last executing test programs: 49.027868661s ago: executing program 0 (id=14): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000380)={0x1f, 0x2, @any, 0xfffd, 0x1}, 0xe) r2 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x4, 0x10ffe, 0x0, 0x2, 0x80000011, 0xfffe, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1b) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) fcntl$notify(0xffffffffffffffff, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000001c0)=0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) getpid() setns(0xffffffffffffffff, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="000000000600"/28, @ANYRES8, @ANYBLOB="000000000400"/28, @ANYRES32=r6, @ANYBLOB="00000000ffffffffffffff7f00"/28, @ANYRES32=r2, @ANYBLOB="00000000f1c400"/28, @ANYRESHEX=r6, @ANYBLOB="000000000200"/28, @ANYRES32=r0, @ANYBLOB="00000000880200"/22, @ANYRES32, @ANYBLOB="00000000904400"/28, @ANYRESOCT=0x0, @ANYBLOB="000000000100"/28, @ANYRES32=r1, @ANYBLOB='\x00'/28]) sendto$inet6(r9, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./bus\x00', 0x200200, &(0x7f0000000440)=ANY=[@ANYBLOB="a42693e60b2e3026b037eee4cfc3959d2d8d078bb4fec3ac62e164ae927fd4cfbad3f7a1f0f9b64e3e6b6b93ea6088aeeced6dea4f3935dd030e7732f2b693b20874eea9c473eaab23ccdeedd790aa7ce1", @ANYRES8=r4], 0x1, 0x3c6, &(0x7f0000000c00)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80086601, 0x0) 47.607292054s ago: executing program 0 (id=20): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000840)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db1af87f00010000bfa100000000000007010000f8ffffffb702000008000000b703001d0000000085000000ca00000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) keyctl$search(0xa, r0, &(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, r1) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r3, &(0x7f00000024c0)=""/209, 0xd1, 0x8) lseek(r3, 0x116d, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x80, 0x0, 0xfffffffb, 0xfffffffd, {{0x20, 0x4, 0x0, 0x36, 0x80, 0x64, 0x0, 0x4, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0xbd, [@broadcast, @broadcast]}, @generic={0x89, 0xe, "3e63b35c51bf17e6c0a6a7a9"}, @rr={0x7, 0xb, 0x72, [@loopback, @private=0xa010102]}, @cipso={0x86, 0x15, 0x2, [{0x2, 0xf, "603043839eda6dc95988521ebd"}]}, @ssrr={0x89, 0x17, 0xbf, [@dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010101, @rand_addr=0x64010105, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x17, 0x87, [@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010101, @empty, @loopback]}]}}}}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) link(0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x20004000) io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x3, 0xf0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000051}, 0x20000004) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xa}, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r5, &(0x7f0000000a00)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) 45.530977903s ago: executing program 0 (id=27): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0xc01, 0x40, 0x4, 0x0, 0x3}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x2, 0x0, &(0x7f0000000140)) write$UHID_INPUT(r1, &(0x7f0000001040)={0xa, {"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", 0x1025}}, 0x1006) perf_event_open(0x0, 0x0, 0x3, r1, 0x1) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x20, r6, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) ioperm(0x0, 0x7, 0x80006) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x1, 0x0, &(0x7f0000001100)) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x82200) ioctl$EVIOCGBITSND(r8, 0x80404532, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) link(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 44.244944619s ago: executing program 0 (id=31): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x0, 0x7ffffc, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setresuid(0x0, 0x0, 0xee00) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') 42.003780929s ago: executing program 0 (id=37): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x8, 0xb}, 0x50) syz_io_uring_setup(0x7357, &(0x7f0000000080)={0x0, 0x10086f3, 0x40, 0xffffffff, 0x400002de}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x21) perf_event_open(0x0, r3, 0x9, r4, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x206000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2010871, &(0x7f0000000bc0)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) 41.063528205s ago: executing program 0 (id=41): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x501441, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x3eb}}], 0x1, 0x8001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ec6000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x9c3d, 0x4, 0xc, 0xa0002f4, 0x0, r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r5, 0x2219, 0x7721, 0x5e, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0xfffff92d, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x69, 0x80000000}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x7}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x5, 0xffff, 0x10001, 0x6}}]}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40400d2}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @random="000863ee0a3d"}, 0x14) madvise(&(0x7f0000fec000/0x12000)=nil, 0x12000, 0x65) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) munmap(&(0x7f00007b2000/0x3000)=nil, 0x3000) r7 = open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) fcntl$setown(r7, 0x8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) io_uring_enter(r5, 0xd4, 0xa308, 0x20, &(0x7f0000000100)={[0x7]}, 0x8) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r8, &(0x7f0000000a80)=ANY=[@ANYBLOB="7f454c460007ff84ff7f0000000000000300060003000000a400000038000000aa00000007000000a70b2000010026840400000000000000030000000700020000000000ff070000c300"], 0x58) close(r8) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0/file0\x00', 0x4000, 0x80) 37.175941409s ago: executing program 4 (id=67): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) setfsuid(0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000480)='R', 0x1}, {&(0x7f0000001880)="4939c3281bad3a92b5029268675f05476aa6f94d671cb2f2334f180d2b0d3fad26e9430aaea3bf0b1131cc2e8e85d6262dd72c61e151cd01fb62cbc49c1ca534d1201c0c2384a7702f1f1f0d0e9ffce0c9d4773438d20cae8b539cbf98a4480eca130e9ab4737496394fba458d75b4bce0bdbab27cc9e4a0dda5405691362d559700a4cbd74b3fc5bae92e9e207c6586055f93906231c25ba23f84ba6fad2903f4bc82b06ca230dd5a840a119df85ac3d1d9ce763f50b07e872e5cf5cc3c176ad2dd32b65f07f7a252435981d880b0c2b55d28e57b7b475aa82f88146e03832e874c1eb6f0977ea7d3cc874df97ed057cbf940d4a7a23c017aade79757c4411c1c99cba01a1d1035e9f066cfc279b82649a9ad42a50ace05d9708b2d283306a1edf7ba307dbf56c910bcbbde2233e62d841b3efe9ccec72bf0207c4f84d416846239b8a2cd6f9d32ae3b3cdef957afe7ef83dd80818b262d72e766f31dc2d44c1bbf0adde2b020ff5469b473d94d00594022af46a3959ce0c4ce71e739a71d262d6b86b124f3672d06af39d87462fcb504b0b583ed1748cbee8fea55d33c323bddfbbc11900342293c2f739f161b37ee0d1c29e09fce08830436f844eaa9358bcd01fac0d2d433727cef0b09be56c5b404491c1ed1ff4d187c7b7e74d0e28d1d49942f74ca653f351b222d79a6a2386e9afeed625baf48331e4ec236fb4e3e54d48684acb68eb9e82a3f553bdb788fc4f859acc230fc176450c42577b95f85310e192afe902751eb074e7e1eaf94cbc38c70009b877c3c0fca9ad1dbeb23e66f510eb3ee267cc28590ae4f1158140244d1afa398b26ac0901488409221a44af921b3abf82ebc1ddc300450ce53220a3ff2140c71f995a2544f6c77df8019fa2642832c5ee962a1ad1291fd006d10cd4afe5acd6702f1f46390d273d6f51a96cdd520bdd808958878eb0d9df9f4cf1dfc0f5530f4e39cb2cd7dd9ee0c435f2902011bb6dd53146542d2bf7b85b99e66154987b4778ab7751118bc459c3fecac5cb4a815f46a10c50702ab199ef13669927cdd2592a58cc0e2759fdd9c27d0a52d2b1daf5a058c8ca3b7285f5f2e55120f2ea3fcc3fd660c411787352178f2e262a12a0f0bc9289f69a8a945fdf869213b8f36ffa57ad781f91b9063ed2232c25310ab26f13206240fdc52e7cb59bb7ab16891e25b91627e3d337845a6d699301ede9c50beb5c3a0aa807b57020cd9ca94a2cef65103fdc1f74dbb31780259c4f736ad448931505fb3100a4b9a1367477f428182c92db18d91ce8ee082d583942f84b6fd9ad79f24a39ecdb16d2da4018651b3a03e632ec3fa5f5201babcc81c38bb193313a5049c0637314cc85a44b96a24b1625973f0f42a1144a7b52dd6c59480d038d86af2e57bc15194baff3ba2b00c6a2c030bb2dcb397ed00eddb2371478e38eeb595e7b5fd11e93ff4b85fbeb34954fd4f290d0f91d9b06d4a0963e1df112864ce9830d888302290f3783da7e6abbd49e10a16401ce5261e16e086876bcfbfabc90bba0d9c1c4809098f5ba05d51fe0e81a07b3a425d9e88e21a98104f37ec3e98ea4a4ba97c88b3201e655d29788a5e81bbcc27f06fa6f31161910bd8adcccd867854e8c945cbdae10ccd1d51683748cc066d5f2a4de2e536bdf9d6988df670a946f0371e3f1d9f3996d8c865df284eb005982f392bde60d211789e2339fdaccffa800bf3feb02054ddc6070e4dc78b2da84859eb73ae11cde1556bfbee51104cbc149d07bc0e4514c6fa21c3ee4d383ac95f55754e35288ad4950978d0c9423498942bc7c034e6f4bdf920809cbe2dd25148b532d600f68254e261c0ce003151638f50e251553626e86f792a66c5a0ee860d42f04476bfd0e024995c8ec1b1b3f1d01e43c7fec50f4c49180348f4515155cb9c833cf9e531da3588cb7a0058130d2c1ff16bbdfdb7382ca83ef334b03bfff68b6230b1a92b1300c7ff53879628a95a36cf9ab5a3ec7b83cc9a0fac72475ef94e0459a8b9fc13cf202efc8e287bd22b7c3b7c35ae3ff238ab3e2a7051010cc42d6a9685c375d2c7f7a6022fe60373a643b0b583e16cacdc0c40f22f4eafccbc7858ae302822aea1be3dbb9151bc7d07fb6af5be48243428d4ad7d701b3dfe4aa66c959d901a985a2aa679ece80fdaee02f442ffa2562fd61b5a2b7108a5625b8e8b1ac2efa3bdd931db99d0d1d2d7ee4fec6423c950c70d4c8671305aa44158b96126f80b63fdad03fafb9f0c82d5a5c6bbc4bd66ce83b530c8eca133bd90a63c37aae7380bc9ad6c7bed9e9098e8d220775081211dbef8a2d907061a190cb9675703486cd77fbb85c1a52168bae773bc9d69a13eea761bf6b8cb847202ee9c5aba767d016c956a4d63b24958b32c712c0a10c8f60c6edad90417c9d70388e32b69093b4b576da9f24aa6e1db30f06f3160b0a1d09b96b256a99443fdb8b5ba0dbfb6c603b585bd24891135efcbf32675035d5829dc32494ddbf5061e0ac161a3ed1a612e3568e58a35d627f260c00acec89ceea80a272ed3a2d2b4cecdf95458d74102266e4f8d3b3a17cc69c4e77ea324fd791a30d9c29b75f0aaa532093bd7817d16b9df5f76706c0cd15e1f71f24733da686a35e0d7386a64045315faa66f08ef5d51929644ea17bca99a533d2d656909fc2fee3e9fae62fe4280f158b7d352c8b31171ff0f4ed8fff0769444737f07458955aec8c43144918645011676346e505a715d2d3e1abcc817cd8b063790ab0bcb499df0d26432948c7ee17fa672841e1ef516fed997d7bb50f57f427b17dba40832d7ba9d5b9b75b9e2a32f44f7c88859fc066b3168fa9510c6ca53c466800715c052bade66dd8625040ff9efb59d7f3083a617ae7efb", 0x800}], 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000080)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "4059dbdcb20f5a"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, &(0x7f0000000140)=""/93, 0x5d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001300), 0x80c1, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001380)=@generic={&(0x7f0000001340)='./file0\x00'}, 0x18) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001400)=@o_path={&(0x7f00000013c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{0x1, 0xffffffffffffffff}, &(0x7f0000001480), &(0x7f00000014c0)}, 0x20) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001540)={0x1b, 0x0, 0x0, 0x400, 0x0, 0x1, 0xdf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) ioctl$XFS_IOC_FSINUMBERS(r10, 0xc0205867, &(0x7f00000017c0)={&(0x7f0000001740)=0x2, 0xf64, &(0x7f0000002080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001780)}) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1, 0x19, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6ad5}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0xb1}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa52, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}]}, &(0x7f0000001240)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x7b, '\x00', r5, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000012c0)={0x5, 0xc, 0x40, 0xba65}, 0x10, r6, r7, 0x7, &(0x7f00000015c0)=[r8, r9, r10, r11, r12], &(0x7f0000001600)=[{0x4, 0x1, 0xa}, {0x5, 0x4, 0xe, 0x1}, {0x0, 0x2, 0xb, 0xa}, {0x0, 0x2, 0xa, 0x5}, {0x0, 0x2, 0x0, 0xb}, {0x4, 0x1, 0xd, 0x5}, {0x0, 0x4, 0x1, 0xa}], 0x10, 0x1}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001080)={{r2, 0x1000, 0x1ff, 0x4, 0xffff, 0xc0000000000, 0x1, 0x7, 0x7, 0x7, 0x4, 0x19, 0xff, 0x100000000, 0xb6}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) 36.357916627s ago: executing program 4 (id=69): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, 0x0, 0x0, 0x4, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) shutdown(r1, 0x1) r3 = getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x13, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYRES64, @ANYRES64=r3, @ANYRES16=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff02000000000000007f0000000000000002000000000000000000000000000000fd2100000000000204000000000000000400000000000000f6004000040000000800000000000000ff340000020001be33000000000000004c001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000bcfa56f4f322f5b6000000000000000000000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) creat(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x2a, 0x1, 0x4, 0x0, 0x0, 0x7, 0xc604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xc, 0x7}, 0x6004, 0x0, 0xa, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") r4 = fsopen(&(0x7f0000000180)='ext4\x00', 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x86040, 0x41) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) msync(&(0x7f0000d39000/0x4000)=nil, 0x4000, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000a080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f0000000400c0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="746f74732c5c6d61736b3d30303030303030303030584e30303030303030363637352c646973637f4e25c4324ddd97d77dc061f06172642c7549643d", @ANYRES32=r5, @ANYBLOB="2c646f74732cd3d182ca0876f7c8656275672c646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c6e6f646f74732c6e66732c6e6f646f74732c6e6f646f74732c666c7573682c756d61736b3d30303030303030303030303030303030303030303030372c646f733178666c6f7070792c646f74732c726f6f74636f6e746578743d73746166665f752c61707072616973655f747970653d696d617369672c66756e633d46494c455f434845434b2c7569643d", @ANYRESOCT=r5, @ANYBLOB=',smackfshat={)(:.,\x00'], 0x1, 0x204, &(0x7f0000000380)="$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") syz_open_procfs(r3, &(0x7f0000000300)='fdinfo/4\x00') 35.711125214s ago: executing program 4 (id=74): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x0, 0x7ffffc, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setresuid(0x0, 0x0, 0xee00) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/snmp6\x00') 33.205749458s ago: executing program 4 (id=88): pipe2$9p(0x0, 0x80800) vmsplice(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1) r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) r2 = fsopen(&(0x7f0000000180)='9p\x00', 0x1) close(0x3) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000140), 0xa, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000bc0)={[{@usrquota}, {@dioread_nolock}]}, 0x21, 0x4d4, &(0x7f0000001340)="$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") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) 32.924657199s ago: executing program 4 (id=91): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) rename(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='./file1\x00') uname(&(0x7f0000000040)=""/114) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r5, r5, 0x0, 0xe3aa6ea) sendfile(r2, r2, 0x0, 0xe3aa6ea) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, @ib={0x1b, 0x4, 0x2, {"00000000000000000000000000000001"}, 0x0, 0xffffffffffffffff, 0x3ff}}}, 0x118) 31.578802805s ago: executing program 4 (id=102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "d0f91c3e0095aa35182c53d753adf8d55a8cb0f8b568c9e504a254d635a0c08e1bd53204d800f999f7bc95d402803e48832d43e17af27d00a5986fd3248e1314b8"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x6ea, 0x6, 0x5, 0x0, 0x2, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000180)={0x0, 0xf, 0xc, 0x1000, 0x4, "5a1c966bcd4b7448"}) write$UHID_INPUT(r2, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) timerfd_create(0x2, 0x80000) r3 = getpid() r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r5, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20044045) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private0}}, &(0x7f0000000000)=0xe8) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={r3, r6}, 0xc) 31.534337597s ago: executing program 32 (id=102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "d0f91c3e0095aa35182c53d753adf8d55a8cb0f8b568c9e504a254d635a0c08e1bd53204d800f999f7bc95d402803e48832d43e17af27d00a5986fd3248e1314b8"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x6ea, 0x6, 0x5, 0x0, 0x2, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000180)={0x0, 0xf, 0xc, 0x1000, 0x4, "5a1c966bcd4b7448"}) write$UHID_INPUT(r2, &(0x7f0000001040)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f36006c090890e0878f0e1ac6e7f89b334d959b639a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000400000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617679314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec230911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918c91243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac5a4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4b333bd5bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3be3b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ce0700c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d486046b2c0e2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29c60acebdbe8ddbd75c2f998d8a57f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95ff80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513007000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d946a2daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810300000000000000a12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf000000800000000007b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0e797e8bd1f4108b7807fb36207685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ad50dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b9048017848416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1db44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de9c0587c2cb5fe36d7d3e5db21b013b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cf4b23329072e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06810002000000000000957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f3e90d5943dbc10360a1a49700d1dfbf66d69f6fbafe1e83cdde8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000100", 0x35e}}, 0x1006) timerfd_create(0x2, 0x80000) r3 = getpid() r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r5, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20044045) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private0}}, &(0x7f0000000000)=0xe8) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={r3, r6}, 0xc) 26.022704108s ago: executing program 33 (id=41): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x501441, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x3eb}}], 0x1, 0x8001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ec6000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x9c3d, 0x4, 0xc, 0xa0002f4, 0x0, r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r5, 0x2219, 0x7721, 0x5e, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0xfffff92d, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x69, 0x80000000}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x7}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x5, 0xffff, 0x10001, 0x6}}]}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40400d2}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @random="000863ee0a3d"}, 0x14) madvise(&(0x7f0000fec000/0x12000)=nil, 0x12000, 0x65) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) munmap(&(0x7f00007b2000/0x3000)=nil, 0x3000) r7 = open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) fcntl$setown(r7, 0x8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) io_uring_enter(r5, 0xd4, 0xa308, 0x20, &(0x7f0000000100)={[0x7]}, 0x8) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r8, &(0x7f0000000a80)=ANY=[@ANYBLOB="7f454c460007ff84ff7f0000000000000300060003000000a400000038000000aa00000007000000a70b2000010026840400000000000000030000000700020000000000ff070000c300"], 0x58) close(r8) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0/file0\x00', 0x4000, 0x80) 7.599930063s ago: executing program 3 (id=296): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1, 0x0, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r2, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x10002, 0x0) 6.707781857s ago: executing program 3 (id=308): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, 0x0, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x10}, 0x4, 0x0, 0x10000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRES32], 0x0) 6.156549621s ago: executing program 3 (id=311): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000004840)=""/215, 0xd7}, {&(0x7f0000000980)=""/265, 0x109}, {&(0x7f0000004b00)=""/176, 0xb0}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000180)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb301fffd) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000700)={{0xffffffffffffffff, &(0x7f0000000040)=':\x00', 0x8000, &(0x7f0000000100)={@_ha_fsid={[0x8, 0x85a]}, {0xffff, 0x9, 0x4}}, 0x4, &(0x7f0000000880)={@_ha_fsid}, 0x0}, 0x3, &(0x7f0000000680)=[{0x1, 0x95, &(0x7f0000000300)='\x00', &(0x7f0000000340), 0x0, 0x1a}, {0x2, 0x5, &(0x7f0000000380)='q,\'-[[\x00', &(0x7f00000003c0)="d4d9ebdf0cff638c9034b85742bd38aeac26e79e8ef64068da87587a03a0ae72c8bea11e1a40126396b564337b7a34ef5a56ad95b6b8382f779c3f6f309043b81f9307028f1aa2786438383360c4eeb571966ffe9f925f02a282ea0d86c8187f5e9b6d57262853955c5cf62b93bb9de3c586eece98ec9281ce18997e4bddbd85ab4921a966aa4270c2ebef65ff5ce447e7abc1b8de3a8878ca475fdac87eaddab3917ff7c6dd863033103be0c7e57d6ef606f71c58685ba910f70969ce59218ce37f02c5fd2a508fecbf23cfeef54cf0e388ef65b114a685ebda6b6c7a7494eaef9c07", 0xe3, 0x12}, {0x2, 0x1, 0x0, 0x0, 0x0, 0x20}]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000b00)={'sit0\x00', 0x0, 0x7800, 0x10, 0xffe00000, 0x800, {{0x3a, 0x4, 0x3, 0x5, 0xe8, 0x68, 0x0, 0x4, 0x2f, 0x0, @empty, @remote, {[@noop, @timestamp_addr={0x44, 0x24, 0x31, 0x1, 0x8, [{@multicast2, 0x4}, {@empty, 0xf34}, {@local, 0x7ff}, {@empty, 0x10001}]}, @timestamp_addr={0x44, 0x24, 0x88, 0x1, 0x0, [{@loopback, 0x3}, {@empty, 0xbf38}, {@rand_addr=0x64010100, 0xa7}, {@empty, 0x6}]}, @timestamp_prespec={0x44, 0xc, 0x85, 0x3, 0x7, [{@remote, 0x3}]}, @timestamp={0x44, 0x18, 0xbb, 0x0, 0x8, [0x39, 0x6, 0xf, 0x3, 0xffff3d70]}, @timestamp_addr={0x44, 0x1c, 0x71, 0x1, 0x8, [{@loopback}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x7}, {@remote, 0x4}]}, @cipso={0x86, 0x38, 0x1, [{0x6, 0x11, "bb51fe0eb6b527e497822d835bf3c5"}, {0x5, 0x8, "6ed2c4161fd6"}, {0x1, 0xd, "286a503f651d1e2e36401d"}, {0x0, 0x8, "4acbe15bdca1"}, {0x5, 0x4, "9f32"}]}, @end, @lsrr={0x83, 0xf, 0x78, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x9, 0xfff3}, {0xe, 0x1}, {0x19}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x20048000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r8 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) timer_create(0x7, &(0x7f0000000800)={0x0, 0xc, 0x2, @tid=r8}, &(0x7f0000000840)) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x100) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40505331, &(0x7f0000000240)={{0xa, 0x5}, {0x9, 0x1}, 0x4, 0x3, 0x3}) unshare(0x6a040000) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x204980, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r10, 0x94eb2000) read$ptp(0xffffffffffffffff, 0x0, 0x0) 6.14550911s ago: executing program 6 (id=313): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0xc, 0x1d, 0x100, 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x80000001}], 0x1, 0x40002000, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x9, 0x0, 0x4, 0x6, 0x7, 0x80}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000006000000855febc34354f1faea000000a00000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.4035642s ago: executing program 3 (id=321): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x200, 0x100000002, 0x7ab2, 0xfff}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r2}) wait4(r2, &(0x7f0000000040), 0x80000000, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1200000, &(0x7f0000000600)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="38855b7ef832ca724d7325f9c3585a1a950fbcd1c5249a3a27e8efed9ded5aa2a3ab744da9312b308bd5d5dd27fa0677527eaa05cc7b18c3e8a01616f92940ac31003e1181bf9174aa66bf5c54e6e35e2da82c69208ed6dfd608c8"], 0x1, 0x214, &(0x7f0000000240)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) ftruncate(r3, 0xfff) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x24040084) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x4000840) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x3, 0x6ea, 0x6, 0x7, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a800080008000c4004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x40000c0) 5.211985687s ago: executing program 6 (id=323): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r1 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RGETLOCK(r1, &(0x7f0000000000)={0x28, 0x37, 0x1, {0x2, 0x5, 0x9, r2, 0xa, 'syzkaller\x00'}}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a3a656e5f6465b53ce3f231b8baec13766963655f743a7330202f7573722f7362696e2f637570732d62726f777365642030"], 0x4e) sendmmsg$inet6(r1, &(0x7f0000002940), 0x40000000000017d, 0x888) 4.274815354s ago: executing program 6 (id=330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x604ae000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x2a}, &(0x7f0000000380)=0x40) 4.149055712s ago: executing program 6 (id=332): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x51) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000300)='.\x00', 0x880f9, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r1, 0x1, 0x2e, 0x0, &(0x7f0000000040)) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010080ffff00000000010000000800010003000000000000000000000000000000001b8cf0d24a1268006067bed15829447398fc8dca3637f310dc43e3972f751bd96555fbfd2992ef6e3a0e74c5aa2ab931c3a2b4ba3301bf264e9024aa11b63861e0eff93f"], 0x28}}, 0x0) r7 = syz_pidfd_open(r4, 0x0) r8 = syz_open_procfs$namespace(r2, &(0x7f0000000340)='ns/mnt\x00') setns(r8, 0x6000000) setns(r7, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9900, &(0x7f0000001dc0)={0x4, 0xf5, 0x40000}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) gettid() fcntl$lock(r9, 0x26, &(0x7f0000000040)={0x0, 0x1, 0x7e77, 0x8000000a}) sendmsg$AUDIT_MAKE_EQUIV(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x3f7, 0x2, 0x70bd27, 0x25dfdbfc, {0x7, 0x7, './file1', './file1'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.337313821s ago: executing program 6 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x2, 0x206) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x7}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x1, @perf_config_ext={0x100000000, 0xf60e}, 0xb90f, 0x800000, 0x43a1bd76, 0x2, 0x6, 0x6, 0x9, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000001, 0xffffffffffffffff, 0x8) fsmount(0xffffffffffffffff, 0x0, 0x2) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) symlink(0x0, &(0x7f0000000000)='./file1\x00') unshare(0x62000000) socket$igmp(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) 3.336877051s ago: executing program 5 (id=336): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB='trylock i'], 0xc) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000003c0)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_flags_required={0x3, 0x19}], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) io_uring_enter(r1, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000005c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000035c0)={0x1000000000000, [{r4}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4}, {r4}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {r4}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4}, {r4, r3}, {r4, r3}, {r4}, {r4, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {r4}, {0x0, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {r4}, {r4, r3}, {r4}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}], 0x9, "7499ed6f6deff8"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000015c0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "d32b5544c52019"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000025c0)={r3, r6, "c98f94d4c1366bdb45e7ed5f695043b57bf58503e8faa39902fd08a328d4e5672c6b12f1964c7749b63c107f302207bcca19b66b42d2b31248174b2b283d39c88e14771362b8b1d17960e41f7186054307ba22f91d867a44b5b6e46c313c211ded8723c693a34110ab40e3da919887f3f887bae486ae07efa262859e48e738a8d517222a58e36ab0727549637aca44f23ac7de166d6b19d00bbde02458838ce7eaa0eb9b3aa0b5e985f68f17709f275445318e3de52fb59cde74e44a2e27bf10831f041dd3d85e32c877548e47aa93d034eb085187a9eae59c5a631bd68ebc65fbb7002a2f8db538d70b21fc7e018bfb040c6a35869564174c6871d40684e50e", "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"}) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=0x0, @ANYBLOB="200001"], 0x38}}, 0x0) 3.322530908s ago: executing program 5 (id=337): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfffe) (fail_nth: 7) 2.911648037s ago: executing program 3 (id=338): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000300)={[{@fat=@time_offset={'time_offset', 0x3d, 0x804f7}}, {@dots}, {@fat=@nfs_stale_rw}, {@dots}, {@dots}, {@dots}, {@fat=@quiet}, {@fat=@flush}, {@fat=@nocase}, {@fat=@fmask={'fmask', 0x3d, 0xca}}, {@fat=@dos1xfloppy}, {}, {@fat=@dmask}, {@nodots}, {@nodots}, {@dots}]}, 0x21, 0x23d, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}]}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='.\x02\x00', 0x180) syz_clone3(&(0x7f00000004c0)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0x0}, 0x58) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000100), 0x4) recvmmsg(r2, &(0x7f00000055c0)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/9, 0x9}], 0x1, &(0x7f00000003c0)=""/197, 0xc5}, 0x1}, {{&(0x7f0000005540)=@qipcrtr, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1, &(0x7f0000000540)=""/179, 0xb3}, 0x8}, {{&(0x7f0000000600)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000680)=""/128, 0x80}], 0x1}, 0x8}, {{&(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)=""/113, 0x71}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/181, 0xb5}, {&(0x7f0000000900)=""/175, 0xaf}, {&(0x7f0000001c80)=""/132, 0x84}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x4, &(0x7f0000000a00)=""/54, 0x36}, 0x3}, {{&(0x7f0000002d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002dc0)=""/48, 0x30}, {&(0x7f0000002e00)=""/148, 0x94}, {&(0x7f0000002ec0)=""/247, 0xf7}, {&(0x7f0000002fc0)=""/21, 0x15}, {&(0x7f0000003000)=""/97, 0x61}, {&(0x7f0000003080)=""/6, 0x6}, {&(0x7f00000030c0)=""/192, 0xc0}], 0x7, &(0x7f0000003200)=""/4096, 0x1000}, 0x2000}, {{&(0x7f0000004200)=@isdn, 0x80, &(0x7f0000004480)=[{&(0x7f0000004280)=""/201, 0xc9}, {&(0x7f0000004380)=""/132, 0x84}, {&(0x7f0000004440)}], 0x3, &(0x7f00000044c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f00000054c0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000005540), 0x0, &(0x7f0000005580)}, 0x255}], 0x8, 0x61, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='.\x02\x00', 0x0, 0x20000, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0xa8, 0x82) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newaddr={0x28, 0x14, 0x503, 0x70bd32, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @remote}, @IFA_FLAGS={0x8, 0x8, 0x330}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000e081}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$BLKFRAGET(r3, 0xc0c0128e, 0x0) 2.906117566s ago: executing program 5 (id=339): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x31, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f00000000c0)=""/175, 0xaf}, {&(0x7f0000000940)=""/175, 0xaf}, {&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000002f40)=""/4072, 0xfe8}, {&(0x7f0000000180)=""/132, 0x84}, {&(0x7f0000000640)=""/119, 0x77}], 0x7}, 0x401}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) recvmmsg(r1, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700e23f02020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a4ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ad94e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d4e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x10, @empty, @empty, 0x0, 0x7}}) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) mount(&(0x7f0000000100)=@sg0, &(0x7f00000003c0)='.\x00', &(0x7f0000000140)='ext4\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c7766646e6f3d71ffc09e7b9f551bd4d253fe2ae802b22232e22fdb33a7d8a56288d8e29ae3611b4cc1a77bc9923741b629fe46cc45817da28708711ea8abb17b09706b150f14bbe2566ba750be1809d60332e8f117e588b87234b2cc67238fc4950e228f4c650525bc248b3a7457dd", @ANYRESHEX=r6, @ANYBLOB=',\x00']) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x120c000, 0x1000, 0x0, 0x7}, 0x20) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r7, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 2.786421305s ago: executing program 6 (id=340): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000001180)=[{0x6, 0x5, 0x5, 0x7ffc0001}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) lseek(r3, 0x9, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="ff000000100001000000001100010000000000000000000000000ac2c01bcdd89071842b9112b2b2f94bb6b205280d597347dea68f0b730562edc53efba5630e17b088b93cabec6c9989b4d47d166ffb4562eebb18e1d11e3de91f4180d1af3cd01cb5e47e7d5175b709d30c01474ea60e779dabe6f14c55e6155029fe25ecf20e84f5f005409a151a6133d12bd8c847b423db9f66d0da628f01b1bd5dd850a92b87172c6598c83448a69a65c987507929755337971eadf055efd10000000000000000d0de01628c7dc6c54b79ddeb4fe18a9d2b081ea7c2584ddabd950e5c82db07de0ce4e06840f39ad4a799ba9123ca00"/268], 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="c686ade31b8a904d9014ac772be912302b67a7057f92f4d2b50a3c5281334727b1e6dd0af40159d47d454cfec9782b98f534741a36d63ab339b8ece3f1ba20fa346bf805597b7e644af743423837ee33496cd10d6a09e3338d58054ec71a4ba3db6e805567a7de844779eec57528fbae40382842f7536fcf2802141b257f8ddd70bcccf5d9a8543b336c5a589eb1b08f795281ab7e20efd6a10019186f8aef9d4a9189df4f624bd9776833afb93c3be6a5da8793383ed705e29f85d36b", 0xbd}, {&(0x7f0000000340)="b2797ef2c06bf70e87049641afb0610df1eff67a295d7cd4692fbdb33e494a2fe0bd7f3a3dfd4ebb114fe4916b93a53aa4f252cbd79626d91ec5d195cda0a7740c1f9106243b7d8732bc950f6764d964a0f1944dcc840d9e2e946f21e25087dc8d689f9ec8473ad1880406a3", 0x6c}], 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="6800000000000000ff00000000000000f7cdc7ea10664f10576f502a5a9902399b41b78db0e93a9265c4a1407ef9a5fbb8f941bd6837fc09fa88f410413d8b691b9a62ec442b14b3c1ff795c77490f9209af6fe9d870c5326ab9e79aeeadd7a068aa000000000000"], 0x68}, 0x8841) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xfff}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r6 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbd72502000000090001"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x54) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x442041, 0x8, 0x32}, 0x18) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f0000000100)={[{@name={'name', 0x3d, 'qt.,\xac\xa7@\xef\xac\r\xbd\xe6\xec\xa64\x10*o\xe4\xc2\xd2\xa3\x02h\xd3\xee\xbao\xfe\x17\xfc\x0f\xedU\x7f\xdc\x005\x1f\xaaAa\x19V\xc6Ks9\xe6\xa8\xbc\x97\xe6\x1d,\xc4\x16\x8b[h~\t\x04\xdb\xe8\x14\x81\xae\x04\x9fX\xf0`W\x01\xd8\xb4Q\xc9\x96R\xd0\xcf\x85\xcfX\x9d\xdd\x89>Y\x8a\x95\xd7\xde@0R[\xd5'}}]}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x78100}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x40) socketpair(0x1, 0x1, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x1000000000) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000280)) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000080)={0x3, 0x1, 0x17}) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x10, 0x4) 2.785883585s ago: executing program 1 (id=341): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) pidfd_send_signal(r3, 0x26, &(0x7f0000000180)={0x9, 0x0, 0x80}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r5, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r4, 0x60866}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.774688293s ago: executing program 34 (id=340): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000001180)=[{0x6, 0x5, 0x5, 0x7ffc0001}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) lseek(r3, 0x9, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="ff000000100001000000001100010000000000000000000000000ac2c01bcdd89071842b9112b2b2f94bb6b205280d597347dea68f0b730562edc53efba5630e17b088b93cabec6c9989b4d47d166ffb4562eebb18e1d11e3de91f4180d1af3cd01cb5e47e7d5175b709d30c01474ea60e779dabe6f14c55e6155029fe25ecf20e84f5f005409a151a6133d12bd8c847b423db9f66d0da628f01b1bd5dd850a92b87172c6598c83448a69a65c987507929755337971eadf055efd10000000000000000d0de01628c7dc6c54b79ddeb4fe18a9d2b081ea7c2584ddabd950e5c82db07de0ce4e06840f39ad4a799ba9123ca00"/268], 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="c686ade31b8a904d9014ac772be912302b67a7057f92f4d2b50a3c5281334727b1e6dd0af40159d47d454cfec9782b98f534741a36d63ab339b8ece3f1ba20fa346bf805597b7e644af743423837ee33496cd10d6a09e3338d58054ec71a4ba3db6e805567a7de844779eec57528fbae40382842f7536fcf2802141b257f8ddd70bcccf5d9a8543b336c5a589eb1b08f795281ab7e20efd6a10019186f8aef9d4a9189df4f624bd9776833afb93c3be6a5da8793383ed705e29f85d36b", 0xbd}, {&(0x7f0000000340)="b2797ef2c06bf70e87049641afb0610df1eff67a295d7cd4692fbdb33e494a2fe0bd7f3a3dfd4ebb114fe4916b93a53aa4f252cbd79626d91ec5d195cda0a7740c1f9106243b7d8732bc950f6764d964a0f1944dcc840d9e2e946f21e25087dc8d689f9ec8473ad1880406a3", 0x6c}], 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="6800000000000000ff00000000000000f7cdc7ea10664f10576f502a5a9902399b41b78db0e93a9265c4a1407ef9a5fbb8f941bd6837fc09fa88f410413d8b691b9a62ec442b14b3c1ff795c77490f9209af6fe9d870c5326ab9e79aeeadd7a068aa000000000000"], 0x68}, 0x8841) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xfff}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r6 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbd72502000000090001"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x54) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x442041, 0x8, 0x32}, 0x18) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f0000000100)={[{@name={'name', 0x3d, 'qt.,\xac\xa7@\xef\xac\r\xbd\xe6\xec\xa64\x10*o\xe4\xc2\xd2\xa3\x02h\xd3\xee\xbao\xfe\x17\xfc\x0f\xedU\x7f\xdc\x005\x1f\xaaAa\x19V\xc6Ks9\xe6\xa8\xbc\x97\xe6\x1d,\xc4\x16\x8b[h~\t\x04\xdb\xe8\x14\x81\xae\x04\x9fX\xf0`W\x01\xd8\xb4Q\xc9\x96R\xd0\xcf\x85\xcfX\x9d\xdd\x89>Y\x8a\x95\xd7\xde@0R[\xd5'}}]}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x78100}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x40) socketpair(0x1, 0x1, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x1000000000) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000280)) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000080)={0x3, 0x1, 0x17}) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x10, 0x4) 2.729333635s ago: executing program 3 (id=343): timerfd_create(0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000140)=0x28c287359851a07f, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0xc800) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) fsopen(&(0x7f0000000080)='squashfs\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x208, 0x7}, {0x6, 0xd, 0x230, 0x404, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x0, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0xfffffffe, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0x4a4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0x1dafa346, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x7, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x2, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x9, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa1, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x209, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x4, 0x10, 0x9, 0x2, 0x400}, {0x40001000, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x40000004, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x7d}, {0x4, 0x403, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x48, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x2, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0x5e9, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0xf35, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x1000414, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES8, @ANYRES8], 0x6, 0x801, &(0x7f0000001540)="$eJzs3U1oHOcZAOB3FMmW5WBMWtxgbGfspOCAo6xWiVKRQ7JZjeRJpF2xuyo2paQmloOwnAS7obUviSkkbWkpPfXQQ5prbr21FFrooc2p0Bx66S2QU0mhf6QNBZXZH1mytZL8n9TPI6SZnXm/+d5vtJp3RtLOBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQSXWqVBpLYjavLZxI+6tONepzm6zvbe836ybrPLuu34ik+Izh4fjkH51lX7yyel/x5Ugc6Dw6EMPFZDgu7d639+kvDA702m+S0I06vM24JOLNIqmzp5aXF89fdzcxfN1Nbp/v/+q6m/x7pfg6k9XyZuRzlZkszZv1dHJiovT48elmOp3PZs2TzVY2l1YbWaVVb6RHq4+mY5OT42k2erK+UJuZqsxmvYVPPVYulSbS50fns0qjWa89/nw0q8fz2dm8NtOOKZe+FUXMU8UT8YW8lbayylyanllaXhzfKtUiaGyjFfd1nj8HHtn70esf/n1psXhC9ttI0n1ilsfGyuWxiScnn3yqVBosl8rrF5SuEqsRMRBRRNyWJy2fI7f2AA43YaBb/2M28qjFQpyIdIOPoajGVDSiHnPF4z8NXRPR1av/X378r3/YrN+19b9X5R+8snp/tOv/oc6jQ/3q/4a53smPC3ExLsXZOBXLsRyLcf6uZ7TFx8DNbiFZ++g/90dELfJoRj3ymItKzEQWaXdJGpMxERNRihfjeExHM9KYjjxmI4tmnIxmtCJrP6Oq0YgsKtGKejQijaNRjUcjjbGYjMkYjzSyGI2TUY+FqMVMTEWlvZUzsdTe7+NXZblvV/zy5T9+9E4xvxo0tsngk+Jkrgj62yZjH4jyddT/lZXifOHqCPX/HrBjs5W34SgON2alV/8BAACA/1tJ+7fvxfX/UBxsz03ns9nX7nZaAAAAwC3U/sv/gWIyVMwdjKS4/i9tEPnBHc8NAAAAuDWS9mvskogYiYc6c2diKd6MxdjolwARsfdOpwgAAADcpPbf/w8Vk5GIN9oLerdL6XP9DwAAAHzefLffPfY/7N1jtzm/M/n1UEQMJZfnTzySnKsUcZVz93XadSdfXd1ia3p/sqe7kfZkYvDS7iQiBqvZgaR398v/7uxMP25/3T+42rzfvf6TRqNIYFfR90YJxOYJtB/FD+JwJ+bw6fZkd7fJYNLpZWQ6n81Gq/XZp9u3RCw+W6+/svTtiKL379Xm9iRxZml5cfSlV5dPt3fG5aL55XPdGygmEYPbzWWluwfiYAzv6M6uHfFQ+4UY3X5HOv2W1n4DBjptBjYff7K2z7fiSCfmyEhnOtJb0+lzuOhzbPTpsahU9gy0shOt11fWjL7Iosh6deRDa0f+093bHPlb8XAn5uGjD3cmG2RRXpfFK1dlsbS8WF67/7e3L7adxTuH3zjxr9/Vk2x8qyzGryOLlfsirs4C4G45077rT6cKFZNd7br76UpHUf87dXdnr+7u6rXcxrH2n1d6WT3L6LVfU90Ho1fde9VtYPXAuL3qvhKdI/rRTszRzvnE4P5uXKfSdupKaYMj+mtLr/2+e0R/4r2f/Ozrh97/ebvftdVtG1l0jujvxaOdmO4kHvhtnxpbjPmHq5VkrD36d4sW7/bttzlbTtqnGN8891rsu3Dx0mNL5069vPjy4ivl8vhE6YlS6cly72RiqH3GsEmmANy7tn6Pnb4RvTqTPFFcVQ+v2ejp9ddzD6z+S8FovBSvxnKcjmPtVxtExEMb9zuy5t8Qjm1x1XoldiyObXFteSW2fG1sEn1ix9cM7ks/bk8+uQ3fDAC4Q45sUYeTOPJ+N7TfGUJyrN919zV1tKjlV10dR/9avpGv3M6dAQD3iKzxcTLSejtpNPL5F8cmJ8cqreP3p4169YW0kU/NZGlea2WN6vFKbSZL5xv1Vr3a+8XxVNZMmwvz8/VGK52uN9IYaOYn2u/8nnbf+r2ZzVVqrbzanJ/NKs0srdZrrUq1lU7lzWo6v/DcbN48njXajZvzWTWfzquVVl6vpc36QqOajaZpM8vWBOZTWa2VT+fFbC2db+RzlcbliJhdmMvSqaxZbeTzrXpng72+8tp0vTHX3uzotcP/y53e3wDwWXDh4qWzp5aXF8/f2MyftxN8t8cIAKynSgMAAAAAAAAAAAAAwGffhYuXzg7H8uL5vb0XAhRLb+IVgdc3szNuexf37EzxjfwMpHFjMwfvvzXb+cYzz5ztF/PcGw8e3952uj8pg7HlS13f3hOx4xc/6ix5tn/wd7o/f7dmj30QETfQfCXZYNWnK52ZdYeJHXf+yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1/pfAAAA//+iNle9") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000847, &(0x7f0000000080), 0x3, 0x55b, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x2) 2.255156803s ago: executing program 1 (id=344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$netlink(0x10, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="190227bd7000fedbdf252100000005002000010000000a0001007770616e3400000009001f007068793100000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000045}, 0x4080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) (async) socket$netlink(0x10, 0x3, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) (async) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r0) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="190227bd7000fedbdf252100000005002000010000000a0001007770616e3400000009001f007068793100000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000045}, 0x4080) (async) 2.138444162s ago: executing program 1 (id=345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), r1) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000025c0)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x40010) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3, 0x3, 0x301, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x80}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) 1.877268097s ago: executing program 1 (id=347): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000440)={0x0, 0x465d, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000240)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x4, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = gettid() rt_sigqueueinfo(r9, 0x800021, &(0x7f0000000000)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.872796076s ago: executing program 5 (id=349): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x200, 0x100000002, 0x7ab2, 0xfff}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r2}) wait4(r2, &(0x7f0000000040), 0x80000000, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1200000, &(0x7f0000000600)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="38855b7ef832ca724d7325f9c3585a1a950fbcd1c5249a3a27e8efed9ded5aa2a3ab744da9312b308bd5d5dd27fa0677527eaa05cc7b18c3e8a01616f92940ac31003e1181bf9174aa66bf5c54e6e35e2da82c69208ed6dfd608c8"], 0x1, 0x214, &(0x7f0000000240)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) ftruncate(r3, 0xfff) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x24040084) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x4000840) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x3, 0x6ea, 0x6, 0x7, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a800080008000c4004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x40000c0) 1.689939504s ago: executing program 2 (id=350): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") r1 = openat(r0, &(0x7f0000000240)='.\x00', 0x301, 0xa) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, 0x0) 1.301360537s ago: executing program 2 (id=351): creat(&(0x7f00000000c0)='./file0\x00', 0x1a0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x1a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc01, 0x8) writev(r1, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) syz_clone(0x630c1100, 0x0, 0x11, 0x0, 0x0, 0x0) 959.178357ms ago: executing program 2 (id=352): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000300)={[{@fat=@time_offset={'time_offset', 0x3d, 0x804f7}}, {@dots}, {@fat=@nfs_stale_rw}, {@dots}, {@dots}, {@dots}, {@fat=@quiet}, {@fat=@flush}, {@fat=@nocase}, {@fat=@fmask={'fmask', 0x3d, 0xca}}, {@fat=@dos1xfloppy}, {}, {@fat=@dmask}, {@nodots}, {@nodots}, {@dots}]}, 0x21, 0x23d, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}]}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='.\x02\x00', 0x180) syz_clone3(&(0x7f00000004c0)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0x0}, 0x58) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000100), 0x4) recvmmsg(r2, &(0x7f00000055c0)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/9, 0x9}], 0x1, &(0x7f00000003c0)=""/197, 0xc5}, 0x1}, {{&(0x7f00000004c0)=@qipcrtr, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1, &(0x7f0000000540)=""/179, 0xb3}, 0x8}, {{&(0x7f0000000600)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000680)=""/128, 0x80}], 0x1}, 0x8}, {{&(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)=""/113, 0x71}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/181, 0xb5}, {&(0x7f0000000900)=""/175, 0xaf}, {&(0x7f0000001c80)=""/132, 0x84}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x4, &(0x7f0000000a00)=""/54, 0x36}, 0x3}, {{&(0x7f0000002d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002dc0)=""/48, 0x30}, {&(0x7f0000002e00)=""/148, 0x94}, {&(0x7f0000002ec0)=""/247, 0xf7}, {&(0x7f0000002fc0)=""/21, 0x15}, {&(0x7f0000003000)=""/97, 0x61}, {&(0x7f0000003080)=""/6, 0x6}, {&(0x7f00000030c0)=""/192, 0xc0}], 0x7, &(0x7f0000003200)=""/4096, 0x1000}, 0x2000}, {{&(0x7f0000004200)=@isdn, 0x80, &(0x7f0000004480)=[{&(0x7f0000004280)=""/201, 0xc9}, {&(0x7f0000004380)=""/132, 0x84}, {&(0x7f0000004440)}], 0x3, &(0x7f00000044c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f00000054c0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000005540), 0x0, &(0x7f0000005580)}, 0x255}], 0x8, 0x61, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='.\x02\x00', 0x0, 0x20000, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0xa8, 0x82) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newaddr={0x18, 0x14, 0x503, 0x70bd32, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @remote}, @IFA_FLAGS={0x8, 0x8, 0x330}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000e081}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$BLKFRAGET(r3, 0xc0c0128e, 0x0) 698.952632ms ago: executing program 2 (id=353): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) (fail_nth: 4) 266.498426ms ago: executing program 1 (id=354): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) open(0x0, 0x14d142, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x20900, 0x1de) ioprio_set$pid(0x3, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x85862) sendfile(r3, r2, 0x0, 0x80000001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x80000000, 0x5}) r5 = msgget$private(0x0, 0x286) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, 0xee01, 0x0, 0x3, 0xff}, 0x0, 0x0, 0x5, 0x4, 0x3, 0x45, 0x8000000000, 0x8000, 0x7, 0x6}) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0xb) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = syz_open_procfs(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000280)={0x12809c000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x3}, &(0x7f0000000380)=""/4096, 0x1000, &(0x7f0000001380)=""/236, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4, {r6}}, 0x58) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000001480)={{{@in6=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8) r9 = getgid() mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200000, &(0x7f00000001c0)=ANY=[@ANYBLOB="4966a673ad543e5d0a7fd80fa078687d723f9da1c126ecfed9adebf4a5eeeb20badd24f0e4989955729506c95222", @ANYRESHEX=r9, @ANYBLOB=',fsmagic=0x0000000000000002,seclabel']) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001580)={r7, r8, r9}, 0xc) 265.891436ms ago: executing program 2 (id=355): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0xc0000) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000180)={0x27cc, 0x7fff, 0x7, 0x1}) (fail_nth: 1) 80.436584ms ago: executing program 1 (id=356): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) lsm_set_self_attr(0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="2500001500"], 0x24, 0x0) bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x11) syz_io_uring_setup(0x24fa, 0x0, 0x0, &(0x7f0000002300)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000540)=[0x0, 0x0], 0x0, 0x17, 0x0, 0x0, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x98, 0x8, 0x0, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000640)=[{0x0}], 0x1, 0x3, 0x80000080) close(r2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000580)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000}, @map_fd={0x18, 0x3}, @jmp={0x5, 0x0, 0xd, 0x3, 0x1, 0x30, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x93}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x7c}], &(0x7f00000001c0)='GPL\x00', 0x4, 0x60, &(0x7f0000000340)=""/96, 0x21780, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xd, 0x8, 0xffffffff}, 0x10, r1, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x10, 0x6}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x3}}) 47.064298ms ago: executing program 5 (id=357): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0xc0000) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000180)={0x27cc, 0x7fff, 0x7, 0x1}) 23.206404ms ago: executing program 2 (id=358): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045503, &(0x7f00000000c0)) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x1) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000240)={[{@oldalloc}, {@nobarrier}, {@errors_remount}]}, 0x5, 0x3f7, &(0x7f0000003080)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x0) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x600, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000080)=0xc, 0x6, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x1022e0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000006080)='./file2\x00', 0x0, 0x400) 0s ago: executing program 5 (id=359): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) flistxattr(r1, &(0x7f00000003c0)=""/13, 0xd) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0x200, 0x5, 0x4, 0x1}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='X', 0x1, 0x24000011, &(0x7f000005ffe4)={0xa, 0x4e23, 0x800000, @loopback}, 0x1c) kernel console output (not intermixed with test programs): omiscuous mode [ 38.030614][ T3315] veth1_macvtap: entered promiscuous mode [ 38.038398][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.049242][ T3314] veth1_vlan: entered promiscuous mode [ 38.059132][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.070438][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.084212][ T3316] veth0_vlan: entered promiscuous mode [ 38.093677][ T3316] veth1_vlan: entered promiscuous mode [ 38.103182][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.111242][ T2204] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.120054][ T2204] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.133823][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.147177][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.154996][ T2204] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.164607][ T2204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.182327][ T2204] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.191440][ T2204] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.201307][ T2204] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.219033][ T2204] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.228087][ T2204] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.242965][ T3316] veth0_macvtap: entered promiscuous mode [ 38.250087][ T2204] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.259270][ T2204] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.269539][ T3314] veth0_macvtap: entered promiscuous mode [ 38.277764][ T3321] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.295468][ T3316] veth1_macvtap: entered promiscuous mode [ 38.305324][ T2204] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.321126][ T3314] veth1_macvtap: entered promiscuous mode [ 38.350241][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.361119][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.388594][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.408010][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.569158][ T2204] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.578067][ T2204] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.601551][ T2204] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.167822][ C1] hrtimer: interrupt took 49793 ns [ 39.182377][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 39.182400][ T28] audit: type=1400 audit(1772814996.763:102): avc: denied { open } for pid=3483 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.259095][ T3495] loop0: detected capacity change from 0 to 1024 [ 39.265812][ T3495] ======================================================= [ 39.265812][ T3495] WARNING: The mand mount option has been deprecated and [ 39.265812][ T3495] and is ignored by this kernel. Remove the mand [ 39.265812][ T3495] option from the mount to silence this warning. [ 39.265812][ T3495] ======================================================= [ 39.304283][ T3495] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.330714][ T2204] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.368155][ T3495] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1: Invalid block bitmap block 0 in block_group 0 [ 39.381412][ T3495] loop0: lost filesystem error report for type 5 error -117 [ 39.381917][ T3495] Quota error (device loop0): write_blk: dquota write failed [ 39.389269][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 39.389297][ C0] EXT4-fs (loop0): initial error at time 1772814997: ext4_read_block_bitmap_nowait:483 [ 39.389355][ C0] EXT4-fs (loop0): last error at time 1772814997: ext4_read_block_bitmap_nowait:483 [ 39.422552][ T3495] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 39.432631][ T3495] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.1: Failed to acquire dquot type 0 [ 39.443715][ T3495] loop0: lost filesystem error report for type 5 error -117 [ 39.447734][ T3495] EXT4-fs error (device loop0): ext4_free_blocks:6724: comm syz.0.1: Freeing blocks not in datazone - block = 0, count = 4096 [ 39.468299][ T3495] loop0: lost filesystem error report for type 5 error -117 [ 39.468976][ T3495] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1: Invalid inode bitmap blk 0 in block_group 0 [ 39.488928][ T3495] loop0: lost filesystem error report for type 5 error -117 [ 39.489298][ T3495] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 39.505255][ T3495] loop0: lost filesystem error report for type 5 error -117 [ 39.506487][ T50] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 39.523083][ T3495] EXT4-fs (loop0): 1 orphan inode deleted [ 39.529496][ T3495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.574598][ T28] audit: type=1400 audit(1772814996.763:103): avc: denied { perfmon } for pid=3483 comm="syz.3.4" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.594033][ T2204] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.607638][ T28] audit: type=1400 audit(1772814996.763:104): avc: denied { kernel } for pid=3483 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.626805][ T50] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 0 [ 39.656671][ T2204] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.668019][ T28] audit: type=1400 audit(1772814997.223:105): avc: denied { prog_load } for pid=3485 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.690303][ T3501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=3501 comm=syz.2.3 [ 39.705528][ T28] audit: type=1400 audit(1772814997.223:106): avc: denied { bpf } for pid=3485 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.888693][ T3495] syz.0.1 (3495) used greatest stack depth: 9496 bytes left [ 39.899860][ T3501] Zero length message leads to an empty skb [ 39.915177][ T3501] loop2: detected capacity change from 0 to 1024 [ 39.921907][ T28] audit: type=1400 audit(1772814997.223:107): avc: denied { prog_run } for pid=3485 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.946599][ T3501] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3: bad orphan inode 134217728 [ 39.967514][ T3501] loop2: lost filesystem error report for type 5 error -117 [ 39.968763][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 39.982583][ C0] EXT4-fs (loop2): initial error at time 1772814998: ext4_orphan_get:1417 [ 39.991147][ C0] EXT4-fs (loop2): last error at time 1772814998: ext4_orphan_get:1417 [ 40.002150][ T3501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.014776][ T28] audit: type=1400 audit(1772814997.653:108): avc: denied { mount } for pid=3485 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.725463][ T2204] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.746709][ T2204] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.891390][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.949327][ T313] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:6: Failed to release dquot type 0 [ 40.997679][ T313] loop0: lost filesystem error report for type 5 error -117 [ 41.110469][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.131965][ T3514] loop1: detected capacity change from 0 to 512 [ 41.257422][ T3530] loop0: detected capacity change from 0 to 128 [ 41.281226][ T3532] loop2: detected capacity change from 0 to 512 [ 41.289961][ T3530] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.309006][ T3532] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.320907][ T3530] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.401033][ T3532] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 41.433077][ T3532] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 41.444381][ T3532] System zones: 0-2, 18-18, 34-34 [ 41.450271][ T3532] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.8: bad orphan inode 15 [ 41.460440][ T3532] loop2: lost filesystem error report for type 5 error -117 [ 41.461131][ T3532] ext4_test_bit(bit=14, block=18) = 1 [ 41.473885][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 41.473908][ C1] EXT4-fs (loop2): initial error at time 1772814999: ext4_orphan_get:1417 [ 41.473948][ C1] EXT4-fs (loop2): last error at time 1772814999: ext4_orphan_get:1417 [ 41.497824][ T3532] is_bad_inode(inode)=0 [ 41.503507][ T3532] NEXT_ORPHAN(inode)=2264924160 [ 41.508400][ T3532] max_ino=32 [ 41.511753][ T3532] i_nlink=0 [ 41.515110][ T3532] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.8: corrupted inode contents [ 41.526952][ T50] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.527806][ T3532] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.536537][ T3532] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.8: mark_inode_dirty error [ 41.556932][ T3532] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.557319][ T3532] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.8: corrupted inode contents [ 41.582458][ T3532] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.582657][ T3532] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.8: mark_inode_dirty error [ 41.606327][ T3532] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.606514][ T3532] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.8: mark inode dirty (error -117) [ 41.628971][ T3532] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.629161][ T3532] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 41.648393][ T3532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.742152][ T3538] loop4: detected capacity change from 0 to 1764 [ 41.855383][ T3543] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.981715][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.154797][ T3552] loop0: detected capacity change from 0 to 136 [ 42.167430][ T3553] loop3: detected capacity change from 0 to 512 [ 42.175245][ T3552] iso9660: Unknown parameter '¤&“æ .0&°7îäÏÕ-‹´þìbád®’ÔϺÓ÷¡ðù¶N>kk“ê`ˆ®ìímêO95Ýw2ò¶“²tî©Äsê«#ÌÞíת|áÿ' [ 42.188580][ T3551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 42.201619][ T3553] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.16: inode has both inline data and extents flags [ 42.290260][ T3553] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.290988][ T3553] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.16: couldn't read orphan inode 15 (err -117) [ 42.300221][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 42.300253][ C0] EXT4-fs (loop3): initial error at time 1772815000: ext4_orphan_get:1391: inode 15 [ 42.300279][ C0] EXT4-fs (loop3): last error at time 1772815000: ext4_orphan_get:1391: inode 15 [ 42.364153][ T3553] loop3: lost filesystem error report for type 5 error -117 [ 42.390176][ T3553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.514183][ T3553] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.16: inode has both inline data and extents flags [ 42.534857][ T3553] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.16: inode has both inline data and extents flags [ 42.588453][ T3547] syz.0.14 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 42.609062][ T3547] CPU: 1 UID: 0 PID: 3547 Comm: syz.0.14 Not tainted syzkaller #0 PREEMPT(full) [ 42.609109][ T3547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 42.609196][ T3547] Call Trace: [ 42.609205][ T3547] [ 42.609214][ T3547] __dump_stack+0x1d/0x30 [ 42.609252][ T3547] dump_stack_lvl+0x95/0xd0 [ 42.609360][ T3547] dump_stack+0x15/0x1b [ 42.609389][ T3547] dump_header+0x80/0x240 [ 42.609420][ T3547] oom_kill_process+0x295/0x350 [ 42.609501][ T3547] out_of_memory+0x97d/0xb80 [ 42.609530][ T3547] try_charge_memcg+0x62e/0xa10 [ 42.609584][ T3547] obj_cgroup_charge_pages+0x23/0xc0 [ 42.609676][ T3547] __memcg_kmem_charge_page+0x9e/0x170 [ 42.609712][ T3547] __alloc_frozen_pages_noprof+0x18a/0x360 [ 42.609755][ T3547] alloc_pages_mpol+0xb3/0x260 [ 42.609905][ T3547] alloc_pages_noprof+0x8f/0x130 [ 42.609942][ T3547] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 42.609992][ T3547] __kvmalloc_node_noprof+0x3d4/0x650 [ 42.610105][ T3547] ? futex_hash_allocate+0x190/0x9d0 [ 42.610161][ T3547] ? futex_hash_allocate+0x190/0x9d0 [ 42.610213][ T3547] futex_hash_allocate+0x190/0x9d0 [ 42.610339][ T3547] ? cap_task_prctl+0x13f/0x6e0 [ 42.610365][ T3547] futex_hash_prctl+0xd8/0xf0 [ 42.610419][ T3547] __se_sys_prctl+0xa3d/0x13f0 [ 42.610492][ T3547] __x64_sys_prctl+0x67/0x80 [ 42.610546][ T3547] x64_sys_call+0x2533/0x3020 [ 42.610580][ T3547] do_syscall_64+0x12c/0x370 [ 42.610605][ T3547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.610656][ T3547] RIP: 0033:0x7f558934c799 [ 42.610682][ T3547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.610706][ T3547] RSP: 002b:00007f5587d86028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 42.610726][ T3547] RAX: ffffffffffffffda RBX: 00007f55895c6090 RCX: 00007f558934c799 [ 42.610743][ T3547] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 42.610759][ T3547] RBP: 00007f55893e2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 42.610775][ T3547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.610856][ T3547] R13: 00007f55895c6128 R14: 00007f55895c6090 R15: 00007ffcc4593268 [ 42.610881][ T3547] [ 42.610954][ T3547] memory: usage 292376kB, limit 307200kB, failcnt 377 [ 42.610973][ T3547] memory+swap: usage 292568kB, limit 9007199254740988kB, failcnt 0 [ 42.611054][ T3547] kmem: usage 291728kB, limit 9007199254740988kB, failcnt 0 [ 42.611071][ T3547] Memory cgroup stats for /syz0: [ 42.611325][ T3547] cache 524288 [ 42.611336][ T3547] rss 0 [ 42.611344][ T3547] shmem 0 [ 42.611393][ T3547] mapped_file 0 [ 42.611403][ T3547] dirty 0 [ 42.611412][ T3547] writeback 0 [ 42.611421][ T3547] workingset_refault_anon 57 [ 42.611432][ T3547] workingset_refault_file 352 [ 42.611442][ T3547] swap 196608 [ 42.611452][ T3547] swapcached 253952 [ 42.611461][ T3547] pgpgin 5176 [ 42.611470][ T3547] pgpgout 5045 [ 42.611479][ T3547] pgfault 6191 [ 42.611488][ T3547] pgmajfault 25 [ 42.611570][ T3547] inactive_anon 0 [ 42.611577][ T3547] active_anon 12288 [ 42.611587][ T3547] inactive_file 0 [ 42.611597][ T3547] active_file 507904 [ 42.611606][ T3547] unevictable 0 [ 42.611668][ T3547] hierarchical_memory_limit 314572800 [ 42.611680][ T3547] hierarchical_memsw_limit 9223372036854771712 [ 42.611693][ T3547] total_cache 524288 [ 42.611703][ T3547] total_rss 0 [ 42.611764][ T3547] total_shmem 0 [ 42.611774][ T3547] total_mapped_file 0 [ 42.611783][ T3547] total_dirty 0 [ 42.611791][ T3547] total_writeback 0 [ 42.611800][ T3547] total_workingset_refault_anon 57 [ 42.611812][ T3547] total_workingset_refault_file 352 [ 42.611840][ T3547] total_swap 196608 [ 42.611850][ T3547] total_swapcached 253952 [ 42.611860][ T3547] total_pgpgin 5176 [ 42.611870][ T3547] total_pgpgout 5045 [ 42.611880][ T3547] total_pgfault 6191 [ 42.611890][ T3547] total_pgmajfault 25 [ 42.611900][ T3547] total_inactive_anon 0 [ 42.611925][ T3547] total_active_anon 12288 [ 42.611935][ T3547] total_inactive_file 0 [ 42.611951][ T3547] total_active_file 507904 [ 42.611962][ T3547] total_unevictable 0 [ 42.611972][ T3547] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.14,pid=3542,uid=0 [ 42.612084][ T3547] Memory cgroup out of memory: Killed process 3542 (syz.0.14) total-vm:100576kB, anon-rss:1224kB, file-rss:26584kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 42.614182][ T3547] syz.0.14 (3547) used greatest stack depth: 8552 bytes left [ 42.617636][ T3553] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.16: inode has both inline data and extents flags [ 42.750341][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.353327][ T3569] process 'syz.3.19' launched './file1' with NULL argv: empty string added [ 43.373399][ T3571] loop2: detected capacity change from 0 to 512 [ 43.391803][ T3572] loop4: detected capacity change from 0 to 256 [ 43.408929][ T3571] EXT4-fs: Ignoring removed i_version option [ 43.470572][ T3571] EXT4-fs: Ignoring removed bh option [ 43.514254][ T3571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.529604][ T3572] FAT-fs (loop4): Directory bread(block 64) failed [ 43.536170][ T3572] FAT-fs (loop4): Directory bread(block 65) failed [ 43.569083][ T3571] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.599103][ T3572] FAT-fs (loop4): Directory bread(block 66) failed [ 43.736174][ T3579] ext4: Unknown parameter 'smackfsroot' [ 43.792743][ T3572] FAT-fs (loop4): Directory bread(block 67) failed [ 44.603396][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 44.603416][ T28] audit: type=1400 audit(1772815003.664:175): avc: denied { read append open } for pid=3570 comm="syz.2.21" path="/3/bus/devices.list" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.643861][ T3572] FAT-fs (loop4): Directory bread(block 68) failed [ 44.680199][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.705494][ T3572] FAT-fs (loop4): Directory bread(block 69) failed [ 44.774880][ T28] audit: type=1400 audit(1772815003.874:176): avc: denied { setopt } for pid=3586 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.798900][ T3572] FAT-fs (loop4): Directory bread(block 70) failed [ 44.805619][ T3572] FAT-fs (loop4): Directory bread(block 71) failed [ 44.816748][ T3587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 44.822471][ T28] audit: type=1400 audit(1772815003.874:177): avc: denied { write } for pid=3586 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.853759][ T3572] FAT-fs (loop4): Directory bread(block 72) failed [ 44.867469][ T3591] netlink: 44 bytes leftover after parsing attributes in process `syz.1.23'. [ 44.915569][ T3572] FAT-fs (loop4): Directory bread(block 73) failed [ 44.962371][ T3589] set_capacity_and_notify: 1 callbacks suppressed [ 44.962457][ T3589] loop2: detected capacity change from 0 to 512 [ 45.132467][ T28] audit: type=1400 audit(1772815004.234:178): avc: denied { read write } for pid=3595 comm="syz.1.26" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 45.352219][ T3589] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.355138][ T28] audit: type=1400 audit(1772815004.234:179): avc: denied { open } for pid=3595 comm="syz.1.26" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 45.373347][ T28] audit: type=1400 audit(1772815004.294:180): avc: denied { create } for pid=3595 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.525101][ T3572] bridge_slave_0: left allmulticast mode [ 45.525196][ T3572] bridge_slave_0: left promiscuous mode [ 45.527076][ T3572] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.596513][ T28] audit: type=1400 audit(1772815004.294:181): avc: denied { bind } for pid=3595 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.596545][ T28] audit: type=1400 audit(1772815004.434:182): avc: denied { setopt } for pid=3595 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.596647][ T28] audit: type=1400 audit(1772815004.434:183): avc: denied { create } for pid=3595 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 45.596759][ T28] audit: type=1400 audit(1772815004.654:184): avc: denied { setopt } for pid=3602 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.598152][ T3589] ------------[ cut here ]------------ [ 45.598161][ T3589] EA inode 11 i_nlink=2 [ 45.598216][ T3589] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.2.24/3589 [ 45.598415][ T3589] Modules linked in: [ 45.599384][ T3589] CPU: 0 UID: 0 PID: 3589 Comm: syz.2.24 Not tainted syzkaller #0 PREEMPT(full) [ 45.599564][ T3589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 45.599696][ T3589] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 45.599826][ T3589] Code: 24 47 99 ff 4c 8d 2d 1d d2 5d 05 49 8d 7e 40 e8 84 df b5 ff 49 8b 6e 40 4c 89 e7 e8 b8 da b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 bf 5b dd 03 66 66 66 66 66 66 2e [ 45.599954][ T3589] RSP: 0018:ffffc90001977778 EFLAGS: 00010246 [ 45.599977][ T3589] RAX: ffff888104c44db8 RBX: ffff88811b09d788 RCX: ffffffff81c013d8 [ 45.600109][ T3589] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871de5e0 [ 45.600215][ T3589] RBP: 000000000000000b R08: 000188811b09d73b R09: 0000000000000000 [ 45.600346][ T3589] R10: ffffc900019776a8 R11: 0001c900019776a8 R12: ffff88811b09d738 [ 45.600395][ T3589] R13: ffffffff871de5e0 R14: ffff88811b09d6f0 R15: 0000000000000001 [ 45.600753][ T3589] FS: 00007f58aca7f6c0(0000) GS:ffff8882ae8dc000(0000) knlGS:0000000000000000 [ 45.600778][ T3589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.600945][ T3589] CR2: 0000000034747865 CR3: 000000011f192000 CR4: 00000000003506f0 [ 45.601166][ T3589] Call Trace: [ 45.601226][ T3589] [ 45.601417][ T3589] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 45.601792][ T3589] ? errseq_check+0x2c/0x50 [ 45.863684][ T3589] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 45.863836][ T3589] ? ext4_truncate+0x92b/0xb00 [ 45.864298][ T3589] ext4_evict_inode+0xa1f/0xd60 [ 45.881184][ T3589] ? __pfx_ext4_evict_inode+0x10/0x10 [ 45.881819][ T3589] evict+0x2af/0x510 [ 45.891453][ T3589] ? __pfx_ext4_drop_inode+0x10/0x10 [ 45.897253][ T3589] ? iput+0x1ea/0x580 [ 45.897371][ T3589] iput+0x41a/0x580 [ 45.907074][ T3589] ext4_process_orphan+0x1a9/0x1c0 [ 45.907185][ T3589] ext4_orphan_cleanup+0x6a8/0xa00 [ 45.918142][ T3589] ext4_fill_super+0x3408/0x37c0 [ 45.918389][ T3589] ? set_blocksize+0x14c/0x270 [ 45.919132][ T3589] ? setup_bdev_super+0x30e/0x370 [ 45.919295][ T3589] ? __pfx_ext4_fill_super+0x10/0x10 [ 45.919344][ T3589] get_tree_bdev_flags+0x291/0x300 [ 45.919429][ T3589] ? __pfx_ext4_fill_super+0x10/0x10 [ 45.919632][ T3589] get_tree_bdev+0x1f/0x30 [ 45.919774][ T3589] ext4_get_tree+0x1c/0x30 [ 45.919854][ T3589] vfs_get_tree+0x57/0x1d0 [ 45.919927][ T3589] do_new_mount+0x288/0x8d0 [ 45.920249][ T3589] ? path_mount+0x203/0xbc0 [ 45.920433][ T3589] path_mount+0x4d0/0xbc0 [ 45.920594][ T3589] __se_sys_mount+0x28c/0x2e0 [ 45.920845][ T3589] __x64_sys_mount+0x67/0x80 [ 45.921244][ T3589] x64_sys_call+0x2d61/0x3020 [ 45.921375][ T3589] do_syscall_64+0x12c/0x370 [ 45.921504][ T3589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.921735][ T3589] RIP: 0033:0x7f58ae02da0a [ 45.921904][ T3589] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.921953][ T3589] RSP: 002b:00007f58aca7ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 45.922203][ T3589] RAX: ffffffffffffffda RBX: 00007f58aca7eee0 RCX: 00007f58ae02da0a [ 45.922275][ T3589] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f58aca7eea0 [ 45.922383][ T3589] RBP: 00002000000009c0 R08: 00007f58aca7eee0 R09: 0000000000800718 [ 45.922531][ T3589] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 45.922634][ T3589] R13: 00007f58aca7eea0 R14: 000000000000048d R15: 0000200000000200 [ 45.922909][ T3589] [ 45.922964][ T3589] ---[ end trace 0000000000000000 ]--- [ 45.954338][ T3589] EXT4-fs (loop2): 1 orphan inode deleted [ 45.966555][ T3589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.105909][ T3572] bridge_slave_1: left allmulticast mode [ 46.157079][ T3572] bridge_slave_1: left promiscuous mode [ 46.180748][ T3572] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.199430][ T3609] loop3: detected capacity change from 0 to 512 [ 46.214261][ T3609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.240477][ T3609] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.259067][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.314333][ T3572] bond0: (slave bond_slave_0): Releasing backup interface [ 46.347159][ T3572] bond0: (slave bond_slave_1): Releasing backup interface [ 46.405920][ T3572] team0: Port device team_slave_0 removed [ 46.473537][ T3572] team0: Port device team_slave_1 removed [ 46.492610][ T3572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.501149][ T3572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.524470][ T3572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.533154][ T3572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.571926][ T3572] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 46.756357][ T3616] bridge_slave_0: left allmulticast mode [ 46.765754][ T3616] bridge_slave_0: left promiscuous mode [ 46.774146][ T3616] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.783865][ T3616] bridge_slave_1: left allmulticast mode [ 46.789692][ T3616] bridge_slave_1: left promiscuous mode [ 46.795516][ T3616] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.810679][ T3616] bond0: (slave bond_slave_0): Releasing backup interface [ 46.975089][ T3616] bond0: (slave bond_slave_1): Releasing backup interface [ 46.987528][ T3616] team0: Port device team_slave_0 removed [ 46.996328][ T3616] team0: Port device team_slave_1 removed [ 47.003523][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.072231][ T3629] loop1: detected capacity change from 0 to 256 [ 47.102574][ T3629] FAT-fs (loop1): Directory bread(block 64) failed [ 47.109231][ T3629] FAT-fs (loop1): Directory bread(block 65) failed [ 47.115909][ T3629] FAT-fs (loop1): Directory bread(block 66) failed [ 47.122601][ T3629] FAT-fs (loop1): Directory bread(block 67) failed [ 47.129287][ T3629] FAT-fs (loop1): Directory bread(block 68) failed [ 47.135901][ T3629] FAT-fs (loop1): Directory bread(block 69) failed [ 47.142645][ T3629] FAT-fs (loop1): Directory bread(block 70) failed [ 47.149251][ T3629] FAT-fs (loop1): Directory bread(block 71) failed [ 47.155820][ T3629] FAT-fs (loop1): Directory bread(block 72) failed [ 47.162397][ T3629] FAT-fs (loop1): Directory bread(block 73) failed [ 47.348529][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.750369][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.783484][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.813531][ T3616] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 47.879536][ T3624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'. [ 48.254495][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.754334][ T3637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34'. [ 48.789731][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 48.962245][ T3639] loop2: detected capacity change from 0 to 512 [ 48.988071][ T3639] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.015989][ T3639] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.062199][ T3639] EXT4-fs (loop2): 1 truncate cleaned up [ 49.075087][ T3639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.201940][ T3657] hub 8-0:1.0: USB hub found [ 49.207221][ T3657] hub 8-0:1.0: 8 ports detected [ 49.242522][ T3657] all (unregistering): Released all slaves [ 49.611562][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 49.611585][ T28] audit: type=1400 audit(1772815008.714:209): avc: denied { create } for pid=3663 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 49.681081][ T28] audit: type=1400 audit(1772815008.784:210): avc: denied { setopt } for pid=3663 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 49.691825][ T3639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.35'. [ 49.731556][ T28] audit: type=1400 audit(1772815008.834:211): avc: denied { create } for pid=3663 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.733217][ T3664] netlink: 84 bytes leftover after parsing attributes in process `syz.3.40'. [ 49.768766][ T28] audit: type=1400 audit(1772815008.834:212): avc: denied { write } for pid=3663 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.841453][ T28] audit: type=1400 audit(1772815008.834:213): avc: denied { nlmsg_write } for pid=3663 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.876865][ T3667] netlink: 49 bytes leftover after parsing attributes in process `syz.3.42'. [ 49.908581][ T28] audit: type=1400 audit(1772815008.894:214): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 49.984081][ T3669] loop1: detected capacity change from 0 to 512 [ 49.986917][ T28] audit: type=1400 audit(1772815008.914:216): avc: denied { write } for pid=3663 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.011048][ T3669] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 50.019716][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.040378][ T3669] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.43: iget: bad i_size value: 12154757448730 [ 50.099865][ T28] audit: type=1400 audit(1772815008.914:215): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.120005][ T28] audit: type=1400 audit(1772815009.074:217): avc: denied { create } for pid=3668 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.139295][ T28] audit: type=1400 audit(1772815009.084:218): avc: denied { setopt } for pid=3668 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.169096][ T3669] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 50.169338][ T3669] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.43: couldn't read orphan inode 13 (err -117) [ 50.169370][ T3669] loop1: lost filesystem error report for type 5 error -117 [ 50.177253][ T3669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.177847][ T3669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.182985][ T3674] loop3: detected capacity change from 0 to 512 [ 50.214087][ T3674] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.215558][ T3674] EXT4-fs (loop3): 1 orphan inode deleted [ 50.215591][ T3674] EXT4-fs (loop3): 1 truncate cleaned up [ 50.215982][ T3674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.266021][ T3679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'. [ 50.276302][ T3680] syz.4.46 uses obsolete (PF_INET,SOCK_PACKET) [ 50.314841][ T3676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 50.412115][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.421463][ T3672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 50.482789][ T3676] loop2: detected capacity change from 0 to 512 [ 50.494088][ T3690] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.50'. [ 50.539647][ T3676] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.619226][ T3676] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.44: bad orphan inode 131083 [ 50.658803][ T3676] loop2: lost filesystem error report for type 5 error -117 [ 50.678753][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 50.692617][ C1] EXT4-fs (loop2): initial error at time 1772815009: ext4_orphan_get:1417 [ 50.693451][ T3676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.701226][ C1] EXT4-fs (loop2): last error at time 1772815009: ext4_orphan_get:1417 [ 50.833723][ T3702] loop3: detected capacity change from 0 to 1024 [ 50.849169][ T3702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.871900][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.888132][ T3702] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.929513][ T3702] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 50.951936][ T3706] vlan2: entered allmulticast mode [ 50.957237][ T3706] veth0_to_bond: entered allmulticast mode [ 50.963414][ T3702] System zones: 0-1, 3-36 [ 50.966591][ T3684] loop1: detected capacity change from 0 to 764 [ 50.983751][ T3702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.110144][ T3712] lo speed is unknown, defaulting to 1000 [ 51.122410][ T3712] lo speed is unknown, defaulting to 1000 [ 51.133261][ T3713] Symlink component flag not implemented [ 51.139356][ T3712] lo speed is unknown, defaulting to 1000 [ 51.145511][ T3713] Symlink component flag not implemented (116) [ 51.152338][ T3712] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 51.169553][ T3712] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 51.184685][ T3712] lo speed is unknown, defaulting to 1000 [ 51.199453][ T3712] lo speed is unknown, defaulting to 1000 [ 51.205752][ T3712] lo speed is unknown, defaulting to 1000 [ 51.220241][ T3712] lo speed is unknown, defaulting to 1000 [ 51.229997][ T3712] lo speed is unknown, defaulting to 1000 [ 51.383204][ T3717] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.598227][ T3714] loop4: detected capacity change from 0 to 764 [ 51.871011][ T3719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.879671][ T3719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.313153][ T3724] lo speed is unknown, defaulting to 1000 [ 52.549239][ T3731] loop1: detected capacity change from 0 to 512 [ 52.584139][ T3731] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 52.607199][ T3714] Symlink component flag not implemented [ 52.614646][ T3731] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.61: iget: bad i_size value: 12154757448730 [ 52.637650][ T3714] Symlink component flag not implemented (116) [ 52.668105][ T3731] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 52.668305][ T3731] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.61: couldn't read orphan inode 13 (err -117) [ 52.677554][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 52.677594][ C1] EXT4-fs (loop1): initial error at time 1772815011: ext4_orphan_get:1391: inode 13 [ 52.677619][ C1] EXT4-fs (loop1): last error at time 1772815011: ext4_orphan_get:1391: inode 13 [ 52.739216][ T3731] loop1: lost filesystem error report for type 5 error -117 [ 52.743096][ T3735] syzkaller0: entered promiscuous mode [ 52.756009][ T3735] syzkaller0: entered allmulticast mode [ 52.762350][ T3731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.849222][ T3731] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.489228][ T3757] __nla_validate_parse: 10 callbacks suppressed [ 53.489247][ T3757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.65'. [ 53.560949][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.939552][ T3767] loop2: detected capacity change from 0 to 2048 [ 54.005392][ T3759] loop3: detected capacity change from 0 to 764 [ 54.033037][ T3767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.153351][ T3759] Symlink component flag not implemented [ 54.169634][ T3759] Symlink component flag not implemented (116) [ 54.192303][ T3750] loop1: detected capacity change from 0 to 764 [ 54.341499][ T3774] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.378097][ T3774] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 96 with error 28 [ 54.390843][ T3774] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.390843][ T3774] [ 54.400984][ T3774] EXT4-fs (loop2): Total free blocks count 0 [ 54.417143][ T3774] EXT4-fs (loop2): Free/Dirty block details [ 54.445357][ T3774] EXT4-fs (loop2): free_blocks=2415919104 [ 54.451398][ T3746] Symlink component flag not implemented [ 54.462796][ T3774] EXT4-fs (loop2): dirty_blocks=96 [ 54.476477][ T3774] EXT4-fs (loop2): Block reservation details [ 54.478997][ T3746] Symlink component flag not implemented (116) [ 54.503457][ T3774] EXT4-fs (loop2): i_reserved_data_blocks=6 [ 54.899117][ T3306] loop4: p1 < > p4 [ 54.904100][ T3306] loop4: p4 size 8388608 extends beyond EOD, truncated [ 54.947722][ T3778] loop4: p1 < > p4 [ 54.952502][ T3778] loop4: p4 size 8388608 extends beyond EOD, truncated [ 54.981335][ T3001] loop4: p1 < > p4 [ 54.985852][ T3001] loop4: p4 size 8388608 extends beyond EOD, truncated [ 54.985889][ T3778] mmap: syz.4.69 (3778) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.087896][ T36] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 96 with max blocks 2048 with error 28 [ 55.102937][ T3783] Symlink component flag not implemented [ 55.117544][ T3783] Symlink component flag not implemented (116) [ 55.123445][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 55.135167][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 55.318429][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 55.318447][ T28] audit: type=1400 audit(1772815014.414:261): avc: denied { read } for pid=3791 comm="syz.2.73" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 55.353343][ T28] audit: type=1400 audit(1772815014.454:262): avc: denied { open } for pid=3791 comm="syz.2.73" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 55.376901][ T28] audit: type=1400 audit(1772815014.454:263): avc: denied { ioctl } for pid=3791 comm="syz.2.73" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 55.412186][ T28] audit: type=1400 audit(1772815014.454:264): avc: denied { ioctl } for pid=3791 comm="syz.2.73" path="socket:[5444]" dev="sockfs" ino=5444 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.441109][ T28] audit: type=1400 audit(1772815014.454:265): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.479460][ T28] audit: type=1400 audit(1772815014.574:266): avc: denied { block_suspend } for pid=3796 comm="syz.1.75" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.525542][ T28] audit: type=1400 audit(1772815014.574:267): avc: denied { ioctl } for pid=3796 comm="syz.1.75" path="socket:[6371]" dev="sockfs" ino=6371 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.579038][ T28] audit: type=1400 audit(1772815014.574:268): avc: denied { bind } for pid=3796 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.829405][ T3807] set_capacity_and_notify: 2 callbacks suppressed [ 55.829427][ T3807] loop2: detected capacity change from 0 to 764 [ 55.967298][ T28] audit: type=1400 audit(1772815015.054:269): avc: denied { create } for pid=3810 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.134095][ T28] audit: type=1400 audit(1772815015.054:270): avc: denied { write } for pid=3810 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.861502][ T3801] Symlink component flag not implemented [ 56.889232][ T3801] Symlink component flag not implemented (116) [ 57.034354][ T3818] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 57.605841][ T3828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 57.690132][ T3828] lo speed is unknown, defaulting to 1000 [ 57.699719][ T3833] loop4: detected capacity change from 0 to 512 [ 57.770860][ T3833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.813541][ T3833] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.854243][ T3833] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.88: corrupted xattr block 6: invalid header [ 57.880825][ T3833] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 57.892141][ T3833] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.88: corrupted xattr block 6: invalid header [ 57.915059][ T3833] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 57.933684][ T3837] netlink: 84 bytes leftover after parsing attributes in process `syz.2.89'. [ 57.949854][ T3316] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 57.964087][ T3316] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 57.977410][ T3844] geneve2: entered promiscuous mode [ 57.982915][ T3837] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 58.055249][ T3837] loop2: detected capacity change from 0 to 2048 [ 58.090327][ T3837] FAT-fs (loop2): FAT read failed (blocknr 1056) [ 58.099714][ T3316] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 58.147937][ T3316] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 58.166651][ T3316] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 58.195194][ T3316] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 58.205542][ T3316] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 58.307835][ T3853] loop3: detected capacity change from 0 to 128 [ 58.569464][ T3850] geneve1: entered promiscuous mode [ 58.574844][ T3850] macsec1: entered promiscuous mode [ 58.580181][ T3850] macsec1: entered allmulticast mode [ 58.585619][ T3850] geneve1: entered allmulticast mode [ 58.639781][ T3316] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 58.719788][ T3861] loop1: detected capacity change from 0 to 256 [ 58.726506][ T3316] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 58.743077][ T3316] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 58.753191][ T3316] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 58.768007][ T3316] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 58.789443][ T3316] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 58.816775][ T3316] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 58.818158][ T3859] IPv6: sit1: Disabled Multicast RS [ 58.832669][ T3859] sit1: entered allmulticast mode [ 58.834845][ T3316] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 58.894942][ T3316] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 58.905850][ T3866] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 58.915644][ T3316] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 58.942139][ T3316] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 58.958978][ T3316] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 58.974690][ T3316] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 59.000070][ T3316] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 59.009654][ T3316] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 59.019122][ T3316] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 59.028615][ T3316] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 59.038479][ T3316] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 59.048133][ T3316] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 59.048431][ T3316] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 59.109135][ T3874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 59.125680][ T3877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 59.138843][ T3874] veth3: entered allmulticast mode [ 59.160869][ T3874] lo speed is unknown, defaulting to 1000 [ 59.190289][ T3877] lo speed is unknown, defaulting to 1000 [ 59.240081][ T3874] lo speed is unknown, defaulting to 1000 [ 59.280409][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.357469][ T3887] loop3: detected capacity change from 0 to 512 [ 59.386808][ T3887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.416070][ T3887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.430103][ T3887] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.444318][ T30] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.526324][ T30] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.563929][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.586692][ T3892] lo speed is unknown, defaulting to 1000 [ 59.595608][ T30] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.622992][ T3903] capability: warning: `syz.3.106' uses 32-bit capabilities (legacy support in use) [ 59.767920][ T30] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.794973][ T3892] chnl_net:caif_netlink_parms(): no params data found [ 59.935018][ T3892] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.948940][ T3892] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.966425][ T3892] bridge_slave_0: entered allmulticast mode [ 59.986321][ T3892] bridge_slave_0: entered promiscuous mode [ 60.111511][ T3920] loop1: detected capacity change from 0 to 256 [ 60.443941][ T3920] FAT-fs (loop1): Directory bread(block 64) failed [ 60.450869][ T3920] FAT-fs (loop1): Directory bread(block 65) failed [ 60.457493][ T3920] FAT-fs (loop1): Directory bread(block 66) failed [ 60.464130][ T3920] FAT-fs (loop1): Directory bread(block 67) failed [ 60.470938][ T3920] FAT-fs (loop1): Directory bread(block 68) failed [ 60.477496][ T3920] FAT-fs (loop1): Directory bread(block 69) failed [ 60.484214][ T3920] FAT-fs (loop1): Directory bread(block 70) failed [ 60.490924][ T3920] FAT-fs (loop1): Directory bread(block 71) failed [ 60.497612][ T3920] FAT-fs (loop1): Directory bread(block 72) failed [ 60.504226][ T3920] FAT-fs (loop1): Directory bread(block 73) failed [ 61.796085][ T3934] FAULT_INJECTION: forcing a failure. [ 61.796085][ T3934] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.846747][ T3934] CPU: 0 UID: 0 PID: 3934 Comm: syz.3.110 Tainted: G W syzkaller #0 PREEMPT(full) [ 61.846783][ T3934] Tainted: [W]=WARN [ 61.846789][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.846802][ T3934] Call Trace: [ 61.846824][ T3934] [ 61.846894][ T3934] __dump_stack+0x1d/0x30 [ 61.847056][ T3934] dump_stack_lvl+0x95/0xd0 [ 61.847086][ T3934] dump_stack+0x15/0x1b [ 61.847107][ T3934] should_fail_ex+0x263/0x280 [ 61.847130][ T3934] should_fail+0xb/0x20 [ 61.847226][ T3934] should_fail_usercopy+0x1a/0x20 [ 61.847258][ T3934] _copy_from_user+0x1c/0xb0 [ 61.847292][ T3934] kstrtouint_from_user+0x69/0xf0 [ 61.847323][ T3934] proc_fail_nth_write+0x50/0x160 [ 61.847457][ T3934] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 61.847496][ T3934] vfs_write+0x269/0x9f0 [ 61.847617][ T3934] ? __rcu_read_unlock+0x4e/0x70 [ 61.847701][ T3934] ? __fget_files+0x184/0x1c0 [ 61.847774][ T3934] ? mutex_lock+0x57/0x90 [ 61.847850][ T3934] ksys_write+0xdc/0x1a0 [ 61.847876][ T3934] __x64_sys_write+0x40/0x50 [ 61.847894][ T3934] x64_sys_call+0x27e1/0x3020 [ 61.847933][ T3934] do_syscall_64+0x12c/0x370 [ 61.847999][ T3934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.848025][ T3934] RIP: 0033:0x7fcd89adcfce [ 61.848040][ T3934] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 61.848061][ T3934] RSP: 002b:00007fcd88534fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.848086][ T3934] RAX: ffffffffffffffda RBX: 00007fcd885356c0 RCX: 00007fcd89adcfce [ 61.848104][ T3934] RDX: 0000000000000001 RSI: 00007fcd885350a0 RDI: 0000000000000006 [ 61.848189][ T3934] RBP: 00007fcd88535090 R08: 0000000000000000 R09: 0000000000000000 [ 61.848206][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.848218][ T3934] R13: 00007fcd89d96218 R14: 00007fcd89d96180 R15: 00007ffe51521d68 [ 61.848290][ T3934] [ 62.147096][ T30] bond0 (unregistering): Released all slaves [ 62.159238][ T3892] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.171103][ T3892] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.178596][ T3892] bridge_slave_1: entered allmulticast mode [ 62.196590][ T3892] bridge_slave_1: entered promiscuous mode [ 62.366788][ T3920] bridge_slave_0: left allmulticast mode [ 62.373768][ T3920] bridge_slave_0: left promiscuous mode [ 62.381365][ T3920] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.412049][ T3920] bridge_slave_1: left allmulticast mode [ 62.418289][ T3920] bridge_slave_1: left promiscuous mode [ 62.426709][ T3920] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.467211][ T3920] bond0: (slave bond_slave_0): Releasing backup interface [ 62.506951][ T3920] bond0: (slave bond_slave_1): Releasing backup interface [ 62.573260][ T3920] team0: Port device team_slave_0 removed [ 62.615696][ T3920] team0: Port device team_slave_1 removed [ 62.632222][ T3920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.640803][ T3920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.666605][ T3920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.675503][ T3920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.710197][ T3920] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.750514][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 62.750532][ T28] audit: type=1400 audit(1772815021.854:361): avc: denied { read } for pid=3041 comm="dhcpcd" name="n26" dev="tmpfs" ino=1282 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.778853][ T28] audit: type=1400 audit(1772815021.854:362): avc: denied { open } for pid=3041 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=1282 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.802293][ T28] audit: type=1400 audit(1772815021.854:363): avc: denied { getattr } for pid=3041 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=1282 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.834896][ T30] hsr_slave_0: left promiscuous mode [ 62.849064][ T30] hsr_slave_1: left promiscuous mode [ 62.859697][ T30] veth1_macvtap: left promiscuous mode [ 62.865404][ T30] veth0_macvtap: left promiscuous mode [ 62.871437][ T30] veth1_vlan: left promiscuous mode [ 62.876821][ T30] veth0_vlan: left promiscuous mode [ 62.991045][ T3948] loop2: detected capacity change from 0 to 512 [ 63.013276][ T3948] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.039795][ T3948] EXT4-fs (loop2): 1 truncate cleaned up [ 63.056287][ T3948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.121084][ T3892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.153391][ T3892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.219100][ T3954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 63.246103][ T3892] team0: Port device team_slave_0 added [ 63.261667][ T3892] team0: Port device team_slave_1 added [ 63.308216][ T3892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.324511][ T3892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.352395][ T3892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.353392][ T3892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.353461][ T3892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.353487][ T3892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.433718][ T3892] hsr_slave_0: entered promiscuous mode [ 63.434514][ T3892] hsr_slave_1: entered promiscuous mode [ 63.456716][ T28] audit: type=1400 audit(1772815022.554:364): avc: denied { create } for pid=3956 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.492324][ T28] audit: type=1400 audit(1772815022.554:365): avc: denied { write } for pid=3956 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=1300 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.518877][ T3954] lo speed is unknown, defaulting to 1000 [ 63.526922][ T28] audit: type=1400 audit(1772815022.554:366): avc: denied { append } for pid=3956 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=1300 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.600721][ T28] audit: type=1400 audit(1772815022.694:367): avc: denied { unlink } for pid=3970 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=1300 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.736277][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.789620][ T28] audit: type=1400 audit(1772815022.884:368): avc: denied { name_bind } for pid=3978 comm="syz.2.114" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 63.860155][ T3994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 63.914809][ T3998] loop2: detected capacity change from 0 to 764 [ 64.042131][ T3892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.053435][ T3892] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.072215][ T3892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.082793][ T3892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.107955][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.115157][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.140585][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.147709][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.426646][ T3892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.739818][ T3892] veth0_vlan: entered promiscuous mode [ 64.766306][ T3892] veth1_vlan: entered promiscuous mode [ 64.794987][ T3892] veth0_macvtap: entered promiscuous mode [ 64.825403][ T4044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.118'. [ 64.839435][ T3892] veth1_macvtap: entered promiscuous mode [ 64.862757][ T3892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.883291][ T3892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.941355][ T28] audit: type=1400 audit(1772815024.044:369): avc: denied { mounton } for pid=3892 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 64.994881][ T4053] netlink: 188 bytes leftover after parsing attributes in process `syz.5.103'. [ 65.015415][ T4053] netlink: 32 bytes leftover after parsing attributes in process `syz.5.103'. [ 65.027633][ T4053] netlink: 'syz.5.103': attribute type 2 has an invalid length. [ 65.076982][ T3989] Symlink component flag not implemented [ 65.089462][ T3989] Symlink component flag not implemented (116) [ 65.097798][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.116004][ T4053] netlink: 172 bytes leftover after parsing attributes in process `syz.5.103'. [ 65.149040][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.165058][ T4047] lo speed is unknown, defaulting to 1000 [ 65.171259][ T28] audit: type=1400 audit(1772815024.264:370): avc: denied { bind } for pid=4060 comm="syz.5.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.264879][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.299058][ T4047] chnl_net:caif_netlink_parms(): no params data found [ 65.335726][ T4073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.124'. [ 65.350115][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.370228][ T4067] loop5: detected capacity change from 0 to 256 [ 65.406683][ T4067] syz.5.122: attempt to access beyond end of device [ 65.406683][ T4067] loop5: rw=8388608, sector=272, nr_sectors = 4 limit=256 [ 65.417355][ T4075] loop1: detected capacity change from 0 to 512 [ 65.435228][ T4075] EXT4-fs: dax option not supported [ 65.510055][ T4047] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.517356][ T4047] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.524591][ T4067] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 65.533274][ T4067] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 65.541679][ T4047] bridge_slave_0: entered allmulticast mode [ 65.548298][ T4047] bridge_slave_0: entered promiscuous mode [ 65.561931][ T4084] loop2: detected capacity change from 0 to 512 [ 65.576537][ T4047] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.589779][ T4084] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.127: inode has both inline data and extents flags [ 65.609376][ T4047] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.626899][ T4047] bridge_slave_1: entered allmulticast mode [ 65.632899][ T4084] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.638803][ T4084] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.127: couldn't read orphan inode 15 (err -117) [ 65.639107][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 65.648089][ T4084] loop2: lost filesystem error report for type 5 error -117 [ 65.666913][ C1] EXT4-fs (loop2): initial error at time 1772815024: ext4_orphan_get:1391: inode 15 [ 65.680814][ T4084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.684770][ C1] EXT4-fs (loop2): last error at time 1772815024: ext4_orphan_get:1396 [ 65.696891][ T4047] bridge_slave_1: entered promiscuous mode [ 65.731177][ T4084] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.127: inode has both inline data and extents flags [ 65.761172][ T4089] loop5: detected capacity change from 0 to 736 [ 65.775924][ T4088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.785189][ T4090] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.127: inode has both inline data and extents flags [ 65.805128][ T4088] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 65.816965][ T4088] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 65.828029][ T4084] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.127: inode has both inline data and extents flags [ 65.849473][ T36] bridge_slave_1: left allmulticast mode [ 65.855162][ T36] bridge_slave_1: left promiscuous mode [ 65.869360][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.889480][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.911785][ T36] bridge_slave_0: left allmulticast mode [ 65.917472][ T36] bridge_slave_0: left promiscuous mode [ 65.936511][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.055010][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.065632][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.076397][ T36] bond0 (unregistering): Released all slaves [ 66.087491][ T4047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.118276][ T4047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.209883][ T4113] loop2: detected capacity change from 0 to 764 [ 66.216306][ T36] hsr_slave_0: left promiscuous mode [ 66.240397][ T36] hsr_slave_1: left promiscuous mode [ 66.248778][ T4113] Symlink component flag not implemented [ 66.254501][ T4113] Symlink component flag not implemented (116) [ 66.261339][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.268851][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.278016][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.287635][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.340239][ T36] veth1_macvtap: left promiscuous mode [ 66.357706][ T36] veth0_macvtap: left promiscuous mode [ 66.376861][ T36] veth1_vlan: left promiscuous mode [ 66.389951][ T36] veth0_vlan: left promiscuous mode [ 66.430017][ T4119] loop5: detected capacity change from 0 to 512 [ 66.483948][ T4119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.498381][ T4119] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.522243][ T4119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.540483][ T36] team0 (unregistering): Port device team_slave_1 removed [ 66.550753][ T36] team0 (unregistering): Port device team_slave_0 removed [ 66.662503][ T4047] team0: Port device team_slave_0 added [ 66.685953][ T4047] team0: Port device team_slave_1 added [ 66.732593][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.749706][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.801560][ T4047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.827727][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.845396][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.897899][ T4047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.969110][ T4146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=4146 comm=syz.2.135 [ 66.992605][ T4047] hsr_slave_0: entered promiscuous mode [ 67.005632][ T4047] hsr_slave_1: entered promiscuous mode [ 67.019510][ T4047] debugfs: 'hsr0' already exists in 'hsr' [ 67.032132][ T4047] Cannot create hsr debugfs directory [ 67.053918][ T4146] loop2: detected capacity change from 0 to 1024 [ 67.074467][ T4146] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.135: bad orphan inode 134217728 [ 67.090336][ T4146] loop2: lost filesystem error report for type 5 error -117 [ 67.091435][ T4146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.309589][ T4146] lo speed is unknown, defaulting to 1000 [ 67.433273][ T4047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.461820][ T4047] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.486944][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.494094][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.530152][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.537394][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.705164][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.743218][ T4047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.817358][ T4210] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 67.846184][ T4210] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 68.024288][ T4047] veth0_vlan: entered promiscuous mode [ 68.049168][ T4047] veth1_vlan: entered promiscuous mode [ 68.085451][ T4237] loop2: detected capacity change from 0 to 764 [ 68.095015][ T4047] veth0_macvtap: entered promiscuous mode [ 68.106522][ T4047] veth1_macvtap: entered promiscuous mode [ 68.132344][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.159341][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.258389][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 68.258469][ T28] audit: type=1400 audit(1772815027.354:386): avc: denied { read write } for pid=4253 comm="syz.3.143" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 68.342749][ T4261] netlink: 24 bytes leftover after parsing attributes in process `syz.3.144'. [ 68.352196][ T28] audit: type=1400 audit(1772815027.394:387): avc: denied { open } for pid=4253 comm="syz.3.143" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 68.473505][ T4257] random: crng reseeded on system resumption [ 68.479463][ T28] audit: type=1400 audit(1772815027.574:388): avc: denied { write } for pid=4256 comm="syz.6.119" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.479545][ T28] audit: type=1400 audit(1772815027.574:389): avc: denied { open } for pid=4256 comm="syz.6.119" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.551553][ T4269] loop5: detected capacity change from 0 to 764 [ 68.612492][ T4261] xt_hashlimit: size too large, truncated to 1048576 [ 68.621833][ T4245] Symlink component flag not implemented [ 68.634663][ T4261] xt_hashlimit: max too large, truncated to 1048576 [ 68.642374][ T4245] Symlink component flag not implemented (116) [ 68.648683][ T4201] Symlink component flag not implemented [ 68.659628][ T28] audit: type=1400 audit(1772815027.764:390): avc: denied { create } for pid=4271 comm="syz.6.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.685770][ T4201] Symlink component flag not implemented (116) [ 68.813510][ T4285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 68.853178][ T28] audit: type=1400 audit(1772815027.944:391): avc: denied { cmd } for pid=4289 comm="syz.2.147" path="socket:[8484]" dev="sockfs" ino=8484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.898312][ T4285] lo speed is unknown, defaulting to 1000 [ 69.083193][ T28] audit: type=1400 audit(1772815028.184:392): avc: denied { listen } for pid=4309 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.143101][ T28] audit: type=1400 audit(1772815028.184:393): avc: denied { create } for pid=4313 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 69.327255][ T28] audit: type=1400 audit(1772815028.214:394): avc: denied { connect } for pid=4309 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.346937][ T28] audit: type=1400 audit(1772815028.214:395): avc: denied { setopt } for pid=4309 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.609384][ T4345] loop5: detected capacity change from 0 to 764 [ 69.625431][ T4345] iso9660: Unknown parameter 'iocharsturkish' [ 69.912697][ T4319] loop3: detected capacity change from 0 to 764 [ 69.971289][ T4348] loop6: detected capacity change from 0 to 512 [ 70.004606][ T4348] EXT4-fs (loop6): 1 truncate cleaned up [ 70.006317][ T4351] openvswitch: netlink: Key 23 has unexpected len 4 expected 2 [ 70.036100][ T4351] lo speed is unknown, defaulting to 1000 [ 70.036498][ T4348] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.147917][ T4047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.249569][ T4361] wireguard0: entered promiscuous mode [ 70.255106][ T4361] wireguard0: entered allmulticast mode [ 70.476445][ T4372] netlink: 698 bytes leftover after parsing attributes in process `syz.2.168'. [ 70.594205][ T4374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 70.856592][ T4319] Symlink component flag not implemented [ 70.862512][ T4319] Symlink component flag not implemented (116) [ 70.918163][ T4374] lo speed is unknown, defaulting to 1000 [ 70.938335][ T4384] netlink: 2 bytes leftover after parsing attributes in process `syz.2.169'. [ 71.010080][ T4383] syz_tun: entered promiscuous mode [ 71.017624][ T4383] macvtap1: entered promiscuous mode [ 71.030825][ T4383] syz_tun: left promiscuous mode [ 71.139638][ T4392] netlink: 'syz.3.172': attribute type 10 has an invalid length. [ 71.277437][ T4405] netlink: 60 bytes leftover after parsing attributes in process `syz.3.178'. [ 72.250600][ T4426] loop6: detected capacity change from 0 to 764 [ 72.281042][ T4412] loop5: detected capacity change from 0 to 764 [ 72.289163][ T4426] Symlink component flag not implemented [ 72.294962][ T4426] Symlink component flag not implemented (116) [ 72.531053][ T4432] loop3: detected capacity change from 0 to 764 [ 72.597019][ T4432] Symlink component flag not implemented [ 72.609298][ T4430] loop1: detected capacity change from 0 to 764 [ 72.611709][ T4432] Symlink component flag not implemented (116) [ 72.655328][ T4430] Symlink component flag not implemented [ 72.669112][ T4430] Symlink component flag not implemented (116) [ 72.710249][ T4442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 72.746424][ T4442] lo speed is unknown, defaulting to 1000 [ 72.866308][ T4451] sctp: [Deprecated]: syz.6.187 (pid 4451) Use of struct sctp_assoc_value in delayed_ack socket option. [ 72.866308][ T4451] Use struct sctp_sack_info instead [ 72.963550][ T4412] Symlink component flag not implemented [ 72.970684][ T4412] Symlink component flag not implemented (116) [ 73.588412][ T4480] loop1: detected capacity change from 0 to 4096 [ 73.614053][ T4480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.629084][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 73.629099][ T28] audit: type=1400 audit(1772815032.724:409): avc: denied { sqpoll } for pid=4479 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.753062][ T4486] loop2: detected capacity change from 0 to 512 [ 73.816358][ T4486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.853489][ T4466] loop6: detected capacity change from 0 to 764 [ 73.873376][ T4486] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.894087][ T28] audit: type=1400 audit(1772815032.984:410): avc: denied { setattr } for pid=4485 comm="syz.2.197" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.917518][ T4486] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.197: iget: bad i_size value: 2533274857506816 [ 73.976941][ T4486] netlink: 'syz.2.197': attribute type 10 has an invalid length. [ 74.015013][ T4486] netlink: 2 bytes leftover after parsing attributes in process `syz.2.197'. [ 74.052996][ T4486] bond0: entered promiscuous mode [ 74.074011][ T4486] bridge0: port 1(bond0) entered blocking state [ 74.089134][ T4460] Symlink component flag not implemented [ 74.101101][ T4489] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.197: iget: bad i_size value: 2533274857506816 [ 74.113719][ T4460] Symlink component flag not implemented (116) [ 74.116325][ T4473] loop5: detected capacity change from 0 to 764 [ 74.136973][ T4486] bridge0: port 1(bond0) entered disabled state [ 74.167670][ T4486] bond0: entered allmulticast mode [ 74.277119][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.339870][ T28] audit: type=1400 audit(1772815033.434:411): avc: denied { map } for pid=4494 comm="syz.6.200" path="socket:[7804]" dev="sockfs" ino=7804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 74.522630][ T4491] loop3: detected capacity change from 0 to 128 [ 74.545160][ T28] audit: type=1400 audit(1772815033.644:412): avc: denied { remount } for pid=4490 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.615317][ T28] audit: type=1400 audit(1772815033.714:413): avc: denied { write } for pid=4510 comm="syz.6.204" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.642989][ T4511] netlink: 20 bytes leftover after parsing attributes in process `syz.6.204'. [ 74.652220][ T4511] tipc: Invalid UDP bearer configuration [ 74.652235][ T4511] tipc: Enabling of bearer rejected, failed to enable media [ 74.725078][ T28] audit: type=1400 audit(1772815033.744:414): avc: denied { create } for pid=4510 comm="syz.6.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.805303][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.967008][ T4529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.206'. [ 75.009334][ T28] audit: type=1400 audit(1772815034.104:415): avc: denied { map } for pid=4527 comm="syz.1.206" path="socket:[7844]" dev="sockfs" ino=7844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.053820][ T28] audit: type=1400 audit(1772815034.114:416): avc: denied { read } for pid=4527 comm="syz.1.206" path="socket:[7846]" dev="sockfs" ino=7846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.091537][ T4535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.207'. [ 75.101099][ T4535] netlink: 32 bytes leftover after parsing attributes in process `syz.3.207'. [ 75.188348][ T4473] Symlink component flag not implemented [ 75.220033][ T4473] Symlink component flag not implemented (116) [ 75.252123][ T28] audit: type=1400 audit(1772815034.354:417): avc: denied { setopt } for pid=4527 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.494639][ T4550] __nla_validate_parse: 1 callbacks suppressed [ 75.494731][ T4550] netlink: 60 bytes leftover after parsing attributes in process `syz.5.210'. [ 75.518826][ T4550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.210'. [ 75.528038][ T4550] netlink: 60 bytes leftover after parsing attributes in process `syz.5.210'. [ 75.541375][ T4552] loop2: detected capacity change from 0 to 764 [ 75.620202][ T28] audit: type=1400 audit(1772815034.714:418): avc: denied { execute_no_trans } for pid=4549 comm="syz.5.210" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.701668][ T4559] loop3: detected capacity change from 0 to 1024 [ 75.713799][ T4539] Symlink component flag not implemented [ 75.719780][ T4539] Symlink component flag not implemented (116) [ 75.735595][ T4559] EXT4-fs: Ignoring removed bh option [ 75.781638][ T4559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.797638][ T4567] netlink: 60 bytes leftover after parsing attributes in process `syz.6.213'. [ 75.970662][ T4579] loop5: detected capacity change from 0 to 512 [ 75.987703][ T4579] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.214: inode has both inline data and extents flags [ 76.009388][ T4579] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.010369][ T4579] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.214: couldn't read orphan inode 15 (err -117) [ 76.019670][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 76.019690][ C0] EXT4-fs (loop5): initial error at time 1772815035: ext4_orphan_get:1391: inode 15 [ 76.019728][ C0] EXT4-fs (loop5): last error at time 1772815035: ext4_orphan_get:1391: inode 15 [ 76.056836][ T4579] loop5: lost filesystem error report for type 5 error -117 [ 76.463457][ T4579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.513042][ T4579] EXT4-fs error (device loop5): ext4_lookup:1785: inode #15: comm syz.5.214: inode has both inline data and extents flags [ 76.551853][ T4579] EXT4-fs error (device loop5): ext4_lookup:1785: inode #15: comm syz.5.214: inode has both inline data and extents flags [ 76.597883][ T4579] EXT4-fs error (device loop5): ext4_lookup:1785: inode #15: comm syz.5.214: inode has both inline data and extents flags [ 76.662952][ T3892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.687357][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.764054][ T4602] loop5: detected capacity change from 0 to 2048 [ 76.833661][ T4617] loop6: detected capacity change from 0 to 8192 [ 76.841468][ T4602] loop5: p1 < > p4 [ 76.846791][ T4602] loop5: p4 start 42180 is beyond EOD, truncated [ 76.861823][ T3001] loop5: p1 < > p4 [ 76.867712][ T3001] loop5: p4 start 42180 is beyond EOD, truncated [ 77.736371][ T4638] syzkaller0: entered promiscuous mode [ 77.742907][ T4638] syzkaller0: entered allmulticast mode [ 77.855405][ T4641] netlink: 'syz.3.228': attribute type 2 has an invalid length. [ 78.130393][ T4675] EXT4-fs: Ignoring removed bh option [ 78.144291][ T4675] EXT4-fs: inline encryption not supported [ 78.156345][ T4675] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.175807][ T4675] EXT4-fs (loop2): inodes count not valid: 4294967295 vs 32 [ 78.259962][ T4667] Symlink component flag not implemented [ 78.280150][ T4667] Symlink component flag not implemented (116) [ 78.590252][ T4708] netlink: 'syz.1.250': attribute type 2 has an invalid length. [ 78.762298][ T4714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 78.832714][ T4717] cgroup: No subsys list or none specified [ 78.849578][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 78.849594][ T28] audit: type=1400 audit(1772815037.934:426): avc: denied { mounton } for pid=4706 comm="syz.2.249" path="/64/file0" dev="tmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 78.960975][ T28] audit: type=1400 audit(1772815037.994:427): avc: denied { name_bind } for pid=4715 comm="syz.1.253" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 78.986610][ T4714] lo speed is unknown, defaulting to 1000 [ 79.046326][ T28] audit: type=1400 audit(1772815037.994:428): avc: denied { lock } for pid=4715 comm="syz.1.253" path="socket:[8075]" dev="sockfs" ino=8075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.115569][ T4670] Symlink component flag not implemented [ 79.140963][ T4670] Symlink component flag not implemented (116) [ 79.276443][ T4723] set_capacity_and_notify: 3 callbacks suppressed [ 79.276523][ T4723] loop6: detected capacity change from 0 to 764 [ 79.311773][ T4690] loop5: detected capacity change from 0 to 764 [ 79.322153][ T4723] iso9660: Unknown parameter '' [ 79.824590][ T4738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=4738 comm=syz.6.260 [ 79.895510][ T4738] loop6: detected capacity change from 0 to 1024 [ 79.943820][ T4738] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.260: bad orphan inode 134217728 [ 79.972898][ T4738] loop6: lost filesystem error report for type 5 error -117 [ 79.973499][ T4738] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.083784][ T4738] lo speed is unknown, defaulting to 1000 [ 80.418025][ T4725] loop3: detected capacity change from 0 to 764 [ 80.635587][ T4047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.656555][ T4762] netlink: 60 bytes leftover after parsing attributes in process `syz.1.262'. [ 80.835308][ T4690] Symlink component flag not implemented [ 80.843321][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'. [ 80.859515][ T4690] Symlink component flag not implemented (116) [ 80.930710][ T4779] lo speed is unknown, defaulting to 1000 [ 80.983680][ T28] audit: type=1400 audit(1772815040.084:429): avc: denied { create } for pid=4776 comm="syz.6.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 81.015560][ T4781] lo speed is unknown, defaulting to 1000 [ 81.148650][ T28] audit: type=1400 audit(1772815040.084:430): avc: denied { sys_admin } for pid=4776 comm="syz.6.264" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 81.357768][ T4795] netlink: 16 bytes leftover after parsing attributes in process `syz.5.266'. [ 81.404890][ T4795] netlink: 20 bytes leftover after parsing attributes in process `syz.5.266'. [ 81.459938][ T4795] netlink: 'syz.5.266': attribute type 1 has an invalid length. [ 81.483485][ T28] audit: type=1400 audit(1772815040.584:431): avc: denied { bind } for pid=4808 comm="syz.2.271" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.488139][ T4795] netlink: 16 bytes leftover after parsing attributes in process `syz.5.266'. [ 81.503837][ T4810] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 81.543086][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 81.688990][ T4826] loop5: detected capacity change from 0 to 512 [ 81.712795][ T4826] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.720804][ T4725] Symlink component flag not implemented [ 81.762927][ T4725] Symlink component flag not implemented (116) [ 81.772695][ T4826] EXT4-fs error (device loop5): ext4_quota_enable:7188: comm syz.5.273: Bad quota inum: 2, type: 1 [ 81.783784][ T4826] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 81.817873][ T28] audit: type=1400 audit(1772815040.894:432): avc: denied { create } for pid=4825 comm="syz.5.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 81.849795][ T4826] netlink: 44 bytes leftover after parsing attributes in process `syz.5.273'. [ 81.859328][ T28] audit: type=1400 audit(1772815040.964:433): avc: denied { ioctl } for pid=4825 comm="syz.5.273" path="socket:[10248]" dev="sockfs" ino=10248 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 81.885307][ T28] audit: type=1400 audit(1772815040.994:434): avc: denied { write } for pid=4825 comm="syz.5.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 81.932904][ T4840] loop6: detected capacity change from 0 to 1024 [ 81.939516][ T3892] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 81.980154][ T4840] EXT4-fs: Ignoring removed nobh option [ 81.996961][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 82.006199][ T4840] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.036883][ T4840] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.049743][ T4851] lo speed is unknown, defaulting to 1000 [ 82.061658][ T4840] FAULT_INJECTION: forcing a failure. [ 82.061658][ T4840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.082554][ T4840] CPU: 0 UID: 0 PID: 4840 Comm: syz.6.274 Tainted: G W syzkaller #0 PREEMPT(full) [ 82.082595][ T4840] Tainted: [W]=WARN [ 82.082601][ T4840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.082652][ T4840] Call Trace: [ 82.082735][ T4840] [ 82.082743][ T4840] __dump_stack+0x1d/0x30 [ 82.082776][ T4840] dump_stack_lvl+0x95/0xd0 [ 82.082807][ T4840] dump_stack+0x15/0x1b [ 82.082834][ T4840] should_fail_ex+0x263/0x280 [ 82.082860][ T4840] should_fail+0xb/0x20 [ 82.082882][ T4840] should_fail_usercopy+0x1a/0x20 [ 82.082910][ T4840] _copy_to_user+0x20/0xa0 [ 82.082982][ T4840] copy_siginfo_to_user+0x22/0xb0 [ 82.083002][ T4840] x64_setup_rt_frame+0x2b4/0x4e0 [ 82.083049][ T4840] arch_do_signal_or_restart+0x24b/0x450 [ 82.083156][ T4840] exit_to_user_mode_loop+0x6a/0x6f0 [ 82.083187][ T4840] do_syscall_64+0x249/0x370 [ 82.083211][ T4840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.083236][ T4840] RIP: 0033:0x7fb89facc797 [ 82.083277][ T4840] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 82.083326][ T4840] RSP: 002b:00007fb89e51f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 82.083356][ T4840] RAX: 0000000000000116 RBX: 00007fb89fd45fa0 RCX: 00007fb89facc799 [ 82.083373][ T4840] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000007 [ 82.083388][ T4840] RBP: 00007fb89e51f090 R08: 0000000000000000 R09: 0000000000000000 [ 82.083399][ T4840] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000001 [ 82.083411][ T4840] R13: 00007fb89fd46038 R14: 00007fb89fd45fa0 R15: 00007ffec8dbe1e8 [ 82.083430][ T4840] [ 82.300163][ T4047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.313488][ T4862] loop5: detected capacity change from 0 to 764 [ 82.344496][ T4862] Symlink component flag not implemented [ 82.353146][ T4862] Symlink component flag not implemented (116) [ 82.370930][ T4866] netlink: 328 bytes leftover after parsing attributes in process `syz.6.279'. [ 82.414149][ T4868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 82.453716][ T4872] FAULT_INJECTION: forcing a failure. [ 82.453716][ T4872] name failslab, interval 1, probability 0, space 0, times 1 [ 82.466782][ T4872] CPU: 0 UID: 0 PID: 4872 Comm: syz.3.282 Tainted: G W syzkaller #0 PREEMPT(full) [ 82.466814][ T4872] Tainted: [W]=WARN [ 82.466821][ T4872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.466835][ T4872] Call Trace: [ 82.466841][ T4872] [ 82.466849][ T4872] __dump_stack+0x1d/0x30 [ 82.466884][ T4872] dump_stack_lvl+0x95/0xd0 [ 82.466977][ T4872] dump_stack+0x15/0x1b [ 82.467005][ T4872] should_fail_ex+0x263/0x280 [ 82.467030][ T4872] should_failslab+0x8c/0xb0 [ 82.467058][ T4872] __kmalloc_noprof+0xb8/0x4e0 [ 82.467136][ T4872] ? kernfs_fop_write_iter+0xe2/0x300 [ 82.467180][ T4872] kernfs_fop_write_iter+0xe2/0x300 [ 82.467240][ T4872] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 82.467284][ T4872] vfs_write+0x5a6/0x9f0 [ 82.467328][ T4872] ksys_write+0xdc/0x1a0 [ 82.467411][ T4872] __x64_sys_write+0x40/0x50 [ 82.467429][ T4872] x64_sys_call+0x27e1/0x3020 [ 82.467542][ T4872] do_syscall_64+0x12c/0x370 [ 82.467570][ T4872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.467658][ T4872] RIP: 0033:0x7fcd89b1c799 [ 82.467727][ T4872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.467750][ T4872] RSP: 002b:00007fcd88577028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.467769][ T4872] RAX: ffffffffffffffda RBX: 00007fcd89d95fa0 RCX: 00007fcd89b1c799 [ 82.467783][ T4872] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000005 [ 82.467795][ T4872] RBP: 00007fcd88577090 R08: 0000000000000000 R09: 0000000000000000 [ 82.467880][ T4872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.467951][ T4872] R13: 00007fcd89d96038 R14: 00007fcd89d95fa0 R15: 00007ffe51521d68 [ 82.467976][ T4872] [ 82.657729][ T28] audit: type=1400 audit(1772815041.754:435): avc: denied { create } for pid=4874 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 82.692746][ T4875] netlink: 'syz.2.283': attribute type 10 has an invalid length. [ 82.726128][ T4875] loop2: detected capacity change from 0 to 2048 [ 82.733138][ T4875] EXT4-fs: Ignoring removed i_version option [ 82.740600][ T4875] ext4: Unknown parameter 'dont_hash' [ 82.902669][ T4897] FAULT_INJECTION: forcing a failure. [ 82.902669][ T4897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.921976][ T4894] lo speed is unknown, defaulting to 1000 [ 82.929089][ T4897] CPU: 0 UID: 0 PID: 4897 Comm: syz.6.292 Tainted: G W syzkaller #0 PREEMPT(full) [ 82.929124][ T4897] Tainted: [W]=WARN [ 82.929133][ T4897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.929221][ T4897] Call Trace: [ 82.929229][ T4897] [ 82.929238][ T4897] __dump_stack+0x1d/0x30 [ 82.929269][ T4897] dump_stack_lvl+0x95/0xd0 [ 82.929300][ T4897] dump_stack+0x15/0x1b [ 82.929358][ T4897] should_fail_ex+0x263/0x280 [ 82.929390][ T4897] should_fail+0xb/0x20 [ 82.929417][ T4897] should_fail_usercopy+0x1a/0x20 [ 82.929450][ T4897] _copy_from_user+0x1c/0xb0 [ 82.929487][ T4897] do_ipv6_setsockopt+0x124/0x21d0 [ 82.929516][ T4897] ? kstrtoull+0x111/0x140 [ 82.929548][ T4897] ? __rcu_read_unlock+0x4e/0x70 [ 82.929575][ T4897] ? avc_has_perm_noaudit+0xab/0x130 [ 82.929627][ T4897] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 82.929712][ T4897] ipv6_setsockopt+0x59/0x130 [ 82.929743][ T4897] tcp_setsockopt+0x98/0xb0 [ 82.929779][ T4897] sock_common_setsockopt+0x69/0x80 [ 82.929874][ T4897] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 82.929903][ T4897] __sys_setsockopt+0x184/0x200 [ 82.929936][ T4897] __x64_sys_setsockopt+0x64/0x80 [ 82.930038][ T4897] x64_sys_call+0x2327/0x3020 [ 82.930114][ T4897] do_syscall_64+0x12c/0x370 [ 82.930142][ T4897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.930300][ T4897] RIP: 0033:0x7fb89facc799 [ 82.930316][ T4897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.930393][ T4897] RSP: 002b:00007fb89e51f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 82.930419][ T4897] RAX: ffffffffffffffda RBX: 00007fb89fd45fa0 RCX: 00007fb89facc799 [ 82.930437][ T4897] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 82.930509][ T4897] RBP: 00007fb89e51f090 R08: 0000000000000020 R09: 0000000000000000 [ 82.930526][ T4897] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 82.930542][ T4897] R13: 00007fb89fd46038 R14: 00007fb89fd45fa0 R15: 00007ffec8dbe1e8 [ 82.930569][ T4897] [ 83.174515][ T4887] loop1: detected capacity change from 0 to 764 [ 83.388988][ T4911] capability: warning: `syz.5.298' uses deprecated v2 capabilities in a way that may be insecure [ 83.440102][ T4915] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 83.470063][ T4918] loop2: detected capacity change from 0 to 128 [ 83.625418][ T4925] Symlink component flag not implemented [ 83.639880][ T4925] Symlink component flag not implemented (116) [ 83.732801][ T4887] Symlink component flag not implemented [ 83.742623][ T4887] Symlink component flag not implemented (116) [ 83.801531][ T4930] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 83.810061][ T4930] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e854e018, mo2=0003] [ 83.818130][ T4930] System zones: 0-1, 15-15, 18-18, 34-34 [ 83.829855][ T4930] EXT4-fs (loop1): orphan cleanup on readonly fs [ 83.848407][ T4930] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 83.863692][ T4930] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 83.871111][ T4930] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.303: iget: bad extended attribute block 1 [ 83.884457][ T4930] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 83.884598][ T4930] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.303: couldn't read orphan inode 16 (err -117) [ 83.893962][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 83.893985][ C0] EXT4-fs (loop1): initial error at time 1772815042: ext4_orphan_get:1391: inode 16 [ 83.894021][ C0] EXT4-fs (loop1): last error at time 1772815042: ext4_orphan_get:1391: inode 16 [ 83.931829][ T4930] loop1: lost filesystem error report for type 5 error -117 [ 83.932506][ T4930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.957072][ T4930] EXT4-fs (loop1): shut down requested (2) [ 83.963976][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 83.963990][ T28] audit: type=1400 audit(1772815043.064:443): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 83.992908][ T28] audit: type=1400 audit(1772815043.064:444): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.014948][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.017040][ T28] audit: type=1400 audit(1772815043.064:445): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.046596][ T28] audit: type=1400 audit(1772815043.064:446): avc: denied { add_name } for pid=2983 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.067460][ T28] audit: type=1400 audit(1772815043.064:447): avc: denied { create } for pid=2983 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.099693][ T28] audit: type=1400 audit(1772815043.064:448): avc: denied { append open } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.127682][ T4941] lo speed is unknown, defaulting to 1000 [ 84.138912][ T28] audit: type=1400 audit(1772815043.064:449): avc: denied { getattr } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.344535][ T4950] FAULT_INJECTION: forcing a failure. [ 84.344535][ T4950] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 84.388283][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: syz.6.309 Tainted: G W syzkaller #0 PREEMPT(full) [ 84.388367][ T4950] Tainted: [W]=WARN [ 84.388375][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.388391][ T4950] Call Trace: [ 84.388399][ T4950] [ 84.388407][ T4950] __dump_stack+0x1d/0x30 [ 84.388441][ T4950] dump_stack_lvl+0x95/0xd0 [ 84.388504][ T4950] dump_stack+0x15/0x1b [ 84.388528][ T4950] should_fail_ex+0x263/0x280 [ 84.388563][ T4950] should_fail_alloc_page+0xf2/0x100 [ 84.388645][ T4950] __alloc_frozen_pages_noprof+0x108/0x360 [ 84.388684][ T4950] ? policy_nodemask+0x417/0x5e0 [ 84.388721][ T4950] alloc_pages_mpol+0xb3/0x260 [ 84.388756][ T4950] alloc_frozen_pages_noprof+0x8f/0x110 [ 84.388868][ T4950] ___kmalloc_large_node+0x3f/0xe0 [ 84.388905][ T4950] __kmalloc_large_node_noprof+0x18/0xb0 [ 84.388935][ T4950] __kmalloc_noprof+0x268/0x4e0 [ 84.388959][ T4950] ? iovec_from_user+0x84/0x200 [ 84.388986][ T4950] ? __kmalloc_noprof+0x7/0x4e0 [ 84.389019][ T4950] iovec_from_user+0x84/0x200 [ 84.389100][ T4950] ? process_vm_rw+0x14f/0x9c0 [ 84.389125][ T4950] process_vm_rw+0x16f/0x9c0 [ 84.389160][ T4950] ? tick_program_event+0x79/0xc0 [ 84.389185][ T4950] ? hrtimer_interrupt+0x705/0x810 [ 84.389239][ T4950] __x64_sys_process_vm_writev+0x78/0x90 [ 84.389269][ T4950] x64_sys_call+0x1592/0x3020 [ 84.389355][ T4950] do_syscall_64+0x12c/0x370 [ 84.389380][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.389419][ T4950] RIP: 0033:0x7fb89facc799 [ 84.389516][ T4950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.389546][ T4950] RSP: 002b:00007fb89e51f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 84.389571][ T4950] RAX: ffffffffffffffda RBX: 00007fb89fd45fa0 RCX: 00007fb89facc799 [ 84.389589][ T4950] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 000000000000006e [ 84.389606][ T4950] RBP: 00007fb89e51f090 R08: 000000000000023a R09: 0000000000000000 [ 84.389632][ T4950] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 84.389649][ T4950] R13: 00007fb89fd46038 R14: 00007fb89fd45fa0 R15: 00007ffec8dbe1e8 [ 84.389675][ T4950] [ 84.648512][ T4943] set_capacity_and_notify: 2 callbacks suppressed [ 84.648541][ T4943] loop5: detected capacity change from 0 to 764 [ 84.732952][ T4956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=4956 comm=syz.3.311 [ 84.771098][ T4956] loop3: detected capacity change from 0 to 1024 [ 84.806517][ T4956] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.311: bad orphan inode 134217728 [ 84.817342][ T4956] loop3: lost filesystem error report for type 5 error -117 [ 84.817922][ T4956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.902490][ T4956] lo speed is unknown, defaulting to 1000 [ 84.929055][ T4971] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 84.945136][ T4973] FAULT_INJECTION: forcing a failure. [ 84.945136][ T4973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.968616][ T4971] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 84.986847][ T4971] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 85.003295][ T4971] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 85.011231][ T4973] CPU: 0 UID: 0 PID: 4973 Comm: syz.1.318 Tainted: G W syzkaller #0 PREEMPT(full) [ 85.011269][ T4973] Tainted: [W]=WARN [ 85.011286][ T4973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 85.011302][ T4973] Call Trace: [ 85.011310][ T4973] [ 85.011319][ T4973] __dump_stack+0x1d/0x30 [ 85.011354][ T4973] dump_stack_lvl+0x95/0xd0 [ 85.011385][ T4973] dump_stack+0x15/0x1b [ 85.011553][ T4973] should_fail_ex+0x263/0x280 [ 85.011591][ T4973] should_fail+0xb/0x20 [ 85.011619][ T4973] should_fail_usercopy+0x1a/0x20 [ 85.011656][ T4973] _copy_from_user+0x1c/0xb0 [ 85.011766][ T4973] do_ipv6_setsockopt+0x124/0x21d0 [ 85.011878][ T4973] ? kstrtoull+0x111/0x140 [ 85.011901][ T4973] ? __rcu_read_unlock+0x4e/0x70 [ 85.011959][ T4973] ? avc_has_perm_noaudit+0xab/0x130 [ 85.011998][ T4973] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 85.012087][ T4973] ipv6_setsockopt+0x59/0x130 [ 85.012116][ T4973] tcp_setsockopt+0x98/0xb0 [ 85.012151][ T4973] sock_common_setsockopt+0x69/0x80 [ 85.012176][ T4973] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 85.012342][ T4973] __sys_setsockopt+0x184/0x200 [ 85.012379][ T4973] __x64_sys_setsockopt+0x64/0x80 [ 85.012492][ T4973] x64_sys_call+0x2327/0x3020 [ 85.012528][ T4973] do_syscall_64+0x12c/0x370 [ 85.012556][ T4973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.012588][ T4973] RIP: 0033:0x7f70c802c799 [ 85.012609][ T4973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.012632][ T4973] RSP: 002b:00007f70c6a87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 85.012657][ T4973] RAX: ffffffffffffffda RBX: 00007f70c82a5fa0 RCX: 00007f70c802c799 [ 85.012675][ T4973] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 85.012692][ T4973] RBP: 00007f70c6a87090 R08: 0000000000000020 R09: 0000000000000000 [ 85.012765][ T4973] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 85.012783][ T4973] R13: 00007f70c82a6038 R14: 00007f70c82a5fa0 R15: 00007ffc7c92f118 [ 85.012808][ T4973] [ 85.354970][ T4943] Symlink component flag not implemented [ 85.361593][ T4943] Symlink component flag not implemented (116) [ 85.466189][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.547383][ T4984] loop3: detected capacity change from 0 to 128 [ 85.554177][ T4984] msdos: Bad value for 'gid' [ 85.558924][ T4984] msdos: Bad value for 'gid' [ 85.585403][ T4981] loop1: detected capacity change from 0 to 764 [ 85.591725][ T4986] netlink: 'syz.5.322': attribute type 10 has an invalid length. [ 85.591839][ T4986] ipvlan0: entered allmulticast mode [ 85.632189][ T4986] veth0_vlan: entered allmulticast mode [ 85.653183][ T4977] Symlink component flag not implemented [ 85.659395][ T4977] Symlink component flag not implemented (116) [ 85.667686][ T4986] team0: Device ipvlan0 failed to register rx_handler [ 85.773985][ T28] audit: type=1400 audit(1772815044.854:450): avc: denied { write } for pid=4979 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.793636][ T28] audit: type=1400 audit(1772815044.864:451): avc: denied { ioctl } for pid=4979 comm="syz.2.320" path="socket:[9674]" dev="sockfs" ino=9674 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.877143][ T4991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.100569][ T4991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.111978][ T28] audit: type=1400 audit(1772815045.024:452): avc: denied { compute_member } for pid=4988 comm="syz.6.323" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 86.385285][ T5004] loop2: detected capacity change from 0 to 128 [ 86.498959][ T4984] netlink: 'syz.3.321': attribute type 21 has an invalid length. [ 86.627159][ T5016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=5016 comm=syz.1.331 [ 86.666726][ T5016] loop1: detected capacity change from 0 to 1024 [ 86.705001][ T5017] __nla_validate_parse: 6 callbacks suppressed [ 86.705087][ T5017] netlink: 20 bytes leftover after parsing attributes in process `syz.5.326'. [ 86.923064][ T5017] lo speed is unknown, defaulting to 1000 [ 87.133809][ T5020] loop6: detected capacity change from 0 to 1024 [ 87.186409][ T5016] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.331: bad orphan inode 134217728 [ 87.198371][ T5020] EXT4-fs: Ignoring removed bh option [ 87.204138][ T5016] loop1: lost filesystem error report for type 5 error -117 [ 87.255423][ T5016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.290475][ T5016] lo speed is unknown, defaulting to 1000 [ 87.315371][ T5020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.359334][ T5020] EXT4-fs error (device loop6): __ext4_remount:6804: comm syz.6.332: Abort forced by user [ 87.388933][ T5020] EXT4-fs (loop6): Remounting filesystem read-only [ 87.395538][ T5020] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 87.413517][ T5021] loop2: detected capacity change from 0 to 764 [ 87.558126][ T5039] FAULT_INJECTION: forcing a failure. [ 87.558126][ T5039] name failslab, interval 1, probability 0, space 0, times 0 [ 87.571242][ T5039] CPU: 1 UID: 0 PID: 5039 Comm: syz.5.337 Tainted: G W syzkaller #0 PREEMPT(full) [ 87.571282][ T5039] Tainted: [W]=WARN [ 87.571291][ T5039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.571359][ T5039] Call Trace: [ 87.571367][ T5039] [ 87.571375][ T5039] __dump_stack+0x1d/0x30 [ 87.571408][ T5039] dump_stack_lvl+0x95/0xd0 [ 87.571439][ T5039] dump_stack+0x15/0x1b [ 87.571541][ T5039] should_fail_ex+0x263/0x280 [ 87.571635][ T5039] should_failslab+0x8c/0xb0 [ 87.571656][ T5039] __kmalloc_node_noprof+0xc8/0x560 [ 87.571679][ T5039] ? alloc_slab_obj_exts+0x3e/0xc0 [ 87.571704][ T5039] alloc_slab_obj_exts+0x3e/0xc0 [ 87.571804][ T5039] __memcg_slab_post_alloc_hook+0x239/0x540 [ 87.571848][ T5039] __kvmalloc_node_noprof+0x41c/0x650 [ 87.571883][ T5039] ? alloc_netdev_mqs+0xa5/0xa40 [ 87.571920][ T5039] ? __pfx_macvlan_setup+0x10/0x10 [ 87.571949][ T5039] alloc_netdev_mqs+0xa5/0xa40 [ 87.572033][ T5039] rtnl_create_link+0x239/0x720 [ 87.572069][ T5039] rtnl_newlink_create+0x174/0x650 [ 87.572098][ T5039] ? security_capable+0x7b/0x90 [ 87.572226][ T5039] ? netlink_ns_capable+0x86/0xa0 [ 87.572259][ T5039] rtnl_newlink+0x10a0/0x1330 [ 87.572366][ T5039] ? __memcg_slab_free_hook+0x154/0x250 [ 87.572406][ T5039] ? __rcu_read_unlock+0x4e/0x70 [ 87.572475][ T5039] ? avc_has_perm_noaudit+0xab/0x130 [ 87.572511][ T5039] ? cred_has_capability+0x224/0x2a0 [ 87.572543][ T5039] ? selinux_capable+0x31/0x40 [ 87.572651][ T5039] ? security_capable+0x7b/0x90 [ 87.572682][ T5039] ? ns_capable+0x7c/0xb0 [ 87.572792][ T5039] ? __pfx_rtnl_newlink+0x10/0x10 [ 87.572832][ T5039] rtnetlink_rcv_msg+0x64b/0x720 [ 87.572878][ T5039] netlink_rcv_skb+0x123/0x220 [ 87.572912][ T5039] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.572969][ T5039] rtnetlink_rcv+0x1c/0x30 [ 87.573022][ T5039] netlink_unicast+0x5c0/0x690 [ 87.573058][ T5039] netlink_sendmsg+0x5c8/0x6f0 [ 87.573169][ T5039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.573207][ T5039] ____sys_sendmsg+0x563/0x5b0 [ 87.573305][ T5039] ___sys_sendmsg+0x195/0x1e0 [ 87.573340][ T5039] ? path_openat+0x1b01/0x2050 [ 87.573397][ T5039] __sys_sendmmsg+0x185/0x320 [ 87.573499][ T5039] __x64_sys_sendmmsg+0x57/0x70 [ 87.573537][ T5039] x64_sys_call+0x27aa/0x3020 [ 87.573572][ T5039] do_syscall_64+0x12c/0x370 [ 87.573622][ T5039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.573651][ T5039] RIP: 0033:0x7faac4eec799 [ 87.573671][ T5039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.573695][ T5039] RSP: 002b:00007faac393f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 87.573720][ T5039] RAX: ffffffffffffffda RBX: 00007faac5165fa0 RCX: 00007faac4eec799 [ 87.573810][ T5039] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 87.573837][ T5039] RBP: 00007faac393f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.573854][ T5039] R10: 000000000000fffe R11: 0000000000000246 R12: 0000000000000001 [ 87.573869][ T5039] R13: 00007faac5166038 R14: 00007faac5165fa0 R15: 00007ffee0930ce8 [ 87.573943][ T5039] [ 87.977191][ T5043] loop3: detected capacity change from 0 to 512 [ 87.997979][ T5035] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.110269][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.123034][ T313] bridge_slave_1: left allmulticast mode [ 88.128813][ T313] bridge_slave_1: left promiscuous mode [ 88.142657][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.172568][ T313] bridge_slave_0: left allmulticast mode [ 88.178270][ T313] bridge_slave_0: left promiscuous mode [ 88.182521][ T5051] netlink: 'syz.5.339': attribute type 7 has an invalid length. [ 88.199285][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.293417][ T5058] /dev/sg0: Can't lookup blockdev [ 88.303567][ T5058] 9p: Bad value for 'wfdno' [ 88.309792][ T5058] netlink: 'syz.5.339': attribute type 39 has an invalid length. [ 88.422716][ T313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.437872][ T313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.459924][ T313] bond0 (unregistering): Released all slaves [ 88.484229][ T5053] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 88.500056][ T5053] bond1: (slave lo): Enslaving as an active interface with an up link [ 88.527460][ T5053] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 88.556907][ T5058] hsr_slave_1 (unregistering): left promiscuous mode [ 88.573131][ T313] hsr_slave_0: left promiscuous mode [ 88.591593][ T5021] Symlink component flag not implemented [ 88.600641][ T5021] Symlink component flag not implemented (116) [ 88.616623][ T313] hsr_slave_1: left promiscuous mode [ 88.622932][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.630713][ T313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.648325][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.655954][ T313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.667384][ T313] veth1_macvtap: left promiscuous mode [ 88.673078][ T313] veth0_macvtap: left promiscuous mode [ 88.688102][ T313] veth1_vlan: left promiscuous mode [ 88.693786][ T313] veth0_vlan: left promiscuous mode [ 88.696375][ T5064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5064 comm=syz.1.344 [ 88.774781][ T5070] loop2: detected capacity change from 0 to 256 [ 88.807258][ T5070] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.850722][ T313] team0 (unregistering): Port device team_slave_1 removed [ 88.862776][ T313] team0 (unregistering): Port device team_slave_0 removed [ 89.032817][ T5082] msdos: Bad value for 'gid' [ 89.037466][ T5082] msdos: Bad value for 'gid' [ 89.061035][ T5054] lo speed is unknown, defaulting to 1000 [ 89.195267][ T5087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.260932][ T5054] chnl_net:caif_netlink_parms(): no params data found [ 89.278546][ T5087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.320462][ T5089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.427915][ T5089] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.443915][ T5087] netlink: 'syz.5.349': attribute type 21 has an invalid length. [ 89.495944][ T5054] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.525588][ T5054] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.533470][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.578119][ T5054] bridge_slave_0: entered allmulticast mode [ 89.667175][ T5054] bridge_slave_0: entered promiscuous mode [ 89.727356][ T5054] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.739002][ T5054] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.747384][ T5054] bridge_slave_1: entered allmulticast mode [ 89.757456][ T5054] bridge_slave_1: entered promiscuous mode [ 89.772407][ T5102] lo speed is unknown, defaulting to 1000 [ 89.796116][ T5054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.807268][ T5054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.843629][ T5054] team0: Port device team_slave_0 added [ 89.855706][ T5054] team0: Port device team_slave_1 added [ 89.917285][ T5106] set_capacity_and_notify: 3 callbacks suppressed [ 89.917302][ T5106] loop2: detected capacity change from 0 to 512 [ 89.938180][ T5054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.945500][ T5054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.981878][ T5054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.048620][ T5054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.055695][ T5054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.110959][ T5054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.171898][ T5054] hsr_slave_0: entered promiscuous mode [ 90.189136][ T5054] hsr_slave_1: entered promiscuous mode [ 90.195196][ T5054] debugfs: 'hsr0' already exists in 'hsr' [ 90.205943][ T5054] Cannot create hsr debugfs directory [ 90.224486][ T5110] loop2: detected capacity change from 0 to 256 [ 90.256884][ T5110] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.290236][ T5110] FAULT_INJECTION: forcing a failure. [ 90.290236][ T5110] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 90.304837][ T5110] CPU: 0 UID: 0 PID: 5110 Comm: syz.2.353 Tainted: G W syzkaller #0 PREEMPT(full) [ 90.304955][ T5110] Tainted: [W]=WARN [ 90.304962][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.304974][ T5110] Call Trace: [ 90.304981][ T5110] [ 90.304988][ T5110] __dump_stack+0x1d/0x30 [ 90.305073][ T5110] dump_stack_lvl+0x95/0xd0 [ 90.305101][ T5110] dump_stack+0x15/0x1b [ 90.305122][ T5110] should_fail_ex+0x263/0x280 [ 90.305146][ T5110] should_fail_alloc_page+0xf2/0x100 [ 90.305233][ T5110] alloc_pages_bulk_noprof+0x101/0x530 [ 90.305275][ T5110] copy_splice_read+0xf3/0x6c0 [ 90.305304][ T5110] ? __pfx_filemap_splice_read+0x10/0x10 [ 90.305335][ T5110] splice_direct_to_actor+0x28f/0x670 [ 90.305425][ T5110] ? __pfx_direct_splice_actor+0x10/0x10 [ 90.305449][ T5110] do_splice_direct+0x119/0x1a0 [ 90.305469][ T5110] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 90.305497][ T5110] do_sendfile+0x382/0x650 [ 90.305594][ T5110] __x64_sys_sendfile64+0x105/0x150 [ 90.305624][ T5110] x64_sys_call+0x2dc4/0x3020 [ 90.305668][ T5110] do_syscall_64+0x12c/0x370 [ 90.305690][ T5110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.305732][ T5110] RIP: 0033:0x7f58ae02c799 [ 90.305800][ T5110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.305818][ T5110] RSP: 002b:00007f58aca7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 90.305839][ T5110] RAX: ffffffffffffffda RBX: 00007f58ae2a5fa0 RCX: 00007f58ae02c799 [ 90.305856][ T5110] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 90.305868][ T5110] RBP: 00007f58aca7f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.305880][ T5110] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 90.305898][ T5110] R13: 00007f58ae2a6038 R14: 00007f58ae2a5fa0 R15: 00007fffede5b468 [ 90.305978][ T5110] [ 90.536649][ T5050] Symlink component flag not implemented [ 90.552677][ T5115] FAULT_INJECTION: forcing a failure. [ 90.552677][ T5115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.554455][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 90.554505][ T28] audit: type=1400 audit(1772815049.654:460): avc: denied { bind } for pid=5112 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.586621][ T5115] CPU: 0 UID: 0 PID: 5115 Comm: syz.2.355 Tainted: G W syzkaller #0 PREEMPT(full) [ 90.586777][ T5115] Tainted: [W]=WARN [ 90.586799][ T5115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.586833][ T5115] Call Trace: [ 90.586855][ T5115] [ 90.586885][ T5115] __dump_stack+0x1d/0x30 [ 90.586985][ T5115] dump_stack_lvl+0x95/0xd0 [ 90.587067][ T5115] dump_stack+0x15/0x1b [ 90.587132][ T5115] should_fail_ex+0x263/0x280 [ 90.587217][ T5115] should_fail+0xb/0x20 [ 90.587352][ T5115] should_fail_usercopy+0x1a/0x20 [ 90.587467][ T5115] _copy_from_user+0x1c/0xb0 [ 90.587587][ T5115] tiocswinsz+0x44/0xe0 [ 90.587793][ T5115] tty_ioctl+0x1b1/0xb80 [ 90.587864][ T5115] ? __pfx_tty_ioctl+0x10/0x10 [ 90.587907][ T5115] __se_sys_ioctl+0xce/0x140 [ 90.587925][ T5115] __x64_sys_ioctl+0x43/0x50 [ 90.588060][ T5115] x64_sys_call+0x1563/0x3020 [ 90.588231][ T5115] do_syscall_64+0x12c/0x370 [ 90.588343][ T5115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.588473][ T5115] RIP: 0033:0x7f58ae02c799 [ 90.588544][ T5115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.588596][ T5115] RSP: 002b:00007f58aca7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.588656][ T5115] RAX: ffffffffffffffda RBX: 00007f58ae2a5fa0 RCX: 00007f58ae02c799 [ 90.588698][ T5115] RDX: 0000200000000180 RSI: 0000000000005414 RDI: 0000000000000004 [ 90.588795][ T5115] RBP: 00007f58aca7f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.588835][ T5115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.588875][ T5115] R13: 00007f58ae2a6038 R14: 00007f58ae2a5fa0 R15: 00007fffede5b468 [ 90.588950][ T5115] [ 90.598512][ T5050] Symlink component flag not implemented (116) [ 90.841274][ T2] ================================================================== [ 90.849411][ T2] BUG: KCSAN: data-race in copy_process / free_pid [ 90.855956][ T2] [ 90.858294][ T2] read-write to 0xffffffff86c61f68 of 4 bytes by task 3892 on cpu 0: [ 90.866371][ T2] free_pid+0xbc/0x1e0 [ 90.870483][ T2] free_pids+0x54/0xb0 [ 90.874583][ T2] release_task+0x9a7/0xb60 [ 90.879108][ T2] wait_consider_task+0x1160/0x1670 [ 90.884339][ T2] __do_wait+0xf9/0x510 [ 90.888520][ T2] do_wait+0xb6/0x260 [ 90.892523][ T2] kernel_wait4+0x19f/0x210 [ 90.897062][ T2] __x64_sys_wait4+0x91/0x120 [ 90.901760][ T2] x64_sys_call+0x2aee/0x3020 [ 90.906483][ T2] do_syscall_64+0x12c/0x370 [ 90.911089][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.917021][ T2] [ 90.919365][ T2] read to 0xffffffff86c61f68 of 4 bytes by task 2 on cpu 1: [ 90.926671][ T2] copy_process+0x1895/0x20d0 [ 90.931476][ T2] kernel_clone+0x16b/0x5d0 [ 90.936007][ T2] kernel_thread+0xe5/0x120 [ 90.940529][ T2] kthreadd+0x25b/0x320 [ 90.944728][ T2] ret_from_fork+0x150/0x360 [ 90.949442][ T2] ret_from_fork_asm+0x1a/0x30 [ 90.954235][ T2] [ 90.956569][ T2] value changed: 0x800000ea -> 0x800000e9 [ 90.962385][ T2] [ 90.964780][ T2] Reported by Kernel Concurrency Sanitizer on: [ 90.970975][ T2] CPU: 1 UID: 0 PID: 2 Comm: kthreadd Tainted: G W syzkaller #0 PREEMPT(full) [ 90.981406][ T2] Tainted: [W]=WARN [ 90.985237][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.995328][ T2] ================================================================== [ 91.053786][ T5127] loop2: detected capacity change from 0 to 512 [ 91.062077][ T5127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5127 comm=syz.2.358 [ 91.074950][ T28] audit: type=1400 audit(1772815050.154:461): avc: denied { append } for pid=5126 comm="syz.2.358" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.137626][ T5054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.148862][ T28] audit: type=1400 audit(1772815050.164:462): avc: denied { map } for pid=5126 comm="syz.2.358" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.178636][ T5054] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.201957][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.209107][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.228335][ T5054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.241628][ T5054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.255278][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.262445][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.329982][ T5054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.466256][ T5054] veth0_vlan: entered promiscuous mode [ 91.474928][ T5054] veth1_vlan: entered promiscuous mode [ 91.492635][ T5054] veth0_macvtap: entered promiscuous mode [ 91.501253][ T5054] veth1_macvtap: entered promiscuous mode [ 91.513253][ T5054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.526457][ T5054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.554017][ T28] audit: type=1400 audit(1772815050.654:463): avc: denied { mounton } for pid=5054 comm="syz-executor" path="/root/syzkaller.E7jA5o/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=10239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 91.583757][ T28] audit: type=1400 audit(1772815050.684:464): avc: denied { mount } for pid=5054 comm="syz-executor" name="/" dev="gadgetfs" ino=4852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1