last executing test programs: 9m19.325454781s ago: executing program 1 (id=56): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) 9m19.162950536s ago: executing program 1 (id=58): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x3a000000, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x2, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x2df8cb643540299b, 0x1}, 0x20) 9m19.04978799s ago: executing program 1 (id=59): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 9m19.04952169s ago: executing program 1 (id=60): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x3bffffffc, 0x4}, 0x2000, 0x0, 0x0, 0x7, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffff7ff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000002340)={0xa, 0x6e1d, 0xc212, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc27}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r1, &(0x7f0000004980), 0x0, 0x20008000) r2 = getpgid(0x0) r3 = syz_open_procfs(r2, 0x0) unshare(0x2040600) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) futex(0x0, 0x100, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000380)={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1f}}, 0xc) write$selinux_access(0xffffffffffffffff, 0x0, 0x41) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) epoll_pwait2(r3, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000240), 0x8) r4 = syz_io_uring_setup(0x21ae, &(0x7f00000000c0)={0x0, 0xf6ae, 0x8, 0x40004, 0xc00266}, &(0x7f0000000180)=0x0, 0x0, &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r6, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(r4, 0xd44, 0xc139, 0x1, 0x0, 0x0) syz_io_uring_setup(0x25b1, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000000)) r7 = memfd_secret(0x0) ftruncate(r7, 0x5) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f00000001c0)='./file0\x00', 0x21488b, &(0x7f0000001f80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e734fdc2da8c998a8700232e5263a04392efa56fc98553afa5a498c8c3a3206f2b25a00c0ec0d1202c822ab708037a4c29a9c81216c73358cda8b1a2532650070aaf77d3ac8e46f2b2b5ed7828c6165514d2f40c6cf8eb2e325f9d2b7750af696145751cdfc7d00f6021f29a689969eadb6a870fb43b3f6badebdc0048aa9956828007502b62", @ANYRES16, @ANYRES64, @ANYRESHEX], 0x1, 0x65c, &(0x7f0000002280)="$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") r8 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0xffffffffffffffff, r8) 9m18.513697027s ago: executing program 1 (id=65): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x600402, 0x0) write$binfmt_aout(r0, &(0x7f0000002240)=ANY=[], 0xff70) ppoll(&(0x7f00000000c0)=[{r0, 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1a8710, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x11000, 0x8, 0x7, 0x7, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0x0, 0xffffffffffffffff, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a"], 0x5c}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 9m18.176886028s ago: executing program 1 (id=76): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0, 0x0, 0x200000000000000}, 0x38) 9m18.155792529s ago: executing program 32 (id=76): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0, 0x0, 0x200000000000000}, 0x38) 9m0.267422999s ago: executing program 5 (id=146): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000000)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0x8}], 0x1, &(0x7f0000000100)=ANY=[], 0x40}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x6ce76000) 8m59.845569623s ago: executing program 5 (id=148): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0xfc, 0x2, 0xbc, 0x9b, 0x0, 0xffffffff, 0x2000, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa28, 0x1, @perf_config_ext={0x676b, 0x8}, 0x8, 0x7, 0xd71, 0x8, 0x6, 0x2, 0x2, 0x0, 0x30000000, 0x0, 0x8}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x6, 0xd, 0xff, 0x10, 0x0, 0x2f, 0x41, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xa122, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x1010, 0x5, 0x7, 0x4, 0x80, 0x2, 0xc7, 0x0, 0x3, 0x0, 0x401}, r0, 0x10, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = semget(0x2, 0x5751e4d7532c9cae, 0x3e6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x607b, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013900000000009500000000000000ebfbad3f0c4953260cdf35fd70ed47332920667acb285d1367e2a83bfd3b4e34f0cd5eb07ddb8f7707735bdbf16918aa55a241e6cdd111c189067667fe76ceee4928f2c0700e7192f162376ffa83c3342623f2d78735a656ad"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{0xa868, 0x5, 0x10, 0x101}, {0x2, 0xc3, 0x8, 0x6}, {0x7, 0xff, 0x1, 0x400}]}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x48894}, 0x20004080) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005"], 0xb4}}, 0x24040810) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) semctl$GETPID(r4, 0x1, 0xb, 0x0) 8m58.204838236s ago: executing program 5 (id=157): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc779, 0x445a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xc66}, 0x2081, 0x10000, 0x6, 0x3, 0x10b, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)={0x440043, 0x70, 0x24}, 0x18) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@const={0x10, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x61, 0x2e, 0x0, 0x2e, 0x61]}}, &(0x7f00000001c0), 0x2b, 0x0, 0x1, 0x4, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1a, 0x2, 0xffffff26, 0x3, 0x1000, r7, 0x2, '\x00', r1, r8, 0x3, 0x0, 0x2}, 0x50) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$inet6_icmp(0xa, 0x2, 0x3a) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 8m57.74917605s ago: executing program 5 (id=160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000101030000000000000000000a000003440001802c00018014000300fc010000000000000000000000000001140004002001000000000000000000000000000206000340000000000c000280050001"], 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000500), 0xfc, 0x57c, &(0x7f0000000680)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef35bf413db93852f7bda4ae6dddfbd1ce5d29c2eeee09e70edf110f5bcb7639c2eb4b78c6df701905b9aafab4af000055a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000c700e6d602000000000000080000000001", [0xe, 0xfffffffffffffffd]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000340)={0x7, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0xb, 0x7, 0x8, 0x8, 0xfe, 0x4}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r6], 0x9) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000240)={r5, 0xe, 0x10, 0xde7, 0x8c0}, &(0x7f0000000300)=0x18) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) syz_emit_ethernet(0x3a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c681001000080045b40028000000000f06907864010102000000aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000190780000"], 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000070a0102000000000000000002000000a80004800c000180080001006c6f67000c00018007000100637400ff0f0001800b000100736f636b657400004800018008000100647570003c0002800800024000000009080001400000000d08000140000000020800024000000002080002400000000808000140000000020800024000000004140001800e000100627974656f72646572000000100001800a0001006c696d6974000000100001800c000100626974776973650008000a40000000020900020073797a3200000000"], 0xd0}}, 0x0) 8m57.035999194s ago: executing program 5 (id=166): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000000850000002cf8e656416049a2bf0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 8m55.773687275s ago: executing program 5 (id=171): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085e, &(0x7f00000107c0)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@acl}]}, 0x1, 0x53a, &(0x7f0000010280)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0xd00000000000000, 0x0, 0x0, 0xfffffffffdffffff}) 8m55.696267447s ago: executing program 33 (id=171): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085e, &(0x7f00000107c0)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@acl}]}, 0x1, 0x53a, &(0x7f0000010280)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0xd00000000000000, 0x0, 0x0, 0xfffffffffdffffff}) 1m45.461659289s ago: executing program 0 (id=3760): r0 = syz_pidfd_open(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001180)={r1, 0xffffffffffff4841}) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x3b7, 0x40400) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f00000000c0)=""/156) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x6811220d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3506, 0x1, 0x8, 0x0, 0x9}}, 0xe8) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)=0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x2, 0x7, r6}) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000038cc200"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500240000000000"], 0x3c}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x0, 0x7, 0x4, 0x8, 0xff, 0x2}) 1m45.42895434s ago: executing program 0 (id=3762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003c00db0bb3e80bad9c9388f7867eb20715713e9b60a01d4be600000000069078ac1414bbac1414aa4e22400177d3bde74b196995d81c0d5f5fa5e96c62f3a69690ecb556aaf0c6597508f36ecb773104a5761ac68b735832a9b39e64c98b2ea369a99908556f9c440235d7c78c0af92f9934bd4b30b9933d36e7a9", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0020000907800001312abb9bfe0c34c72d50c66fa8369f6e7870000"], 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) recvmsg$can_j1939(r2, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dedbff, {0x0, 0x0, 0x0, r3, {0x9, 0x6}, {0x1}, {0x3, 0x3}}, ["", ""]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0xffffffffffffffec, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x0, 0xffffffff, 0xff, 0x7, 0x8, 0xba, 0x403, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400c8f4}, 0x4800) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@delqdisc={0x13c, 0x25, 0x2, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xc, 0xffff}, {0x10}, {0x3, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x42}}, @TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0x8, 0xa, 0x0, 0x0, 0x3, 0x7cee, 0x3}}, {0xa, 0x2, [0x7, 0xe, 0x19dd]}}, {{0x1c, 0x1, {0xff, 0x7, 0xbcf0, 0x11c0a, 0x2, 0x5, 0x8, 0x8}}, {0x14, 0x2, [0x6, 0x7f, 0x3, 0xfffd, 0x3, 0x9, 0x357, 0x9]}}, {{0x1c, 0x1, {0x1, 0x3, 0xf7b1, 0x3, 0x2, 0x7f, 0xfffffffb, 0x2}}, {0x8, 0x2, [0x3, 0x1]}}, {{0x1c, 0x1, {0x5, 0x4, 0x6, 0x238, 0x1, 0x0, 0x1, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x1, 0x7, 0xffff, 0x0, 0x2, 0xfffffff7, 0x2, 0x8}}, {0x14, 0x2, [0xc, 0x0, 0x2fff, 0x1, 0x3, 0x9, 0x0, 0x1]}}, {{0x1c, 0x1, {0x9, 0x0, 0x7f, 0x8001, 0x2, 0x101, 0x8, 0x6}}, {0x10, 0x2, [0x9, 0x6, 0xa, 0x0, 0x6, 0x6]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_RATE={0x6, 0x5, {0x10, 0x9}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$PPPIOCGDEBUG(r9, 0x80047441, &(0x7f0000000140)) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b82, 0x0, @perf_bp={0x0, 0x1}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) socket$packet(0x11, 0xa, 0x300) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10102) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 1m44.293357187s ago: executing program 0 (id=3769): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x0) 1m44.278729137s ago: executing program 0 (id=3770): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty=0x3000000}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 1m43.838986502s ago: executing program 0 (id=3771): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xb}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1m43.511800272s ago: executing program 0 (id=3776): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0x10, r3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xf1, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x10000000}, 0x0) 1m43.457266413s ago: executing program 34 (id=3776): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0x10, r3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xf1, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x10000000}, 0x0) 6.457537559s ago: executing program 4 (id=4341): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffd5, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0x138) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r3, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x7a, @empty, 0x3}, 0x80, 0x0}, 0x404c040) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0xbab7c4c2860ab9ef, 0x1000000000000, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r5, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'syzkaller\x00'}, {0x20, '&\\*\"'}, {}, {}, {0x20, '\x00'}, {0x20, '#! '}], 0xa, "35f6c9ead84056f301a3330a589508"}, 0x32) syz_emit_ethernet(0xaf, 0x0, 0x0) r6 = dup(r4) poll(0x0, 0x0, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000180)={0x2, 0x6, 0x4, 0x81, 0x13, "1d74f25bc4685910"}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080d700000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) 5.929566966s ago: executing program 7 (id=4346): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket(0x10, 0x803, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc779, 0x445a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xc66}, 0x2081, 0x10000, 0x6, 0x3, 0x10b, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)={0x440043, 0x70, 0x24}, 0x18) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@const={0x10, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x61, 0x2e, 0x0, 0x2e, 0x61]}}, &(0x7f00000001c0), 0x2b, 0x0, 0x1, 0x4, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1a, 0x2, 0xffffff26, 0x3, 0x1000, r7, 0x2, '\x00', r1, r8, 0x3, 0x0, 0x2}, 0x50) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x2}]}}}}}}, 0x46) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$inet6_icmp(0xa, 0x2, 0x3a) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 5.537611129s ago: executing program 4 (id=4348): perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001800010304000000000000000a6b89"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)="c7e3a4043a2107553d082c774866500a3b74e112a04b826f9146cc31c5c141eab3f8e15ad851f7d7cff5552fa63d42b0be5d9c03bf34906ed447b4b86259ccaa1eae6fe55f022a79e27c699871c54df188f0495793a0a911d7886566de11a158d6527f6f3eaa59c0a25b2047bb52068322e40da919ad2bab7c216851b93167b82aa9ba354ee0c6a9a4b17a002ed00aed16333a0203c242c24020f76b3d91ba5ca1f6d2d1c3e7cd6db470564b51548adff3c58881651c3d02db924b6c37b488bb2a2fbd9af64102c14f42c8f38c4b86663b454d6684ade3bd46c4ac", 0xdb}, {&(0x7f0000000a80)="5c5ce4809f95c500b99cf8d4d979c9f780f6fcd0b796d88785c3d4632e39b4263696c0b021622f070dc342076087cb921f4b117a3777dab7352790afff32d31dc45afd8c45789f0f7d194560f19e3598f8af3df07d950815ffe9d204fb1800279274aea67d70c7390a2414e3623c9c330aabb1b6070204cc9b2aab8a92bef11cb66663e2eacf7c044988465eaa389800f846ae01baa299a9a3d98d01907df8cd4a56cb4827479626ebc3661cf7fb698418d0aa9518593033cf17e606eef96e394a54579ef7979d4b0489226e96cf24e024f276fc9befdad6e7b4150858475a8844a9ef50f09df3e1e468037a9fdf879957caecb48058f03f0ef4055b22605c505ef54d7db1af781a9f918d449276f82750131a3568d45dd9d1161985ca3fbca39cd70b71f94490b51630b37f59226eca5a662f7a13479b909b1b8994106312fd38c8b9e581ed5468e2347052cf2deeb2f8369b532fe3df517a14b58330f1745ef13cfe620c6fd403aab812de4719cf6fc3ab10ad6fa85b9ceba9126fd6b768ed0fd18f55bb41230c21d832d802da244126f2da45f48b1afe74dbce13906ff9daebab3e905b93f4918173cfe23136bb3a7e09b4684ce67c2694c00a1ad45a55352f377f197b785b5aacb293509f60bfbb2ad344a1f58a37475ddb1288d474e1c538fa44f66bda9933978a103550139a600c678dfcf90a4a1e8c61896ccb5910ef528174a6eacf39b7e9b3a67f5c5031663e75298780b472bbdde0b185afd007b383f109ec072bbb2a4786876fd01b944783909c94f25f60ceb8f1c3ffeb91d6f6868495ec1409889e52eb5d51889cae9963740d064b059b382529f81cc6e3714b0fddb63ae9f5e399ee72e88ffcfae8f454ee0db6f8e4f759c67f1c4017fc3f0605835c31109fb0695f2db073f6a1498839204cc6cd96f95834b187320ad6f8e99c247e20bd949a9818b93bc0b1c507f289289bbb2564a8f37a5478cafa315e4daf2caf31d81420864ba9a36d57708d5fe1e0ee861b7f44f784583d260e907c76228eb52e70728f81cfa43abcc06d74d90ce7fcfe9905833c0d248ba0b349e0e4b7d7b0b544903036e2f27d816835de28c0fc168cff1a0209cecfb99579ca897bba9513201e1d007644ff4e4754d4b02ca5f9eda4dbe102a3df5c8edfb62aa3d8f172e18c31e5404536bb6b62de732b2ec1723916450449979257477fb2e4ed0d8eb1f2beb5c3203ac9b36d8a93bf0ac15e2a131f0e47ceb5af07f7b3ceb99d85cb605f06fa89990e8a7afe766385c79a6c35fd7079ac304c84e9c1c1d6089f8251f205cdb422fedb8ca4035760f889f11f3778ae039de614accd3c6cb22523f92e888ba82bf96753ac8d32bfe4caa021f9bfda1ed933b00b2f5e187a25c05e9d317036a9c83f8c65d0b7303f0133d2a368fdd3aab98b70035d9eb7cb2cb9475f844a7758928d9605b0dc07bcd76f835eed6b40fc9bc0b7c5f6ed0d51dbbd6b0d603f1692055b74afbb612058f53986b44eff3709ab56645d52568723bc369ae927eaef597f74149a2df092dff2508baf407f6fdb967c04cca6c02737bcee637daf351824e57fbb334b38d7a3cfe34b2c82b8387273277ffd1b7a381c5a9b738db367161a4bc972153b3676c7ce6200211568f452655b5752ff4d79ea083a7c4d1e0222117a024a8237e13b4a5e84a203f65ef951d34f5a230484c1ca3bd14398ced67262a3e736d487955d39669a1a78e73b3e838c23532ed3c9ce49bc23d0a5a556f1eabe8a9c1039e0d10f1b6e4898bd7d370440c197c01757e93b16f91d6fc7e71d913e542389bc985e689034abd18820069dbc3b80115928a701ed36bd338b9d9c1811bc46026f995a64c2691c4ced4ec632114952f907f9872fe972b0a842042da77b3bd833018d134891300fa6d123e9885e03b122bfb9914528d3354287f034b36bc7b2e6bf2441906c9a172379c6c2183ee7888a0304cd506d595e06c196d8578f739ec3fd69c28df00bc71987a10cf2fc4e6d5271ca152df2723bf194f6f52537a6a08d0d6bb0585e33683dc058196816c39adcd97f61ed2e4c9131b4e81daf14f38a23d7720f548a4592a1c2e1f581a9719ce6dc7f482cf2041fe6d84742380c2631dda8d23f31cf83bd3ddba3c66a97eed621f9faa2a718bbf19a8bc34beb263e9d23651baf49349feb3ca73f95202e2469d057f905108eb42ed95913c83297248e2d9e8ce78bcb8e58b6f265bc764cc2c7766187137f2420064ebd23f88e719daf23b038398862bc1518a516aee732ec3e35d1b9583f01d89094f0497b7b16f50861fec67668b5ac3223adc8ecd074228da8d3cc751c4dd7a877628f59c774b39744eb235dc38af30dad05f9a084aef4d0f01a858d7ec38af5ee0377fa8b6711e89a4204a9087e7e227c7003d18ca23c73474d35a36c46c1b01873d97cffe7d2f7e515b02231d0797814e9ed5b91d694f0a59e0f8e6aeffdd34609d9fc414b1c87d71c5346178ff225354ecc99a8936478312a22bc476b4bd1dc40fdb5406ce1700e033444002cbabfe8f984141e3a8062a2a826e5ea1a7737b9131aa1390765f9f065b4326baba82c161597975555ea5362f66cd6a4af9c34fd0de3507a01e9d2005732962fee6db9c3ccf4283850085ec77a99734f82802bdd00c2a7ec3b5675face3021e974aca919b4f6e638b69706618aa6c7649e72dfbdc04ae0fd8cba25fc422d313885692495c628c26a11c7ac9e3e735246363a9c50b133a01bbf8628d27d2ecd1eafd331c611ec00588e1933a754d34ad2dbb3c0aa6ca5b73d535422326b8fc50f075ee42adf35f1bbe7705cfaeae301908a2e803aabc244ea047557ee0e619d7f75b6165be715ccf88fb86ef9a13280398acbe4b92c44f2d14e34f2869dda7b1b7bd38991345965cc0406bd498d6422734cbeeb73d117332911c4a43914b87b6f30ad19fa9b099b4baba34bd56faee02470cb8f045d58d0a47b87c7fc34359da5276cda0fa0d44de768d70accfbf9daaeebdf07448717df4e77ed2bc3e22ae3a7ee6ebcd31d96e3d511a527ccf4d341b09da286022c7d297d5d45c4a4ed723293f2f729d2227cc12dbf5431878456ad56598cb8e1b9bfb63308c0ea5dd777fcb5024b5341665f1bd307febbf98bd66ecef64067210f8d68164e967b326eca3cff7f0ed76e7259752b60e1fdf5ffe1ab13e7b0d647b938fd666e7eb5481d47a78b8498dc85334b47f2dfd56572739be0610a6ba519d3e1a033097752b1fd4b3affb7ac4755bdfed0950dc27b40bc4047c2dc2bebfc6ab1594d9efbebd3faaf95f2edc5d2d5612ca80abd026a4349a3226b6d03f322d3984ae667327b6829b6c66f179500ded1f6016308f4b8f11ff17d09f1f9491a0d5615b9c8d8e50d0140f90669aac800c89b361acfd990d4eac814fe1f2627d0edbfcfea3b0b958c80263eed59cab89c9ac4d37e67b0a7ba11c316e13026f437b572f7c316925588b91b869cc3124f84d5e1f7073b678865f74bc67f352e2953040d4c562a7df8892aadbfe27ba0591c18f5c51ead54f805d8362fdb725fcb98b9535702e586de40233119317d0b459c6f7ca30e2d1b1df3bc6f8eddc520e98db9d366067807a8e3a040b990343b31b606d33a2f4d3d1fa785471d16b37857b3fa743b24ea2ff4e6cf824f4f20c156cb315c6c40bdfbf5d6b6fb4020216dff7d97a517ac7f15f178a4e6229822835fdb38a090da9ed62b1c9aa9f0503bfc4f2d22c4c85098fb7a55cb9a0cf9dd7a8a7e74722219c08622737223b446c4551e9918fbc548df7313a48c653844ac3920c3d9880a7a8e86e1053b614baeb8e8ce15f56a684e052eaddbf0af693d4e0a36950b02595f9a215f518194ca717ccb56d69cb5306ff4672a6a8fdaf3b4edf20146e9e7e35efc5149ed5d6c5d5d8402a3859a4173236372f9e6770bc921d29b31ee147b801756170d6397d18772bd35ecff5b26afabcf1778f46ab825912919624fedd4a76e04340133ba0e0fb0d09b5d40446eea89c6c86f8d71c1469d248ae6c90c709f9b05e725f4c77b9537fff60810032fc2dbbe7244131e5d86c4b9fdf232c8de97f681e587641485472d03c79d32bdd8d49a51f1872868d5a8a7fd82510d2bf259d512133b3795135ce925c877f52fcdc0c015ab591c220816a10c972a7fc5c006824a49b75d47aed0a5489f5cf45b246e72ad0aef0abb02d16244b9c6a00cf6ce7143be20cccc6eb85b36982543eb20bc2238802f60927b9a331c44cc1f72d2d0ff48843b1433a4d913da15c2ee05b9d21f6991deca139c59b6273d9f3d4a6dc0dad40b2c0baa8eedfa48c7d2e6600c3e97a9ac9fc77e1d6e4b840db9c2e1532dea12577d704030385ac0526d665d392bd1ebfdbe2be179f18b5029b876360a8d98ddbece48c3a19db8fcf022a01d63728522e4284925e1ac12424593788ca63df0f6db660083ac3b4ce4a38bac062fe510fd2ac828a5ce157c69347ea406f80821d771980d7086ec5b1f54354c816716430507fa0ab9e5627dab7b94a9529c0d7ebc0b8210176329370e0b14c225dc6c85973cc25b436a47f329a87a9494ecfe0d49d82789b3ac520c5e94e7e864d446666cbd13ec66d96795d6c11699b60d3a7ca85bf4a18446c15f893adee41a371aaf735c29c87a6be9854cfbd99c77103461a64a971a2c5e4b129ff65394a7b3bcc50981e71cba14cc3c057f5cdee9ba6bd9b809fd205b498fea17dae4567811c222523dc20c4b33e5254cc199564e4197272334eb1b983fd7768ef4af52b7a92df10ad7a545538dc270542dde371b9d7ac99c2f47bf1aad536a472f44ef9f3b520c086fd0d0b9a83e646546f27880ae9eea45fe5d8337b57ee518c675c212f081cee947ff0acfb62311e6061e42bd21031c2b2bfbc2864e1c6173b38b97d81577ccf0001fa06e9e27e234013edda1bdd2ee6a1fa0d6e18b984abac6da386d688650fed0018f5f5c53508eb0a112dbbeaa587aa8f5a9ffc3c28c5e4db7466776ce5028027717a99ae7cdf6b3baa3a421ba65f92ab971764a113125a9ef34c0e583e16b9554531cfdc18fcc66965f8b7525ff842a4db38b737003d42ac348fea5dca45ae769909bf67dab2fe3f9562848110ba78e51f5b12446c03b0fb09f10216001b901fffeb7f2f6feb32e31f9bf788401fc37e250d441880b3727143f435a3424753bf6c6dd88f8d77701f12642cc26656485df1101f102feb6d2ad50b2ab8089e8032a3ffc2841cf0ed03cabcca0885e8db88fc3ab6c6f1f0108a73ba62fa62500547421a332615fa7072c173d15056ea85601a24da9ea0b85bfad450d86cdd018334746a4f608017f396be030758a5ec197de71154bb873a5c4fd2379f201af5f75b3ae8f62406d07f2f60ae275f48b5caa128f7ad2d1f6d90b75df8011a651a1bb86fddbbe3e3adaa03d8421bef3ccba921f08ff6e0a2024b34ffb34d2dc92bd9816b48df20946c4eac47956392284ff4e88eed65d5506e60dc8148e42f88467d056cc609aa993bc14ab27af4482064b501c2b5d020595f407c3d9ad7b3e8e82e3549c65a07d8d8b9405fdf9af33ed2d735c520f6c730fb25c576a3805ef78a226922a45e6174fc05029fc9249d2a3bed31fc27ed39fcfc3be23f454f991933532fee3516edcc44de03fc2d921f8435448138fcef69da98eecf6cb5290220ede7927ba4a8b0d505278382df3ab7113ce76b77ffc23db20c7f4fb7dd1b14374a5c1a2ad28385c9f7ac306ba447c0e2dda5b3739fcabc4b421938ace", 0x1000}, {&(0x7f00000003c0)="e58c7b4a812ea1b506f717e9169c53001171429267897408f801b4d8abeda70ff29dbb217e6553bf99d1c5c62ab9df2b563ab24116784f7e68947c312bf025894a86", 0x42}, {&(0x7f00000001c0)="88be2b4cb9a0b06d3548a8f1af2141cd1772cccf3cab496c0d3326ee9ba0a438291f92d1fb8b664e4fd27bc2b8d097df10d5", 0x32}, {&(0x7f0000000500)="4edc04a3d6538dd49703f7488d18a2f3acb380b249109607f41b434f8ca7525f70ef3a1df24b8ca5bed2d6b574d253fef5b8e26cd8fb8eca1783d224d97a14eb621f831d0e456e7e4b0ff118c6ce14ab8012399879f58794be8b28ac4d8ac42300c9ead973355a16f8b6b3a83df3eaf0049fc81d590fd02c34854d1998585ea721ffaceaeba20f814f7cdb6b5e0b6bbc4eaac8e425c9ea3c8d1d972a19ad3bc6a55df69d6a231945b989375d917588316c9508217706d189", 0xb8}], 0x5, &(0x7f00000005c0)=[{0xa0, 0xff, 0x8, "cbed60d079b9bd865b8a8614a1e5b0e5f59907df055ab404582f7f317fdc9a49ad351e1d8b55aca66f7a306a2b00ffe081baa9a3a73340b6854a879b202b64385acf8524d1191b683c7cc8333dc65a53dc5d86da559e93feafbcc041c3aace78665dc07cdef91f63660b989f7fa0f996dcc1e930d9ba0ac75ac1ce655eaa667e711eb4e872a16705a9f15f"}], 0xa0}, 0x40000) pipe(&(0x7f0000000100)) bind$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x100000000000005d}, 0x0) 5.535228079s ago: executing program 4 (id=4349): r0 = getpgid(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xe, 0x0, &(0x7f0000002740)) r2 = syz_pidfd_open(r0, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6c}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}]}, @TIPC_NLA_NET={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x6}, 0x22008010) 5.476056981s ago: executing program 4 (id=4350): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x37, 0x1, {0x2, 0x5, 0x9, r1, 0xa, 'syzkaller\x00'}}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x6000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x804) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80478b, &(0x7f0000000500)={[{@nodioread_nolock}, {@grpjquota}, {@minixdf}, {@discard}, {@prjquota}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xffff}}]}, 0x0, 0x489, &(0x7f0000000c80)="$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") sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x888) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 5.302731456s ago: executing program 7 (id=4352): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) ptrace$peeksig(0x4212, r0, &(0x7f0000000140)={0x400000005}, &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000001d00010029bd7000fbdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="0400080108000100ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x2000000) r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r3, 0x0, 0x0, 0x8800000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000300)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "2c81d8", 0x10, 0x21, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, {[], {{0x4e21, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x5, 0x3, 'Z[>', 0x5, "20fc7a"}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x5, &(0x7f0000000080)=0x1d0, 0x4) sendmmsg$inet(r7, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) 5.17758152s ago: executing program 3 (id=4353): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_io_uring_setup(0x760b, &(0x7f0000001400)={0x0, 0x79e7, 0x400, 0xffffffff, 0x11c}, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYBLOB="0200"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001000"/27], 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000001c0)='./bus/file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0xffffffff, 0xffffffff, 0x400001, 0x0, 0xa, "ff00f7000000000000000020af88008300"}) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0xa4000061) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r5, 0x0, 0x54) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0xb9, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000038847aaaac90650c092002051b71d24459852c59032361d5563a477e1ea1a5c02f56169a4fa06f5c1f91fff765b952fc4dde2f89b51aa713829e0e9c1ef0ac8e4d3bafc6a81cd7e73f08db357b742ca3ec11ab20a98dd1e5bb4d09530c3b10fcc86d300d4d9e7231d2a8c74e2b84ca30af10652f401394c6d4d9d626bfd9903ec34b54fa1"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14b0}}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000280)={0x44, 0x11, 0x306, 0xfffe, 0x0, 0xffffc, 0x0}) 4.979133836s ago: executing program 6 (id=4354): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000008, 0x2000000000000}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x3000000) 4.789168053s ago: executing program 6 (id=4355): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000080)={'system_u:object_r:hald_var_run_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4ea3, 0x0, @local, 0x9}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, &(0x7f00000001c0)) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2c10", 0x2}, {&(0x7f0000000240)="466f7e6133690b92ced63423e65920a733aa2d1d00d1700bc5140a149285e6f85dd6f21ace58b2b64e332c83bd3e8e359218684aeafc21656df230a02f0b44621efbc64bec7d1bcb76ef0e610accabedc37fd00e85d571e68022d2cb26fcec3cb22dfae812a6ace66faecd4c3f0f39b05de57847ba8334ab7e7f962635aaa5b23e376fec0bc72b4fcc8aa87cba7b", 0x8e}], 0x2, 0x0, 0x0, 0x2c}, 0x44804) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x10, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 4.318409098s ago: executing program 3 (id=4358): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008"], 0x122}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001200015e36bfa1000000000007000ec0", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.24903786s ago: executing program 3 (id=4359): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400ee7a}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400feffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0003001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.151666093s ago: executing program 2 (id=4360): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 4.017652998s ago: executing program 7 (id=4361): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000580)="ea08fb91", 0x4}], 0x1}}], 0x1, 0x400c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x0, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}}, 0x20004000) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 4.017181818s ago: executing program 2 (id=4362): close(0xffffffffffffffff) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2, 0x0, 0xd00}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.012553248s ago: executing program 3 (id=4363): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000100)={&(0x7f00000003c0)=""/224, 0xe0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) setregid(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xd, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_pidfd_open(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@allocspi={0x1dc, 0x16, 0x1, 0x0, 0x0, {{{@in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@sa={0xe4, 0x6, {{@in=@empty, @in6=@empty, 0x4e20, 0x25, 0x4e22, 0x2, 0xa, 0x20, 0x0, 0x11, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x4d4, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, {0x3ff, 0xffffffff, 0x60, 0x5, 0x3ff, 0x7ff, 0x2, 0xe6}, {0x7563, 0x1, 0x8}, {0x9, 0xf0, 0x89}, 0x70bd26, 0x3505, 0x2, 0x4, 0x3, 0x9a}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4005}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x11c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x3c, 0x6, "cb2d2fae7888d98564152106dfdc3921d42ec1772aa274f1d54d56c2275ff1db9d00a5515b28b5786ba487bc9c0a048040cc4efcda354416"}, @NFTA_TABLE_USERDATA={0xc9, 0x6, "b8e4b6a4173e123a6a3427b6c8a9c5406b49ae6a9ee98e96da26f3baf8d327874f8ac71075da999a088262b579b405b7d909711db192903a356cc37a85c00fe4da318b377e7b5a0ac84f2e648dc05d71ce9f68d41719781ff21a09b2288b1c9ac48426c06bc38cffe5d139e9a12728c6c552446a7097503bd0510ccf25c4813fbc9233e7436133d4c23eeb6144d27bc35b35d278d180a1d4169a611018caca37b482c917f1b592035f3ab548e3f75966a0f34d7836e8f28354bdc61ba6e4175bc2dabc8974"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x190}}, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$cont(0x9, r8, 0x7ff, 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000780)={0xfffffffd, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)}, {&(0x7f00000004c0)=""/149, 0x95}, {&(0x7f0000000180)=""/61, 0x3d}, {&(0x7f00000001c0)}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000600)=""/242, 0xf2}], &(0x7f0000000580)=[0x1, 0x8, 0x9, 0x0, 0x270572c4, 0x101, 0x3], 0x6}, 0x20) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r9, &(0x7f00000025c0)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 3.989935389s ago: executing program 2 (id=4364): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) (async) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800}, 0x38) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) brk(0x800000) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500090e00000000000000ffdbdf25050006de6a7150f723203bc300000000000a004e220000000920010000000000000000000000000000178000000000000002000100000004d5000104010000000005000500320000000a004e200000000100000000000000000000ffffac1414bbb22d000000000000"], 0x70}}, 0x0) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) (async) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") (async) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x200000, 0x100000001}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) memfd_create(&(0x7f00000004c0)='\x00', 0x4) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000180)='./file0\x00', r2}, 0x18) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x7) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) (async) recvfrom(r4, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x42, 0x4, 0x3d8, 0xffffffff, 0x268, 0x108, 0x268, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @remote, 0xff, 0xffffffff, 'veth1_to_bond\x00', 'geneve1\x00', {0xff}, {}, 0x73, 0x2}, 0x74000002, 0xe0, 0x108, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@ttl={{0x28}, {0x3, 0x2c}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'veth0_to_hsr\x00', {}, {}, 0x0, 0x2, 0x41}, 0x287, 0x100, 0x160, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast, [0xffffff00, 0xff000000, 0xffffff, 0xff], 0x4e22, 0x1, 0x5, 0x4e21, 0x10, 0xc}}, @common=@unspec=@limit={{0x48}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x2], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x7, 0x8e6edc646ec3eb3b, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x0, 0x4, 0x4]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r6, 0x0, 0x840) 3.849579733s ago: executing program 2 (id=4365): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x10, r0, 0xb7ed1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) mlockall(0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x4}]}, 0x98}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000001c0)={0x0, 'veth0_virt_wifi\x00', {0x4}, 0x4a}) 3.809127664s ago: executing program 6 (id=4366): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x10, r0, 0xb7ed1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) mlockall(0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmmsg$inet(r4, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000001c0)={0x0, 'veth0_virt_wifi\x00', {0x4}, 0x4a}) 2.915725723s ago: executing program 4 (id=4367): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0xc0239, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x20a3, 0x0, 0x0, 0x0, 0x89, 0x0, 0x43, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x24008001) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x120488f, &(0x7f0000001f80)=ANY=[], 0x81, 0x65b, &(0x7f00000007c0)="$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") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x6, 0x1000000e, 0x9, 0x10000189, 0xfffffffb, 0x7}) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x200200, 0x0) ioctl$RNDADDTOENTCNT(r5, 0x40045201, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setsockopt$packet_int(r6, 0x107, 0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0xfe8e, 0x12) socket(0x2, 0x80805, 0x0) 1.759717219s ago: executing program 3 (id=4368): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r2, 0x7) listen(r1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[], 0x18) 1.759463379s ago: executing program 7 (id=4369): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCG_STATS(r3, 0xc0109207, &(0x7f0000000180)) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) kexec_load(0x7, 0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x10000000, 0x200008000}], 0x3e0000) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000600), &(0x7f0000000640)=0x4) 800.297868ms ago: executing program 3 (id=4370): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f"], 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x84000800}, {0x1000000a, 0x4, 0x200}], 0x10, 0x4}, 0x94) close(0x3) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x309}]}, 0x34}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) unshare(0x20000400) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @mcast2}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r11, 0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffc, @loopback, 0x4}, 0x1c) 632.945205ms ago: executing program 2 (id=4371): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000040)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x98) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x97f5}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x80000}, {0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) 451.872922ms ago: executing program 6 (id=4372): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000016000100000000000000000afc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) 370.636625ms ago: executing program 6 (id=4373): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 369.979005ms ago: executing program 7 (id=4374): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000090000000500040007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000300)="a27c454c4d877dd5d2077cf7c905f683a302acc11d49f6f0f36b589bcff2be17d568f964b1323d519fa77aa99a69381c80822fb2cfef06ca6d1c60632e3e2f15385c3985094482dcd6f2b1e7fb16b338048606e8c83c58715babaaeda0051d70aa5b0a832d3cb8646ecd0d4b9984668f46baaf19b1e596b15926b8457a83d110980849e3083c2e798610b4b54eb38fe29691da1f2797c2954c9eed5d34b8b11158d6e3", 0x100, r1}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x9) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="680000eeea8468b4b28df037fa00", @ANYRES16=r3, @ANYBLOB="10002cbd7000fbdbdf250200000014000600fe8000000000000000000000000000190800040000000000080002000500000006000b001e0000000e0001002a2b5e2f2d265d352900000008000c0000000000080002000500000008000700ffffffff"], 0x68}, 0x1, 0x0, 0x0, 0x4000844}, 0x40005) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r7 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2092, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0xda) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r9}, &(0x7f0000000500), &(0x7f0000001b00)=r8}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], &(0x7f0000000340)=""/142, 0x4e, 0xfeaf, 0x1}, 0x20) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x0, r7, 0x2) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x400c044) 317.522827ms ago: executing program 6 (id=4375): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {0x0}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 125.715005ms ago: executing program 7 (id=4376): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f00000006c0)=@ethtool_flash={0x33, 0x9, './file1\x00'}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0xffa1, 0xd000000, 0xf60f}) 58.225138ms ago: executing program 4 (id=4377): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x10, r0, 0xb7ed1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) mlockall(0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmmsg$inet(r4, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x4}]}, 0x98}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000001c0)={0x0, 'veth0_virt_wifi\x00', {0x4}, 0x4a}) 0s ago: executing program 2 (id=4378): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe4a9657dad07a223, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_open_dev$usbfs(0x0, 0x77, 0x101301) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x40c, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x5, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xbc, 0x7ffc0002}, {0x0, 0x6, 0x6, 0x49c8}, {0x400, 0x25, 0xe, 0x5}, {0x5, 0x34, 0x42, 0x101}, {0xed, 0xe2, 0x6, 0x81}]}) unshare(0x22020600) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0, r2}, 0x18) lgetxattr(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000000)=@known='trusted.syz\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 503.459489][T22378] System zones: 0-2, 18-18, 34-34 [ 503.594805][T22378] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 503.736488][T22378] EXT4-fs (loop6): Remounting filesystem read-only [ 503.743142][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 503.743164][ C1] EXT4-fs (loop6): initial error at time 1774882931: ext4_mb_generate_buddy:1317 [ 503.743191][ C1] EXT4-fs (loop6): last error at time 1774882931: ext4_mb_generate_buddy:1317 [ 503.771692][T22378] EXT4-fs (loop6): 1 truncate cleaned up [ 503.785035][T22378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.798095][T22378] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.799172][T15413] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 503.847748][T22393] lo speed is unknown, defaulting to 1000 [ 503.858831][T15413] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 503.894011][T15413] Quota error (device loop6): write_blk: dquota write failed [ 503.925733][T15413] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 503.958730][T21435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.978405][T15413] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 504.018083][T15413] Quota error (device loop6): write_blk: dquota write failed [ 504.037247][T15413] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 504.052795][T15413] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 504.055166][T22398] lo speed is unknown, defaulting to 1000 [ 504.066427][T15413] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 504.078823][T15413] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 504.092306][T22403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3828'. [ 504.889919][T22442] xt_TCPMSS: Only works on TCP SYN packets [ 505.064853][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 505.064879][ T28] audit: type=1400 audit(1774882932.621:2712): avc: denied { shutdown } for pid=22447 comm="syz.4.3832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 505.092565][ T28] audit: type=1400 audit(1774882932.621:2713): avc: denied { ioctl } for pid=22447 comm="syz.4.3832" path="socket:[49228]" dev="sockfs" ino=49228 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 505.120501][T22449] macvtap1: entered promiscuous mode [ 505.126003][T22449] macvtap1: entered allmulticast mode [ 505.131836][T22449] veth1_vlan: entered allmulticast mode [ 505.197426][T22453] lo speed is unknown, defaulting to 1000 [ 505.671787][T22389] FAULT_INJECTION: forcing a failure. [ 505.671787][T22389] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 505.685859][T22389] CPU: 0 UID: 0 PID: 22389 Comm: syz.2.3825 Tainted: G W syzkaller #0 PREEMPT(full) [ 505.685897][T22389] Tainted: [W]=WARN [ 505.685906][T22389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.685920][T22389] Call Trace: [ 505.685928][T22389] [ 505.685938][T22389] __dump_stack+0x1d/0x30 [ 505.685988][T22389] dump_stack_lvl+0x95/0xd0 [ 505.686017][T22389] dump_stack+0x15/0x1b [ 505.686039][T22389] should_fail_ex+0x263/0x280 [ 505.686072][T22389] should_fail_alloc_page+0xf2/0x100 [ 505.686159][T22389] __alloc_frozen_pages_noprof+0x108/0x360 [ 505.686196][T22389] alloc_pages_mpol+0xb3/0x260 [ 505.686285][T22389] ? xas_load+0x413/0x430 [ 505.686307][T22389] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 505.686393][T22389] do_wp_page+0xf62/0x2590 [ 505.686429][T22389] ? __rcu_read_lock+0x36/0x50 [ 505.686450][T22389] handle_mm_fault+0x8cb/0x3020 [ 505.686511][T22389] ? mt_find+0x291/0x3d0 [ 505.686540][T22389] do_user_addr_fault+0x3fd/0x1050 [ 505.686644][T22389] ? _raw_spin_unlock+0x9/0x30 [ 505.686674][T22389] exc_page_fault+0x62/0xa0 [ 505.686754][T22389] asm_exc_page_fault+0x26/0x30 [ 505.686833][T22389] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 505.686862][T22389] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 19 02 00 66 2e 0f 1f [ 505.686884][T22389] RSP: 0018:ffffc90002d07b60 EFLAGS: 00050202 [ 505.686903][T22389] RAX: ffff888104886f00 RBX: 0000000000000004 RCX: 0000000000000004 [ 505.686919][T22389] RDX: 0000000000000000 RSI: ffffc90002d07bf8 RDI: 0000200000000040 [ 505.686982][T22389] RBP: 0000000000000000 R08: 0000000000000263 R09: 0000000000000000 [ 505.686994][T22389] R10: 0001c90002d07bf8 R11: 0001c90002d07bfb R12: 0000200000000044 [ 505.687007][T22389] R13: 00007ffffffff000 R14: 0000200000000040 R15: ffffc90002d07bf8 [ 505.687027][T22389] _copy_to_user+0x7c/0xa0 [ 505.687121][T22389] copy_to_sockptr+0x5e/0xa0 [ 505.687149][T22389] do_tcp_getsockopt+0x152e/0x1ba0 [ 505.687178][T22389] ? _parse_integer_limit+0x170/0x190 [ 505.687249][T22389] ? _parse_integer+0x27/0x40 [ 505.687310][T22389] ? __rcu_read_unlock+0x4e/0x70 [ 505.687339][T22389] ? avc_has_perm_noaudit+0xab/0x130 [ 505.687418][T22389] ? avc_has_perm+0x101/0x190 [ 505.687518][T22389] tcp_getsockopt+0x6e/0xe0 [ 505.687548][T22389] sock_common_getsockopt+0x60/0x70 [ 505.687653][T22389] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 505.687676][T22389] do_sock_getsockopt+0x1c4/0x210 [ 505.687705][T22389] __x64_sys_getsockopt+0x11d/0x1a0 [ 505.687743][T22389] x64_sys_call+0x2dcf/0x3020 [ 505.687774][T22389] do_syscall_64+0x12c/0x370 [ 505.687798][T22389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.687817][T22389] RIP: 0033:0x7f6312edc819 [ 505.687876][T22389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.687896][T22389] RSP: 002b:00007f631190e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 505.687963][T22389] RAX: ffffffffffffffda RBX: 00007f6313156090 RCX: 00007f6312edc819 [ 505.688041][T22389] RDX: 000000000000001c RSI: 0000000000000006 RDI: 0000000000000003 [ 505.688052][T22389] RBP: 00007f631190e090 R08: 0000200000000040 R09: 0000000000000000 [ 505.688065][T22389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.688076][T22389] R13: 00007f6313156128 R14: 00007f6313156090 R15: 00007ffd22215008 [ 505.688094][T22389] [ 506.085534][T22482] loop6: detected capacity change from 0 to 1024 [ 506.089208][ T28] audit: type=1400 audit(1774891125.651:2714): avc: denied { map } for pid=22481 comm="syz.6.3836" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 506.092725][T22482] EXT4-fs: test_dummy_encryption option not supported [ 506.428119][T22494] loop6: detected capacity change from 0 to 512 [ 506.434684][T22494] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 507.152945][T22505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3840'. [ 507.330343][T22512] lo speed is unknown, defaulting to 1000 [ 507.364143][T22516] vhci_hcd vhci_hcd.4: invalid port number 254 [ 507.370936][T22516] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 507.428729][T22518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3842'. [ 507.454058][T22522] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3845'. [ 507.498081][T22527] loop2: detected capacity change from 0 to 128 [ 507.544464][T22525] FAULT_INJECTION: forcing a failure. [ 507.544464][T22525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.583424][T22525] CPU: 1 UID: 0 PID: 22525 Comm: syz.6.3846 Tainted: G W syzkaller #0 PREEMPT(full) [ 507.583460][T22525] Tainted: [W]=WARN [ 507.583469][T22525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 507.583482][T22525] Call Trace: [ 507.583494][T22525] [ 507.583503][T22525] __dump_stack+0x1d/0x30 [ 507.583534][T22525] dump_stack_lvl+0x95/0xd0 [ 507.583609][T22525] dump_stack+0x15/0x1b [ 507.583632][T22525] should_fail_ex+0x263/0x280 [ 507.583661][T22525] should_fail+0xb/0x20 [ 507.583686][T22525] should_fail_usercopy+0x1a/0x20 [ 507.583732][T22525] _copy_from_user+0x1c/0xb0 [ 507.583764][T22525] __sys_sendto+0x1ca/0x490 [ 507.583850][T22525] __x64_sys_sendto+0x76/0x90 [ 507.583881][T22525] x64_sys_call+0x2d35/0x3020 [ 507.583908][T22525] do_syscall_64+0x12c/0x370 [ 507.584038][T22525] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 507.584068][T22525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.584092][T22525] RIP: 0033:0x7f953935c819 [ 507.584182][T22525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.584201][T22525] RSP: 002b:00007f9537daf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 507.584247][T22525] RAX: ffffffffffffffda RBX: 00007f95395d5fa0 RCX: 00007f953935c819 [ 507.584262][T22525] RDX: 0000000000000005 RSI: 0000200000000240 RDI: 0000000000000006 [ 507.584276][T22525] RBP: 00007f9537daf090 R08: 0000200000000200 R09: 0000000000000014 [ 507.584291][T22525] R10: 00000000100400c1 R11: 0000000000000246 R12: 0000000000000001 [ 507.584341][T22525] R13: 00007f95395d6038 R14: 00007f95395d5fa0 R15: 00007ffc58651bd8 [ 507.584428][T22525] [ 508.055122][ T28] audit: type=1400 audit(1774891127.621:2715): avc: denied { read } for pid=22549 comm="syz.2.3850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 508.119024][T22556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3852'. [ 508.128029][T22556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3852'. [ 508.159026][T22556] bond2: option updelay: invalid value (18446744073709518596) [ 508.167400][T22556] bond2: option updelay: allowed values 0 - 2147483647 [ 508.180311][T22556] bond2 (unregistering): Released all slaves [ 508.269145][ T28] audit: type=1400 audit(1774891127.831:2716): avc: denied { write } for pid=22552 comm="syz.7.3851" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 508.346125][T22570] loop7: detected capacity change from 0 to 512 [ 508.455398][T22570] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.473889][T22570] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.493689][ T28] audit: type=1400 audit(1774891128.061:2717): avc: denied { map } for pid=22568 comm="syz.7.3854" path="socket:[49364]" dev="sockfs" ino=49364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 508.700828][T22061] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.796432][T22594] loop3: detected capacity change from 0 to 128 [ 509.045351][ T28] audit: type=1400 audit(1774891128.121:2718): avc: denied { read } for pid=22568 comm="syz.7.3854" path="socket:[49364]" dev="sockfs" ino=49364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 509.069229][ T28] audit: type=1400 audit(1774891128.491:2719): avc: denied { execute } for pid=22593 comm="syz.3.3859" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=48778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 509.285221][T22610] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.3862'. [ 509.294601][T22610] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.3862'. [ 509.305513][T22610] vhci_hcd vhci_hcd.4: invalid port number 254 [ 509.312500][T22610] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 510.192824][T22640] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3868'. [ 510.206416][T22644] FAULT_INJECTION: forcing a failure. [ 510.206416][T22644] name failslab, interval 1, probability 0, space 0, times 0 [ 510.233193][T22639] loop2: detected capacity change from 0 to 512 [ 510.247888][T22644] CPU: 1 UID: 0 PID: 22644 Comm: syz.6.3869 Tainted: G W syzkaller #0 PREEMPT(full) [ 510.247985][T22644] Tainted: [W]=WARN [ 510.248056][T22644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.248070][T22644] Call Trace: [ 510.248079][T22644] [ 510.248088][T22644] __dump_stack+0x1d/0x30 [ 510.248119][T22644] dump_stack_lvl+0x95/0xd0 [ 510.248145][T22644] dump_stack+0x15/0x1b [ 510.248171][T22644] should_fail_ex+0x263/0x280 [ 510.248238][T22644] should_failslab+0x8c/0xb0 [ 510.248264][T22644] kmem_cache_alloc_noprof+0x66/0x400 [ 510.248348][T22644] ? do_getname+0x2e/0x1c0 [ 510.248457][T22644] do_getname+0x2e/0x1c0 [ 510.248484][T22644] getname_flags+0x1d/0x30 [ 510.248510][T22644] __se_sys_acct+0x7a/0x500 [ 510.248546][T22644] __x64_sys_acct+0x1f/0x30 [ 510.248572][T22644] x64_sys_call+0x2e7f/0x3020 [ 510.248607][T22644] do_syscall_64+0x12c/0x370 [ 510.248631][T22644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.248651][T22644] RIP: 0033:0x7f953935c819 [ 510.248667][T22644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.248749][T22644] RSP: 002b:00007f9537daf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 510.248842][T22644] RAX: ffffffffffffffda RBX: 00007f95395d5fa0 RCX: 00007f953935c819 [ 510.248855][T22644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 510.248944][T22644] RBP: 00007f9537daf090 R08: 0000000000000000 R09: 0000000000000000 [ 510.248955][T22644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.248973][T22644] R13: 00007f95395d6038 R14: 00007f95395d5fa0 R15: 00007ffc58651bd8 [ 510.248990][T22644] [ 510.430006][T22648] vhci_hcd vhci_hcd.4: invalid port number 254 [ 510.436217][T22648] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 510.444650][T22639] msdos: Unknown parameter '' [ 510.489447][ T28] audit: type=1400 audit(1774891130.041:2720): avc: denied { map } for pid=22650 comm="syz.7.3870" path="/dev/ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 510.887620][T22672] FAULT_INJECTION: forcing a failure. [ 510.887620][T22672] name failslab, interval 1, probability 0, space 0, times 0 [ 510.945144][T22672] CPU: 1 UID: 0 PID: 22672 Comm: syz.6.3876 Tainted: G W syzkaller #0 PREEMPT(full) [ 510.945201][T22672] Tainted: [W]=WARN [ 510.945209][T22672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.945222][T22672] Call Trace: [ 510.945232][T22672] [ 510.945241][T22672] __dump_stack+0x1d/0x30 [ 510.945271][T22672] dump_stack_lvl+0x95/0xd0 [ 510.945365][T22672] dump_stack+0x15/0x1b [ 510.945390][T22672] should_fail_ex+0x263/0x280 [ 510.945418][T22672] ? __pfx_sock_alloc_inode+0x10/0x10 [ 510.945475][T22672] should_failslab+0x8c/0xb0 [ 510.945496][T22672] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 510.945519][T22672] ? sock_alloc_inode+0x34/0xa0 [ 510.945544][T22672] ? __pfx_sock_alloc_inode+0x10/0x10 [ 510.945650][T22672] sock_alloc_inode+0x34/0xa0 [ 510.945675][T22672] alloc_inode+0x40/0x170 [ 510.945744][T22672] __sock_create+0x120/0x580 [ 510.945769][T22672] ? mutex_lock+0x57/0x90 [ 510.945935][T22672] ? mutex_unlock+0x4e/0x90 [ 510.945965][T22672] ? fput+0x8f/0xc0 [ 510.946053][T22672] __sys_socket+0xaf/0x180 [ 510.946145][T22672] __x64_sys_socket+0x3f/0x50 [ 510.946167][T22672] x64_sys_call+0x11fc/0x3020 [ 510.946191][T22672] do_syscall_64+0x12c/0x370 [ 510.946220][T22672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.946280][T22672] RIP: 0033:0x7f953935c819 [ 510.946299][T22672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.946317][T22672] RSP: 002b:00007f9537daf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 510.946405][T22672] RAX: ffffffffffffffda RBX: 00007f95395d5fa0 RCX: 00007f953935c819 [ 510.946418][T22672] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000022 [ 510.946430][T22672] RBP: 00007f9537daf090 R08: 0000000000000000 R09: 0000000000000000 [ 510.946442][T22672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.946456][T22672] R13: 00007f95395d6038 R14: 00007f95395d5fa0 R15: 00007ffc58651bd8 [ 510.946479][T22672] [ 511.150528][T22672] socket: no more sockets [ 511.549215][ T28] audit: type=1400 audit(1774891131.111:2721): avc: denied { name_bind } for pid=22697 comm="syz.2.3881" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 512.116034][T22738] loop6: detected capacity change from 0 to 128 [ 512.129218][T22738] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.3884'. [ 512.138562][T22738] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.3884'. [ 512.149682][T22738] vhci_hcd vhci_hcd.4: invalid port number 254 [ 512.155978][T22738] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 512.540648][T22744] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.724106][T22744] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.906285][T22742] loop7: detected capacity change from 0 to 128 [ 513.185495][T22761] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3891'. [ 513.257802][T22744] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.314678][T22744] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.413124][T15418] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.484452][T15418] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.507223][T15418] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.532830][T22790] tmpfs: Unknown parameter 'context6¿LòÃgñæ9¤†ª“1`w÷AšÙuújÍái#áôa•' [ 513.544875][T15418] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.767403][T22790] loop2: detected capacity change from 0 to 2048 [ 514.073883][T22815] vhci_hcd vhci_hcd.4: invalid port number 254 [ 514.989097][T22815] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 515.826464][T22830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3902'. [ 516.055353][T22840] loop7: detected capacity change from 0 to 128 [ 516.069969][T22840] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.3903'. [ 516.079549][T22840] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.3903'. [ 516.124201][T22841] vhci_hcd vhci_hcd.4: invalid port number 254 [ 516.130439][T22841] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 517.286180][T22853] hub 9-0:1.0: USB hub found [ 517.291050][T22853] hub 9-0:1.0: 8 ports detected [ 517.510293][T22863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.605757][T22863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.768473][ T28] audit: type=1326 audit(1774891137.331:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22880 comm="syz.4.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ad84c819 code=0x7ffc0000 [ 517.814585][ T28] audit: type=1326 audit(1774891137.331:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22880 comm="syz.4.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56ad84c819 code=0x7ffc0000 [ 517.840037][ T28] audit: type=1326 audit(1774891137.331:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22880 comm="syz.4.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ad84c819 code=0x7ffc0000 [ 517.865448][ T28] audit: type=1326 audit(1774891137.331:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22880 comm="syz.4.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56ad84c819 code=0x7ffc0000 [ 517.906704][ T28] audit: type=1326 audit(1774891137.331:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22880 comm="syz.4.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ad84c819 code=0x7ffc0000 [ 517.939048][ T28] audit: type=1326 audit(1774891137.331:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22880 comm="syz.4.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ad84c819 code=0x7ffc0000 [ 518.001208][ T28] audit: type=1326 audit(1774891137.331:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22880 comm="syz.4.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f56ad84c819 code=0x7ffc0000 [ 518.137846][ T28] audit: type=1326 audit(1774891137.331:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22880 comm="syz.4.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ad84c819 code=0x7ffc0000 [ 518.163296][ T28] audit: type=1326 audit(1774891137.331:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22880 comm="syz.4.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ad84c819 code=0x7ffc0000 [ 518.187367][ T28] audit: type=1326 audit(1774891137.331:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22880 comm="syz.4.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f56ad84c819 code=0x7ffc0000 [ 518.324752][T22916] loop6: detected capacity change from 0 to 128 [ 518.376430][T22916] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 518.399029][T22916] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 518.533217][T21435] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 518.623594][T22909] loop3: detected capacity change from 0 to 128 [ 518.656495][T22949] loop7: detected capacity change from 0 to 128 [ 518.670080][T22949] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.3919'. [ 518.679557][T22949] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.3919'. [ 518.724205][T22951] vhci_hcd vhci_hcd.4: invalid port number 254 [ 518.731077][T22951] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 518.774019][T22952] lo speed is unknown, defaulting to 1000 [ 520.030749][T22965] loop6: detected capacity change from 0 to 4096 [ 520.057892][T22965] EXT4-fs: Ignoring removed bh option [ 520.126141][T22965] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.299797][T21435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.384691][T22983] veth1_to_bond: entered allmulticast mode [ 520.410535][T22981] veth1_to_bond: left allmulticast mode [ 520.487048][T22998] loop3: detected capacity change from 0 to 512 [ 520.573105][T22998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.590378][T22998] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 520.604318][T22998] veth1_to_bond: entered allmulticast mode [ 520.643616][T22996] veth1_to_bond: left allmulticast mode [ 520.759313][T23016] lo speed is unknown, defaulting to 1000 [ 520.797822][T23024] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3933'. [ 520.816841][T17489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.888595][T23032] vhci_hcd vhci_hcd.4: invalid port number 254 [ 520.894963][T23032] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 521.022218][T23039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3935'. [ 521.832381][T23057] loop3: detected capacity change from 0 to 128 [ 522.548689][T23067] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3943'. [ 522.598909][T23067] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3943'. [ 522.719512][T23080] loop2: detected capacity change from 0 to 1024 [ 522.726557][T23080] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 522.736319][T23080] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 522.746153][T23080] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 522.758280][T23080] EXT4-fs error (device loop2): ext4_get_journal_inode:5888: inode #5: comm syz.2.3947: unexpected bad inode w/o EXT4_IGET_BAD [ 522.771709][T23080] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 522.771865][T23080] EXT4-fs (loop2): no journal found [ 522.780990][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 522.781022][ C0] EXT4-fs (loop2): initial error at time 1774891142: ext4_get_journal_inode:5888: inode 5 [ 522.781056][ C0] EXT4-fs (loop2): last error at time 1774891142: ext4_get_journal_inode:5888: inode 5 [ 522.880102][T23084] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3948'. [ 522.919998][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 522.920016][ T28] audit: type=1400 audit(1774891142.491:2740): avc: denied { ioctl } for pid=23083 comm="syz.7.3948" path="socket:[50401]" dev="sockfs" ino=50401 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 523.603449][T23108] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3953'. [ 525.379318][T23119] netlink: 'syz.2.3955': attribute type 2 has an invalid length. [ 525.553146][T23124] vhci_hcd vhci_hcd.4: invalid port number 254 [ 525.569340][T23124] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 525.733109][T23119] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3955'. [ 525.816525][T23135] loop7: detected capacity change from 0 to 128 [ 525.831811][T23135] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 525.853067][T23135] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 525.977997][T23149] loop3: detected capacity change from 0 to 1024 [ 525.993095][T23149] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.021816][T23149] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 526.022346][T22061] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 526.062451][ T28] audit: type=1400 audit(1774891145.631:2741): avc: denied { setopt } for pid=23158 comm="syz.7.3963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 526.131411][T23118] delete_channel: no stack [ 526.308248][T23169] loop2: detected capacity change from 0 to 4096 [ 526.351221][T23169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.577450][T23187] loop3: detected capacity change from 0 to 4096 [ 526.602694][ T28] audit: type=1400 audit(1774891146.171:2742): avc: denied { mount } for pid=23168 comm="syz.2.3964" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 526.692659][T23187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.716529][T23187] 9p: Bad value for 'rfdno' [ 526.798811][T17489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.877441][T23205] FAULT_INJECTION: forcing a failure. [ 526.877441][T23205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.928546][T16956] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.970876][T23205] CPU: 1 UID: 0 PID: 23205 Comm: syz.3.3968 Tainted: G W syzkaller #0 PREEMPT(full) [ 526.970912][T23205] Tainted: [W]=WARN [ 526.970990][T23205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 526.971001][T23205] Call Trace: [ 526.971008][T23205] [ 526.971016][T23205] __dump_stack+0x1d/0x30 [ 526.971046][T23205] dump_stack_lvl+0x95/0xd0 [ 526.971081][T23205] dump_stack+0x15/0x1b [ 526.971157][T23205] should_fail_ex+0x263/0x280 [ 526.971188][T23205] should_fail+0xb/0x20 [ 526.971214][T23205] should_fail_usercopy+0x1a/0x20 [ 526.971261][T23205] _copy_from_user+0x1c/0xb0 [ 526.971294][T23205] ___sys_sendmsg+0xc1/0x1e0 [ 526.971326][T23205] __x64_sys_sendmsg+0xd4/0x160 [ 526.971433][T23205] x64_sys_call+0x194c/0x3020 [ 526.971462][T23205] do_syscall_64+0x12c/0x370 [ 526.971490][T23205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.971559][T23205] RIP: 0033:0x7ff323e6c819 [ 526.971577][T23205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.971609][T23205] RSP: 002b:00007ff3228c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.971631][T23205] RAX: ffffffffffffffda RBX: 00007ff3240e5fa0 RCX: 00007ff323e6c819 [ 526.971646][T23205] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 526.971660][T23205] RBP: 00007ff3228c7090 R08: 0000000000000000 R09: 0000000000000000 [ 526.971673][T23205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.971746][T23205] R13: 00007ff3240e6038 R14: 00007ff3240e5fa0 R15: 00007ffdddcac128 [ 526.971767][T23205] [ 527.199030][T23217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3969'. [ 527.326264][T23218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57616 sclass=netlink_route_socket pid=23218 comm=syz.3.3971 [ 527.642961][T23235] program syz.2.3974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.331006][ T28] audit: type=1400 audit(1774893726.893:2743): avc: denied { mounton } for pid=23270 comm="syz.2.3981" path="/proc/600/task" dev="proc" ino=50569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 528.465214][T23279] loop7: detected capacity change from 0 to 512 [ 528.509148][T23283] Option ' ”Å3a×H„½oîSõ²ç¹aÎÑë­' to dns_resolver key: bad/missing value [ 528.788063][T23311] vhci_hcd vhci_hcd.4: invalid port number 254 [ 528.799405][T23311] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 528.947832][ T3406] IPVS: starting estimator thread 0... [ 529.038921][T23315] IPVS: using max 2640 ests per chain, 132000 per kthread [ 529.289026][T23342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3988'. [ 529.405067][T23351] loop2: detected capacity change from 0 to 4096 [ 529.446125][T23351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.464841][T23351] 9p: Bad value for 'rfdno' [ 529.485373][T16956] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.500791][T23361] loop6: detected capacity change from 0 to 1024 [ 529.544605][T23361] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.562967][ T28] audit: type=1400 audit(1774893728.133:2744): avc: denied { ioctl } for pid=23371 comm="syz.2.3992" path="socket:[50700]" dev="sockfs" ino=50700 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 529.617863][T23370] loop3: detected capacity change from 0 to 4096 [ 529.629560][T21435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.646156][T23370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.728717][T17489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.183555][T23388] loop3: detected capacity change from 0 to 4096 [ 530.697344][T23388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.870433][T17489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.907039][T23402] xt_hashlimit: size too large, truncated to 1048576 [ 532.161154][T23411] vhci_hcd vhci_hcd.4: invalid port number 254 [ 532.185259][T23411] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 532.735329][ T28] audit: type=1326 audit(1774893731.304:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23418 comm="syz.6.4004" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f953935c819 code=0x0 [ 532.758416][T23416] loop3: detected capacity change from 0 to 4096 [ 532.831647][T23429] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4004'. [ 532.940926][T23416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.037016][T17489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.129569][T23443] loop3: detected capacity change from 0 to 512 [ 533.166024][T23443] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 533.246103][T23443] EXT4-fs (loop3): 1 orphan inode deleted [ 533.262262][ T28] audit: type=1400 audit(1774893731.464:2746): avc: denied { lock } for pid=23418 comm="syz.6.4004" path="socket:[50791]" dev="sockfs" ino=50791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 533.286195][T23443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.300026][ T28] audit: type=1326 audit(1774893731.874:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23450 comm="syz.2.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6312edc819 code=0x7ffc0000 [ 533.324047][ T28] audit: type=1326 audit(1774893731.874:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23450 comm="syz.2.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6312edc819 code=0x7ffc0000 [ 533.348546][ T28] audit: type=1326 audit(1774893731.874:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23450 comm="syz.2.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6312edc819 code=0x7ffc0000 [ 533.349454][T23455] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4007'. [ 533.372147][ T28] audit: type=1326 audit(1774893731.874:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23450 comm="syz.2.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6312edc819 code=0x7ffc0000 [ 533.389015][T23443] netlink: 'syz.3.4005': attribute type 9 has an invalid length. [ 533.405744][ T28] audit: type=1326 audit(1774893731.874:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23450 comm="syz.2.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6312edc819 code=0x7ffc0000 [ 533.448078][ T28] audit: type=1326 audit(1774893732.014:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23450 comm="syz.2.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6312edc819 code=0x7ffc0000 [ 533.472696][ T28] audit: type=1326 audit(1774893732.014:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23450 comm="syz.2.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6312edc582 code=0x7ffc0000 [ 533.496539][ T28] audit: type=1326 audit(1774893732.014:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23450 comm="syz.2.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6312edc617 code=0x7ffc0000 [ 533.520887][ T28] audit: type=1326 audit(1774893732.014:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23450 comm="syz.2.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6312e99511 code=0x7ffc0000 [ 533.544725][ T28] audit: type=1326 audit(1774893732.014:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23450 comm="syz.2.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6312edd609 code=0x7ffc0000 [ 533.569406][ T28] audit: type=1326 audit(1774893732.014:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23450 comm="syz.2.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6312e9957b code=0x7ffc0000 [ 533.593857][ T28] audit: type=1326 audit(1774893732.014:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23450 comm="syz.2.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6312edc819 code=0x7ffc0000 [ 533.639627][T23463] loop6: detected capacity change from 0 to 512 [ 533.655680][T23463] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 533.680052][T23463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.713938][T17489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.723480][T23463] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 533.758405][T21435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.115725][T23507] 8021q: VLANs not supported on ipvlan0 [ 534.204097][T23513] loop2: detected capacity change from 0 to 1024 [ 534.238172][T23513] EXT4-fs: test_dummy_encryption option not supported [ 534.423587][T23523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4013'. [ 534.626262][T23525] loop2: detected capacity change from 0 to 512 [ 534.790440][T23524] loop6: detected capacity change from 0 to 128 [ 536.165141][T23515] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.4010'. [ 536.174334][T23515] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.4010'. [ 536.219361][T23524] vhci_hcd vhci_hcd.4: invalid port number 254 [ 536.225756][T23524] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 536.283483][T23533] loop2: detected capacity change from 0 to 1024 [ 536.342025][T23533] ext4: Unknown parameter 'uid' [ 536.408986][T23533] loop2: detected capacity change from 0 to 4096 [ 536.418288][T23533] EXT4-fs: Ignoring removed bh option [ 536.609511][T23533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.663379][T23543] program syz.6.4016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.763295][T23554] vhci_hcd vhci_hcd.4: invalid port number 254 [ 536.776715][T23554] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 538.595262][T16956] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.774703][ T28] kauditd_printk_skb: 136 callbacks suppressed [ 538.774722][ T28] audit: type=1326 audit(1774893737.345:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6312edc819 code=0x7ffc0000 [ 538.863747][ T28] audit: type=1326 audit(1774893737.375:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6312edc819 code=0x7ffc0000 [ 538.947675][ T28] audit: type=1326 audit(1774893737.375:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6312edc819 code=0x7ffc0000 [ 538.963124][T23570] loop6: detected capacity change from 0 to 128 [ 539.027074][ T28] audit: type=1326 audit(1774893737.375:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6312edc819 code=0x7ffc0000 [ 539.094495][T23583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4022'. [ 539.118137][ T28] audit: type=1326 audit(1774893737.375:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6312edc819 code=0x7ffc0000 [ 539.160656][T23599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4022'. [ 539.194300][ T28] audit: type=1326 audit(1774893737.385:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6312edc819 code=0x7ffc0000 [ 539.299612][ T28] audit: type=1326 audit(1774893737.385:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6312edc819 code=0x7ffc0000 [ 539.370806][ T28] audit: type=1326 audit(1774893737.385:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6312edc819 code=0x7ffc0000 [ 539.472738][ T28] audit: type=1326 audit(1774893737.395:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6312edc819 code=0x7ffc0000 [ 539.616982][ T28] audit: type=1326 audit(1774893737.395:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23582 comm="syz.2.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6312edc819 code=0x7ffc0000 [ 539.749771][T23615] loop6: detected capacity change from 0 to 128 [ 539.817656][T23616] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.4024'. [ 539.827127][T23616] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.4024'. [ 539.870743][T23619] vhci_hcd vhci_hcd.4: invalid port number 254 [ 539.877742][T23619] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 540.076312][T23620] loop7: detected capacity change from 0 to 1024 [ 540.471543][T23639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.509444][T23639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.525773][T23645] SELinux: policydb version 1301 does not match my version range 15-35 [ 540.534254][T23645] SELinux: failed to load policy [ 540.540357][T23639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.561673][T23639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.831864][T23663] nfs: Unknown parameter './file0/file0' [ 541.408661][T23709] vhci_hcd vhci_hcd.4: invalid port number 254 [ 541.426671][T23709] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 541.648349][T23700] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4036'. [ 542.070142][T23744] netlink: 'syz.3.4040': attribute type 29 has an invalid length. [ 542.071102][T23744] netlink: 'syz.3.4040': attribute type 29 has an invalid length. [ 542.126722][T23751] loop3: detected capacity change from 0 to 128 [ 542.127230][T23751] EXT4-fs: Ignoring removed i_version option [ 542.152397][T23754] loop7: detected capacity change from 0 to 512 [ 542.152773][T23751] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0003] [ 542.152886][T23751] System zones: 1-3, 19-19, 35-36 [ 542.153295][T23754] EXT4-fs: Ignoring removed oldalloc option [ 542.163552][T23754] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 542.164678][T23751] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 542.164886][T23751] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 542.166152][T23751] EXT4-fs warning (device loop3): verify_group_input:156: Last group not full [ 542.180321][T23754] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.4041: iget: bad i_size value: 38620345925642 [ 542.266594][T23754] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 542.269505][T23754] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.4041: couldn't read orphan inode 15 (err -117) [ 542.278693][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 542.278719][ C1] EXT4-fs (loop7): initial error at time 1774893996: ext4_orphan_get:1397: inode 15 [ 542.278751][ C1] EXT4-fs (loop7): last error at time 1774893996: ext4_orphan_get:1397: inode 15 [ 542.386918][T23754] loop7: lost filesystem error report for type 5 error -117 [ 542.395535][T23754] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.485440][T23769] netlink: 'syz.4.4044': attribute type 1 has an invalid length. [ 542.508995][T23771] loop2: detected capacity change from 0 to 512 [ 542.547359][T23771] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 542.590610][T23771] EXT4-fs (loop2): 1 orphan inode deleted [ 542.606394][T23771] EXT4-fs (loop2): 1 truncate cleaned up [ 542.624444][T23771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.667878][T23771] FAULT_INJECTION: forcing a failure. [ 542.667878][T23771] name failslab, interval 1, probability 0, space 0, times 0 [ 542.711644][T23771] CPU: 0 UID: 0 PID: 23771 Comm: syz.2.4045 Tainted: G W syzkaller #0 PREEMPT(full) [ 542.711681][T23771] Tainted: [W]=WARN [ 542.711745][T23771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 542.711758][T23771] Call Trace: [ 542.711766][T23771] [ 542.711774][T23771] __dump_stack+0x1d/0x30 [ 542.711876][T23771] dump_stack_lvl+0x95/0xd0 [ 542.711970][T23771] dump_stack+0x15/0x1b [ 542.711994][T23771] should_fail_ex+0x263/0x280 [ 542.712024][T23771] should_failslab+0x8c/0xb0 [ 542.712051][T23771] kmem_cache_alloc_noprof+0x66/0x400 [ 542.712076][T23771] ? ext4_mb_new_blocks+0x785/0x1f50 [ 542.712247][T23771] ext4_mb_new_blocks+0x785/0x1f50 [ 542.712361][T23771] ? find_get_block_common+0x672/0x8a0 [ 542.712397][T23771] ext4_new_meta_blocks+0x102/0x1f0 [ 542.712469][T23771] ext4_xattr_block_set+0x13ab/0x1a60 [ 542.712511][T23771] ext4_xattr_set_handle+0xb26/0xf80 [ 542.712566][T23771] ext4_xattr_set+0x18e/0x240 [ 542.712597][T23771] ext4_xattr_user_set+0x95/0xb0 [ 542.712618][T23771] ? __pfx_ext4_xattr_user_set+0x10/0x10 [ 542.712638][T23771] __vfs_setxattr+0x2e6/0x310 [ 542.712733][T23771] __vfs_setxattr_noperm+0xe8/0x410 [ 542.712760][T23771] __vfs_setxattr_locked+0x105/0x220 [ 542.712824][T23771] vfs_setxattr+0x12c/0x2a0 [ 542.712854][T23771] filename_setxattr+0x1c4/0x410 [ 542.712886][T23771] path_setxattrat+0x2be/0x310 [ 542.712980][T23771] __x64_sys_setxattr+0x6e/0x90 [ 542.713010][T23771] x64_sys_call+0x2ee2/0x3020 [ 542.713041][T23771] do_syscall_64+0x12c/0x370 [ 542.713152][T23771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.713237][T23771] RIP: 0033:0x7f6312edc819 [ 542.713253][T23771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.713272][T23771] RSP: 002b:00007f631192f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 542.713298][T23771] RAX: ffffffffffffffda RBX: 00007f6313155fa0 RCX: 00007f6312edc819 [ 542.713315][T23771] RDX: 0000200000000400 RSI: 00002000000001c0 RDI: 0000200000000080 [ 542.713341][T23771] RBP: 00007f631192f090 R08: 0000000000000001 R09: 0000000000000000 [ 542.713355][T23771] R10: 000000000000001d R11: 0000000000000246 R12: 0000000000000001 [ 542.713367][T23771] R13: 00007f6313156038 R14: 00007f6313155fa0 R15: 00007ffd22215008 [ 542.713385][T23771] [ 543.112414][T16956] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.126793][T17489] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 543.264731][T23809] loop3: detected capacity change from 0 to 512 [ 543.272020][T23809] EXT4-fs: Invalid want_extra_isize 1024 [ 543.378337][T15418] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:15: bg 0: block 5: invalid block bitmap [ 543.434321][T15418] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 543.466580][T15418] EXT4-fs (loop7): This should not happen!! Data will be lost [ 543.466580][T15418] [ 543.476246][T15418] EXT4-fs (loop7): Total free blocks count 0 [ 543.477313][T23823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4054'. [ 543.503820][T15418] EXT4-fs (loop7): Free/Dirty block details [ 543.511163][T15418] EXT4-fs (loop7): free_blocks=0 [ 543.526353][T15418] EXT4-fs (loop7): dirty_blocks=11264 [ 543.537022][T15418] EXT4-fs (loop7): Block reservation details [ 543.543031][T15418] EXT4-fs (loop7): i_reserved_data_blocks=11264 [ 543.579583][ T4948] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 543.602196][T22061] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 543.711649][T23819] loop6: detected capacity change from 0 to 1024 [ 544.096646][T23847] loop7: detected capacity change from 0 to 128 [ 544.110874][T23847] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.4052'. [ 544.120378][T23847] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.4052'. [ 544.165942][T23848] vhci_hcd vhci_hcd.4: invalid port number 254 [ 544.172269][T23848] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 544.427165][T23819] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 544.456382][T23819] System zones: 0-1, 3-36 [ 544.528500][T23819] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.4053: bad orphan inode 134217728 [ 544.557301][T23819] loop6: lost filesystem error report for type 5 error -117 [ 545.006016][T23865] loop3: detected capacity change from 0 to 8192 [ 545.118378][T18827] loop3: p1 < > p2 p4 < p5 > [ 545.123893][T18827] loop3: partition table partially beyond EOD, truncated [ 545.141275][T23819] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.232664][T18827] loop3: p1 start 134217728 is beyond EOD, truncated [ 545.325026][T18827] loop3: p2 size 591360 extends beyond EOD, truncated [ 545.374553][T18827] loop3: p5 size 591360 extends beyond EOD, truncated [ 545.392728][T23865] loop3: p1 < > p2 p4 < p5 > [ 545.397603][T23865] loop3: partition table partially beyond EOD, truncated [ 545.404832][T23865] loop3: p1 start 134217728 is beyond EOD, truncated [ 545.411633][T23865] loop3: p2 size 591360 extends beyond EOD, truncated [ 545.422951][T23865] loop3: p5 size 591360 extends beyond EOD, truncated [ 545.567047][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 545.567068][ T28] audit: type=1326 audit(1774894000.126:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23818 comm="syz.6.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953935c819 code=0x7ffc0000 [ 545.616613][ T28] audit: type=1326 audit(1774894000.126:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23818 comm="syz.6.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953935c819 code=0x7ffc0000 [ 545.679462][ T28] audit: type=1326 audit(1774894000.126:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23818 comm="syz.6.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953935c819 code=0x7ffc0000 [ 545.724128][ T28] audit: type=1326 audit(1774894000.126:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23818 comm="syz.6.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f953935c819 code=0x7ffc0000 [ 545.768372][ T28] audit: type=1326 audit(1774894000.186:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23818 comm="syz.6.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f953935c582 code=0x7ffc0000 [ 545.809966][ T28] audit: type=1326 audit(1774894000.186:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23818 comm="syz.6.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f953935c582 code=0x7ffc0000 [ 545.836767][ T28] audit: type=1326 audit(1774894000.186:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23818 comm="syz.6.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953935c819 code=0x7ffc0000 [ 545.911893][ T28] audit: type=1326 audit(1774894000.186:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23818 comm="syz.6.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f953935c582 code=0x7ffc0000 [ 545.974262][ T28] audit: type=1326 audit(1774894000.186:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23818 comm="syz.6.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f953935c617 code=0x7ffc0000 [ 545.999902][T21435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.015000][ T28] audit: type=1326 audit(1774894000.186:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23818 comm="syz.6.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9539319511 code=0x7ffc0000 [ 546.224736][T23902] loop3: detected capacity change from 0 to 512 [ 546.290640][T23902] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #11: block 10: comm syz.3.4061: lblock 0 mapped to illegal pblock 10 (length 1) [ 546.387691][T23902] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 546.389700][T23902] EXT4-fs (loop3): Remounting filesystem read-only [ 546.399074][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 546.399096][ C0] EXT4-fs (loop3): initial error at time 1774894000: ext4_map_blocks:786: inode 11: block 10 [ 546.399150][ C0] EXT4-fs (loop3): last error at time 1774894000: ext4_map_blocks:786: inode 11: block 10 [ 546.473232][T23915] loop7: detected capacity change from 0 to 2048 [ 546.473267][T23902] EXT4-fs warning (device loop3): ext4_evict_inode:268: couldn't mark inode dirty (err -30) [ 546.517402][T23902] EXT4-fs (loop3): 1 orphan inode deleted [ 546.531995][T23902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.557527][T18827] loop7: p3 < > p4 < > [ 546.565277][T18827] loop7: partition table partially beyond EOD, truncated [ 546.579624][T18827] loop7: p3 start 4284289 is beyond EOD, truncated [ 546.597262][T23915] loop7: p3 < > p4 < > [ 546.601596][T23915] loop7: partition table partially beyond EOD, truncated [ 546.609668][T23915] loop7: p3 start 4284289 is beyond EOD, truncated [ 547.993788][T23937] FAULT_INJECTION: forcing a failure. [ 547.993788][T23937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.206366][T23937] CPU: 0 UID: 0 PID: 23937 Comm: syz.2.4065 Tainted: G W syzkaller #0 PREEMPT(full) [ 548.206518][T23937] Tainted: [W]=WARN [ 548.206526][T23937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 548.206539][T23937] Call Trace: [ 548.206547][T23937] [ 548.206557][T23937] __dump_stack+0x1d/0x30 [ 548.206586][T23937] dump_stack_lvl+0x95/0xd0 [ 548.206634][T23937] dump_stack+0x15/0x1b [ 548.206654][T23937] should_fail_ex+0x263/0x280 [ 548.206701][T23937] should_fail+0xb/0x20 [ 548.206829][T23937] should_fail_usercopy+0x1a/0x20 [ 548.206862][T23937] _copy_from_user+0x1c/0xb0 [ 548.206955][T23937] ___sys_recvmsg+0xaa/0x3b0 [ 548.206985][T23937] do_recvmmsg+0x1ef/0x560 [ 548.207008][T23937] ? fput+0x8f/0xc0 [ 548.207032][T23937] __x64_sys_recvmmsg+0xe5/0x170 [ 548.207105][T23937] x64_sys_call+0x80f/0x3020 [ 548.207192][T23937] do_syscall_64+0x12c/0x370 [ 548.207217][T23937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.207238][T23937] RIP: 0033:0x7f6312edc819 [ 548.207281][T23937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.207338][T23937] RSP: 002b:00007f631192f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 548.207358][T23937] RAX: ffffffffffffffda RBX: 00007f6313155fa0 RCX: 00007f6312edc819 [ 548.207425][T23937] RDX: 0000000000000001 RSI: 0000200000001600 RDI: 0000000000000004 [ 548.207438][T23937] RBP: 00007f631192f090 R08: 0000000000000000 R09: 0000000000000000 [ 548.207451][T23937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.207474][T23937] R13: 00007f6313156038 R14: 00007f6313155fa0 R15: 00007ffd22215008 [ 548.207516][T23937] [ 548.517114][T17489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.564288][T23947] loop2: detected capacity change from 0 to 256 [ 548.571770][T23947] vfat: Deprecated parameter 'posix' [ 548.581131][T23947] FAT-fs: "posix" option is obsolete, not supported now [ 548.955968][T23973] loop3: detected capacity change from 0 to 128 [ 548.977693][T23973] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.4070'. [ 548.987064][T23973] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.4070'. [ 549.031227][T23974] vhci_hcd vhci_hcd.4: invalid port number 254 [ 549.038161][T23974] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 549.982859][T24001] loop6: detected capacity change from 0 to 128 [ 549.995068][T24001] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.4084'. [ 550.004410][T24001] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.4084'. [ 550.049726][T24002] vhci_hcd vhci_hcd.4: invalid port number 254 [ 550.056261][T24002] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 550.735892][T24017] loop3: detected capacity change from 0 to 128 [ 550.756909][T24017] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.4075'. [ 550.766162][T24017] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.4075'. [ 550.811722][T24019] vhci_hcd vhci_hcd.4: invalid port number 254 [ 550.818098][T24019] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 551.395017][T24031] loop3: detected capacity change from 0 to 512 [ 551.445410][T24031] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #11: block 10: comm syz.3.4079: lblock 0 mapped to illegal pblock 10 (length 1) [ 551.473178][T24031] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 551.473407][T24031] EXT4-fs (loop3): Remounting filesystem read-only [ 551.482851][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 551.482877][ C1] EXT4-fs (loop3): initial error at time 1774894006: ext4_map_blocks:786: inode 11: block 10 [ 551.482915][ C1] EXT4-fs (loop3): last error at time 1774894006: ext4_map_blocks:786: inode 11: block 10 [ 551.532832][T24031] EXT4-fs warning (device loop3): ext4_evict_inode:268: couldn't mark inode dirty (err -30) [ 551.554498][T24031] EXT4-fs (loop3): 1 orphan inode deleted [ 551.563129][T24031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.767297][T24055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4083'. [ 551.773640][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 551.773658][ T28] audit: type=1400 audit(1774894006.326:2988): avc: denied { mount } for pid=24054 comm="syz.6.4083" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 552.873422][T24055] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4083'. [ 553.377274][T24055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4083'. [ 553.413690][T24055] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4083'. [ 553.617699][ T318] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.628743][ T318] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.641462][ T318] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.690514][ T318] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.015918][T24093] loop6: detected capacity change from 0 to 128 [ 554.025471][T24093] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.4087'. [ 554.034820][T24093] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.4087'. [ 554.044969][T24093] vhci_hcd vhci_hcd.4: invalid port number 254 [ 554.051176][T24093] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 554.091170][T17489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.167551][T24097] FAULT_INJECTION: forcing a failure. [ 554.167551][T24097] name failslab, interval 1, probability 0, space 0, times 0 [ 554.171068][T24066] loop7: detected capacity change from 0 to 128 [ 554.198342][T24097] CPU: 1 UID: 0 PID: 24097 Comm: syz.3.4090 Tainted: G W syzkaller #0 PREEMPT(full) [ 554.198388][T24097] Tainted: [W]=WARN [ 554.198395][T24097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 554.198407][T24097] Call Trace: [ 554.198415][T24097] [ 554.198425][T24097] __dump_stack+0x1d/0x30 [ 554.198506][T24097] dump_stack_lvl+0x95/0xd0 [ 554.198534][T24097] dump_stack+0x15/0x1b [ 554.198560][T24097] should_fail_ex+0x263/0x280 [ 554.198588][T24097] ? __se_sys_mount+0xef/0x2e0 [ 554.198621][T24097] should_failslab+0x8c/0xb0 [ 554.198711][T24097] __kmalloc_cache_noprof+0x5f/0x410 [ 554.198736][T24097] ? memdup_user+0x99/0xd0 [ 554.198811][T24097] __se_sys_mount+0xef/0x2e0 [ 554.198837][T24097] ? fput+0x8f/0xc0 [ 554.198866][T24097] ? ksys_write+0x194/0x1a0 [ 554.198886][T24097] __x64_sys_mount+0x67/0x80 [ 554.198946][T24097] x64_sys_call+0x2d61/0x3020 [ 554.198983][T24097] do_syscall_64+0x12c/0x370 [ 554.199090][T24097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.199114][T24097] RIP: 0033:0x7ff323e6c819 [ 554.199195][T24097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.199227][T24097] RSP: 002b:00007ff3228c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 554.199255][T24097] RAX: ffffffffffffffda RBX: 00007ff3240e5fa0 RCX: 00007ff323e6c819 [ 554.199273][T24097] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 554.199314][T24097] RBP: 00007ff3228c7090 R08: 0000200000000840 R09: 0000000000000000 [ 554.199330][T24097] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000001 [ 554.199345][T24097] R13: 00007ff3240e6038 R14: 00007ff3240e5fa0 R15: 00007ffdddcac128 [ 554.199365][T24097] [ 554.441665][T24094] loop2: detected capacity change from 0 to 512 [ 554.647404][T24094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.650742][T24094] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 554.707663][T24119] loop3: detected capacity change from 0 to 128 [ 554.741660][T24119] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 554.741786][T24119] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 554.950601][T16956] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.631303][T17489] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 556.412303][T24174] loop3: detected capacity change from 0 to 512 [ 556.457730][T24181] loop7: detected capacity change from 0 to 1024 [ 556.464591][T24181] EXT4-fs: test_dummy_encryption option not supported [ 556.501861][T24174] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 556.579364][ T28] audit: type=1326 audit(1774894011.136:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24189 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 556.816922][ T28] audit: type=1326 audit(1774894011.136:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24189 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 556.873700][ T28] audit: type=1326 audit(1774894011.136:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24189 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 556.957303][ T28] audit: type=1326 audit(1774894011.136:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24189 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 556.981413][ T28] audit: type=1326 audit(1774894011.176:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24189 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 557.038815][ T28] audit: type=1326 audit(1774894011.176:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24189 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 557.104721][ T28] audit: type=1326 audit(1774894011.176:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24189 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 557.166307][ T28] audit: type=1326 audit(1774894011.186:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24189 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 557.195216][T24181] loop7: detected capacity change from 0 to 512 [ 557.208011][ T28] audit: type=1326 audit(1774894011.186:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24189 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 557.232553][ T28] audit: type=1326 audit(1774894011.196:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24189 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 557.257042][ T28] audit: type=1326 audit(1774894011.196:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24189 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 557.298183][T24181] random: crng reseeded on system resumption [ 557.385008][T24209] loop6: detected capacity change from 0 to 1024 [ 557.537507][T24209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.754491][T24209] EXT4-fs error (device loop6): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.6.4104: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 557.809537][T24241] netlink: 'syz.7.4110': attribute type 8 has an invalid length. [ 557.844273][T24209] EXT4-fs (loop6): Remounting filesystem read-only [ 558.107771][T21435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.280537][T24271] loop6: detected capacity change from 0 to 1024 [ 558.360005][T24279] __nla_validate_parse: 1 callbacks suppressed [ 558.360024][T24279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4115'. [ 558.437075][T24264] SELinux: failure in sel_netif_sid_slow(), invalid network interface (11) [ 558.762852][T24313] loop7: detected capacity change from 0 to 512 [ 558.769829][T24313] EXT4-fs: Ignoring removed bh option [ 558.792913][T24313] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 558.808536][T24313] EXT4-fs (loop7): 1 truncate cleaned up [ 558.814933][T24313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.843464][T24313] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4126'. [ 558.862176][T24324] syzkaller0: entered promiscuous mode [ 558.933089][T22061] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.950642][T24324] syzkaller0: entered allmulticast mode [ 559.440494][T24338] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4131'. [ 559.605317][T24343] loop3: detected capacity change from 0 to 128 [ 559.617173][T24343] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.4129'. [ 559.626493][T24343] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.4129'. [ 559.671482][T24344] vhci_hcd vhci_hcd.4: invalid port number 254 [ 559.677808][T24344] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 559.699830][T24338] hsr_slave_0: left promiscuous mode [ 559.786171][T24338] hsr_slave_1: left promiscuous mode [ 559.836915][T24346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48221 sclass=netlink_route_socket pid=24346 comm=syz.6.4132 [ 559.916735][T24349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4132'. [ 560.064968][T24346] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4132'. [ 560.465077][T24387] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4137'. [ 560.511328][T24389] vhci_hcd vhci_hcd.4: invalid port number 254 [ 560.540005][T24390] netlink: 277 bytes leftover after parsing attributes in process `syz.7.4140'. [ 560.552145][T24389] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 560.585816][T24390] hub 8-0:1.0: USB hub found [ 560.591677][T24390] hub 8-0:1.0: 8 ports detected [ 560.606254][T24390] netlink: 'syz.7.4140': attribute type 36 has an invalid length. [ 560.621374][T24390] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 560.631623][T24390] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 561.261046][T24408] loop2: detected capacity change from 0 to 1024 [ 561.316149][T24408] EXT4-fs: Ignoring removed i_version option [ 561.443124][T24408] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 561.556781][T24408] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.4143: Failed to acquire dquot type 0 [ 561.659813][T24408] loop2: lost filesystem error report for type 5 error -117 [ 561.662861][T24408] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, [ 561.670315][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 561.670339][ C1] EXT4-fs (loop2): initial error at time 1774894016: ext4_acquire_dquot:7026 [ 561.670365][ C1] EXT4-fs (loop2): last error at time 1774894016: ext4_acquire_dquot:7026 [ 561.703173][T24408] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 561.813469][T24408] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #13: comm syz.2.4143: corrupted inode contents [ 561.845724][T24416] loop7: detected capacity change from 0 to 512 [ 561.865610][T24418] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4145'. [ 561.894143][T24416] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.931755][T24408] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 561.934597][T24418] erspan0: entered promiscuous mode [ 561.950739][T24408] EXT4-fs error (device loop2): ext4_dirty_inode:6495: inode #13: comm syz.2.4143: mark_inode_dirty error [ 561.963240][T24408] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 561.963518][T24408] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #13: comm syz.2.4143: corrupted inode contents [ 561.967029][T24416] ext4 filesystem being mounted at /73/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.972830][T24408] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 561.987666][T24418] gretap0: entered promiscuous mode [ 561.995382][T24408] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.4143: mark_inode_dirty error [ 562.020848][T24408] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 562.021092][T24408] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #13: comm syz.2.4143: corrupted inode contents [ 562.044868][T24408] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 562.045145][T24408] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 562.063931][T24408] loop2: lost filesystem error report for type 5 error -117 [ 562.064137][T24408] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #13: comm syz.2.4143: corrupted inode contents [ 562.085091][T24408] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 562.085263][T24408] EXT4-fs error (device loop2): ext4_truncate:4602: inode #13: comm syz.2.4143: mark_inode_dirty error [ 562.112259][T24408] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 562.112489][T24408] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 562.147847][T22061] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.165109][T24408] loop2: lost filesystem error report for type 5 error -117 [ 562.165497][T24408] EXT4-fs (loop2): 1 truncate cleaned up [ 562.221800][T24408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.278468][T24408] __quota_error: 126 callbacks suppressed [ 562.278483][T24408] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 562.352003][T24408] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 562.362035][T24408] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.4143: Failed to acquire dquot type 0 [ 562.382507][ T28] audit: type=1326 audit(1774894016.946:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.6.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953935c819 code=0x7ffc0000 [ 562.463633][T16956] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.507125][ T28] audit: type=1326 audit(1774894016.976:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.6.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f953935c819 code=0x7ffc0000 [ 562.586521][ T28] audit: type=1326 audit(1774894016.976:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.6.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953935c819 code=0x7ffc0000 [ 562.637171][ T28] audit: type=1326 audit(1774894016.976:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.6.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f953935c819 code=0x7ffc0000 [ 562.709475][ T28] audit: type=1326 audit(1774894016.976:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.6.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953935c819 code=0x7ffc0000 [ 562.774886][ T28] audit: type=1326 audit(1774894016.976:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.6.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f953935c819 code=0x7ffc0000 [ 562.855726][ T28] audit: type=1326 audit(1774894016.976:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.6.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953935c819 code=0x7ffc0000 [ 562.908055][ T28] audit: type=1326 audit(1774894016.976:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.6.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f953935c819 code=0x7ffc0000 [ 563.062220][T24483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.087511][T24483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.414013][T24500] loop6: detected capacity change from 0 to 512 [ 563.442195][T24500] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.454849][T24500] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.465929][T24500] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.483812][T24500] xt_hashlimit: size too large, truncated to 1048576 [ 563.534801][T24515] –: renamed from veth0_to_batadv (while UP) [ 563.671882][T24513] __nla_validate_parse: 1 callbacks suppressed [ 563.671900][T24513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4159'. [ 563.721803][T24538] nfs4: Bad value for 'source' [ 564.023671][T24554] netlink: 'syz.7.4166': attribute type 1 has an invalid length. [ 564.051162][T24556] vhci_hcd vhci_hcd.4: invalid port number 254 [ 564.127307][T24556] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 564.813344][T24580] loop3: detected capacity change from 0 to 512 [ 564.861348][T24580] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 564.906947][T24580] EXT4-fs (loop3): orphan file too big: 4294967295 [ 564.933793][T24580] EXT4-fs (loop3): mount failed [ 565.101544][T24610] FAULT_INJECTION: forcing a failure. [ 565.101544][T24610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.124168][T24610] CPU: 0 UID: 0 PID: 24610 Comm: syz.7.4174 Tainted: G W syzkaller #0 PREEMPT(full) [ 565.124242][T24610] Tainted: [W]=WARN [ 565.124283][T24610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 565.124306][T24610] Call Trace: [ 565.124314][T24610] [ 565.124323][T24610] __dump_stack+0x1d/0x30 [ 565.124355][T24610] dump_stack_lvl+0x95/0xd0 [ 565.124431][T24610] dump_stack+0x15/0x1b [ 565.124457][T24610] should_fail_ex+0x263/0x280 [ 565.124515][T24610] should_fail+0xb/0x20 [ 565.124550][T24610] should_fail_usercopy+0x1a/0x20 [ 565.124583][T24610] _copy_to_user+0x20/0xa0 [ 565.124695][T24610] bpf_verifier_vlog+0x2c5/0x5a0 [ 565.124722][T24610] __btf_verifier_log+0x7f/0xb0 [ 565.124777][T24610] ? should_fail_ex+0xd9/0x280 [ 565.124811][T24610] btf_parse_hdr+0x293/0x3c0 [ 565.124835][T24610] btf_new_fd+0x25a/0x730 [ 565.124855][T24610] ? ns_capable+0x7c/0xb0 [ 565.124926][T24610] bpf_btf_load+0x112/0x130 [ 565.124949][T24610] __sys_bpf+0x3d8/0x7e0 [ 565.124979][T24610] __x64_sys_bpf+0x41/0x50 [ 565.124997][T24610] x64_sys_call+0x10cb/0x3020 [ 565.125052][T24610] do_syscall_64+0x12c/0x370 [ 565.125083][T24610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.125111][T24610] RIP: 0033:0x7f4af716c819 [ 565.125131][T24610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.125218][T24610] RSP: 002b:00007f4af5bc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 565.125242][T24610] RAX: ffffffffffffffda RBX: 00007f4af73e5fa0 RCX: 00007f4af716c819 [ 565.125257][T24610] RDX: 0000000000000028 RSI: 0000200000000800 RDI: 0000000000000012 [ 565.125270][T24610] RBP: 00007f4af5bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 565.125283][T24610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 565.125296][T24610] R13: 00007f4af73e6038 R14: 00007f4af73e5fa0 R15: 00007fff58fc9128 [ 565.125318][T24610] [ 565.328880][T24616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4173'. [ 565.538316][T24629] lo speed is unknown, defaulting to 1000 [ 565.595156][T24635] netlink: 'syz.3.4178': attribute type 10 has an invalid length. [ 565.670964][T24635] team0: Device wg1 is of different type [ 565.698204][T24637] loop7: detected capacity change from 0 to 128 [ 567.509908][T24634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61496 sclass=netlink_route_socket pid=24634 comm=syz.4.4179 [ 567.647264][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 567.647279][ T28] audit: type=1400 audit(1774894022.206:3152): avc: denied { ioctl } for pid=24628 comm="syz.4.4179" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 567.906981][T24664] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4185'. [ 568.016805][T24664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.210637][T24664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.267257][T24664] bond0 (unregistering): Released all slaves [ 568.442778][T24716] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.469293][T24720] loop6: detected capacity change from 0 to 128 [ 568.497212][T24720] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 568.529785][T24725] loop2: detected capacity change from 0 to 128 [ 568.616747][T24720] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 568.628280][T24720] FAULT_INJECTION: forcing a failure. [ 568.628280][T24720] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 568.643801][T24720] CPU: 1 UID: 0 PID: 24720 Comm: syz.6.4196 Tainted: G W syzkaller #0 PREEMPT(full) [ 568.643889][T24720] Tainted: [W]=WARN [ 568.643898][T24720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 568.643912][T24720] Call Trace: [ 568.643920][T24720] [ 568.644082][T24720] __dump_stack+0x1d/0x30 [ 568.644115][T24720] dump_stack_lvl+0x95/0xd0 [ 568.644197][T24720] dump_stack+0x15/0x1b [ 568.644223][T24720] should_fail_ex+0x263/0x280 [ 568.644255][T24720] should_fail_alloc_page+0xf2/0x100 [ 568.644325][T24720] __alloc_frozen_pages_noprof+0x108/0x360 [ 568.644361][T24720] alloc_pages_mpol+0xb3/0x260 [ 568.644412][T24720] alloc_pages_noprof+0x8f/0x140 [ 568.644452][T24720] pte_alloc_one+0x1c/0xc0 [ 568.644560][T24720] handle_mm_fault+0x15bc/0x3020 [ 568.644669][T24720] ? lock_mm_and_find_vma+0x8b/0x440 [ 568.644698][T24720] do_user_addr_fault+0x3fd/0x1050 [ 568.644735][T24720] exc_page_fault+0x62/0xa0 [ 568.644758][T24720] asm_exc_page_fault+0x26/0x30 [ 568.644812][T24720] RIP: 0010:fault_in_readable+0xad/0x170 [ 568.644843][T24720] Code: 01 cb 0f ae e8 4d 85 f6 40 0f 95 c5 4c 89 ff 4c 89 f6 e8 26 c9 d3 ff 4d 39 f7 0f 97 c0 40 84 c5 74 51 4c 8d 64 24 07 4c 89 f5 <44> 8a 6d 00 4c 89 e7 e8 17 6b f0 ff 44 88 6c 24 07 48 81 e5 00 f0 [ 568.644939][T24720] RSP: 0018:ffffc90002f63ac0 EFLAGS: 00050202 [ 568.644958][T24720] RAX: ffffffff81859a01 RBX: 0000000000000007 RCX: ffff888104198000 [ 568.644974][T24720] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000147 [ 568.644995][T24720] RBP: 0000200000000140 R08: 0001c90002f63dff R09: 0000000000000000 [ 568.645010][T24720] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90002f63ac7 [ 568.645024][T24720] R13: 0000000000000000 R14: 0000200000000140 R15: 0000200000000147 [ 568.645086][T24720] ? fault_in_readable+0x41/0x170 [ 568.645126][T24720] fault_in_iov_iter_readable+0x129/0x210 [ 568.645163][T24720] generic_perform_write+0x3ce/0x490 [ 568.645245][T24720] __generic_file_write_iter+0x9e/0x120 [ 568.645278][T24720] ? __pfx_generic_file_write_iter+0x10/0x10 [ 568.645373][T24720] generic_file_write_iter+0x8d/0x310 [ 568.645398][T24720] ? _parse_integer_limit+0x170/0x190 [ 568.645505][T24720] ? _parse_integer+0x27/0x40 [ 568.645531][T24720] ? kstrtoull+0x111/0x140 [ 568.645558][T24720] ? kstrtouint+0x76/0xc0 [ 568.645583][T24720] ? avc_policy_seqno+0x15/0x30 [ 568.645704][T24720] ? selinux_file_permission+0x1f2/0x690 [ 568.645737][T24720] ? __pfx_generic_file_write_iter+0x10/0x10 [ 568.645765][T24720] vfs_write+0x5a6/0x9f0 [ 568.645831][T24720] ksys_write+0xdc/0x1a0 [ 568.645854][T24720] __x64_sys_write+0x40/0x50 [ 568.645888][T24720] x64_sys_call+0x27e1/0x3020 [ 568.645917][T24720] do_syscall_64+0x12c/0x370 [ 568.645941][T24720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.645961][T24720] RIP: 0033:0x7f953935c819 [ 568.646045][T24720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.646066][T24720] RSP: 002b:00007f9537daf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 568.646090][T24720] RAX: ffffffffffffffda RBX: 00007f95395d5fa0 RCX: 00007f953935c819 [ 568.646131][T24720] RDX: 0000000000000007 RSI: 0000200000000140 RDI: 0000000000000004 [ 568.646147][T24720] RBP: 00007f9537daf090 R08: 0000000000000000 R09: 0000000000000000 [ 568.646161][T24720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.646175][T24720] R13: 00007f95395d6038 R14: 00007f95395d5fa0 R15: 00007ffc58651bd8 [ 568.646197][T24720] [ 569.036066][T24716] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.219943][T24716] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.347518][T24716] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.421485][ T318] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.046895][ T318] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.166624][ T318] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.210519][ T318] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.133040][T24801] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4207'. [ 571.252185][T24801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.314855][T24817] loop2: detected capacity change from 0 to 1024 [ 571.321721][T24817] EXT4-fs: Ignoring removed i_version option [ 571.360996][T24801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.369022][T24817] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 571.385082][T24815] loop3: detected capacity change from 0 to 512 [ 571.408190][T24801] bond0 (unregistering): Released all slaves [ 571.411525][T24817] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 571.446388][T24817] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 571.457150][T24815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.476621][T24815] ext4 filesystem being mounted at /203/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.477245][T24817] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.4211: Failed to acquire dquot type 0 [ 571.546549][T17489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.576746][T24817] loop2: lost filesystem error report for type 5 error -117 [ 571.586487][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 571.600504][ C1] EXT4-fs (loop2): initial error at time 1774894026: ext4_acquire_dquot:7026 [ 571.609341][ C1] EXT4-fs (loop2): last error at time 1774894026: ext4_acquire_dquot:7026 [ 571.636025][T24817] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 571.749452][T24817] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #13: comm syz.2.4211: corrupted inode contents [ 571.778268][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4217'. [ 571.790166][T24817] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 571.790318][T24817] EXT4-fs error (device loop2): ext4_dirty_inode:6495: inode #13: comm syz.2.4211: mark_inode_dirty error [ 571.856167][T24817] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 571.856841][T24817] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #13: comm syz.2.4211: corrupted inode contents [ 571.882907][T24817] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 571.883074][T24817] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.4211: mark_inode_dirty error [ 571.935902][T24845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4218'. [ 571.945048][T24845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4218'. [ 571.981151][T24817] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 572.037026][T24817] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #13: comm syz.2.4211: corrupted inode contents [ 572.087355][T24817] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 572.092514][T24817] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 572.120501][T24817] loop2: lost filesystem error report for type 5 error -117 [ 572.120705][T24817] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #13: comm syz.2.4211: corrupted inode contents [ 572.350773][T24817] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 572.352744][T24817] EXT4-fs error (device loop2): ext4_truncate:4602: inode #13: comm syz.2.4211: mark_inode_dirty error [ 572.704041][T24817] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 572.704468][T24817] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 572.842439][T24880] loop3: detected capacity change from 0 to 128 [ 572.880592][T24880] /dev/loop3: Can't open blockdev [ 572.899349][T24817] loop2: lost filesystem error report for type 5 error -117 [ 572.905463][T24817] EXT4-fs (loop2): 1 truncate cleaned up [ 572.985461][T24817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.037594][T24888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.080488][T24888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.098683][T24817] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 573.144222][T24817] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 573.189551][T24817] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.4211: Failed to acquire dquot type 0 [ 573.283961][T16956] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.879070][T24905] netlink: 277 bytes leftover after parsing attributes in process `syz.3.4228'. [ 573.930385][T24905] hub 8-0:1.0: USB hub found [ 573.935588][T24905] hub 8-0:1.0: 8 ports detected [ 573.961428][T24905] netlink: 'syz.3.4228': attribute type 36 has an invalid length. [ 574.059921][T24910] netlink: 596 bytes leftover after parsing attributes in process `syz.7.4230'. [ 574.258762][T24905] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 574.268765][T24905] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 575.019694][T24958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4236'. [ 575.415400][T24967] FAULT_INJECTION: forcing a failure. [ 575.415400][T24967] name failslab, interval 1, probability 0, space 0, times 0 [ 575.428670][T24967] CPU: 1 UID: 0 PID: 24967 Comm: syz.7.4239 Tainted: G W syzkaller #0 PREEMPT(full) [ 575.428730][T24967] Tainted: [W]=WARN [ 575.428739][T24967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 575.428752][T24967] Call Trace: [ 575.428759][T24967] [ 575.428768][T24967] __dump_stack+0x1d/0x30 [ 575.428836][T24967] dump_stack_lvl+0x95/0xd0 [ 575.428914][T24967] dump_stack+0x15/0x1b [ 575.428937][T24967] should_fail_ex+0x263/0x280 [ 575.428967][T24967] should_failslab+0x8c/0xb0 [ 575.429057][T24967] __kmalloc_node_noprof+0xc8/0x560 [ 575.429092][T24967] ? __vmalloc_node_range_noprof+0x428/0x12b0 [ 575.429123][T24967] __vmalloc_node_range_noprof+0x428/0x12b0 [ 575.429153][T24967] ? mod_memcg_lruvec_state+0x1a1/0x290 [ 575.429218][T24967] ? bpf_check+0xe6/0xcc30 [ 575.429296][T24967] vzalloc_noprof+0x82/0xb0 [ 575.429322][T24967] ? bpf_check+0xe6/0xcc30 [ 575.429353][T24967] bpf_check+0xe6/0xcc30 [ 575.429384][T24967] ? __memcg_kmem_charge_page+0xd0/0x170 [ 575.429475][T24967] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 575.429519][T24967] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 575.429620][T24967] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 575.429647][T24967] ? _find_next_zero_bit+0x64/0xa0 [ 575.429742][T24967] ? pcpu_block_update+0x24e/0x3b0 [ 575.429772][T24967] ? pcpu_block_refresh_hint+0x10b/0x170 [ 575.429802][T24967] ? _find_next_zero_bit+0x64/0xa0 [ 575.429826][T24967] ? pcpu_block_refresh_hint+0x157/0x170 [ 575.429925][T24967] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 575.429958][T24967] ? css_rstat_updated+0xbb/0x280 [ 575.429999][T24967] ? mod_memcg_state+0x182/0x270 [ 575.430023][T24967] ? __rcu_read_unlock+0x4e/0x70 [ 575.430082][T24967] ? avc_has_perm_noaudit+0xab/0x130 [ 575.430194][T24967] ? avc_has_perm+0x101/0x190 [ 575.430227][T24967] ? selinux_bpf_prog_load+0x197/0x1c0 [ 575.430341][T24967] ? security_bpf_prog_load+0x9e/0x140 [ 575.430407][T24967] bpf_prog_load+0xf76/0x1140 [ 575.430439][T24967] ? security_bpf+0x2b/0x90 [ 575.430464][T24967] __sys_bpf+0x505/0x7e0 [ 575.430493][T24967] __x64_sys_bpf+0x41/0x50 [ 575.430575][T24967] x64_sys_call+0x10cb/0x3020 [ 575.430603][T24967] do_syscall_64+0x12c/0x370 [ 575.430701][T24967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.430724][T24967] RIP: 0033:0x7f4af716c819 [ 575.430742][T24967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.430761][T24967] RSP: 002b:00007f4af5bc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 575.430783][T24967] RAX: ffffffffffffffda RBX: 00007f4af73e5fa0 RCX: 00007f4af716c819 [ 575.430802][T24967] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 575.430817][T24967] RBP: 00007f4af5bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 575.430832][T24967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 575.430845][T24967] R13: 00007f4af73e6038 R14: 00007f4af73e5fa0 R15: 00007fff58fc9128 [ 575.430866][T24967] [ 575.430876][T24967] syz.7.4239: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0 [ 575.752893][T24967] CPU: 1 UID: 0 PID: 24967 Comm: syz.7.4239 Tainted: G W syzkaller #0 PREEMPT(full) [ 575.753026][T24967] Tainted: [W]=WARN [ 575.753033][T24967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 575.753048][T24967] Call Trace: [ 575.753055][T24967] [ 575.753065][T24967] __dump_stack+0x1d/0x30 [ 575.753130][T24967] dump_stack_lvl+0x95/0xd0 [ 575.753175][T24967] dump_stack+0x15/0x1b [ 575.753201][T24967] warn_alloc+0x145/0x1c0 [ 575.753301][T24967] __vmalloc_node_range_noprof+0x7d9/0x12b0 [ 575.753337][T24967] ? mod_memcg_lruvec_state+0x1a1/0x290 [ 575.753368][T24967] ? bpf_check+0xe6/0xcc30 [ 575.753479][T24967] vzalloc_noprof+0x82/0xb0 [ 575.753509][T24967] ? bpf_check+0xe6/0xcc30 [ 575.753539][T24967] bpf_check+0xe6/0xcc30 [ 575.753584][T24967] ? __memcg_kmem_charge_page+0xd0/0x170 [ 575.753618][T24967] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 575.753654][T24967] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 575.753779][T24967] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 575.753803][T24967] ? _find_next_zero_bit+0x64/0xa0 [ 575.753826][T24967] ? pcpu_block_update+0x24e/0x3b0 [ 575.753879][T24967] ? pcpu_block_refresh_hint+0x10b/0x170 [ 575.753932][T24967] ? _find_next_zero_bit+0x64/0xa0 [ 575.753953][T24967] ? pcpu_block_refresh_hint+0x157/0x170 [ 575.753980][T24967] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 575.754012][T24967] ? css_rstat_updated+0xbb/0x280 [ 575.754106][T24967] ? mod_memcg_state+0x182/0x270 [ 575.754127][T24967] ? __rcu_read_unlock+0x4e/0x70 [ 575.754150][T24967] ? avc_has_perm_noaudit+0xab/0x130 [ 575.754186][T24967] ? avc_has_perm+0x101/0x190 [ 575.754296][T24967] ? selinux_bpf_prog_load+0x197/0x1c0 [ 575.754327][T24967] ? security_bpf_prog_load+0x9e/0x140 [ 575.754355][T24967] bpf_prog_load+0xf76/0x1140 [ 575.754398][T24967] ? security_bpf+0x2b/0x90 [ 575.754424][T24967] __sys_bpf+0x505/0x7e0 [ 575.754501][T24967] __x64_sys_bpf+0x41/0x50 [ 575.754519][T24967] x64_sys_call+0x10cb/0x3020 [ 575.754544][T24967] do_syscall_64+0x12c/0x370 [ 575.754577][T24967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.754645][T24967] RIP: 0033:0x7f4af716c819 [ 575.754666][T24967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.754683][T24967] RSP: 002b:00007f4af5bc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 575.754706][T24967] RAX: ffffffffffffffda RBX: 00007f4af73e5fa0 RCX: 00007f4af716c819 [ 575.754833][T24967] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 575.754850][T24967] RBP: 00007f4af5bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 575.754885][T24967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 575.754901][T24967] R13: 00007f4af73e6038 R14: 00007f4af73e5fa0 R15: 00007fff58fc9128 [ 575.754920][T24967] [ 575.754961][T24967] Mem-Info: [ 576.052427][T24967] active_anon:14678 inactive_anon:11399 isolated_anon:0 [ 576.052427][T24967] active_file:16087 inactive_file:7866 isolated_file:0 [ 576.052427][T24967] unevictable:661 dirty:392 writeback:0 [ 576.052427][T24967] slab_reclaimable:3908 slab_unreclaimable:23467 [ 576.052427][T24967] mapped:32690 shmem:3070 pagetables:4565 [ 576.052427][T24967] sec_pagetables:0 bounce:0 [ 576.052427][T24967] kernel_misc_reclaimable:0 [ 576.052427][T24967] free:1814774 free_pcp:4632 free_cma:0 [ 576.099008][T24967] Node 0 active_anon:58944kB inactive_anon:45596kB active_file:64348kB inactive_file:31464kB unevictable:2644kB isolated(anon):0kB isolated(file):0kB mapped:130876kB dirty:1568kB writeback:0kB shmem:12280kB kernel_stack:4528kB pagetables:18376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 576.253732][T24980] loop3: detected capacity change from 0 to 128 [ 576.301027][T24967] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 576.367284][T24980] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 576.441955][T24967] lowmem_reserve[]: 0 2879 7857 7857 [ 576.465172][T24988] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 576.494492][T24967] Node 0 DMA32 free:2944516kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948144kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 576.536349][T24988] FAT-fs (loop3): Filesystem has been set read-only [ 576.564971][T24988] syz.3.4241: attempt to access beyond end of device [ 576.564971][T24988] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 576.644326][T24967] lowmem_reserve[]: 0 0 4978 4978 [ 576.675076][T24967] Node 0 Normal free:4298256kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60408kB inactive_anon:45596kB active_file:64348kB inactive_file:31096kB unevictable:1636kB writepending:1572kB zspages:0kB present:5242880kB managed:5098240kB mlocked:1636kB bounce:0kB free_pcp:15748kB local_pcp:3720kB free_cma:0kB [ 576.785223][T24997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.804326][T24967] lowmem_reserve[]: 0 0 0 0 [ 576.814513][T24967] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 576.851558][T24997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.867255][T24967] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944516kB [ 576.911464][T24967] Node 0 Normal: 3012*4kB (UME) 4162*8kB (UME) 1629*16kB (UME) 1909*32kB (UME) 1278*64kB (UME) 796*128kB (UME) 443*256kB (UM) 290*512kB (UME) 197*1024kB (UME) 94*2048kB (UME) 812*4096kB (UM) = 4298256kB [ 576.982762][T24967] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 577.014023][T24967] 27363 total pagecache pages [ 577.031208][T24967] 0 pages in swap cache [ 577.045604][T24967] Free swap = 124996kB [ 577.060767][T24967] Total swap = 124996kB [ 577.075170][T24967] 2097051 pages RAM [ 577.087786][T24967] 0 pages HighMem/MovableOnly [ 577.106842][T24967] 81615 pages reserved [ 578.377321][ T28] audit: type=1326 audit(1774894032.916:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25021 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 578.401262][ T28] audit: type=1326 audit(1774894032.916:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25021 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 578.432945][ T28] audit: type=1326 audit(1774894032.916:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25021 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 578.452351][T25031] vhci_hcd vhci_hcd.4: invalid port number 254 [ 578.459398][ T28] audit: type=1326 audit(1774894032.916:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25021 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 578.486971][ T28] audit: type=1326 audit(1774894032.916:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25021 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 578.498261][T25026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4253'. [ 578.511226][ T28] audit: type=1326 audit(1774894032.916:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25021 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 578.511257][ T28] audit: type=1326 audit(1774894032.926:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25021 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 578.511282][ T28] audit: type=1326 audit(1774894032.926:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25021 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 578.511329][ T28] audit: type=1326 audit(1774894032.926:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25021 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 578.511366][ T28] audit: type=1326 audit(1774894032.996:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25021 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff323e6c819 code=0x7ffc0000 [ 578.565150][T25032] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.4252'. [ 578.565253][T25032] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.4252'. [ 578.576964][T25031] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 578.688935][T25034] vhci_hcd vhci_hcd.4: invalid port number 254 [ 578.695390][T25034] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 579.026401][T25057] loop7: detected capacity change from 0 to 512 [ 579.056139][T25057] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #11: block 10: comm syz.7.4259: lblock 0 mapped to illegal pblock 10 (length 1) [ 579.075174][T25044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4254'. [ 579.089031][T25057] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 579.089242][T25057] EXT4-fs (loop7): Remounting filesystem read-only [ 579.098428][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 579.098448][ C0] EXT4-fs (loop7): initial error at time 1774894033: ext4_map_blocks:786: inode 11: block 10 [ 579.098490][ C0] EXT4-fs (loop7): last error at time 1774894033: ext4_map_blocks:786: inode 11: block 10 [ 579.132949][T25057] EXT4-fs warning (device loop7): ext4_evict_inode:268: couldn't mark inode dirty (err -30) [ 579.145352][T25057] EXT4-fs (loop7): 1 orphan inode deleted [ 579.208210][T25057] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.225206][T25075] netlink: 'syz.4.4261': attribute type 4 has an invalid length. [ 579.305520][T25075] netlink: 'syz.4.4261': attribute type 4 has an invalid length. [ 579.332003][T25078] sch_fq: defrate 7 ignored. [ 579.370945][T25075] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 581.226765][T25087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4265'. [ 581.286951][T22061] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.400909][T25100] loop6: detected capacity change from 0 to 128 [ 581.407313][T25106] tipc: Resetting bearer [ 581.437936][T25106] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.445286][T25106] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.696241][T25128] loop7: detected capacity change from 0 to 128 [ 581.710098][T25128] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.4271'. [ 581.719422][T25128] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.4271'. [ 581.748144][T25128] vhci_hcd vhci_hcd.4: invalid port number 254 [ 581.754515][T25128] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 581.818757][T25106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.896231][T25106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.090973][ T4479] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.125346][ T4479] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.198484][T25130] syzkaller0: entered promiscuous mode [ 582.205145][T25130] syzkaller0: entered allmulticast mode [ 582.222066][ T137] bridge_slave_1: left allmulticast mode [ 582.231052][ T137] bridge_slave_1: left promiscuous mode [ 582.241907][ T137] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.252363][ T137] bridge_slave_0: left allmulticast mode [ 582.271509][ T137] bridge_slave_0: left promiscuous mode [ 582.277463][ T137] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.306081][ T137] bond1 (unregistering): (slave geneve2): Releasing active interface [ 582.376688][T25144] vhci_hcd vhci_hcd.4: invalid port number 254 [ 582.382975][T25144] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 582.519219][ T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.529735][ T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.539750][ T137] bond0 (unregistering): Released all slaves [ 582.547625][ T137] bond1 (unregistering): Released all slaves [ 582.556138][ T4479] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.566795][ T4479] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.579066][T25150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.588636][T25150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.672665][T25136] lo speed is unknown, defaulting to 1000 [ 582.672675][ T4479] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.704901][ T4479] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.714701][ T137] tipc: Left network mode [ 582.802727][ T4479] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.811820][ T4479] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.825254][ T137] hsr_slave_0: left promiscuous mode [ 582.837203][ T137] hsr_slave_1: left promiscuous mode [ 582.845065][ T137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.852622][ T137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.908878][ T137] team0 (unregistering): Port device team_slave_1 removed [ 582.920713][ T137] team0 (unregistering): Port device team_slave_0 removed [ 583.041336][T25159] random: crng reseeded on system resumption [ 583.054197][T25159] loop3: detected capacity change from 0 to 512 [ 583.072691][T25159] EXT4-fs: Ignoring removed oldalloc option [ 583.108744][T25159] EXT4-fs error (device loop3): ext4_iget_extra_inode:5040: inode #15: comm syz.3.4281: corrupted in-inode xattr: invalid ea_ino [ 583.154180][T25159] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 583.154510][T25159] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4281: couldn't read orphan inode 15 (err -117) [ 583.163892][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 583.163919][ C0] EXT4-fs (loop3): initial error at time 1774894037: ext4_iget_extra_inode:5040: inode 15 [ 583.163964][ C0] EXT4-fs (loop3): last error at time 1774894037: ext4_iget_extra_inode:5040: inode 15 [ 583.208694][T25163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4282'. [ 583.351360][T25159] loop3: lost filesystem error report for type 5 error -117 [ 583.352075][T25159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.410810][T25159] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4281: invalid indirect mapped block 234881024 (level 0) [ 583.452690][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 583.452707][ T28] audit: type=1400 audit(1774894038.016:3231): avc: denied { create } for pid=25158 comm="syz.3.4281" name="\" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 583.507413][T17489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.557245][T25187] veth0_vlan: entered allmulticast mode [ 583.575468][T25193] bond0: entered promiscuous mode [ 583.583394][T25193] bond_slave_0: entered promiscuous mode [ 583.589684][T25193] bond_slave_1: entered promiscuous mode [ 583.797529][T25192] bond0: left promiscuous mode [ 583.804495][T25192] bond_slave_0: left promiscuous mode [ 583.835307][T25192] bond_slave_1: left promiscuous mode [ 585.966945][T25232] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4293'. [ 586.238833][T25262] vhci_hcd vhci_hcd.4: invalid port number 254 [ 586.296157][T25264] loop2: detected capacity change from 0 to 7 [ 586.373586][T25262] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 586.816054][T25275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4300'. [ 586.905120][T25301] loop2: detected capacity change from 0 to 1024 [ 586.930350][T25301] EXT4-fs: test_dummy_encryption option not supported [ 587.310319][T25311] loop2: detected capacity change from 0 to 512 [ 587.346004][T25311] random: crng reseeded on system resumption [ 588.687136][T25312] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 589.000916][T25321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4309'. [ 589.299552][ T28] audit: type=1400 audit(1774894043.856:3232): avc: denied { lock } for pid=25354 comm="syz.2.4315" path="socket:[54743]" dev="sockfs" ino=54743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 589.462435][T25375] loop3: detected capacity change from 0 to 1024 [ 589.469780][T25375] EXT4-fs: inline encryption not supported [ 589.646972][T25375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 590.059866][T25384] loop7: detected capacity change from 0 to 128 [ 590.067502][T25375] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.106773][T25389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.118818][T25384] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.4321'. [ 590.128998][T25384] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.4321'. [ 590.188848][T25391] vhci_hcd vhci_hcd.4: invalid port number 254 [ 590.195074][T25391] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 590.487151][T25389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.564487][T17489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 590.704287][T25417] loop7: detected capacity change from 0 to 512 [ 590.729412][T25417] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #11: block 10: comm syz.7.4327: lblock 0 mapped to illegal pblock 10 (length 1) [ 590.789839][T25417] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 590.790074][T25417] EXT4-fs (loop7): Remounting filesystem read-only [ 590.799347][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 590.799365][ C1] EXT4-fs (loop7): initial error at time 1774894045: ext4_map_blocks:786: inode 11: block 10 [ 590.799413][ C1] EXT4-fs (loop7): last error at time 1774894045: ext4_map_blocks:786: inode 11: block 10 [ 590.835293][T25427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4330'. [ 590.856613][T25417] EXT4-fs warning (device loop7): ext4_evict_inode:268: couldn't mark inode dirty (err -30) [ 590.866956][T25417] EXT4-fs (loop7): 1 orphan inode deleted [ 590.894989][T25417] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.992638][T22061] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.009592][T15418] bridge_slave_1: left allmulticast mode [ 593.058245][T15418] bridge_slave_1: left promiscuous mode [ 593.123524][T15418] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.262275][T25452] loop7: detected capacity change from 0 to 2048 [ 593.389148][T25454] loop2: detected capacity change from 0 to 128 [ 593.398607][T25454] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.4336'. [ 593.407794][T25454] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.4336'. [ 593.453211][T25456] vhci_hcd vhci_hcd.4: invalid port number 254 [ 593.459705][T25456] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 593.665511][T25459] FAULT_INJECTION: forcing a failure. [ 593.665511][T25459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.727976][T15418] bridge_slave_0: left allmulticast mode [ 593.763867][T25452] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.785376][T15418] bridge_slave_0: left promiscuous mode [ 593.827244][T15418] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.847904][T25459] CPU: 0 UID: 0 PID: 25459 Comm: syz.4.4338 Tainted: G W syzkaller #0 PREEMPT(full) [ 593.847941][T25459] Tainted: [W]=WARN [ 593.847948][T25459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 593.847960][T25459] Call Trace: [ 593.848027][T25459] [ 593.848036][T25459] __dump_stack+0x1d/0x30 [ 593.848069][T25459] dump_stack_lvl+0x95/0xd0 [ 593.848096][T25459] dump_stack+0x15/0x1b [ 593.848118][T25459] should_fail_ex+0x263/0x280 [ 593.848214][T25459] should_fail+0xb/0x20 [ 593.848240][T25459] should_fail_usercopy+0x1a/0x20 [ 593.848290][T25459] _copy_to_iter+0x251/0xea0 [ 593.848382][T25459] ? __rcu_read_unlock+0x6b/0x70 [ 593.848405][T25459] ? dev_seq_stop+0xe/0x20 [ 593.848507][T25459] ? traverse+0x379/0x3a0 [ 593.848543][T25459] seq_read_iter+0x1d5/0x940 [ 593.848571][T25459] ? finish_task_switch+0x7d/0x280 [ 593.848637][T25459] seq_read+0x279/0x2c0 [ 593.848675][T25459] ? __pfx_seq_read+0x10/0x10 [ 593.848717][T25459] proc_reg_read+0x128/0x1c0 [ 593.848820][T25459] ? __pfx_proc_reg_read+0x10/0x10 [ 593.848857][T25459] vfs_read+0x1ab/0x7f0 [ 593.848874][T25459] ? __rcu_read_unlock+0x4e/0x70 [ 593.848893][T25459] ? __fget_files+0x184/0x1c0 [ 593.848923][T25459] __x64_sys_pread64+0xfd/0x150 [ 593.848954][T25459] x64_sys_call+0x27b5/0x3020 [ 593.848993][T25459] do_syscall_64+0x12c/0x370 [ 593.849090][T25459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.849115][T25459] RIP: 0033:0x7f56ad84c819 [ 593.849135][T25459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.849156][T25459] RSP: 002b:00007f56ac29f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 593.849179][T25459] RAX: ffffffffffffffda RBX: 00007f56adac5fa0 RCX: 00007f56ad84c819 [ 593.849236][T25459] RDX: 0000000000018fdb RSI: 000020000004b680 RDI: 0000000000000003 [ 593.849249][T25459] RBP: 00007f56ac29f090 R08: 0000000000000000 R09: 0000000000000000 [ 593.849261][T25459] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 593.849272][T25459] R13: 00007f56adac6038 R14: 00007f56adac5fa0 R15: 00007ffd10adacf8 [ 593.849291][T25459] [ 594.093899][T25467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.123441][T25467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.162071][ T28] audit: type=1400 audit(1774894048.706:3233): avc: denied { getopt } for pid=25455 comm="syz.6.4337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 594.193690][T25471] netlink: 564 bytes leftover after parsing attributes in process `syz.3.4340'. [ 594.203064][T25471] netlink: 564 bytes leftover after parsing attributes in process `syz.3.4340'. [ 594.329636][T15418] dvmrp0 (unregistering): left allmulticast mode [ 594.356423][T15418] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 594.369758][T25481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4335'. [ 594.378962][T15418] bridge0 (unregistering): left promiscuous mode [ 594.429196][T15418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.438179][T15418] bond_slave_0: left promiscuous mode [ 594.444458][T15418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.454351][T15418] bond_slave_1: left promiscuous mode [ 594.460180][T15418] bond0 (unregistering): Released all slaves [ 594.468890][T25478] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4343'. [ 594.482877][T25465] lo speed is unknown, defaulting to 1000 [ 594.578345][T15418] tipc: Disabling bearer [ 594.585372][T15418] tipc: Left network mode [ 594.595099][T15418] IPVS: stopping master sync thread 10459 ... [ 594.649504][T15418] hsr_slave_0: left promiscuous mode [ 594.680367][T15418] hsr_slave_1: left promiscuous mode [ 594.704115][T15418] veth1_vlan: left allmulticast mode [ 594.711187][T22061] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.820240][T15418] team0 (unregistering): Port device team_slave_1 removed [ 594.830794][T15418] team0 (unregistering): Port device team_slave_0 removed [ 594.843491][T25505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.878942][T25505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.040440][T25514] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4348'. [ 595.254222][T25535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4351'. [ 595.331340][T15418] IPVS: stop unused estimator thread 0... [ 595.367978][T25545] netlink: 'syz.4.4350': attribute type 11 has an invalid length. [ 595.404302][T25547] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4352'. [ 595.639771][T25563] loop3: detected capacity change from 0 to 128 [ 595.651275][T25563] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.4353'. [ 595.661876][T25563] vhci_hcd vhci_hcd.4: invalid port number 254 [ 595.668135][T25563] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 595.992638][T25568] xt_hashlimit: size too large, truncated to 1048576 [ 596.322579][T25576] loop2: detected capacity change from 0 to 128 [ 596.403358][T25582] vlan0: entered promiscuous mode [ 596.446522][T25582] team0: entered promiscuous mode [ 596.451612][T25582] team_slave_0: entered promiscuous mode [ 596.466968][T25582] team_slave_1: entered promiscuous mode [ 598.596515][T25622] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 599.774582][ T28] audit: type=1400 audit(1774894053.546:3234): avc: denied { listen } for pid=25624 comm="syz.3.4368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 599.827019][T25630] netlink: 'syz.3.4370': attribute type 4 has an invalid length. [ 599.967870][T25632] netlink: 'syz.3.4370': attribute type 4 has an invalid length. [ 600.162606][T25637] __nla_validate_parse: 4 callbacks suppressed [ 600.162626][T25637] netlink: 596 bytes leftover after parsing attributes in process `syz.6.4372'. [ 600.183027][T25626] kexec: Could not allocate control_code_buffer [ 600.473192][T25652] loop7: detected capacity change from 0 to 512 [ 600.485243][T25652] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 600.497583][T25652] EXT4-fs (loop7): 1 truncate cleaned up [ 600.503602][T25652] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.588080][T25635] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.595493][T25635] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.625506][T25659] loop2: detected capacity change from 0 to 512 [ 600.706425][T25659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.771636][T25635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.809615][T25635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.837369][T25659] ================================================================== [ 600.845578][T25659] BUG: KCSAN: data-race in atime_needs_update / inode_update_time [ 600.853425][T25659] [ 600.855759][T25659] write to 0xffff88811aa5d304 of 4 bytes by task 25662 on cpu 0: [ 600.863482][T25659] inode_update_time+0x2cc/0x360 [ 600.868447][T25659] file_update_time_flags+0x277/0x2e0 [ 600.873842][T25659] file_modified+0x3d/0x50 [ 600.878293][T25659] ext4_buffered_write_iter+0x1d0/0x3c0 [ 600.883955][T25659] ext4_file_write_iter+0x380/0xfa0 [ 600.889172][T25659] iter_file_splice_write+0x6c4/0xa80 [ 600.894585][T25659] direct_splice_actor+0x156/0x2a0 [ 600.899746][T25659] splice_direct_to_actor+0x311/0x670 [ 600.905146][T25659] do_splice_direct+0x119/0x1a0 [ 600.910009][T25659] do_sendfile+0x382/0x650 [ 600.914467][T25659] __x64_sys_sendfile64+0x105/0x150 [ 600.919701][T25659] x64_sys_call+0x2dc4/0x3020 [ 600.924404][T25659] do_syscall_64+0x12c/0x370 [ 600.929049][T25659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.934959][T25659] [ 600.937292][T25659] read to 0xffff88811aa5d304 of 4 bytes by task 25659 on cpu 1: [ 600.944933][T25659] atime_needs_update+0x2a8/0x3e0 [ 600.949996][T25659] touch_atime+0x4a/0x330 [ 600.954364][T25659] filemap_read+0x979/0xa10 [ 600.958992][T25659] generic_file_read_iter+0x79/0x330 [ 600.964297][T25659] ext4_file_read_iter+0x1cc/0x290 [ 600.969444][T25659] copy_splice_read+0x471/0x6c0 [ 600.974376][T25659] splice_direct_to_actor+0x28f/0x670 [ 600.979798][T25659] do_splice_direct+0x119/0x1a0 [ 600.984670][T25659] do_sendfile+0x382/0x650 [ 600.989207][T25659] __x64_sys_sendfile64+0x105/0x150 [ 600.994628][T25659] x64_sys_call+0x2dc4/0x3020 [ 600.999359][T25659] do_syscall_64+0x12c/0x370 [ 601.003982][T25659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.009906][T25659] [ 601.012239][T25659] value changed: 0x179fb3e7 -> 0x18384a67 [ 601.017965][T25659] [ 601.020311][T25659] Reported by Kernel Concurrency Sanitizer on: [ 601.026478][T25659] CPU: 1 UID: 0 PID: 25659 Comm: syz.2.4378 Tainted: G W syzkaller #0 PREEMPT(full) [ 601.037440][T25659] Tainted: [W]=WARN [ 601.041351][T25659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 601.051589][T25659] ================================================================== [ 601.090087][T25635] xfrm1: left allmulticast mode [ 601.104887][ T137] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.123857][ T137] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.141034][T22061] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.158107][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.200082][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.258451][T16956] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.