Unknown parameter 'eo' [ 415.664270][T17589] nfs4: Unknown parameter 'eo' [ 415.676378][T17596] --map-set only usable from mangle table [ 415.711338][T17602] --map-set only usable from mangle table [ 415.733157][T17604] loop6: detected capacity change from 0 to 128 [ 415.738311][T17604] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 415.743566][T17604] FAT-fs (loop6): error, parent dir link count too low (2) [ 415.743593][T17604] FAT-fs (loop6): Filesystem has been set read-only [ 415.753594][T15621] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 415.908545][T17613] loop8: detected capacity change from 0 to 8192 [ 415.916444][T17613] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 415.957733][ T29] audit: type=1400 audit(17458.960:5269): avc: denied { map } for pid=17615 comm="syz.7.4331" path="socket:[56223]" dev="sockfs" ino=56223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 416.108342][T17613] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 416.108375][T17613] FAT-fs (loop8): Filesystem has been set read-only [ 416.108702][T17613] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 416.108866][T17613] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 416.114832][T17613] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 416.115059][T17613] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 416.128370][T17624] --map-set only usable from mangle table [ 416.152442][T17628] nfs4: Unknown parameter 'eo' [ 416.247892][T17630] nfs4: Unknown parameter 'eo' [ 416.326715][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4343'. [ 416.767017][T17664] nfs4: Unknown parameter 'eo' [ 416.808361][T17671] nfs4: Unknown parameter 'eo' [ 416.973338][T17686] loop6: detected capacity change from 0 to 8192 [ 417.649973][T17709] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4364'. [ 417.677682][T17711] nfs4: Unknown parameter 'eo' [ 417.768307][T17716] FAULT_INJECTION: forcing a failure. [ 417.768307][T17716] name failslab, interval 1, probability 0, space 0, times 0 [ 417.768347][T17716] CPU: 1 UID: 0 PID: 17716 Comm: syz.2.4367 Not tainted syzkaller #0 PREEMPT(lazy) [ 417.768449][T17716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.768468][T17716] Call Trace: [ 417.768478][T17716] [ 417.768489][T17716] __dump_stack+0x1d/0x30 [ 417.768580][T17716] dump_stack_lvl+0x95/0xd0 [ 417.768613][T17716] dump_stack+0x15/0x1b [ 417.768643][T17716] should_fail_ex+0x262/0x280 [ 417.768674][T17716] should_failslab+0x8c/0xb0 [ 417.768742][T17716] __kvmalloc_node_noprof+0x168/0x5c0 [ 417.768790][T17716] ? tun_attach+0x5f5/0xb80 [ 417.768886][T17716] ? tun_attach+0x5f5/0xb80 [ 417.768923][T17716] tun_attach+0x5f5/0xb80 [ 417.768957][T17716] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 417.769032][T17716] ? __mod_timer+0x6ff/0x990 [ 417.769077][T17716] tun_net_init+0x267/0x2c0 [ 417.769158][T17716] register_netdevice+0x239/0x11a0 [ 417.769194][T17716] tun_set_iff+0x5fe/0x870 [ 417.769241][T17716] __tun_chr_ioctl+0x682/0x1550 [ 417.769296][T17716] ? selinux_file_ioctl+0x33c/0x3c0 [ 417.769413][T17716] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 417.769441][T17716] tun_chr_ioctl+0x27/0x40 [ 417.769473][T17716] __se_sys_ioctl+0xce/0x140 [ 417.769517][T17716] __x64_sys_ioctl+0x43/0x50 [ 417.769619][T17716] x64_sys_call+0x239d/0x2550 [ 417.769657][T17716] do_syscall_64+0x112/0x360 [ 417.769704][T17716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.769787][T17716] RIP: 0033:0x7fa3f631e159 [ 417.769804][T17716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.769834][T17716] RSP: 002b:00007fa3f4d77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.769864][T17716] RAX: ffffffffffffffda RBX: 00007fa3f65a5fa0 RCX: 00007fa3f631e159 [ 417.769886][T17716] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 417.769905][T17716] RBP: 00007fa3f63b503b R08: 0000000000000000 R09: 0000000000000000 [ 417.769924][T17716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.769937][T17716] R13: 00007fa3f65a6038 R14: 00007fa3f65a5fa0 R15: 00007ffd7b19b738 [ 417.769958][T17716] [ 418.326127][T17737] syzkaller1: entered promiscuous mode [ 418.326146][T17737] syzkaller1: entered allmulticast mode [ 418.464337][T17740] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4384'. [ 418.717917][T17751] nfs4: Unknown parameter 'eo' [ 419.001464][T17759] set_target_v3_check_hooks: 8 callbacks suppressed [ 419.001486][T17759] --map-set only usable from mangle table [ 419.001533][T17763] loop2: detected capacity change from 0 to 1024 [ 419.036178][T17763] EXT4-fs (loop2): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 419.057312][T17767] --map-set only usable from mangle table [ 419.079101][T17763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.160128][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.239072][ T29] audit: type=1400 audit(17462.240:5270): avc: denied { setopt } for pid=17775 comm="syz.2.4386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 419.239471][ T29] audit: type=1400 audit(17462.240:5271): avc: denied { listen } for pid=17775 comm="syz.2.4386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 419.240860][ T29] audit: type=1400 audit(17462.250:5272): avc: denied { ioctl } for pid=17775 comm="syz.2.4386" path="socket:[57560]" dev="sockfs" ino=57560 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 419.391732][T17782] --map-set only usable from mangle table [ 419.451744][T17785] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4392'. [ 419.461232][T17788] FAULT_INJECTION: forcing a failure. [ 419.461232][T17788] name failslab, interval 1, probability 0, space 0, times 0 [ 419.461263][T17788] CPU: 0 UID: 0 PID: 17788 Comm: syz.6.4393 Not tainted syzkaller #0 PREEMPT(lazy) [ 419.461367][T17788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 419.461381][T17788] Call Trace: [ 419.461388][T17788] [ 419.461399][T17788] __dump_stack+0x1d/0x30 [ 419.461432][T17788] dump_stack_lvl+0x95/0xd0 [ 419.461461][T17788] dump_stack+0x15/0x1b [ 419.461482][T17788] should_fail_ex+0x262/0x280 [ 419.461538][T17788] should_failslab+0x8c/0xb0 [ 419.461610][T17788] __kmalloc_node_noprof+0xdb/0x500 [ 419.461651][T17788] ? __blk_mq_realloc_hw_ctxs+0x82/0x430 [ 419.461680][T17788] ? __blk_mq_realloc_hw_ctxs+0x82/0x430 [ 419.461719][T17788] __blk_mq_realloc_hw_ctxs+0x82/0x430 [ 419.461746][T17788] ? kobject_init+0xa1/0x110 [ 419.461836][T17788] ? blk_mq_sysfs_init+0xf1/0x110 [ 419.461872][T17788] blk_mq_init_allocated_queue+0x21d/0x910 [ 419.461954][T17788] ? blk_alloc_queue+0x314/0x320 [ 419.461994][T17788] __blk_mq_alloc_disk+0xeb/0x1b0 [ 419.462107][T17788] ? __pfx_loop_control_ioctl+0x10/0x10 [ 419.462215][T17788] loop_add+0x2a1/0x580 [ 419.462246][T17788] ? __pfx_loop_control_ioctl+0x10/0x10 [ 419.462272][T17788] loop_control_ioctl+0xd0/0x3f0 [ 419.462415][T17788] ? __pfx_loop_control_ioctl+0x10/0x10 [ 419.462443][T17788] __se_sys_ioctl+0xce/0x140 [ 419.462551][T17788] __x64_sys_ioctl+0x43/0x50 [ 419.462583][T17788] x64_sys_call+0x239d/0x2550 [ 419.462633][T17788] do_syscall_64+0x112/0x360 [ 419.462679][T17788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.462711][T17788] RIP: 0033:0x7f3c54efe159 [ 419.462728][T17788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.462752][T17788] RSP: 002b:00007f3c53957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 419.462773][T17788] RAX: ffffffffffffffda RBX: 00007f3c55185fa0 RCX: 00007f3c54efe159 [ 419.462790][T17788] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 419.462809][T17788] RBP: 00007f3c54f9503b R08: 0000000000000000 R09: 0000000000000000 [ 419.462828][T17788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.462965][T17788] R13: 00007f3c55186038 R14: 00007f3c55185fa0 R15: 00007ffce572f0c8 [ 419.462994][T17788] [ 419.820137][ T29] audit: type=1400 audit(17462.820:5273): avc: denied { connect } for pid=17802 comm="syz.7.4398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 419.825348][T17804] loop8: detected capacity change from 0 to 512 [ 419.869484][T17804] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.887732][ T29] audit: type=1400 audit(17462.880:5274): avc: denied { write } for pid=17801 comm="syz.8.4397" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 419.891495][ T29] audit: type=1400 audit(17462.880:5275): avc: denied { write } for pid=17801 comm="syz.8.4397" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 419.893124][T17807] --map-set only usable from mangle table [ 419.908030][T16292] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.038347][T17816] --map-set only usable from mangle table [ 420.054176][T17810] loop8: detected capacity change from 0 to 2048 [ 420.326508][T17829] --map-set only usable from mangle table [ 420.343857][T17823] ================================================================== [ 420.343891][T17823] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 420.343921][T17823] [ 420.343929][T17823] write to 0xffffc9000b06be20 of 8 bytes by task 17810 on cpu 1: [ 420.343947][T17823] shmem_fallocate+0x72e/0x8d0 [ 420.343969][T17823] vfs_fallocate+0x3ac/0x400 [ 420.344001][T17823] __x64_sys_fallocate+0x7a/0xd0 [ 420.344035][T17823] x64_sys_call+0x1e1d/0x2550 [ 420.344063][T17823] do_syscall_64+0x112/0x360 [ 420.344094][T17823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.344114][T17823] [ 420.344121][T17823] read to 0xffffc9000b06be20 of 8 bytes by task 17823 on cpu 0: [ 420.344139][T17823] shmem_writeout+0x2b6/0x8f0 [ 420.344167][T17823] shrink_folio_list+0x1a81/0x26f0 [ 420.344198][T17823] evict_folios+0x1c6e/0x2830 [ 420.344221][T17823] try_to_shrink_lruvec+0x8fd/0xb30 [ 420.344247][T17823] shrink_lruvec+0x252/0x1d40 [ 420.344279][T17823] shrink_node+0x67c/0x2000 [ 420.344301][T17823] do_try_to_free_pages+0x408/0xca0 [ 420.344331][T17823] try_to_free_mem_cgroup_pages+0x201/0x420 [ 420.344362][T17823] mem_cgroup_force_empty_write+0x77/0x100 [ 420.344390][T17823] cgroup_file_write+0x197/0x350 [ 420.344422][T17823] kernfs_fop_write_iter+0x1d2/0x2e0 [ 420.344448][T17823] vfs_write+0x57f/0x9a0 [ 420.344482][T17823] ksys_write+0xdc/0x1a0 [ 420.344510][T17823] __x64_sys_write+0x40/0x50 [ 420.344537][T17823] x64_sys_call+0x154e/0x2550 [ 420.344561][T17823] do_syscall_64+0x112/0x360 [ 420.344594][T17823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.344617][T17823] [ 420.344622][T17823] value changed: 0x0000000000001eeb -> 0x0000000000001eec [ 420.344635][T17823] [ 420.344639][T17823] Reported by Kernel Concurrency Sanitizer on: [ 420.344652][T17823] CPU: 0 UID: 0 PID: 17823 Comm: syz.8.4400 Not tainted syzkaller #0 PREEMPT(lazy) [ 420.344677][T17823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 420.344690][T17823] ================================================================== [ 420.447193][T17831] --map-set only usable from mangle table [ 428.731198][ T1925] bond0: (slave netdevsim2): Releasing backup interface [ 428.947242][ T1925] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 428.950248][ T1925] bond0 (unregistering): Released all slaves [ 428.954087][ T1925] bond1 (unregistering): Released all slaves [ 428.987399][ T29] audit: type=1400 audit(17471.990:5276): avc: denied { write } for pid=17842 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.022551][ T29] audit: type=1400 audit(17472.030:5277): avc: denied { write } for pid=17853 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.022727][ T1925] tipc: Left network mode [ 429.058292][ T3024] 8021q: adding VLAN 0 to HW filter on device eth5 [ 429.072779][ T1925] hsr_slave_0: left promiscuous mode [ 429.073212][ T1925] hsr_slave_1: left promiscuous mode [ 429.207004][ T29] audit: type=1400 audit(17472.210:5278): avc: denied { write } for pid=17856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.247728][ T29] audit: type=1400 audit(17472.250:5279): avc: denied { write } for pid=17867 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.283197][ T3024] 8021q: adding VLAN 0 to HW filter on device eth6 [ 429.354008][ T1925] IPVS: stop unused estimator thread 0... [ 429.385409][ T29] audit: type=1400 audit(17472.390:5280): avc: denied { write } for pid=17871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.422416][ T29] audit: type=1400 audit(17472.430:5281): avc: denied { write } for pid=17882 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.453571][ T3024] 8021q: adding VLAN 0 to HW filter on device eth8 [ 429.535995][ T29] audit: type=1400 audit(17472.540:5282): avc: denied { write } for pid=17886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.573019][ T29] audit: type=1400 audit(17472.580:5283): avc: denied { write } for pid=17897 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.605735][ T3024] 8021q: adding VLAN 0 to HW filter on device eth7 [ 429.698870][ T29] audit: type=1400 audit(17472.700:5284): avc: denied { write } for pid=17901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.732365][ T29] audit: type=1400 audit(17472.740:5285): avc: denied { write } for pid=17912 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.765595][ T3024] 8021q: adding VLAN 0 to HW filter on device eth9