last executing test programs: 7m23.447683261s ago: executing program 0 (id=1016): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)={0x44, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_TIMEOUT={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x6c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0xc1e889b7fa5038b7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004004) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 7m22.977341608s ago: executing program 0 (id=1020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x5c, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x5c}}, 0x0) 7m22.844788035s ago: executing program 0 (id=1021): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0)) sendmsg$rds(r6, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x24, 0x0, "43cad7244bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x0) 7m22.153024042s ago: executing program 0 (id=1022): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) 7m19.757438718s ago: executing program 0 (id=1036): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x200, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x3134da121b5383f4, 0xffff}, {0xa, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r3 = gettid() tkill(r3, 0x12) io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r4, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0), 0x8}) 7m4.206779455s ago: executing program 32 (id=1036): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x200, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x3134da121b5383f4, 0xffff}, {0xa, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r3 = gettid() tkill(r3, 0x12) io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r4, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0), 0x8}) 6m34.291639488s ago: executing program 33 (id=1131): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x200, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x3134da121b5383f4, 0xffff}, {0xa, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r3 = gettid() tkill(r3, 0x12) io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r4, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0), 0x8}) 4m51.975175976s ago: executing program 34 (id=1867): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x400000000000d07, 0xc0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x480282, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendfile(r2, r2, 0x0, 0x40000f63c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001100010028bd7000dbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="570da8000103000014000300626f6e6430"], 0x34}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05022dbd7000fedbdf250100000000000000024100000010001375754e35f76a58afc4f85a"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8840) 4m40.753333101s ago: executing program 2 (id=1990): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m40.734791418s ago: executing program 2 (id=1991): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd5, 0x0, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000ff05001000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62f67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedf", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x300, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf2502000000080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a80016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4896) 4m40.646397582s ago: executing program 2 (id=1995): eventfd(0x80a4) 4m40.481875053s ago: executing program 2 (id=1997): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r0, 0x111, 0x1, 0x0, &(0x7f0000000080)) 4m40.455025748s ago: executing program 2 (id=1999): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) io_submit(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x1, 0x2}, {0x3c, 0x1, 0x9, 0x8016}, {0x1, 0x9, 0x7, 0x5}, {0x6, 0x9, 0x5, 0x5}]}) r3 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x14488200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, 0x3, 0x8, 0x402, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88b5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffffff7f}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x81}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004050}, 0x8080) writev(r3, &(0x7f00000001c0), 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m40.329391865s ago: executing program 2 (id=2000): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001133504d46c000000ffffffff000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x808a, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0x1, 0x267, &(0x7f0000000f00)="$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") open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) pipe(0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x60}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r3, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r8 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r8, 0x409, 0x3f) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}, {@ignoreqv}, {@version_9p2000}], [], 0x6b}}) 4m24.932908978s ago: executing program 35 (id=2000): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001133504d46c000000ffffffff000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x808a, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0x1, 0x267, &(0x7f0000000f00)="$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") open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) pipe(0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x60}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r3, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r8 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r8, 0x409, 0x3f) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}, {@ignoreqv}, {@version_9p2000}], [], 0x6b}}) 4m24.89076825s ago: executing program 7 (id=2123): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 4m24.602342129s ago: executing program 7 (id=2127): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x3) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x9232, 0x80, 0xfffffffe, 0x3e}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) set_mempolicy(0x1, &(0x7f0000000dc0)=0xffffffffffff0001, 0xffffffff) set_mempolicy(0x1, &(0x7f00000001c0)=0x5, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0xfd, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x106200, 0x10003, 0x20da, 0x9, 0x5, 0x20005, 0xf, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg$unix(r3, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000302, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183040, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x80a, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x101000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 4m23.65006903s ago: executing program 7 (id=2134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000060000000f0000000800000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002f8351195186c22d841fff4604d3c18832681ab15c3c33dfc640ba5b54ede7d4", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) io_setup(0x3, &(0x7f0000000180)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(r3, 0x2, &(0x7f0000001700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x400, r4, &(0x7f0000000080), 0x0, 0x4, 0x0, 0x2}]) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r2, &(0x7f00000003c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0xd4, 0x81}]}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) read$char_usb(r1, &(0x7f00000000c0)=""/156, 0x9c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@loopback, @in=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000200)=0xe8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m22.799456629s ago: executing program 7 (id=2145): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x12) setgroups(0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) semop(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1f4) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000300)='0', 0x1}], 0x1, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000006119040000000000950000000000000090"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x25, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 4m22.64022872s ago: executing program 7 (id=2146): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 4m22.352877989s ago: executing program 7 (id=2151): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa600000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x80100, 0x68}, 0x94) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, 0x0, 0x0) 4m22.334213566s ago: executing program 36 (id=2151): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa600000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x80100, 0x68}, 0x94) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, 0x0, 0x0) 4m10.621629503s ago: executing program 1 (id=2292): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace$poke(0x4, r0, 0x0, 0x10000) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x54}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 4m9.770404862s ago: executing program 1 (id=2300): openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2c7527fb78d0218, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000850000000f00000018010000646c6c2400000000010000007b1af8ff00000000ffb702000008000000b7030000000000008500000006000000950000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$eJzs3MtvG8UfAPDvrpP8+vwllPLoAwiUR8UjadICPXABgcQBJCQ4lGNI0qo0bVATJFpVEBAqR1SJO+KIxF/AiV4QcELiCgduqFKFemnhZLT2buMY202MnYX685HWmdkda+ab3bFndrIJYGCNZy9JxI6I+DkiRuvZtQXG6z9uXLsw+8e1C7NJVKuv/57Uyl2/dmG2KFq8b3ueOZhGpB8nsa9FvUvnzp+aWViYP5vnJ5dPvzO5dO78UydPz5yYPzF/Zvro0SOHp559ZvrpnsSZxXV97/uL+/e8/OalV2ePXXrr+6+SIv6mOHpkvNPBR6rVHldXrp0N6WSoxIawIZWIyE7XcK3/j0YlVk/eaLz0UamNA/qqmmtzeKUK3MaSKLsFQDmKL/ps/ltsmzf6KN/V5+sToCzuG/lWPzIUaV5muGl+20vjEXFs5c/Psy36cx8CAGCNb7Lxz5Otxn9p3N1Q7v9pfQ1lLCLuiIhdEXFnROyOiLsiamXviYh7N1h/8yLJ38c/6ZWuAlunbPz3XL62tXb8V4z+YqyS53bW4h9Ojp9cmD9UP7aSvWT5qQ51XH7xp0/bHWsc/2VbVn8xFszbcWXof2vfMzezPNNtvM2ufhixd6hV/MnNlYAkIvZExN4u6zj5+Jf72x27dfwd9GCdqfpFxGP1878STfEXks7rk5NbYmH+0GTDVdHkhx8vvtau/n8Ufw9k539by+v/ZvxjSeN67dLG67j4yydt5zTdXv8jyRu19Ei+772Z5eWzUxEjySv1Rjfun159b5EvymfxHzzQuv/vitXfxL6IyC7i+yLi/oh4IG/7gxHxUEQc6BD/dy88/Hb38fdXFv/chs7/amIkmve0TlROffv1mkrHNhJ/dv6P1FIH8z21z7+kc1zraVd3VzMAAAD896QRsSOSdOJmOk0nJup/w787tqULi0vLTxxffPfMXP0ZgbEYTos7XaMN90On8ml9kZ9uyh/O7xt/Vtlay0/MLi7MlR08DLjtbfp/5rdK2a0D+s7zWjC42vb/LZvbDmDz+f6HwaX/w+Bq0f+3ltEOYPO1+v7/ICIuP1pCY4BN1dT/LfvBADH/h8Gl/8PgWkf///X2+nfVQEQsbY1bPyTf30QlyqxdostEpP+KZkj0KVH2JxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBv/BUAAP//m5Hs/w==") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000001340)="ff", 0x1}, {&(0x7f0000000400)="04", 0xfe44}], 0x2, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") ioctl$int_out(r0, 0x5464, &(0x7f00000000c0)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) bind$rxrpc(r4, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000007c00), 0x80000, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r7, 0x330f, 0x29) socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0xc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}]}, &(0x7f00000002c0)=0x10) set_mempolicy(0x3, &(0x7f0000000180)=0xfffffffffffffffc, 0x5) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) 4m8.80563506s ago: executing program 1 (id=2311): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001040abd70004018e0a600000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40001) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 4m8.671330346s ago: executing program 1 (id=2313): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd700000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00'}) listen(0xffffffffffffffff, 0x1) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, 0x0, 0x0) 4m7.807295463s ago: executing program 1 (id=2319): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 4m4.553375894s ago: executing program 1 (id=2341): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x53}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f0000000300)}}, 0x10) r1 = socket$caif_seqpacket(0x25, 0x5, 0x4) recvmsg(r1, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0xb7, 0x0, 0x0, 0xfffffffa, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r5, 0x1d, 0x1, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@fallback=r4, r2, 0xe, 0x2004, 0x0, @value=r2, @void, @void, @void, r6}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000004000000000000000000000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000500), 0x10}, 0x94) 4m4.553099144s ago: executing program 37 (id=2341): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x53}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f0000000300)}}, 0x10) r1 = socket$caif_seqpacket(0x25, 0x5, 0x4) recvmsg(r1, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0xb7, 0x0, 0x0, 0xfffffffa, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r5, 0x1d, 0x1, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@fallback=r4, r2, 0xe, 0x2004, 0x0, @value=r2, @void, @void, @void, r6}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000004000000000000000000000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000500), 0x10}, 0x94) 3m59.739558788s ago: executing program 0 (id=2342): socket$inet6(0xa, 0x2, 0x0) close(0x3) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) memfd_create(0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x16bb17640a85c205, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 3m44.407740742s ago: executing program 38 (id=2342): socket$inet6(0xa, 0x2, 0x0) close(0x3) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) memfd_create(0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x16bb17640a85c205, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1m31.358774215s ago: executing program 4 (id=3556): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000500)) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1a, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}, 0x109805, 0x1, 0x7fc, 0x7, 0x2bb2, 0xfffffffe, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x11, 0x0) 1m31.16302369s ago: executing program 4 (id=3558): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 1m31.152975008s ago: executing program 4 (id=3559): r0 = socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x11, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x6) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = memfd_create(&(0x7f00000000c0)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="11", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(0x0, 0x0, 0x9) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0x0, 0xee00, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000004, @private0, 0x7}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 1m30.187865607s ago: executing program 4 (id=3565): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = gettid() fstat(0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000004852899ff99bb7000001000000010000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001000000000000000010000000100000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="fca81e36b6bb441c614d6bb1b1ab25362791a36ef6ed764f3094b9a9f925dd1d8ddd0ac925368cd0b8aba2da2dba94b9081f66f533ced3b335a7be51da0acc5fb9528fc4ed5853f06f2379a18f6c7ceef671e3d6b6196012085d48fe19603620677bfada891a54cd8e4ae3b0a3977880563bbac2e61fc38b6aafbc20be6474", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="000000d500"/20, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r3, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x118, 0x20000080}, 0x80) r4 = getgid() mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200000, &(0x7f00000001c0)=ANY=[@ANYBLOB="4966a673ad543e5d0a7fd80fa078687d723f9da1c126ecfed9adebf4a5eeeb20badd24f0e4989955729506c95222", @ANYRESHEX=r4, @ANYBLOB=',fsmagic=0x0000000000000002,seclabel']) setgroups(0x6, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0x0, 0x0, r2, r4]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000000)=""/49) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() setrlimit(0xd, &(0x7f0000000040)={0x1, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x28, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x400000) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) 1m27.569154391s ago: executing program 4 (id=3587): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000"], 0x48) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed6, 0x5}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000140)={0x0, 0xb, 0x303, 0xfffe, 0x0, 0x10003, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x5, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0x1000, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={0x0, &(0x7f0000001300)=""/181, 0x0, 0xb5, 0x1}, 0x28) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x5, 0x90100) ioctl$RTC_AIE_OFF(r2, 0x7002) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) set_tid_address(0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x4, 0xcbf, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x8, 0x0, 0xd65}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fbdbdf25050000000400017ce568af72e576f29f09000000000000000233147e53a34d42d2e07f"], 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000001f00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c00000012000126000000000700074e23000000000000000000194b1cec000000000001000000fdffffff00000100"/56, @ANYRES32=0x0, @ANYBLOB="00000000ff7f00000700000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000193}, 0x40000) 1m23.161094457s ago: executing program 4 (id=3605): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000003c0)={[0x1]}, 0x8) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_open_pts(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f00)=r2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0004000000020000b702000000000100850000008600000095000000000000001836000004000000005300000000355e31bf75bf73b316fe51d2b8e30aaa70d68ee8ffe7126da00c1849f2b5ee76"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0xb8, &(0x7f0000000740)=""/184, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001040)=[0xffffffffffffffff, 0x1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001080)=[{0x5, 0x5, 0xc, 0x1}, {0x2, 0x3, 0xe, 0x1}, {0x4, 0x5, 0xc, 0x7}], 0x10, 0x725}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48) 1m22.690137703s ago: executing program 39 (id=3605): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000003c0)={[0x1]}, 0x8) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_open_pts(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f00)=r2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0004000000020000b702000000000100850000008600000095000000000000001836000004000000005300000000355e31bf75bf73b316fe51d2b8e30aaa70d68ee8ffe7126da00c1849f2b5ee76"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0xb8, &(0x7f0000000740)=""/184, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001040)=[0xffffffffffffffff, 0x1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001080)=[{0x5, 0x5, 0xc, 0x1}, {0x2, 0x3, 0xe, 0x1}, {0x4, 0x5, 0xc, 0x7}], 0x10, 0x725}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48) 5.863383733s ago: executing program 8 (id=4137): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x10000}, 0xc) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000000840)=[{{&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7f, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000540)="efd8ad270107e148bfb113d80a4fc1141b074bf5b2f21902fbb3635846598fe40b8c0938a892503acefa4150fdb4dae8f61a56c9ab296b6d96755a97b36d6c772b43fd1e3602a888b805b89bc2efa011ab03a6c63087e89612d694b225852dc5cbe5376224aca6", 0x67}, {&(0x7f0000000640)="e887a0fe560758e429ac41abfe744851361871149cac94c0fbc6a019d9425eb366b26859dfce2c6055fb428edc933b8eb9168ff75e64e945cc2a299948b36161f5b3c38bc7713b42d3d11ddc4477b2427d0bdec6b515", 0x56}], 0x2}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="78e75e968dd327a95d3ae20bbe623973b39485417cf95de082644da4970a557d351f7e98afa9385d512040605911be4e61cfa0c3276f47208a150529679ba72322", 0x41}], 0x2, &(0x7f0000001400)=[{0xe8, 0x108, 0x4, "b6eaa2eef9577529139bd2edaa36672f20078e88b4c4998be83a373eb02b280d7dc66b373ff455591594d36d6a575d881b422e7e50f7f889d069234d5b93c03f9c0dec7f24e88acfce68dfedcbfc09c92e327f1aa01c8474a712d31d11016cb8a78dd7818ebb55cca875994379d52536ab3a3ec59e9fa736d237c133359a5fc5efcd894c692e2833d3bad01bb869693f72de7ec1db364412cea2b6cf7018522eb6332208e6d7e7df5bb65a127c882b8997cad7f34345749660c6ac06f688d1f5b32389c91e7707a26fd33d1d35a8abd83c7bd266fb38aad5"}, {0xd8, 0x88, 0x4f, "d99528a7079c4796ed6b89f25971afc2c55487b237b95bcce8d74743e01fd5651879513260045169bb0972f9d5c64ba2d110d91f81b9a02061559ed33ec9388e46a3eebd19dba145811613bbe3a79c8c62c33287d8d04b24a8042beec529ef13af51a3ead933064c7698bb0ab1887b45c929ce652530f21a02a3b363ac0e0cc786c3aff075f9340c6a01bb1ea1b40eeb17b190aea6ba0b2e2d3cee4bea155597be12c5171cbc3b925e7cbcc9d5d17a29bd1d612923e8d8a5247ab653ffdc6bc23b011c41"}, {0x1010, 0x29, 0x36cd, "f0786d1226f78f20e32bf96228269dc63dc4627aa47dbb920c30e78a31203ee5dd4a48488e88517372019ef89e6ce81f653be0a4f75e0560178336193add8532c3193634e16d9eca5ca8faf6cc6d965d5e45075986375c338bf585580634fba64c78dbbe3e33747a6bac6d885bd1e44d0937ff031dedc4f960f35074e9b726f64d261a6afce2a5da27d20944763d4f89337aa762e5504d109fd311e8c45d861cfd928dfab6fd35227072f55476749c3f53e101f81e9d5069d3d46a3b97c18c204e982bac38e437930e38e50dec4ee06d0ba5427a2876868ac4098d1993a68eb69b95803f0a97251fbc59d7c1519e1248ec309202d5a3a22e44e5867ff70cdfbf75c3549f0179c3f6f04d6be206ee406c2699ee07569fcdb5568f653827c7c545fd0ffc23adda171b57fcfd70d79a4f6619b005196446f2bbb2e5e01db97aa22d3234dd96746777578eceb7582120b56d121fcf90475ef6ca53f472d2ea10b30bf3bf0bb3607cbf2d283f180e2225ab0249bc4b19dc74dc1f52a8273fef570a8f23e3630ce6d836aa1f48dc0938c24c4f9e54c36201ea4d2fcd8144b8073b91d63b6a33032fce27945480f2e74ddcd7d74f5d97de637206a81c463841f64884755ed59ba11880f3ef3c119ea2c9dd657ade6874cdf2b9fb4b4ef2e081994e1112f4e3758e9ed07ab2788a337c2d43f832a175c9868c802fe12a6ee252061bc8e1ae1260841dd8465691f1f393477ecf8eafebbd88ab6c7b7f1592017acd1da0d01bcd53fa3583dbbb0041a4bbcfe5d98a5c19cc37b60c56d4e52dce789a95b8b1903c98ddbf88c1a80eb2c24be0f57bbe6ffd184558fd9f1d35995216dd3979a5e67f32f687d67ed9f54d579af888d6f0cf5539b0301c0ecc5d10ca4a2f600a884d9105d9a22de74f21f1a0c6abd87670ca04885a6bec384d2e556116e7bef51068d489a5cf9fb4aad7c77811269e98f01c42c4b93a8b01b38ad9d8f91b4982244f2b1cd612d8ec715489cf9412db968eac5ed9b98fdc7954e28d858759efd4b2a1f8d270af9893231e583757bee8d7448c9c455bdeebe11a858a72f7dab35ff5c52e6f7f84c1a3a0531fc259c7a35a1cc3af0a7e216e41192afb2c8a55d39f1d27da98f56de3ff89b8fa9fedc8ad8bab765e477b71bc0da0c58d5b38615d9c7520dd58d7cfdb2b122dbcef2016addda5e1223f6e8161b6058e9531b958bfb4f182c39d19be1cf48f6ba17b59041ea6a03fd5878995548cd5685b857e61bdcdd300cb79e78a473766c95b81a1e47fc7233952ab692094e89a35010e5a404d05a9a4a79afcc2e343c71be5ae83369c2b082f3864d003c669089f4a9a6222d9a98cb028f62535fab82af3a2e7fa1ec64ccce09b45f84beff83e197bc9bfeb1c6aba72106bc091c687999cbf97bd4aa63f7207655bd35bfdc760a562113f9350bf13afbf9f752a0680359a7872c0d4b18baf535c0dd2f18a6ac0e78c60b9a14c19b8f15e5122ff155d7e2bc89ef568ba4e7d869ba78aae692e4e7c997c383bdac07f8febece54ceb6e862bf80a887b59903eeae964e458ffbd5580100ef63bdf8e8bb741a75c46c8b847f681297937274e64dc3f4c4885399c0a216c1b4877a4efc16d92d0bc0c71108d170c1754643b482aedcd032ff4e11b1c9498d31c369c305760d2306af2e13df74cf74dee4fbc0c75a7bcedf3fa610179616efc8cbcb0421288622eeca7829f5f55f6e493ebf9ca79e1ead8274144c7163abded175b294f995de675e725323e1930ba427497628c35befa6bd6acca14b5effed57e7b40b6a746910a2a730fa89e281d7337dd2c41dc567479d9002bba0a0e72718d0957d5dbda6f331fabdefcbe4ab620739438dac517cb18e1ff7869400cb050f8e53c6cef76580c5722428c4ca6b4f03b21121f4c1cd546cbd12d05f4119defe53cdb4f556c5969e8a6fb9f11754369d59995fb523bc2c0c9ca88e2e243220c7e4cd645753f7535b92b85c35505c05ae4f60250651fb50e41791a12d51b724578b201b0680845a4d30b1ff349d984b8eac9144211799f41b2cca8e7cb8c7eb1a5ae04ad8e3844d6ac10eff16c1bdcc800aa625182e80febc441345708bada754650b9cdcb455bd1636f79ab9072bc5fd196224d88ec0850957c0dcd741a3f1582c19d0c31dd58f62ebaf092309b9e820c1ba748e6e0ab610df1dd1747e8c27f961187b8f1044c99aed4b856adadf56d90545623b6761f677e0fa31d163913750c90fff24dd6828ba9a7861205ffa36d9b9e24af7454d12c6754eaa331afb7f3838be126ce0cbb4a70d15262a06d835dc496c78aa2b27a2c5b7210bc869dd5fc0a21b34eedb08de5bfde28070dabe21875399b53cb10e700e4225ad340ee81f995bfb682df510c9a5a2ce8a13dcd26fbc0d2423f9b516d2afcd2c8757459e77af4c958a0f95321fc877a84f0dd4db6f7e8cdfc688ace848c5ce5acf912d8372540a59a24be14b8ccf83651c26f15d12fd98299e3ba99498ac6448b96402946d8966ec779ae5b1d734277b9051a6b682e653fce12b3eeca4cf18fbb69f39f972a3fbc5ebad0480e97098f903c6d3ecd556b8fdb019adbdd73dbf39bcf916b9b0dc8baa3f0809ceb078cb14ebc4dd07c870d6f1d34b04742593874bb3c0204d422e9db54cbf5055ffca076fc88cc4e23efd0afccbd7c4285954a9c8b5d7013df11671b6ca26511e599d7396fce063dbe499043fc7966b9c96ee438476813bdfcdafdb2a68ac9241c3e2327afa77af4dfbc1aa8de039eb497d76c8832ddb3dbbd0b379b2197acf5ba55d0f871daebb7c3bd148ac5aadcbc13eac6105c673400593544bf1272a700033eb8e1a902ffd3331c1b42f5ff447323fa45134826dde15a4ae1db3301ecff3e1c96e538d46fc4e130a1aab0d8f34d9ccf3feb5e8492981c0ddc69ec5c4bf8c4765ce0812785cf6798d5a20de0a2df34d2d83ee798f747b314a6245ca746f5ad40e2549f2c414dcb6ca3eb082cdd89ed80849a7ec2d78ce6ff49aa7c4e11093e70142806ecd7a086e13d90233baba1676ced7d8e44718eceb9005768bec1c8dc346903f3390b66807065be3e2319857863a87b56850819b2cbd99035494fe94573166b4a4d68b72b977821611adf9b5184930dcae15732e76348fcceac0f5afe08a8beead34a373981a2ff26c449262216c8e1b4f877c0b4cedfc7d9b25b69a1d3c8ef1869121618cf6ee013de828f00e86013b5eaf080cdc9dbd1c5d550500e7d262db486f403dc1a1d241ace5359293bee5f5bac2e563ed6fafa4baa2c14492449c3dc3bd2489005dbd9d1772bd085215c09da9300bcf4a73e6fc6ccf55bab2c08290056aec9778d9640081640908073846deadf55872561db6a64b688fafc2ff83d9f982e3fba4b3e17bd2f3cdb552f00cf92f98b6fcac59d9c4af383ba3870fc7db9fb833fe43948dc58029a9e3cb72804d284a4a674492a09aebfc0048c0515f737a35584a0bf3af6c5e59191437de7d2a74d513dd91572cded571f3e97f1fa909696307a21b81215b94bef95ef49a5341b5be62948a19c0fa28bd52fc0fa4f37b0ba36360a4511db403f6b25d7850b0f582c270ff01681146add029fcd230f10bb30ded03de771b9d46389e8277a05590b6861b10f14b63fbbc7c30eaffa3360394664f2145360c0a5276640fe1034a62a103c2c7dd5c5ed4b79772f0e3d02060cd96733d810ea346f0a401855f13f5150dd3808135968ca42f4167fac1659bc4259a336b8c70b8c43580324ca3c1b56c231314a4d96b42b7408270152b21081f717c9f2089f67ab7cedd3b88d11aee416b04336548b5ea5839ff748df1f0cc73114d16f13183432368b48ad8510a094b90f303b84ea6ab645d6efd00157a5eebe7fedd71e17a5960899f886ab846e89d50725fe34210f7bd37b13cbca594c986d26c2669aae5fda32bb114e936975a5bdb9d4e801e3d546259029b098eef0565cc0e353a76937e22f4a7853236130daf11362c63386e34066e4be88f1d039f02c559f9b32b113dd0305eee62478dce859b00718c0f31a397200900813c6004d0f3d2755fbecb5d8cccd0977176f51b8f0fc5934fcb3e1af09bf5b4e967c1ff4d744e11423317d8398964e40ba9b75b56971b0e10db3c15637706d4d481300f792947ac250287086a29fd8ac22aebcea15f7d3be9a470f2e7772487fe4953baf3bc47abac4ebcc66bbc42f78bc638df6a6869cf6d0ee8298e8be8545dd7d4e3f2ce74eea87c20227e682b24400022638e749efb89dbbb3f0898c5331f7a802288458470a387cfd687d6e1a5083f25e1f1c12cd36b0c4b70d9af2c09d54a860ac49123e75a83cda9a2cb7226c2e7fc098a4adfdbc68193725394e890f451ef1c671218d847e469b9d8b5679add19705554b137fe83ccfc0b568d834aee074b08ca38fe6115dd1cf5b79de26688d1fd65879374d186b7c0120b5cf6dd69b277f0de9cfcd971c6e6db61393a882c99bd52a5c39f6f028d970394a5ca4fe3aeefbaefcce63c4346d73667e9eb06b5e7dba2b08cec0f7971516bb001acee6ea25b4c8c37c2bacce847b7e39b78a9d7024e68b8d73cd8e132cb50e5bd143dc8e1620d05049bd55bddc7bc6f1ece25082f8d411715e329c813bed762f0e8405f710831d4fb13cf758056630de5d44e042a68c18d9c78f9b969721810875b6f9708fb98f33ee82e04ee4f7ed99e3a045aef43c19bb794ec25f13f220711b8724c3d46d7f1791851bd30eaf40be32d53493b3a7c6ce9620c2a58ec16f189f2243071d2f727c0d7a19969baaf3707927c71855196d467778e7f53318f4eba28fbe567e7633185c8af481a35f306b2e239038cc0171204b95001d00afd49ad11b9a52038c0280fcd428a23cb6733f3842c97617d7555f03e723b84fa7e6670ea6c4325ecaca682f23bce44deee3890992e5563cdea5c51db0285fb034853e940620198f19bed06e88f0bf91af4ea4a912fe7703cb8a42012bca087e33b2365e3a2a6482f066a5eb2182c5f1c1901507bba6b3b3fa9815226fd63e6733dea227dc29767d55c7dd5382538662fddd4637ed725dfd866015cfe453ced17de0ab1f287dc3fd3469010a64d584613ad9a224608726ea0c55c9064922d787ff39cc1263ccdc95db2b1f16a1593ea3f73ede33f0a536653c4c8549442ade4da944e530177b707801638084ec2024cfcd44ac0d0fbe3e17161ae11519f30eb9c8997ef43e68ae29937292aecf1446b99d3b2a147fec315858d71500e411f763f11f4c73e7223d26a47ae4451544f587ab21c58d7633e409b74301b6488f38e56da4b2f6e02d0dd54ac77492b5cc96cd664718e616d0bcefba76f8c65fb1ca2fcafaab49a74cec73b2c858a5c560387ce5b150e7ca99a81eadf93466e3b898dcadc2aae4eea6cc687bbe1440ce3e5bbae66d952dc44c4e5d08e23baae196803c7158af8a137b897dced6a9d225a2304a986ecd8e6faa76970ea5c833a7e61172d86ae827295798a9085b0705fda1283eb7dd9611f3a57269aeb4f3aeb138f06025ffb4942c6035eff4703b0729920ed63b42278576c66fac92bdddcf464c3417ef3f603331d292ac962dac6631ed01bef987cb5329d21b55f06209b37075a20829b6db4c57860a61cad4e5901a7aaca1566299733bff785794eaf15c2d0a780d7c96c4554bcdb25a3ccf9f8caac9329815d8d2d58618fa0e466a120992d3cd46a10118348069d348f23a72ccee02ed81a30933ee121e64c3c811cb3fc97eb0e0634dc0f7ab"}, {0xd0, 0xff, 0x1, "36cb3dca44e2aa0d40dcc5682eee8f3f24019c4ddedc671cd951c39ba0282f8a1502c1888b7f540810d7d59c2d2063fdcfcd07b9d32c66fdb391e9b66cd8d302ed72a3cddc0a93421d7e76dc3c095c1c5a04733a6a23c8318c087602389bee3e6b37a107895ebb4f0a3f1f5af8648bb6e76150033ac4a31593c841a5cbad6ef09263c1bb58bd9e015f33f589097400f8c69a2f200667f7810f78ab0caf19994707e9cbf28deb47ae501e2abaf8c856e63c93b1eeab7779ba156ede7d51da46"}, {0xd0, 0x8, 0x2, "2c20083b56dde665dfa0ef7d1a105045083ead56e184be055b0128da372a8f06afb5eacc71e75bac732a712cab6bd71a2c7282d29192fffb55d7580b186c0ace97dd149fb17565d0f22a355faa0e75fe311c60b59d35d4aa06154db697a161f1da60321a74a14e488595add261499a458651565e4db438f7efc9b187c9c088c82caa6c37e90c82740c47edf64b1d90072c91f9dc64c18a42fcfa8475d0fb79d1d249ddc76f27b63d86d9d8b98c185301c5f908653197b1472cde8f"}], 0x1370}}], 0x2, 0x4000010) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7) 4.390477591s ago: executing program 8 (id=4146): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_usb_connect$uac2(0x0, 0x86, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x3, 0x1, 0xfe, 0x50, 0x6, {0x8, 0xb, 0x1, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x401, 0xb, 0x14, 0x4}, [@feature_unit={0xb, 0x24, 0x6, 0x6, 0x2, [0x6, 0x6, 0x6]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc4, 0x2, 0xf9, {0x8, 0x25, 0x1, 0x80, 0x0, 0x2, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x77, 0x1, {0x8, 0x25, 0x1, 0x43, 0xc, 0x5, 0x2}}}}}}}}]}}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000"], 0x78) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0x20000014}) ppoll(&(0x7f0000000980)=[{r4, 0x4}, {r1, 0x4}], 0x2, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0x4}) 3.65325623s ago: executing program 3 (id=4153): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) io_uring_setup(0x29c, &(0x7f0000000200)={0x0, 0xfb75, 0x2, 0xfffffffd, 0x2, 0x0, r1}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) lseek(r2, 0xffffffffffffffff, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x10a5}], 0x1, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.517473536s ago: executing program 3 (id=4156): socket$inet6_sctp(0xa, 0x5, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) creat(&(0x7f0000000200)='./file1\x00', 0x12e) perf_event_open(&(0x7f0000000140)={0x2, 0x90, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x25, 0x1, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 2.955721536s ago: executing program 9 (id=4158): r0 = socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x11, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7d}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0x0, 0xee00, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000004, @private0, 0x7}, 0x1c) 2.954804806s ago: executing program 3 (id=4159): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x40009}, 0x40800) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt(r0, 0x111, 0x1, 0x0, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x8000007, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000001140)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b", @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0x6, 0x2c1, &(0x7f0000001880)="$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") syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x2, 0x0, 0xe7, {[@generic={0x8, 0xa, "512e23468b1d58f2"}]}}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f0000000180)=""/251, 0xfb, 0x20, &(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYBLOB='\b\x00\n'], 0x54}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x2000c050) socket$netlink(0x10, 0x3, 0x0) r6 = getpgrp(0x0) r7 = syz_pidfd_open(r6, 0x0) fsetxattr$trusted_overlay_nlink(r7, &(0x7f00000018c0), 0x0, 0x0, 0x1) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) 1.894308047s ago: executing program 5 (id=4160): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b705000000005d53883a6d9f00007910a823000000007d0a0000000000009500010000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 1.6867229s ago: executing program 5 (id=4161): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@deltclass={0x14, 0x29, 0x500, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0xa}, {0x0, 0xe}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 3) 1.68571924s ago: executing program 3 (id=4162): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008b000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000400048500000086000000bf09000000000000550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x2b, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200026bd7000fddbdf25010000000e0001006e657464657673696d0000000f000200a8b4b6ec657673696d300000e4c12d7db961510ddf0f99167aa50c0bcd35279bc1a5e9eccf47e079e49df7694d916553caaa6f856c0046cddab8173bc55a726c2a5ab6dab6071c6bf7c62cf1ba387650c3ebac45ab0be03b224f68a1bdda95c6627e8ef99235de0f85ccd1f2ec705c13a61250cb1ca24b3b7c689b61dc40cc6d9d8830e3f0bc043adf532a5c349b970d999cda0e935a0f44d5bae90ce23772000000e5704951f4c24617abc448f7204f21c26a590ed2b0a85c03696a6a29709393256d3fd89a2638c6"], 0x34}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x3204806, &(0x7f0000000540)=ANY=[@ANYBLOB="636865636b3d7374726963742c636865636b3d72656c61786564006d6f64653d3078303030303030300400000000000000312c6d61703d6f66662c63727566742c696f636861727365743d6d6163677265656b416d61703d61636f726e2c676f636861727365743d69736f383835392d322c73657373696f6e3d3078303030303030303030303030303035382c73686f776173736f632c6d6f64653d3078666666666666666666666666666666642c636865636b3d7374726963742c6673636f6e746578743d73797374656d5f752c7065726d69745f646972656374696f2c00"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 1.211225446s ago: executing program 5 (id=4163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) close(r0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20) 1.142869504s ago: executing program 9 (id=4166): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) io_uring_setup(0x29c, &(0x7f0000000200)={0x0, 0xfb75, 0x2, 0xfffffffd, 0x2, 0x0, r1}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) lseek(r2, 0xffffffffffffffff, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.12404455s ago: executing program 5 (id=4167): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/12], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x12, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x2b, 0x0, &(0x7f0000000380)) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200026bd7000fddbdf25010000000e0001006e657464657673696d0000000f000200a8b4b6ec657673696d300000e4c12d7db961510ddf0f99167aa50c0bcd35279bc1a5e9eccf47e079e49df7694d916553caaa6f856c0046cddab8173bc55a726c2a5ab6dab6071c6bf7c62cf1ba387650c3ebac45ab0be03b224f68a1bdda95c6627e8ef99235de0f85ccd1f2ec705c13a61250cb1ca24b3b7c689b61dc40cc6d9d8830e3f0bc043adf532a5c349b970d999cda0e935a0f44d5bae90ce23772000000e5704951f4c24617abc448f7204f21c26a590ed2b0a85c03696a6a29709393256d3fd89a2638c6"], 0x34}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) unshare(0x22020400) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r3, 0x0, 0x0, 0x5405, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @multicast1, r2}, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000015c0)={[{@block_validity}, {}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nogrpid}, {@dax_always}, {@norecovery}]}, 0x3, 0x576, &(0x7f0000000840)="$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") ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) r4 = memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf10xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) dup2(r7, r6) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x9, &(0x7f0000000180)=[{0x4, 0x2b, 0x81, 0x6}, {0x9, 0x7, 0x8, 0x4}, {0x4252, 0x2, 0x0, 0x1}, {0xc, 0xe, 0x6, 0x8}, {0x6, 0x81, 0x5}, {0x3, 0x4, 0x62, 0x8b36}, {0xd, 0x0, 0x6, 0x9}, {0x4, 0xae, 0x4, 0x9}, {0xa, 0x28, 0x9, 0x3}]}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r5) 1.112312998s ago: executing program 8 (id=4169): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000200)=""/213, &(0x7f0000000040)=0xd5) 1.023052742s ago: executing program 8 (id=4170): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000900)={{0x6f9, 0xfbce}, {0x2, 0x9}, 0x401, 0x1}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8002}, 0x110140, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000b40)={[{@nodioread_nolock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@errors_remount}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@nomblk_io_submit}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}], [{@hash}]}, 0x0, 0x48c, &(0x7f00000002c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="08000000000716ac11aabe12e662b35e01020000000000000000010000050c00064000000000000000ea3400024000000000000000010c0017c0f13bb2"], 0x38}, 0x1, 0x0, 0x0, 0xce881d241f29d538}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a02fe0000000c850000002b000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736369dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0xd, &(0x7f0000000000), 0x143}, 0x48) 1.005043779s ago: executing program 9 (id=4172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0xf0ff, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000202010400000000000000000a0000003c0002800c00028005000100"], 0x50}}, 0x0) 909.987312ms ago: executing program 6 (id=4174): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x0, 0x4f0}) 904.962501ms ago: executing program 9 (id=4175): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) r1 = fsopen(&(0x7f00000002c0)='ext4\x00', 0x0) mount$9p_fd(0x20, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 865.389694ms ago: executing program 6 (id=4176): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x3) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x0, 0x0, 0xfe}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a0001000000ff7f0000000080"], 0x24}}, 0x10048000) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) listen(r1, 0x3) (async) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x0, 0x0, 0xfe}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a0001000000ff7f0000000080"], 0x24}}, 0x10048000) (async) 814.246045ms ago: executing program 9 (id=4177): r0 = socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x11, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7d}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0x0, 0xee00, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000004, @private0, 0x7}, 0x1c) 718.894138ms ago: executing program 6 (id=4178): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x1f, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x20004000) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x50, 0x0, 0x4, 0x8, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x45}, 0x4) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x1ffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000030001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r2}, &(0x7f0000001780)=0x4, 0x0}, 0x20) 547.796408ms ago: executing program 6 (id=4179): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) io_uring_setup(0x29c, &(0x7f0000000200)={0x0, 0xfb75, 0x2, 0xfffffffd, 0x2, 0x0, r1}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) lseek(r2, 0xffffffffffffffff, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 334.24012ms ago: executing program 6 (id=4180): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e80), 0x28902) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x140f, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = eventfd(0x5c) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f00000003c0)="e18b96eb97ca09f255a8ddc04bc8c9fcda137d52338adcf3b3fc0869aa6a82adf3e6980e308edcb1a249fdfd83ba7505b58f598116cb3ffbcd579037e2ae6eaa4afa289bb8a25e633bb6a49d8baac55d102748b349b848aa8a1dbd2a240e42c84085c7ffbb288255fc49e5e91bfe23e2b37f81e80db2c0096f4143821ce994b11b90fda1e0d2e77d32f573", 0x8b, 0xffffffff, 0x0, 0x1, r3}, &(0x7f00000004c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYRES16=r0, @ANYRES16=r5, @ANYRES32], 0x3c}}, 0x4c24) unshare(0x22020600) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 169.577031ms ago: executing program 5 (id=4181): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000080)) close(r0) r2 = fsopen(&(0x7f00000002c0)='ext4\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000001c0), 0x0, &(0x7f00000005c0)={[{}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 161.907999ms ago: executing program 3 (id=4182): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x20003fe, 0xe, 0x0, &(0x7f0000000400)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 62.205642ms ago: executing program 8 (id=4183): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9e) 52.93639ms ago: executing program 5 (id=4184): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000000010000030900020073797a31000000000500010007000000280007800c00018008000140e79a01020c00148008000140ac1414100c000280080001"], 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 52.17088ms ago: executing program 6 (id=4185): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) quotactl_fd$Q_SYNC(r0, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setfsuid(0x0) 317.571µs ago: executing program 3 (id=4186): r0 = socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x11, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ptrace$pokeuser(0x6, 0x0, 0x388, 0x6) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f00000000c0)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="11", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(0x0, 0x0, 0x9) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7d}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0x0, 0xee00, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000004, @private0, 0x7}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 0s ago: executing program 8 (id=4187): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x0, 0x4f0}) kernel console output (not intermixed with test programs): { unmount } for pid=12952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 625.682495][T12952] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 625.743200][T12952] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 625.758090][T12952] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 625.769169][T12952] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 625.783325][T12952] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 625.981842][T16517] Quota error (device loop3): write_blk: dquota write failed [ 626.016961][T16517] Quota error (device loop3): write_blk: dquota write failed [ 626.037386][T12952] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 626.069112][T16517] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 626.104008][T12952] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 626.130466][T16539] loop8: detected capacity change from 0 to 128 [ 626.137262][T16517] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.3584: Failed to acquire dquot type 1 [ 626.172785][T16517] loop3: lost filesystem error report for type 5 error -28 [ 626.299716][T16517] Quota error (device loop3): write_blk: dquota write failed [ 626.333964][T16517] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 626.371934][T16517] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.3584: Failed to acquire dquot type 1 [ 626.383720][T16517] loop3: lost filesystem error report for type 5 error -28 [ 626.384714][T16517] Quota error (device loop3): write_blk: dquota write failed [ 626.469795][T16517] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.3584: Failed to acquire dquot type 1 [ 626.481834][T16517] loop3: lost filesystem error report for type 5 error -28 [ 626.482633][T16517] EXT4-fs (loop3): 1 orphan inode deleted [ 626.799512][T16517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 627.022941][T10952] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.044979][T13377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.830205][T16551] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3594'. [ 628.072931][T10952] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.404384][T16563] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 628.906076][T16563] bond1 (unregistering): Released all slaves [ 629.054461][T12952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.244908][T10952] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.321677][T10952] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.853060][T16585] loop9: detected capacity change from 0 to 164 [ 629.963199][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 629.963215][ T28] audit: type=1400 audit(1772677641.976:2346): avc: denied { mounton } for pid=16588 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 629.994288][ T28] audit: type=1400 audit(1772677641.976:2347): avc: denied { search } for pid=3042 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.025567][ T28] audit: type=1400 audit(1772677641.976:2348): avc: denied { search } for pid=3042 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.056986][T10952] bridge_slave_1: left allmulticast mode [ 630.068997][ T28] audit: type=1400 audit(1772677641.976:2349): avc: denied { search } for pid=3042 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.072834][T10952] bridge_slave_1: left promiscuous mode [ 630.142097][ T28] audit: type=1400 audit(1772677641.976:2350): avc: denied { read } for pid=3042 comm="dhcpcd" name="n56" dev="tmpfs" ino=13985 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 630.227214][T10952] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.271756][ T28] audit: type=1400 audit(1772677641.976:2351): avc: denied { open } for pid=3042 comm="dhcpcd" path="/run/udev/data/n56" dev="tmpfs" ino=13985 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 630.332437][T10952] bridge_slave_0: left allmulticast mode [ 630.355143][T10952] bridge_slave_0: left promiscuous mode [ 630.380328][ T28] audit: type=1400 audit(1772677641.976:2352): avc: denied { getattr } for pid=3042 comm="dhcpcd" path="/run/udev/data/n56" dev="tmpfs" ino=13985 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 630.391245][T10952] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.410369][ T28] audit: type=1400 audit(1772677642.086:2353): avc: denied { read open } for pid=16593 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.437641][ T28] audit: type=1400 audit(1772677642.086:2354): avc: denied { getattr } for pid=16593 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.464781][ T28] audit: type=1400 audit(1772677642.196:2355): avc: denied { read } for pid=16598 comm="syz.9.3608" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 630.616327][T16627] loop3: detected capacity change from 0 to 164 [ 630.624908][T10952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.643825][T10952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.654046][T10952] bond0 (unregistering): Released all slaves [ 630.666667][T10952] bond1 (unregistering): Released all slaves [ 631.052754][T16627] bond0: entered promiscuous mode [ 631.187422][T16627] batadv0: entered promiscuous mode [ 631.212243][T16627] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 631.224166][T16627] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 631.243933][T16627] bond0: left promiscuous mode [ 631.251717][T16627] batadv0: left promiscuous mode [ 631.283786][T10952] hsr_slave_0: left promiscuous mode [ 631.302142][T10952] hsr_slave_1: left promiscuous mode [ 631.317513][T10952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.330232][T10952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.346168][T10952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.406213][T10952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.426875][T10952] veth1_macvtap: left promiscuous mode [ 631.432619][T10952] veth0_macvtap: left promiscuous mode [ 631.438323][T10952] veth1_vlan: left promiscuous mode [ 631.443836][T10952] veth0_vlan: left promiscuous mode [ 631.553218][T10952] team0 (unregistering): Port device team_slave_1 removed [ 631.574527][T10952] team0 (unregistering): Port device team_slave_0 removed [ 631.596766][T16640] loop6: detected capacity change from 0 to 1024 [ 631.738927][T16640] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 631.752097][T16640] System zones: 0-1, 3-36 [ 631.843328][T16640] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3617: bad orphan inode 134217728 [ 631.897189][T16640] loop6: lost filesystem error report for type 5 error -117 [ 631.910688][T16640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.004073][T16588] chnl_net:caif_netlink_parms(): no params data found [ 632.128334][T16588] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.254379][T16588] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.258966][T16695] loop3: detected capacity change from 0 to 512 [ 632.282198][T16588] bridge_slave_0: entered allmulticast mode [ 632.293089][T16695] EXT4-fs (loop3): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 632.321942][T16588] bridge_slave_0: entered promiscuous mode [ 632.357115][T16690] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3617'. [ 632.384717][T16588] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.412027][T16588] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.497642][T16588] bridge_slave_1: entered allmulticast mode [ 632.524971][T16588] bridge_slave_1: entered promiscuous mode [ 632.532559][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.567788][T16588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.595521][T16588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.678212][T16695] loop3: detected capacity change from 0 to 512 [ 632.765323][T16695] EXT4-fs: Ignoring removed mblk_io_submit option [ 632.814716][T16588] team0: Port device team_slave_0 added [ 632.840941][T16695] EXT4-fs (loop3): orphan cleanup on readonly fs [ 632.850870][T16695] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 632.866563][T16695] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.3623: attempt to clear invalid blocks 2 len 1 [ 632.880902][T16695] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 632.881932][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 632.900862][ C1] EXT4-fs (loop3): initial error at time 1772677644: ext4_clear_blocks:876: inode 13 [ 632.911802][ C1] EXT4-fs (loop3): last error at time 1772677644: ext4_clear_blocks:876: inode 13 [ 632.930587][T16695] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 632.950113][T16695] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3623: invalid indirect mapped block 1819239214 (level 0) [ 632.955513][T16588] team0: Port device team_slave_1 added [ 632.965521][T16695] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 632.980036][T16588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.996384][T16588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.996628][T16695] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3623: invalid indirect mapped block 1819239214 (level 1) [ 633.023769][T16588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.039502][T16695] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 633.060190][T16588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.078937][T16588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.107644][T16695] EXT4-fs (loop3): 1 truncate cleaned up [ 633.108468][T16588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.136710][T16695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 633.209187][T16713] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3627'. [ 633.336810][T13377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.398308][T16588] hsr_slave_0: entered promiscuous mode [ 633.412783][T16588] hsr_slave_1: entered promiscuous mode [ 633.424651][T16588] debugfs: 'hsr0' already exists in 'hsr' [ 633.435192][T16588] Cannot create hsr debugfs directory [ 633.924845][T16763] loop3: detected capacity change from 0 to 512 [ 633.999807][T16763] EXT4-fs (loop3): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 634.564991][T16588] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 634.606431][T16588] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 634.635723][T16588] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 634.654827][T16588] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 634.657555][T16779] loop8: detected capacity change from 0 to 8192 [ 634.765437][T16797] FAULT_INJECTION: forcing a failure. [ 634.765437][T16797] name failslab, interval 1, probability 0, space 0, times 0 [ 634.805098][T16797] CPU: 0 UID: 0 PID: 16797 Comm: syz.9.3636 Not tainted syzkaller #0 PREEMPT(full) [ 634.805131][T16797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 634.805145][T16797] Call Trace: [ 634.805210][T16797] [ 634.805225][T16797] __dump_stack+0x1d/0x30 [ 634.805255][T16797] dump_stack_lvl+0x95/0xd0 [ 634.805323][T16797] dump_stack+0x15/0x1b [ 634.805348][T16797] should_fail_ex+0x263/0x280 [ 634.805402][T16797] should_failslab+0x8c/0xb0 [ 634.805446][T16797] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 634.805473][T16797] ? __alloc_skb+0x2d6/0x690 [ 634.805500][T16797] __alloc_skb+0x2d6/0x690 [ 634.805526][T16797] ? __alloc_skb+0x200/0x690 [ 634.805633][T16797] netlink_alloc_large_skb+0xbf/0xf0 [ 634.805662][T16797] netlink_sendmsg+0x40c/0x6f0 [ 634.805759][T16797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.805790][T16797] ____sys_sendmsg+0x5af/0x600 [ 634.805885][T16797] ___sys_sendmsg+0x195/0x1e0 [ 634.805924][T16797] ? path_openat+0x1b01/0x2050 [ 634.805968][T16797] __sys_sendmmsg+0x185/0x320 [ 634.806032][T16797] __x64_sys_sendmmsg+0x57/0x70 [ 634.806064][T16797] x64_sys_call+0x27aa/0x3020 [ 634.806163][T16797] do_syscall_64+0x12c/0x370 [ 634.806187][T16797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.806218][T16797] RIP: 0033:0x7fc2e534c799 [ 634.806237][T16797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.806258][T16797] RSP: 002b:00007fc2e3d9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 634.806322][T16797] RAX: ffffffffffffffda RBX: 00007fc2e55c5fa0 RCX: 00007fc2e534c799 [ 634.806339][T16797] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 634.806356][T16797] RBP: 00007fc2e3d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 634.806370][T16797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.806383][T16797] R13: 00007fc2e55c6038 R14: 00007fc2e55c5fa0 R15: 00007ffed993cf28 [ 634.806405][T16797] [ 635.071122][T16763] loop3: detected capacity change from 0 to 512 [ 635.073980][T16588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.092366][T16804] loop9: detected capacity change from 0 to 512 [ 635.103532][T16763] EXT4-fs: Ignoring removed mblk_io_submit option [ 635.128441][T16763] EXT4-fs (loop3): orphan cleanup on readonly fs [ 635.135873][T16763] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 635.150805][T16763] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.3631: attempt to clear invalid blocks 2 len 1 [ 635.167669][T16763] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 635.171781][T16763] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 635.196179][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 635.196468][ C1] EXT4-fs (loop3): initial error at time 1772677647: ext4_clear_blocks:876: inode 13 [ 635.196951][ C1] EXT4-fs (loop3): last error at time 1772677647: ext4_clear_blocks:876: inode 13 [ 635.222056][T16804] EXT4-fs (loop9): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 635.252325][T16588] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.278126][T16763] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3631: invalid indirect mapped block 1819239214 (level 0) [ 635.526079][T16763] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 635.543389][T16763] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3631: invalid indirect mapped block 1819239214 (level 1) [ 635.784144][T16763] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 635.790205][T16763] EXT4-fs (loop3): 1 truncate cleaned up [ 635.841501][T16804] loop9: detected capacity change from 0 to 512 [ 635.842630][T10952] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.842667][T10952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.844311][T10952] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.871392][T10952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.903297][T16763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 635.920164][T16804] EXT4-fs: Ignoring removed mblk_io_submit option [ 635.966698][T13377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.007423][T16833] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:24062 [ 636.094999][T16804] EXT4-fs (loop9): orphan cleanup on readonly fs [ 636.138598][T16804] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 636.182904][T16804] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.3637: attempt to clear invalid blocks 2 len 1 [ 636.199374][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 636.199392][ T28] audit: type=1400 audit(1772677648.217:2378): avc: denied { setopt } for pid=16848 comm="syz.6.3644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 636.202893][T16804] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 636.341734][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 636.357371][ C0] EXT4-fs (loop9): initial error at time 1772677648: ext4_clear_blocks:876: inode 13 [ 636.366880][ C0] EXT4-fs (loop9): last error at time 1772677648: ext4_clear_blocks:876: inode 13 [ 636.404664][T16804] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 636.429382][T16849] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16849 comm=syz.6.3644 [ 636.514383][T16804] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3637: invalid indirect mapped block 1819239214 (level 0) [ 636.566031][T16588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.750935][T16804] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 636.778008][T16804] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3637: invalid indirect mapped block 1819239214 (level 1) [ 636.810719][T16867] loop6: detected capacity change from 0 to 512 [ 636.826786][T16867] EXT4-fs: Ignoring removed bh option [ 636.833921][T16867] EXT4-fs: Ignoring removed mblk_io_submit option [ 636.841202][T16867] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 636.852232][T16867] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 636.860384][T16867] EXT4-fs (loop6): orphan cleanup on readonly fs [ 636.867777][T16867] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3646: Invalid block bitmap block 0 in block_group 0 [ 636.916966][T16867] loop6: lost filesystem error report for type 5 error -117 [ 636.917235][T16867] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3646: Invalid block bitmap block 0 in block_group 0 [ 636.924690][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 636.924711][ C1] EXT4-fs (loop6): last error at time 1772677648: ext4_read_block_bitmap_nowait:483 [ 636.929340][T16804] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 636.961705][T16867] loop6: lost filesystem error report for type 5 error -117 [ 636.971423][T16867] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3646: Invalid block bitmap block 0 in block_group 0 [ 637.205576][T16867] loop6: lost filesystem error report for type 5 error -117 [ 637.205904][T16867] Quota error (device loop6): write_blk: dquota write failed [ 637.240086][T16804] EXT4-fs (loop9): 1 truncate cleaned up [ 637.287707][T16867] Quota error (device loop6): write_blk: dquota write failed [ 637.315194][T16804] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 637.353278][T16867] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 637.399772][T16867] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.3646: Failed to acquire dquot type 1 [ 637.447604][T16867] loop6: lost filesystem error report for type 5 error -28 [ 637.448264][T16867] Quota error (device loop6): write_blk: dquota write failed [ 637.511224][T16885] loop3: detected capacity change from 0 to 2048 [ 637.552268][T16867] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 637.570455][T16867] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.3646: Failed to acquire dquot type 1 [ 637.594178][T16867] loop6: lost filesystem error report for type 5 error -28 [ 637.594653][T16867] Quota error (device loop6): write_blk: dquota write failed [ 637.615659][T16867] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 637.626171][T11394] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.627393][T16867] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.3646: Failed to acquire dquot type 1 [ 637.656959][T16867] loop6: lost filesystem error report for type 5 error -28 [ 637.661879][T16867] EXT4-fs (loop6): 1 orphan inode deleted [ 637.752073][T16867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 637.837635][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.849250][T16909] loop9: detected capacity change from 0 to 512 [ 637.879368][T16909] EXT4-fs (loop9): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 637.915267][T16588] veth0_vlan: entered promiscuous mode [ 638.840179][T16588] veth1_vlan: entered promiscuous mode [ 638.880119][T16588] veth0_macvtap: entered promiscuous mode [ 638.949633][T16588] veth1_macvtap: entered promiscuous mode [ 638.980752][T16933] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3656'. [ 639.005601][T16588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.022233][T16588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.064745][T10952] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.075404][T10952] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.106672][ T28] audit: type=1326 audit(1772677651.117:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16937 comm="syz.6.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184c36c799 code=0x7ffc0000 [ 639.147973][T16928] loop3: detected capacity change from 0 to 164 [ 639.150655][ T28] audit: type=1326 audit(1772677651.147:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16937 comm="syz.6.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184c36c799 code=0x7ffc0000 [ 639.155052][T10944] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.233196][T10952] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.348776][T16956] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3659'. [ 639.388734][T16961] 9p: Could not find request transport: uni^ek}¨útoرÞ—½Òò)ê&KªpñJwÍs ¶A²ßÌ4}(3‰…†ëÝ’Ù [ 639.469684][T16909] loop9: detected capacity change from 0 to 512 [ 639.489214][T16909] EXT4-fs: Ignoring removed mblk_io_submit option [ 639.578547][T16977] loop3: detected capacity change from 0 to 512 [ 639.645221][T16909] EXT4-fs (loop9): orphan cleanup on readonly fs [ 639.657046][T16977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.657726][T16909] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 639.694708][T16977] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.773146][T16909] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.3652: attempt to clear invalid blocks 2 len 1 [ 639.821449][T16909] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 639.832751][T16909] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, [ 639.842786][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 639.842876][ C1] EXT4-fs (loop9): initial error at time 1772677651: ext4_clear_blocks:876: inode 13 [ 639.843267][ C1] EXT4-fs (loop9): last error at time 1772677651: ext4_clear_blocks:876: inode 13 [ 639.880456][T16909] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 639.961335][T16909] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3652: invalid indirect mapped block 1819239214 (level 0) [ 640.000154][T16909] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 640.016210][T16909] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3652: invalid indirect mapped block 1819239214 (level 1) [ 640.082198][T16909] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 640.103480][T16909] EXT4-fs (loop9): 1 truncate cleaned up [ 640.182674][T16909] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 640.222122][T13377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.292714][T11394] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.410485][T17010] loop5: detected capacity change from 0 to 8192 [ 640.450820][T17021] loop6: detected capacity change from 0 to 8192 [ 640.522704][T17028] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3670'. [ 642.676495][T17062] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3676'. [ 642.835146][T17078] loop8: detected capacity change from 0 to 512 [ 642.891889][T17078] EXT4-fs (loop8): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 642.927449][T17075] loop9: detected capacity change from 0 to 512 [ 643.030079][T17075] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.107906][T17068] loop3: detected capacity change from 0 to 128 [ 643.129098][T17075] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.663212][T17078] loop8: detected capacity change from 0 to 512 [ 643.764767][T17078] EXT4-fs: Ignoring removed mblk_io_submit option [ 643.782296][T17108] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3682'. [ 643.782353][T11394] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.842379][T17078] EXT4-fs (loop8): orphan cleanup on readonly fs [ 643.850804][T17078] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 643.981125][T17078] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.3679: attempt to clear invalid blocks 2 len 1 [ 643.995225][T17078] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 643.999943][T17078] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, [ 644.010255][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 644.010280][ C0] EXT4-fs (loop8): initial error at time 1772677656: ext4_clear_blocks:876: inode 13 [ 644.010316][ C0] EXT4-fs (loop8): last error at time 1772677656: ext4_clear_blocks:876: inode 13 [ 644.048045][T17078] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 644.087305][T17117] loop9: detected capacity change from 0 to 256 [ 644.177797][T17117] FAT-fs (loop9): Directory bread(block 64) failed [ 644.184567][T17117] FAT-fs (loop9): Directory bread(block 65) failed [ 644.191203][T17117] FAT-fs (loop9): Directory bread(block 66) failed [ 644.197925][T17117] FAT-fs (loop9): Directory bread(block 67) failed [ 644.204715][T17117] FAT-fs (loop9): Directory bread(block 68) failed [ 644.211465][T17117] FAT-fs (loop9): Directory bread(block 69) failed [ 644.218140][T17117] FAT-fs (loop9): Directory bread(block 70) failed [ 644.224907][T17117] FAT-fs (loop9): Directory bread(block 71) failed [ 644.231643][T17117] FAT-fs (loop9): Directory bread(block 72) failed [ 644.238371][T17117] FAT-fs (loop9): Directory bread(block 73) failed [ 644.480529][T17078] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3679: invalid indirect mapped block 1819239214 (level 0) [ 644.656971][T17078] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 644.668327][T17078] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3679: invalid indirect mapped block 1819239214 (level 1) [ 644.743703][T17122] loop3: detected capacity change from 0 to 1024 [ 644.866050][T17122] EXT4-fs: dax option not supported [ 645.024450][T17078] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 645.089951][T17078] EXT4-fs (loop8): 1 truncate cleaned up [ 645.212682][T17078] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 645.459935][T11281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.850259][T17129] loop5: detected capacity change from 0 to 1024 [ 645.970748][T17129] EXT4-fs: Ignoring removed orlov option [ 646.063181][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 646.063210][ T28] audit: type=1400 audit(1772677658.077:2418): avc: denied { setopt } for pid=17134 comm="syz.8.3690" lport=60049 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 646.095416][T17135] sctp: [Deprecated]: syz.8.3690 (pid 17135) Use of int in maxseg socket option. [ 646.095416][T17135] Use struct sctp_assoc_value instead [ 646.150344][T17129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.167519][T17142] loop8: detected capacity change from 0 to 512 [ 646.192439][T17144] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3694'. [ 646.213694][T17142] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.246457][T17142] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.370032][T11281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.554521][T17156] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3696'. [ 646.912081][T16588] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.824621][T17188] ieee802154 phy0 wpan0: encryption failed: -22 [ 648.143027][T17204] loop3: detected capacity change from 0 to 512 [ 648.259485][T17204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.273651][T17209] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3709'. [ 648.283692][T17209] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3709'. [ 648.284497][T17204] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.381541][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3709'. [ 648.414290][T13377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.146206][T17288] loop3: detected capacity change from 0 to 512 [ 650.173931][T17288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.271022][T17288] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.308813][T17298] SET target dimension over the limit! [ 650.442372][T17298] loop8: detected capacity change from 0 to 4096 [ 650.467683][T17298] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 650.540615][T17298] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.563144][T17307] loop6: detected capacity change from 0 to 512 [ 650.587542][T17307] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 650.618312][T17307] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3728: bad orphan inode 131083 [ 650.647566][ T28] audit: type=1400 audit(1772677662.657:2419): avc: denied { read } for pid=17297 comm="syz.8.3724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 650.680985][T17307] loop6: lost filesystem error report for type 5 error -117 [ 650.693946][T17307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.771688][T13377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.050668][T17327] SET target dimension over the limit! [ 651.057737][T17328] 9pnet_fd: Insufficient options for proto=fd [ 651.097793][T17310] loop9: detected capacity change from 0 to 128 [ 651.159958][T17330] loop3: detected capacity change from 0 to 1024 [ 651.176407][T17327] loop5: detected capacity change from 0 to 4096 [ 651.183420][T17330] EXT4-fs: Ignoring removed mblk_io_submit option [ 651.234285][T11281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.263973][T17327] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 651.303223][T17330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.325809][T17327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.359401][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.361437][T17330] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.3734: Allocating blocks 497-513 which overlap fs metadata [ 651.413387][T17330] EXT4-fs (loop3): pa ffff888108272770: logic 64, phys. 177, len 21 [ 651.421468][T17330] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 651.475723][T17342] FAULT_INJECTION: forcing a failure. [ 651.475723][T17342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.490845][T17342] CPU: 0 UID: 0 PID: 17342 Comm: syz.6.3737 Not tainted syzkaller #0 PREEMPT(full) [ 651.490876][T17342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 651.490891][T17342] Call Trace: [ 651.490900][T17342] [ 651.490909][T17342] __dump_stack+0x1d/0x30 [ 651.490940][T17342] dump_stack_lvl+0x95/0xd0 [ 651.490965][T17342] dump_stack+0x15/0x1b [ 651.490994][T17342] should_fail_ex+0x263/0x280 [ 651.491016][T17342] should_fail+0xb/0x20 [ 651.491099][T17342] should_fail_usercopy+0x1a/0x20 [ 651.491126][T17342] _copy_from_user+0x1c/0xb0 [ 651.491186][T17342] do_sock_getsockopt+0xf1/0x210 [ 651.491215][T17342] __x64_sys_getsockopt+0x11d/0x1a0 [ 651.491279][T17342] x64_sys_call+0x2dcf/0x3020 [ 651.491313][T17342] do_syscall_64+0x12c/0x370 [ 651.491337][T17342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.491401][T17342] RIP: 0033:0x7f184c36c799 [ 651.491421][T17342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.491530][T17342] RSP: 002b:00007f184adc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 651.491551][T17342] RAX: ffffffffffffffda RBX: 00007f184c5e5fa0 RCX: 00007f184c36c799 [ 651.491566][T17342] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 651.491578][T17342] RBP: 00007f184adc7090 R08: 00002000000000c0 R09: 0000000000000000 [ 651.491592][T17342] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 651.491605][T17342] R13: 00007f184c5e6038 R14: 00007f184c5e5fa0 R15: 00007fff77d18ad8 [ 651.491623][T17342] [ 651.671973][ T28] audit: type=1400 audit(1772677663.687:2420): avc: denied { setopt } for pid=17329 comm="syz.3.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 651.724014][T17349] loop6: detected capacity change from 0 to 512 [ 651.806727][T17335] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3736'. [ 651.816441][T17349] EXT4-fs (loop6): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 651.862144][T17340] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 651.875231][ T28] audit: type=1400 audit(1772677663.877:2421): avc: denied { load_policy } for pid=17333 comm="syz.9.3736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 651.908365][T17335] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3736'. [ 651.927761][T17340] SELinux: failed to load policy [ 651.941115][T17335] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3736'. [ 651.969366][T17352] loop8: detected capacity change from 0 to 512 [ 652.042498][T17352] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.084304][T17352] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.107223][T13377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.126245][T16588] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.194436][T17356] 9pnet_fd: Insufficient options for proto=fd [ 652.215689][T17359] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 652.225000][ T28] audit: type=1400 audit(1772677664.237:2422): avc: denied { ioctl } for pid=17355 comm="syz.3.3742" path="socket:[54938]" dev="sockfs" ino=54938 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 652.273402][T17361] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20001 [ 652.291710][T11281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.350098][T17366] loop9: detected capacity change from 0 to 512 [ 652.373020][T17366] EXT4-fs (loop9): 1 truncate cleaned up [ 652.379584][T17366] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.412797][T17363] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3747: bg 0: block 465: padding at end of block bitmap is not set [ 652.434352][T17373] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3746'. [ 652.464658][T17349] EXT4-fs: Ignoring removed mblk_io_submit option [ 652.469831][T17363] EXT4-fs (loop9): Remounting filesystem read-only [ 652.479191][T17373] netlink: 260 bytes leftover after parsing attributes in process `syz.8.3746'. [ 652.488435][T17363] EXT4-fs (loop9): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 652.502864][ T28] audit: type=1400 audit(1772677664.517:2423): avc: denied { read } for pid=2984 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 652.529249][T17349] EXT4-fs (loop6): orphan cleanup on readonly fs [ 652.534108][ T28] audit: type=1400 audit(1772677664.517:2424): avc: denied { search } for pid=2984 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.558711][ T28] audit: type=1400 audit(1772677664.517:2425): avc: denied { append } for pid=2984 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 652.581251][ T28] audit: type=1400 audit(1772677664.517:2426): avc: denied { open } for pid=2984 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 652.604068][ T28] audit: type=1400 audit(1772677664.517:2427): avc: denied { getattr } for pid=2984 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 652.614840][T17349] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 652.678494][T11394] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.717165][T17349] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.3740: attempt to clear invalid blocks 2 len 1 [ 652.751454][T17349] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 652.756023][T17349] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, [ 652.764234][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 652.764543][ C0] EXT4-fs (loop6): initial error at time 1772677664: ext4_clear_blocks:876: inode 13 [ 652.764854][ C0] EXT4-fs (loop6): last error at time 1772677664: ext4_clear_blocks:876: inode 13 [ 652.805360][T17349] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 652.827493][T17349] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3740: invalid indirect mapped block 1819239214 (level 0) [ 652.842829][T17349] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 652.845368][T17349] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3740: invalid indirect mapped block 1819239214 (level 1) [ 652.884899][T17349] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 652.890032][T17349] EXT4-fs (loop6): 1 truncate cleaned up [ 652.912699][T17349] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 652.932778][T17386] EXT4-fs (loop8): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 652.943687][T17385] EXT4-fs (loop9): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 653.053602][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.190052][T17393] 9pnet_fd: Insufficient options for proto=fd [ 653.237484][T17385] set_capacity_and_notify: 3 callbacks suppressed [ 653.237567][T17385] loop9: detected capacity change from 0 to 512 [ 653.264273][T17385] EXT4-fs: Ignoring removed mblk_io_submit option [ 653.662316][T17385] EXT4-fs (loop9): orphan cleanup on readonly fs [ 653.726697][T17385] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 653.820487][T17385] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.3751: attempt to clear invalid blocks 2 len 1 [ 653.936298][T17385] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 653.940696][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 653.956343][ C0] EXT4-fs (loop9): initial error at time 1772677665: ext4_clear_blocks:876: inode 13 [ 653.965881][ C0] EXT4-fs (loop9): last error at time 1772677665: ext4_clear_blocks:876: inode 13 [ 653.977338][T17385] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 653.996444][T17385] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3751: invalid indirect mapped block 1819239214 (level 0) [ 654.012438][T17385] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 654.016198][T17385] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3751: invalid indirect mapped block 1819239214 (level 1) [ 654.090639][T17412] FAULT_INJECTION: forcing a failure. [ 654.090639][T17412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.107432][T17385] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 654.151039][T17412] CPU: 0 UID: 0 PID: 17412 Comm: syz.8.3762 Not tainted syzkaller #0 PREEMPT(full) [ 654.151074][T17412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 654.151153][T17412] Call Trace: [ 654.151174][T17412] [ 654.151195][T17412] __dump_stack+0x1d/0x30 [ 654.151268][T17412] dump_stack_lvl+0x95/0xd0 [ 654.151292][T17412] dump_stack+0x15/0x1b [ 654.151313][T17412] should_fail_ex+0x263/0x280 [ 654.151348][T17412] should_fail+0xb/0x20 [ 654.151366][T17412] should_fail_usercopy+0x1a/0x20 [ 654.151395][T17412] _copy_from_user+0x1c/0xb0 [ 654.151424][T17412] ___sys_sendmsg+0xc1/0x1e0 [ 654.151525][T17412] __x64_sys_sendmsg+0xd4/0x160 [ 654.151556][T17412] x64_sys_call+0x194c/0x3020 [ 654.151585][T17412] do_syscall_64+0x12c/0x370 [ 654.151605][T17412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.151625][T17412] RIP: 0033:0x7f45ee1ec799 [ 654.151663][T17412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.151684][T17412] RSP: 002b:00007f45ecc3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.151707][T17412] RAX: ffffffffffffffda RBX: 00007f45ee465fa0 RCX: 00007f45ee1ec799 [ 654.151721][T17412] RDX: 0000000060044084 RSI: 0000200000000000 RDI: 0000000000000003 [ 654.151734][T17412] RBP: 00007f45ecc3f090 R08: 0000000000000000 R09: 0000000000000000 [ 654.151746][T17412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.151840][T17412] R13: 00007f45ee466038 R14: 00007f45ee465fa0 R15: 00007fff85e45f38 [ 654.151861][T17412] [ 654.391577][T17411] loop6: detected capacity change from 0 to 1024 [ 654.400086][T17385] EXT4-fs (loop9): 1 truncate cleaned up [ 654.415600][T17385] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 654.432692][T17411] EXT4-fs: dax option not supported [ 654.582243][T11394] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.605191][T17421] loop6: detected capacity change from 0 to 512 [ 654.945133][T17418] loop8: detected capacity change from 0 to 164 [ 655.132778][T17421] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.145675][T17421] ext4 filesystem being mounted at /487/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.214863][T17432] 9pnet_fd: Insufficient options for proto=fd [ 655.258640][T17435] netlink: 200 bytes leftover after parsing attributes in process `syz.5.3769'. [ 655.340224][T17438] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3770'. [ 655.349294][ T28] audit: type=1400 audit(1772677667.328:2428): avc: denied { firmware_load } for pid=17420 comm="syz.6.3767" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 655.424264][T17444] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 655.433998][T17444] block device autoloading is deprecated and will be removed. [ 655.989152][T17459] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3775'. [ 656.050911][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.102828][ T28] audit: type=1400 audit(1772677668.118:2429): avc: denied { setopt } for pid=17468 comm="syz.9.3778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 656.401636][T17489] syzkaller0: entered promiscuous mode [ 656.407188][T17489] syzkaller0: entered allmulticast mode [ 656.545405][T17497] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3788'. [ 656.621452][T17495] loop5: detected capacity change from 0 to 1024 [ 656.664284][T17495] EXT4-fs: dax option not supported [ 656.739647][T17505] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3791'. [ 656.762995][T17509] loop6: detected capacity change from 0 to 512 [ 656.808778][T17509] EXT4-fs (loop6): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 657.059325][T17526] loop9: detected capacity change from 0 to 512 [ 657.099963][T17526] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.126332][T17526] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.349849][T11394] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.415276][T17531] FAULT_INJECTION: forcing a failure. [ 657.415276][T17531] name failslab, interval 1, probability 0, space 0, times 0 [ 657.483774][T17531] CPU: 0 UID: 0 PID: 17531 Comm: syz.9.3798 Not tainted syzkaller #0 PREEMPT(full) [ 657.483807][T17531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 657.483822][T17531] Call Trace: [ 657.483886][T17531] [ 657.483894][T17531] __dump_stack+0x1d/0x30 [ 657.483922][T17531] dump_stack_lvl+0x95/0xd0 [ 657.483944][T17531] dump_stack+0x15/0x1b [ 657.484048][T17531] should_fail_ex+0x263/0x280 [ 657.484071][T17531] should_failslab+0x8c/0xb0 [ 657.484097][T17531] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 657.484125][T17531] ? __alloc_skb+0x2d6/0x690 [ 657.484154][T17531] __alloc_skb+0x2d6/0x690 [ 657.484180][T17531] ? __alloc_skb+0x200/0x690 [ 657.484282][T17531] netlink_alloc_large_skb+0xbf/0xf0 [ 657.484310][T17531] netlink_sendmsg+0x40c/0x6f0 [ 657.484338][T17531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.484363][T17531] ____sys_sendmsg+0x5af/0x600 [ 657.484455][T17531] ___sys_sendmsg+0x195/0x1e0 [ 657.484520][T17531] __x64_sys_sendmsg+0xd4/0x160 [ 657.484572][T17531] x64_sys_call+0x194c/0x3020 [ 657.484603][T17531] do_syscall_64+0x12c/0x370 [ 657.484668][T17531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.484689][T17531] RIP: 0033:0x7fc2e534c799 [ 657.484738][T17531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.484756][T17531] RSP: 002b:00007fc2e3d9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.484777][T17531] RAX: ffffffffffffffda RBX: 00007fc2e55c5fa0 RCX: 00007fc2e534c799 [ 657.484791][T17531] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000003 [ 657.484903][T17531] RBP: 00007fc2e3d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 657.484917][T17531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.484929][T17531] R13: 00007fc2e55c6038 R14: 00007fc2e55c5fa0 R15: 00007ffed993cf28 [ 657.484948][T17531] [ 657.781460][T17537] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3801'. [ 658.034150][T17541] loop3: detected capacity change from 0 to 1024 [ 658.038248][T17548] loop6: detected capacity change from 0 to 512 [ 658.045554][T17541] EXT4-fs: dax option not supported [ 658.067138][T17548] EXT4-fs (loop6): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 658.140104][T17552] netlink: 'syz.9.3809': attribute type 2 has an invalid length. [ 658.140124][T17552] netlink: 'syz.9.3809': attribute type 1 has an invalid length. [ 658.193032][T17556] loop9: detected capacity change from 0 to 512 [ 658.193702][T17556] EXT4-fs (loop9): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 658.313016][T17548] set_capacity_and_notify: 1 callbacks suppressed [ 658.313129][T17548] loop6: detected capacity change from 0 to 512 [ 658.355484][T17548] EXT4-fs: Ignoring removed mblk_io_submit option [ 658.424162][T17548] EXT4-fs (loop6): orphan cleanup on readonly fs [ 658.431627][T17548] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 658.455828][T17548] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.3806: attempt to clear invalid blocks 2 len 1 [ 658.473645][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 658.473664][ T28] audit: type=1400 audit(1772677670.488:2431): avc: denied { write } for pid=17560 comm="syz.5.3811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 658.528503][T17548] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 658.530430][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 658.546061][ C0] EXT4-fs (loop6): initial error at time 1772677670: ext4_clear_blocks:876: inode 13 [ 658.555609][ C0] EXT4-fs (loop6): last error at time 1772677670: ext4_clear_blocks:876: inode 13 [ 658.569437][T17548] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 658.571799][ T28] audit: type=1400 audit(1772677670.498:2432): avc: denied { read } for pid=17560 comm="syz.5.3811" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 658.618800][T17548] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3806: invalid indirect mapped block 1819239214 (level 0) [ 658.647073][ T28] audit: type=1400 audit(1772677670.498:2433): avc: denied { open } for pid=17560 comm="syz.5.3811" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 658.647175][T17548] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 658.683290][ T28] audit: type=1400 audit(1772677670.518:2434): avc: denied { ioctl } for pid=17560 comm="syz.5.3811" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 658.730793][T17548] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3806: invalid indirect mapped block 1819239214 (level 1) [ 658.763001][T17566] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3813'. [ 658.767008][T17548] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 658.796670][T17548] EXT4-fs (loop6): 1 truncate cleaned up [ 658.815233][T17548] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 658.854885][T17570] loop9: detected capacity change from 0 to 512 [ 658.885111][T17570] EXT4-fs (loop9): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 658.961388][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.648141][T17575] loop5: detected capacity change from 0 to 1024 [ 659.708176][T17575] EXT4-fs: dax option not supported [ 659.778654][T17589] 9p: Bad value for 'rfdno' [ 659.855240][T17595] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3824'. [ 659.944514][T17598] loop8: detected capacity change from 0 to 512 [ 660.010573][ T28] audit: type=1400 audit(1772677672.018:2435): avc: denied { append } for pid=17599 comm="syz.3.3827" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 660.040166][T17603] loop6: detected capacity change from 0 to 512 [ 660.044456][T17603] EXT4-fs (loop6): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 660.076395][T17598] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.076478][T17598] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.121048][T11281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.279877][T17603] loop6: detected capacity change from 0 to 512 [ 660.295869][T17603] EXT4-fs: Ignoring removed mblk_io_submit option [ 660.328445][T17603] EXT4-fs (loop6): orphan cleanup on readonly fs [ 660.342072][T17603] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 660.377200][T17603] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.3828: attempt to clear invalid blocks 2 len 1 [ 660.392376][T17603] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 660.395642][T17603] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, [ 660.406392][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 660.406532][ C0] EXT4-fs (loop6): initial error at time 1772677672: ext4_clear_blocks:876: inode 13 [ 660.406901][ C0] EXT4-fs (loop6): last error at time 1772677672: ext4_clear_blocks:876: inode 13 [ 660.478227][T17603] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 660.494680][T17603] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3828: invalid indirect mapped block 1819239214 (level 0) [ 660.520879][T17603] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 660.522950][T17603] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3828: invalid indirect mapped block 1819239214 (level 1) [ 660.551062][T17603] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 660.556915][T17603] EXT4-fs (loop6): 1 truncate cleaned up [ 660.582893][T17603] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 660.643994][T17621] loop8: detected capacity change from 0 to 1024 [ 660.659134][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.671124][T17621] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.711763][T17626] FAULT_INJECTION: forcing a failure. [ 660.711763][T17626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.750120][T17626] CPU: 0 UID: 0 PID: 17626 Comm: syz.5.3833 Not tainted syzkaller #0 PREEMPT(full) [ 660.750152][T17626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 660.750166][T17626] Call Trace: [ 660.750174][T17626] [ 660.750182][T17626] __dump_stack+0x1d/0x30 [ 660.750210][T17626] dump_stack_lvl+0x95/0xd0 [ 660.750288][T17626] dump_stack+0x15/0x1b [ 660.750312][T17626] should_fail_ex+0x263/0x280 [ 660.750339][T17626] should_fail+0xb/0x20 [ 660.750439][T17626] should_fail_usercopy+0x1a/0x20 [ 660.750467][T17626] _copy_from_user+0x1c/0xb0 [ 660.750496][T17626] __sys_bpf+0x183/0x7e0 [ 660.750525][T17626] __x64_sys_bpf+0x41/0x50 [ 660.750605][T17626] x64_sys_call+0x10cb/0x3020 [ 660.750658][T17626] do_syscall_64+0x12c/0x370 [ 660.750752][T17626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.750776][T17626] RIP: 0033:0x7fd6379ac799 [ 660.750793][T17626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.750820][T17626] RSP: 002b:00007fd6363ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 660.750842][T17626] RAX: ffffffffffffffda RBX: 00007fd637c25fa0 RCX: 00007fd6379ac799 [ 660.750910][T17626] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 660.750922][T17626] RBP: 00007fd6363ff090 R08: 0000000000000000 R09: 0000000000000000 [ 660.750935][T17626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.750956][T17626] R13: 00007fd637c26038 R14: 00007fd637c25fa0 R15: 00007ffc564576b8 [ 660.751008][T17626] [ 660.916302][T17630] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3831'. [ 660.971583][T17636] loop9: detected capacity change from 0 to 128 [ 660.985722][T17638] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3836'. [ 661.000226][T11281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.065091][T17636] bio_check_eod: 197 callbacks suppressed [ 661.065120][T17636] syz.9.3837: attempt to access beyond end of device [ 661.065120][T17636] loop9: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 661.085808][T17636] syz.9.3837: attempt to access beyond end of device [ 661.085808][T17636] loop9: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 661.102026][T17636] Buffer I/O error on dev loop9, logical block 80, lost async page write [ 661.173892][T17636] syz.9.3837: attempt to access beyond end of device [ 661.173892][T17636] loop9: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 661.188486][T17636] syz.9.3837: attempt to access beyond end of device [ 661.188486][T17636] loop9: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 662.127077][T17636] Buffer I/O error on dev loop9, logical block 84, lost async page write [ 662.221308][T17633] syz.9.3837: attempt to access beyond end of device [ 662.221308][T17633] loop9: rw=8912896, sector=154, nr_sectors = 8 limit=128 [ 662.236196][T17633] syz.9.3837: attempt to access beyond end of device [ 662.236196][T17633] loop9: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 662.261336][T17633] syz.9.3837: attempt to access beyond end of device [ 662.261336][T17633] loop9: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 662.342245][T17633] syz.9.3837: attempt to access beyond end of device [ 662.342245][T17633] loop9: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 662.485020][T17633] syz.9.3837: attempt to access beyond end of device [ 662.485020][T17633] loop9: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 662.525416][T17633] syz.9.3837: attempt to access beyond end of device [ 662.525416][T17633] loop9: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 662.539309][T17656] loop8: detected capacity change from 0 to 512 [ 662.585734][T17656] EXT4-fs (loop8): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 662.653068][ T28] audit: type=1400 audit(1772677674.668:2436): avc: denied { read } for pid=17663 comm="syz.5.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 664.743065][T17688] loop5: detected capacity change from 0 to 512 [ 664.790462][T17692] loop3: detected capacity change from 0 to 512 [ 664.807126][T17692] EXT4-fs (loop3): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 664.819143][T17688] EXT4-fs (loop5): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 664.873563][T17694] loop6: detected capacity change from 0 to 512 [ 664.909193][T17656] loop8: detected capacity change from 0 to 512 [ 664.916750][T17676] syz.9.3837 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 664.955124][T17694] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.3857: inode has both inline data and extents flags [ 664.985496][T17656] EXT4-fs: Ignoring removed mblk_io_submit option [ 665.025223][T17694] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 665.025349][T17694] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3857: couldn't read orphan inode 15 (err -117) [ 665.034922][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 665.034946][ C0] EXT4-fs (loop6): initial error at time 1772677677: ext4_orphan_get:1391: inode 15 [ 665.034989][ C0] EXT4-fs (loop6): last error at time 1772677677: ext4_orphan_get:1391: inode 15 [ 665.160103][T17694] loop6: lost filesystem error report for type 5 error -117 [ 665.293446][T17656] EXT4-fs (loop8): orphan cleanup on readonly fs [ 665.315520][T17694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.330247][T17656] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 665.383259][T17656] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.3843: attempt to clear invalid blocks 2 len 1 [ 665.440567][T17656] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 665.443932][T17656] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, [ 665.454500][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 665.454771][ C1] EXT4-fs (loop8): initial error at time 1772677677: ext4_clear_blocks:876: inode 13 [ 665.455381][ C1] EXT4-fs (loop8): last error at time 1772677677: ext4_clear_blocks:876: inode 13 [ 665.496385][T17656] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 665.527432][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.554193][T17656] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3843: invalid indirect mapped block 1819239214 (level 0) [ 665.588611][T17656] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 665.595278][T17656] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3843: invalid indirect mapped block 1819239214 (level 1) [ 665.683381][T17656] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 665.703056][T17656] EXT4-fs (loop8): 1 truncate cleaned up [ 665.792970][T17656] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 665.904764][T17716] loop6: detected capacity change from 0 to 512 [ 665.919391][T11281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.938546][T17716] EXT4-fs (loop6): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 666.573142][T10180] IPVS: starting estimator thread 0... [ 666.732650][T17723] IPVS: using max 2784 ests per chain, 139200 per kthread [ 666.776324][T17729] loop6: detected capacity change from 0 to 512 [ 666.812962][T17729] EXT4-fs: Ignoring removed mblk_io_submit option [ 666.892254][T17729] EXT4-fs (loop6): orphan cleanup on readonly fs [ 666.958259][T17729] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 667.015359][T17729] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.3863: attempt to clear invalid blocks 2 len 1 [ 667.090787][T17729] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 667.091938][T17729] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, [ 667.101137][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 667.101160][ C1] EXT4-fs (loop6): initial error at time 1772677679: ext4_clear_blocks:876: inode 13 [ 667.101211][ C1] EXT4-fs (loop6): last error at time 1772677679: ext4_clear_blocks:876: inode 13 [ 667.134690][T17729] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 667.180344][T17729] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3863: invalid indirect mapped block 1819239214 (level 0) [ 667.240276][T17729] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 667.270992][T17729] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3863: invalid indirect mapped block 1819239214 (level 1) [ 667.330744][T17729] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 667.331496][T17729] EXT4-fs (loop6): 1 truncate cleaned up [ 667.369424][T17739] loop8: detected capacity change from 0 to 512 [ 667.404076][T17729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 667.417359][T17739] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 667.493902][T17739] EXT4-fs (loop8): 1 truncate cleaned up [ 667.500142][T17739] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.969831][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.107332][ T28] audit: type=1400 audit(1772677680.108:2437): avc: denied { read } for pid=17738 comm="syz.8.3869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 668.157375][T17754] loop6: detected capacity change from 0 to 512 [ 668.189815][ T28] audit: type=1400 audit(1772677680.108:2438): avc: denied { setattr } for pid=17738 comm="syz.8.3869" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 668.239984][T17754] EXT4-fs (loop6): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 668.528986][T11281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.252216][T17785] loop5: detected capacity change from 0 to 164 [ 671.331831][T17788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3883'. [ 671.348542][T17789] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3884'. [ 671.515288][ T28] audit: type=1400 audit(1772677683.529:2439): avc: denied { ioctl } for pid=17803 comm="syz.6.3890" path="socket:[56827]" dev="sockfs" ino=56827 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 671.590790][T17806] loop5: detected capacity change from 0 to 512 [ 671.629963][T17806] EXT4-fs (loop5): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 672.069832][ T28] audit: type=1400 audit(1772677684.079:2440): avc: denied { bind } for pid=17814 comm="syz.3.3892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 672.319131][T17819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3893'. [ 672.406654][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3897'. [ 672.538397][T17836] loop9: detected capacity change from 0 to 512 [ 672.562653][T17836] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 672.591883][T17843] tmpfs: Bad value for 'mpol' [ 672.603338][T17843] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3906'. [ 672.726856][T17836] EXT4-fs (loop9): 1 orphan inode deleted [ 672.732915][T17836] EXT4-fs (loop9): 1 truncate cleaned up [ 672.739164][T17836] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.754096][T17843] tipc: Enabling of bearer rejected, media not registered [ 672.769498][T17836] EXT4-fs error (device loop9): ext4_check_dx_root:2201: inode #2: comm syz.9.3903: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 672.785417][ T28] audit: type=1400 audit(1772677684.779:2441): avc: denied { create } for pid=17835 comm="syz.9.3903" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 673.179769][ T28] audit: type=1400 audit(1772677684.779:2442): avc: denied { rename } for pid=17835 comm="syz.9.3903" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 673.410615][ T28] audit: type=1400 audit(1772677685.169:2443): avc: denied { setattr } for pid=17835 comm="syz.9.3903" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 673.506093][T11394] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.326913][T17872] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 674.410357][T17871] loop6: detected capacity change from 0 to 512 [ 674.574548][ T28] audit: type=1400 audit(1772677686.589:2444): avc: denied { setopt } for pid=17876 comm="syz.3.3914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 674.638663][T17871] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.657428][T17879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3914'. [ 674.715380][T17871] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 675.035321][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.051167][T17881] binfmt_misc: register: failed to install interpreter file ./file0 [ 675.076958][ T28] audit: type=1400 audit(1772677687.089:2445): avc: denied { view } for pid=17882 comm="syz.6.3916" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 675.105338][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3916'. [ 675.152536][T17886] loop5: detected capacity change from 0 to 512 [ 675.162739][ T28] audit: type=1400 audit(1772677687.119:2446): avc: denied { write } for pid=17880 comm="syz.3.3915" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 675.222520][T17886] EXT4-fs (loop5): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 675.261761][T17889] loop6: detected capacity change from 0 to 512 [ 675.283180][T17892] netlink: 'syz.3.3920': attribute type 29 has an invalid length. [ 675.308877][T17889] EXT4-fs (loop6): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 675.322390][ T28] audit: type=1326 audit(1772677687.139:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17880 comm="syz.3.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d5f7c799 code=0x7ffc0000 [ 675.365314][T17894] netlink: 'syz.3.3920': attribute type 29 has an invalid length. [ 675.439607][ T28] audit: type=1326 audit(1772677687.139:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17880 comm="syz.3.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fb3d5f7c799 code=0x7ffc0000 [ 675.546455][ T28] audit: type=1326 audit(1772677687.139:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17880 comm="syz.3.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d5f7c799 code=0x7ffc0000 [ 675.645907][ T28] audit: type=1326 audit(1772677687.139:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17880 comm="syz.3.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fb3d5f7c799 code=0x7ffc0000 [ 675.743309][T17894] loop3: detected capacity change from 0 to 8192 [ 675.751044][ T28] audit: type=1326 audit(1772677687.139:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17880 comm="syz.3.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d5f7c799 code=0x7ffc0000 [ 675.835350][T17886] loop5: detected capacity change from 0 to 512 [ 675.877033][T17889] loop6: detected capacity change from 0 to 512 [ 675.908391][T17886] EXT4-fs: Ignoring removed mblk_io_submit option [ 675.993631][T17889] EXT4-fs: Ignoring removed mblk_io_submit option [ 676.049849][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3920'. [ 676.071485][T17886] EXT4-fs (loop5): orphan cleanup on readonly fs [ 676.078746][T17886] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 676.105542][T17886] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.3917: attempt to clear invalid blocks 2 len 1 [ 676.119658][T17886] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 676.126817][T17886] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, [ 676.137209][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 676.137269][ C0] EXT4-fs (loop5): initial error at time 1772677688: ext4_clear_blocks:876: inode 13 [ 676.138180][ C0] EXT4-fs (loop5): last error at time 1772677688: ext4_clear_blocks:876: inode 13 [ 676.178087][T17886] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 676.212419][T17889] EXT4-fs (loop6): orphan cleanup on readonly fs [ 676.219086][T17886] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3917: invalid indirect mapped block 1819239214 (level 0) [ 676.229747][T17889] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 676.253873][T17889] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.3918: attempt to clear invalid blocks 2 len 1 [ 676.270024][T17889] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 676.271491][T17886] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 676.281659][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 676.281859][ C1] EXT4-fs (loop6): initial error at time 1772677688: ext4_clear_blocks:876: inode 13 [ 676.282374][ C1] EXT4-fs (loop6): last error at time 1772677688: ext4_clear_blocks:876: inode 13 [ 676.326623][T17889] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 676.344193][T17886] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3917: invalid indirect mapped block 1819239214 (level 1) [ 676.369872][T17894] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65306 sclass=netlink_xfrm_socket pid=17894 comm=syz.3.3920 [ 676.376083][T17889] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3918: invalid indirect mapped block 1819239214 (level 0) [ 676.411594][T17886] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 676.416312][T17886] EXT4-fs (loop5): 1 truncate cleaned up [ 676.460155][T17889] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 676.474933][T17889] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3918: invalid indirect mapped block 1819239214 (level 1) [ 676.483824][T17886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 676.529896][T17889] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 676.547029][T17908] loop8: detected capacity change from 0 to 1024 [ 676.623648][T17892] syz.3.3920 (17892) used greatest stack depth: 7224 bytes left [ 676.658726][T17908] EXT4-fs: dax option not supported [ 676.675130][T17889] EXT4-fs (loop6): 1 truncate cleaned up [ 676.688841][T17889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 676.952770][T16588] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.964124][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.032421][T17915] gtp0: entered promiscuous mode [ 677.037406][T17915] gtp0: entered allmulticast mode [ 678.504440][T17943] loop5: detected capacity change from 0 to 512 [ 678.519785][T17944] loop3: detected capacity change from 0 to 512 [ 678.529801][T17943] EXT4-fs (loop5): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 678.539967][T17944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.557558][T17944] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.610425][T17948] loop9: detected capacity change from 0 to 512 [ 678.624198][T17948] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.664016][T11394] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.687373][T13377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.765354][T17955] 9p: Could not find request transport: fd0x0000000000000003 [ 678.886957][T17943] loop5: detected capacity change from 0 to 512 [ 678.902674][T17943] EXT4-fs: Ignoring removed mblk_io_submit option [ 678.948324][T17943] EXT4-fs (loop5): orphan cleanup on readonly fs [ 678.965327][T17943] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 678.993769][T17943] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.3936: attempt to clear invalid blocks 2 len 1 [ 679.007673][T17943] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 679.009444][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 679.026825][ C0] EXT4-fs (loop5): initial error at time 1772677691: ext4_clear_blocks:876: inode 13 [ 679.039126][ C0] EXT4-fs (loop5): last error at time 1772677691: ext4_clear_blocks:876: inode 13 [ 679.054927][T17943] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 679.075905][T17943] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3936: invalid indirect mapped block 1819239214 (level 0) [ 679.106917][T17943] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 679.115519][T17943] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3936: invalid indirect mapped block 1819239214 (level 1) [ 679.141040][T17943] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 679.146822][T17943] EXT4-fs (loop5): 1 truncate cleaned up [ 679.505749][T17943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 679.690984][T16588] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.081237][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 680.081265][ T28] audit: type=1400 audit(1772677692.099:2453): avc: denied { connect } for pid=17990 comm="syz.5.3950" lport=62314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 680.453513][T18004] qrtr: Invalid version 86 [ 680.488278][ T28] audit: type=1400 audit(1772677692.489:2454): avc: denied { ioctl } for pid=18003 comm="syz.3.3955" path="socket:[57222]" dev="sockfs" ino=57222 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 680.545251][T18008] netlink: 'syz.3.3957': attribute type 1 has an invalid length. [ 680.604012][T18008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 680.649416][T18008] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18008 comm=syz.3.3957 [ 680.712462][T18009] bond1: (slave gretap1): making interface the new active one [ 680.721156][T18009] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 680.805685][T18024] loop9: detected capacity change from 0 to 164 [ 681.603793][T18035] xt_TCPMSS: Only works on TCP SYN packets [ 681.807982][ T28] audit: type=1400 audit(1772677693.819:2455): avc: denied { unmount } for pid=16588 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 681.884159][ T28] audit: type=1400 audit(1772677693.859:2456): avc: denied { ioctl } for pid=18058 comm="syz.6.3971" path="socket:[58519]" dev="sockfs" ino=58519 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 681.915588][T18068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18068 comm=syz.9.3975 [ 681.965841][T18071] loop5: detected capacity change from 0 to 512 [ 681.976836][T18068] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3975'. [ 681.981344][T18079] FAULT_INJECTION: forcing a failure. [ 681.981344][T18079] name failslab, interval 1, probability 0, space 0, times 0 [ 682.008730][T18071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.031286][T18079] CPU: 1 UID: 0 PID: 18079 Comm: syz.8.3978 Not tainted syzkaller #0 PREEMPT(full) [ 682.031318][T18079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 682.031394][T18079] Call Trace: [ 682.031403][T18079] [ 682.031413][T18079] __dump_stack+0x1d/0x30 [ 682.031440][T18079] dump_stack_lvl+0x95/0xd0 [ 682.031462][T18079] dump_stack+0x15/0x1b [ 682.031544][T18079] should_fail_ex+0x263/0x280 [ 682.031567][T18079] should_failslab+0x8c/0xb0 [ 682.031588][T18079] kmem_cache_alloc_noprof+0x66/0x400 [ 682.031610][T18079] ? skb_clone+0x151/0x1f0 [ 682.031681][T18079] skb_clone+0x151/0x1f0 [ 682.031707][T18079] __netlink_deliver_tap+0x2c9/0x500 [ 682.031744][T18079] netlink_unicast+0x66b/0x690 [ 682.031782][T18079] netlink_sendmsg+0x5c8/0x6f0 [ 682.031821][T18079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.031855][T18079] sock_write_iter+0x32a/0x360 [ 682.031894][T18079] do_iter_readv_writev+0x4fd/0x5a0 [ 682.031917][T18079] vfs_writev+0x2e1/0x900 [ 682.031950][T18079] do_writev+0xe9/0x210 [ 682.031976][T18079] __x64_sys_writev+0x45/0x50 [ 682.032001][T18079] x64_sys_call+0x1c0c/0x3020 [ 682.032116][T18079] do_syscall_64+0x12c/0x370 [ 682.032221][T18079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.032243][T18079] RIP: 0033:0x7f45ee1ec799 [ 682.032261][T18079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.032324][T18079] RSP: 002b:00007f45ecc3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 682.032349][T18079] RAX: ffffffffffffffda RBX: 00007f45ee465fa0 RCX: 00007f45ee1ec799 [ 682.032365][T18079] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 682.032380][T18079] RBP: 00007f45ecc3f090 R08: 0000000000000000 R09: 0000000000000000 [ 682.032395][T18079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.032410][T18079] R13: 00007f45ee466038 R14: 00007f45ee465fa0 R15: 00007fff85e45f38 [ 682.032433][T18079] [ 682.033494][T18071] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.473161][T16588] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.343636][T18101] FAULT_INJECTION: forcing a failure. [ 683.343636][T18101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.356841][T18101] CPU: 1 UID: 0 PID: 18101 Comm: syz.6.3984 Not tainted syzkaller #0 PREEMPT(full) [ 683.356872][T18101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 683.356964][T18101] Call Trace: [ 683.356972][T18101] [ 683.356982][T18101] __dump_stack+0x1d/0x30 [ 683.357013][T18101] dump_stack_lvl+0x95/0xd0 [ 683.357038][T18101] dump_stack+0x15/0x1b [ 683.357118][T18101] should_fail_ex+0x263/0x280 [ 683.357142][T18101] should_fail+0xb/0x20 [ 683.357163][T18101] should_fail_usercopy+0x1a/0x20 [ 683.357186][T18101] _copy_from_user+0x1c/0xb0 [ 683.357256][T18101] io_submit_one+0x52/0x1350 [ 683.357297][T18101] __se_sys_io_submit+0xfb/0x280 [ 683.357332][T18101] __x64_sys_io_submit+0x43/0x50 [ 683.357435][T18101] x64_sys_call+0x19d5/0x3020 [ 683.357466][T18101] do_syscall_64+0x12c/0x370 [ 683.357546][T18101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.357571][T18101] RIP: 0033:0x7f184c36c799 [ 683.357590][T18101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.357610][T18101] RSP: 002b:00007f184ad85028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 683.357709][T18101] RAX: ffffffffffffffda RBX: 00007f184c5e6180 RCX: 00007f184c36c799 [ 683.357728][T18101] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 00007f184ad5a000 [ 683.357743][T18101] RBP: 00007f184ad85090 R08: 0000000000000000 R09: 0000000000000000 [ 683.357758][T18101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.357770][T18101] R13: 00007f184c5e6218 R14: 00007f184c5e6180 R15: 00007fff77d18ad8 [ 683.357788][T18101] [ 683.539356][T18098] loop8: detected capacity change from 0 to 512 [ 683.546618][T18098] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 683.568502][T18098] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.3986: bad orphan inode 131083 [ 683.579984][T18098] loop8: lost filesystem error report for type 5 error -117 [ 683.581295][T18098] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.655802][T18095] loop3: detected capacity change from 0 to 164 [ 683.768948][ T28] audit: type=1400 audit(1772677695.759:2457): avc: denied { setopt } for pid=18110 comm="syz.6.3988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 683.789266][T11281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.838804][ T28] audit: type=1400 audit(1772677695.829:2458): avc: denied { getopt } for pid=18110 comm="syz.6.3988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 683.879891][T18122] loop9: detected capacity change from 0 to 512 [ 683.918431][T18122] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 683.952021][T18128] netlink: 220 bytes leftover after parsing attributes in process `syz.8.3989'. [ 683.961204][T18128] tc_dump_action: action bad kind [ 683.983174][T18122] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3993: bg 0: block 393: padding at end of block bitmap is not set [ 684.031850][T18122] loop9: lost filesystem error report for type 5 error -117 [ 684.032119][T18122] EXT4-fs (loop9): Remounting filesystem read-only [ 684.039565][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 684.039587][ C0] EXT4-fs (loop9): initial error at time 1772677696: ext4_validate_block_bitmap:441 [ 684.039615][ C0] EXT4-fs (loop9): last error at time 1772677696: ext4_validate_block_bitmap:441 [ 684.098725][T18122] EXT4-fs (loop9): 2 truncates cleaned up [ 684.105449][T18122] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.234906][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3999'. [ 684.247538][T18157] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.250018][T18152] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4003'. [ 684.259682][T18157] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.308900][T11394] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.387549][ T28] audit: type=1400 audit(1772677696.399:2459): avc: denied { execute_no_trans } for pid=18166 comm="syz.6.4008" path="/545/file1" dev="tmpfs" ino=2901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 684.473971][T18170] loop9: detected capacity change from 0 to 764 [ 684.496941][T18170] iso9660: Unknown parameter '' [ 684.501292][ T28] audit: type=1400 audit(1772677696.509:2460): avc: denied { relabelfrom } for pid=18178 comm="syz.5.4012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 684.533006][ T28] audit: type=1400 audit(1772677696.509:2461): avc: denied { relabelto } for pid=18178 comm="syz.5.4012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 684.821933][T18190] loop9: detected capacity change from 0 to 512 [ 684.872489][T18190] EXT4-fs (loop9): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 685.479272][T18200] loop3: detected capacity change from 0 to 512 [ 685.532500][T18190] loop9: detected capacity change from 0 to 512 [ 685.549831][T18200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.565567][T18200] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.628446][T18209] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4020'. [ 685.646941][T18190] EXT4-fs: Ignoring removed mblk_io_submit option [ 685.647975][T18209] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.665204][T18209] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.686332][T18195] loop5: detected capacity change from 0 to 164 [ 685.695253][T13377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.732974][T18190] EXT4-fs (loop9): orphan cleanup on readonly fs [ 685.788393][T18190] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 685.859138][T18190] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.4016: attempt to clear invalid blocks 2 len 1 [ 685.892516][T18190] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 685.894709][T18190] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, [ 685.904801][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 685.904841][ C0] EXT4-fs (loop9): initial error at time 1772677697: ext4_clear_blocks:876: inode 13 [ 685.905288][ C0] EXT4-fs (loop9): last error at time 1772677697: ext4_clear_blocks:876: inode 13 [ 685.946775][T18190] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 686.029182][T18220] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 686.082580][T18219] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4024'. [ 686.169973][T18219] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4024'. [ 686.287934][T18225] loop6: detected capacity change from 0 to 512 [ 686.317992][T18221] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4024'. [ 686.334630][ T28] audit: type=1400 audit(1772677698.289:2462): avc: denied { create } for pid=18223 comm="syz.5.4025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 686.360842][T18224] iso9660: Unknown parameter 'overriderockp¡< íunhide' [ 686.371378][T18190] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.4016: invalid indirect mapped block 1819239214 (level 0) [ 686.389046][T18225] EXT4-fs (loop6): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 686.561541][ T28] audit: type=1400 audit(1772677698.289:2463): avc: denied { bind } for pid=18223 comm="syz.5.4025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 686.627830][T18190] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 686.635074][T18226] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 686.691905][T18190] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.4016: invalid indirect mapped block 1819239214 (level 1) [ 686.770570][T18228] EXT4-fs (loop8): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 686.806314][T18190] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 686.840113][T18190] EXT4-fs (loop9): 1 truncate cleaned up [ 686.863463][T18226] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 686.983045][T18226] JBD2: no valid journal superblock found [ 687.006151][T18190] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 687.028297][T18226] EXT4-fs (loop5): Could not load journal inode [ 687.280745][T11394] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.774225][T18245] set_capacity_and_notify: 3 callbacks suppressed [ 687.774242][T18245] loop8: detected capacity change from 0 to 512 [ 687.791637][T18245] EXT4-fs (loop8): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 687.807877][T18246] loop3: detected capacity change from 0 to 512 [ 687.846417][T18246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.859159][T18246] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 688.235908][T13377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.258959][ T28] audit: type=1400 audit(1772677700.280:2464): avc: denied { cpu } for pid=18255 comm="syz.6.4038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 688.279030][T18257] loop6: detected capacity change from 0 to 512 [ 688.298463][T18257] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 688.334869][T18265] loop3: detected capacity change from 0 to 1024 [ 688.360073][T18257] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.525072][T18257] ext4 filesystem being mounted at /551/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 688.569021][T18265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.725583][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.787698][T18278] 9pnet_fd: Insufficient options for proto=fd [ 688.900820][T18276] loop5: detected capacity change from 0 to 164 [ 689.184614][T18285] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 690.953418][T18303] loop8: detected capacity change from 0 to 512 [ 691.059352][T18303] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.072035][ T28] audit: type=1400 audit(1772677703.070:2465): avc: denied { unlink } for pid=13377 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 691.150563][T18303] ext4 filesystem being mounted at /405/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.169549][T13377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.188624][ T28] audit: type=1400 audit(1772677703.120:2466): avc: denied { unlink } for pid=13377 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 691.423350][T18309] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4050'. [ 691.435720][T18310] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4052'. [ 691.670241][T11281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.683536][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4056'. [ 692.009618][T18322] loop9: detected capacity change from 0 to 8192 [ 692.017745][T18328] loop8: detected capacity change from 0 to 512 [ 692.177632][T18328] EXT4-fs: Ignoring removed nomblk_io_submit option [ 692.188307][T18328] ext4: Unknown parameter 'hash' [ 692.215629][T18331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4060'. [ 692.255379][T18322] bio_check_eod: 26 callbacks suppressed [ 692.255401][T18322] syz.9.4057: attempt to access beyond end of device [ 692.255401][T18322] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 692.275425][T18322] Buffer I/O error on dev loop9, logical block 57847, async page read [ 692.304035][T18322] syz.9.4057: attempt to access beyond end of device [ 692.304035][T18322] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 692.338117][T18322] Buffer I/O error on dev loop9, logical block 57847, async page read [ 692.358154][T18322] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 692.419793][T18322] FAT-fs (loop9): Filesystem has been set read-only [ 692.430425][T18322] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 692.578525][ T28] audit: type=1400 audit(1772677704.590:2467): avc: denied { map } for pid=18341 comm="syz.3.4062" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 692.580580][T18342] loop3: detected capacity change from 0 to 512 [ 693.590509][T18342] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 693.618556][T18342] System zones: 0-2, 18-18, 34-34 [ 693.624037][T18351] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4065'. [ 693.640447][T18353] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4064'. [ 693.651103][T18351] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4065'. [ 693.661615][T18351] FAULT_INJECTION: forcing a failure. [ 693.661615][T18351] name failslab, interval 1, probability 0, space 0, times 0 [ 693.811317][T18351] CPU: 1 UID: 0 PID: 18351 Comm: syz.6.4065 Not tainted syzkaller #0 PREEMPT(full) [ 693.811350][T18351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 693.811365][T18351] Call Trace: [ 693.811437][T18351] [ 693.811447][T18351] __dump_stack+0x1d/0x30 [ 693.811478][T18351] dump_stack_lvl+0x95/0xd0 [ 693.811504][T18351] dump_stack+0x15/0x1b [ 693.811530][T18351] should_fail_ex+0x263/0x280 [ 693.811557][T18351] should_failslab+0x8c/0xb0 [ 693.811696][T18351] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 693.811722][T18351] ? __alloc_skb+0x2d6/0x690 [ 693.811748][T18351] __alloc_skb+0x2d6/0x690 [ 693.811772][T18351] ? __alloc_skb+0x200/0x690 [ 693.811797][T18351] netlink_alloc_large_skb+0xbf/0xf0 [ 693.811883][T18351] netlink_sendmsg+0x40c/0x6f0 [ 693.811970][T18351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.812000][T18351] ____sys_sendmsg+0x5af/0x600 [ 693.812031][T18351] ___sys_sendmsg+0x195/0x1e0 [ 693.812058][T18351] ? path_openat+0x1b01/0x2050 [ 693.812107][T18351] __sys_sendmmsg+0x185/0x320 [ 693.812144][T18351] __x64_sys_sendmmsg+0x57/0x70 [ 693.812242][T18351] x64_sys_call+0x27aa/0x3020 [ 693.812272][T18351] do_syscall_64+0x12c/0x370 [ 693.812297][T18351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.812341][T18351] RIP: 0033:0x7f184c36c799 [ 693.812360][T18351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.812380][T18351] RSP: 002b:00007f184adc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 693.812403][T18351] RAX: ffffffffffffffda RBX: 00007f184c5e5fa0 RCX: 00007f184c36c799 [ 693.812420][T18351] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 693.812500][T18351] RBP: 00007f184adc7090 R08: 0000000000000000 R09: 0000000000000000 [ 693.812514][T18351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.812528][T18351] R13: 00007f184c5e6038 R14: 00007f184c5e5fa0 R15: 00007fff77d18ad8 [ 693.812549][T18351] [ 694.052125][T18342] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 694.069833][T18342] EXT4-fs (loop3): Remounting filesystem read-only [ 694.076754][T18342] EXT4-fs (loop3): 1 truncate cleaned up [ 694.082431][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 694.082451][ C1] EXT4-fs (loop3): initial error at time 1772677706: ext4_mb_generate_buddy:1315 [ 694.082492][ C1] EXT4-fs (loop3): last error at time 1772677706: ext4_mb_generate_buddy:1315 [ 694.111917][T10946] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 694.125689][T10946] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 694.136670][T10946] Quota error (device loop3): write_blk: dquota write failed [ 694.146946][T10946] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 694.149007][T18342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.160228][T10946] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 694.205833][T18342] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 694.213300][T10946] Quota error (device loop3): write_blk: dquota write failed [ 694.224646][T10946] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 694.229557][T18342] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.235001][T10946] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 694.257700][T10946] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 694.267069][T10946] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 694.280076][T10946] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 694.424561][T18373] loop5: detected capacity change from 0 to 128 [ 694.459219][T18367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.476526][T18367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.574212][T18363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4069'. [ 694.689526][T10950] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.713357][T10950] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.781550][T10950] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.801748][T18370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=18370 comm=syz.5.4069 [ 695.043764][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4075'. [ 695.063575][T10950] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.208053][T18433] xt_l2tp: missing protocol rule (udp|l2tpip) [ 696.217488][ T28] audit: type=1400 audit(1772677708.240:2468): avc: denied { connect } for pid=18432 comm="syz.9.4086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 696.424850][T18444] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 697.469946][T18424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4087'. [ 697.557523][T18454] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 697.607204][T18455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4096'. [ 699.301178][T18479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.328608][T18479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.482237][T10951] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.492174][T10951] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.515760][T10951] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.539366][T10951] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.662427][T18484] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 699.743465][T18483] loop3: detected capacity change from 0 to 164 [ 699.775112][T18486] ipvlan2: entered promiscuous mode [ 699.788723][T18486] ipvlan2: entered allmulticast mode [ 699.803070][T18486] hsr0: entered allmulticast mode [ 699.819276][T18486] hsr_slave_0: entered allmulticast mode [ 699.844637][T18486] hsr_slave_1: entered allmulticast mode [ 699.875403][T18488] loop8: detected capacity change from 0 to 512 [ 699.884668][T18490] loop6: detected capacity change from 0 to 128 [ 699.895200][T18486] team0: Device ipvlan2 failed to register rx_handler [ 699.897089][T18488] EXT4-fs (loop8): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 700.321819][T18488] loop8: detected capacity change from 0 to 512 [ 700.559561][T18488] EXT4-fs: Ignoring removed mblk_io_submit option [ 700.606639][T18501] loop3: detected capacity change from 0 to 512 [ 700.702169][T18501] EXT4-fs (loop3): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 700.791765][T18488] EXT4-fs (loop8): orphan cleanup on readonly fs [ 700.806362][T18488] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 700.849642][T18488] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.4107: attempt to clear invalid blocks 2 len 1 [ 700.938596][T18488] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 700.948053][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 700.964670][ C0] EXT4-fs (loop8): initial error at time 1772677712: ext4_clear_blocks:876: inode 13 [ 700.975370][ C0] EXT4-fs (loop8): last error at time 1772677712: ext4_clear_blocks:876: inode 13 [ 701.003181][T18488] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 701.113637][T18488] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4107: invalid indirect mapped block 1819239214 (level 0) [ 701.158329][T18488] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 701.163968][T18488] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4107: invalid indirect mapped block 1819239214 (level 1) [ 701.174829][T18501] loop3: detected capacity change from 0 to 512 [ 701.215499][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4112'. [ 701.248538][T18488] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 701.285973][T18488] EXT4-fs (loop8): 1 truncate cleaned up [ 701.324037][T18501] EXT4-fs: Ignoring removed mblk_io_submit option [ 701.349439][T18488] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 701.352774][T18501] EXT4-fs (loop3): orphan cleanup on readonly fs [ 701.400964][T18490] loop6: detected capacity change from 0 to 1024 [ 701.412734][T18501] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 701.538814][T18490] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 701.550618][T18501] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.4111: attempt to clear invalid blocks 2 len 1 [ 701.865087][T18501] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 701.868033][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 701.883774][ C1] EXT4-fs (loop3): initial error at time 1772677713: ext4_clear_blocks:876: inode 13 [ 701.893372][ C1] EXT4-fs (loop3): last error at time 1772677713: ext4_clear_blocks:876: inode 13 [ 701.923331][T18501] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 701.942409][T11281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.955612][T18501] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4111: invalid indirect mapped block 1819239214 (level 0) [ 701.998818][T18501] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 702.004835][T18501] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4111: invalid indirect mapped block 1819239214 (level 1) [ 702.030120][T18501] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 702.092151][T18501] EXT4-fs (loop3): 1 truncate cleaned up [ 702.113161][T18517] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 702.122300][T18518] loop9: detected capacity change from 0 to 256 [ 702.129864][T18518] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 702.161060][T18519] loop8: detected capacity change from 0 to 512 [ 702.225629][T18501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 702.305107][T18519] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.318830][T18524] loop6: detected capacity change from 0 to 512 [ 702.326393][T18519] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 702.338541][T13377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.348354][T18524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 702.355245][T18524] ext4: Unknown parameter 'hash' [ 702.412367][T18527] lo speed is unknown, defaulting to 1000 [ 702.418194][T18527] lo speed is unknown, defaulting to 1000 [ 702.424382][T18527] lo speed is unknown, defaulting to 1000 [ 702.430899][T18527] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 702.438663][T18527] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 702.451327][T18527] lo speed is unknown, defaulting to 1000 [ 702.457678][T18527] lo speed is unknown, defaulting to 1000 [ 702.464318][T18527] lo speed is unknown, defaulting to 1000 [ 702.470901][T18527] lo speed is unknown, defaulting to 1000 [ 702.477462][T18527] lo speed is unknown, defaulting to 1000 [ 702.483967][T18527] lo speed is unknown, defaulting to 1000 [ 702.940956][T18531] netlink: 'syz.5.4120': attribute type 21 has an invalid length. [ 702.998100][T18531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4120'. [ 703.047617][T11281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.083953][T18535] EXT4-fs (loop9): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 703.115821][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 703.115862][ T28] audit: type=1400 audit(1772677715.120:2470): avc: denied { bind } for pid=18536 comm="syz.5.4124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 703.226608][ T28] audit: type=1400 audit(1772677715.230:2471): avc: denied { listen } for pid=18536 comm="syz.5.4124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 703.248071][ T28] audit: type=1400 audit(1772677715.260:2472): avc: denied { setopt } for pid=18536 comm="syz.5.4124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 703.268475][ T28] audit: type=1400 audit(1772677715.260:2473): avc: denied { bind } for pid=18541 comm="syz.6.4125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 703.324868][T18545] EXT4-fs: Ignoring removed mblk_io_submit option [ 703.397318][T18545] EXT4-fs (loop9): orphan cleanup on readonly fs [ 703.410486][T18545] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 703.630452][T18548] lo speed is unknown, defaulting to 1000 [ 704.438307][T18545] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.4122: attempt to clear invalid blocks 2 len 1 [ 704.545980][T18545] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 704.546399][T18545] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, [ 704.555580][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 704.555597][ C1] EXT4-fs (loop9): initial error at time 1772677716: ext4_clear_blocks:876: inode 13 [ 704.555626][ C1] EXT4-fs (loop9): last error at time 1772677716: ext4_clear_blocks:876: inode 13 [ 704.589190][T18545] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 704.657214][ T28] audit: type=1400 audit(1772677716.640:2474): avc: denied { override_creds } for pid=18536 comm="syz.5.4124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 704.725622][ T28] audit: type=1400 audit(1772677716.670:2475): avc: denied { getopt } for pid=18543 comm="syz.8.4126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 704.783184][T18549] set_capacity_and_notify: 3 callbacks suppressed [ 704.783235][T18549] loop3: detected capacity change from 0 to 164 [ 704.785728][T18545] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.4122: invalid indirect mapped block 1819239214 (level 0) [ 704.818235][ T28] audit: type=1400 audit(1772677716.700:2476): avc: denied { mounton } for pid=18543 comm="syz.8.4126" path="/416/file0/bus" dev="loop8" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 704.914496][ T28] audit: type=1400 audit(1772677716.700:2477): avc: denied { append } for pid=18543 comm="syz.8.4126" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 704.940990][T18545] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 704.948027][T18545] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.4122: invalid indirect mapped block 1819239214 (level 1) [ 705.009807][T18545] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 705.010271][T18545] EXT4-fs (loop9): 1 truncate cleaned up [ 705.040373][T18545] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 705.727537][T11394] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.803542][T18566] loop8: detected capacity change from 0 to 512 [ 705.841611][T18566] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.846239][T18569] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4132'. [ 705.861780][T18566] ext4 filesystem being mounted at /417/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 706.757332][T11281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.237198][T18595] loop5: detected capacity change from 0 to 512 [ 707.268431][T18595] EXT4-fs (loop5): bad geometry: block count 15104 exceeds size of device (256 blocks) [ 707.490682][T18605] loop6: detected capacity change from 0 to 1024 [ 707.528059][T18605] ext4: Unknown parameter 'uid<18446744073709551615' [ 707.613258][T18595] loop5: detected capacity change from 0 to 512 [ 707.647052][T18595] EXT4-fs: Ignoring removed mblk_io_submit option [ 707.749717][T18595] EXT4-fs (loop5): orphan cleanup on readonly fs [ 707.757459][T18595] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 707.862472][T18595] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.4140: attempt to clear invalid blocks 2 len 1 [ 708.021061][T18595] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 708.027717][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 708.044816][ C0] EXT4-fs (loop5): initial error at time 1772677720: ext4_clear_blocks:876: inode 13 [ 708.055472][ C0] EXT4-fs (loop5): last error at time 1772677720: ext4_clear_blocks:876: inode 13 [ 708.208911][T18595] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 708.250727][T18595] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4140: invalid indirect mapped block 1819239214 (level 0) [ 708.259779][T18611] loop3: detected capacity change from 0 to 164 [ 708.280020][T18595] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 708.281982][T18595] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4140: invalid indirect mapped block 1819239214 (level 1) [ 708.352944][T18595] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 708.363905][T18615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.404038][T18595] EXT4-fs (loop5): 1 truncate cleaned up [ 708.454004][T18595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 708.548789][T18615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.550202][T18617] lo speed is unknown, defaulting to 1000 [ 708.589299][T18618] lo speed is unknown, defaulting to 1000 [ 708.698572][T16588] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.805743][T18626] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4149'. [ 708.816370][T18626] netlink: 'syz.5.4149': attribute type 13 has an invalid length. [ 708.973661][T18631] loop9: detected capacity change from 0 to 1024 [ 709.004115][T18638] loop5: detected capacity change from 0 to 1024 [ 709.028143][T18631] EXT4-fs: quotafile must be on filesystem root [ 709.067771][T18638] EXT4-fs: dax option not supported [ 709.252655][T18648] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 710.138486][T18659] io-wq is not configured for unbound workers [ 710.139014][ T28] audit: type=1400 audit(1772677722.161:2478): avc: denied { getopt } for pid=18658 comm="syz.3.4159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 710.684926][T18659] loop3: detected capacity change from 0 to 256 [ 710.914920][ T28] audit: type=1400 audit(1772677722.911:2479): avc: denied { read } for pid=18658 comm="syz.3.4159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 710.958443][T18669] FAULT_INJECTION: forcing a failure. [ 710.958443][T18669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.003989][T18669] CPU: 1 UID: 0 PID: 18669 Comm: syz.5.4161 Not tainted syzkaller #0 PREEMPT(full) [ 711.004019][T18669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 711.004051][T18669] Call Trace: [ 711.004059][T18669] [ 711.004120][T18669] __dump_stack+0x1d/0x30 [ 711.004151][T18669] dump_stack_lvl+0x95/0xd0 [ 711.004177][T18669] dump_stack+0x15/0x1b [ 711.004230][T18669] should_fail_ex+0x263/0x280 [ 711.004287][T18669] should_fail+0xb/0x20 [ 711.004309][T18669] should_fail_usercopy+0x1a/0x20 [ 711.004370][T18669] _copy_from_iter+0xcf/0xea0 [ 711.004454][T18669] ? __alloc_skb+0x4f6/0x690 [ 711.004489][T18669] ? __alloc_skb+0x200/0x690 [ 711.004514][T18669] netlink_sendmsg+0x4ae/0x6f0 [ 711.004541][T18669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.004625][T18669] ____sys_sendmsg+0x5af/0x600 [ 711.004660][T18669] ___sys_sendmsg+0x195/0x1e0 [ 711.004690][T18669] ? path_openat+0x1b01/0x2050 [ 711.004739][T18669] __sys_sendmmsg+0x185/0x320 [ 711.004798][T18669] __x64_sys_sendmmsg+0x57/0x70 [ 711.004832][T18669] x64_sys_call+0x27aa/0x3020 [ 711.004862][T18669] do_syscall_64+0x12c/0x370 [ 711.004951][T18669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.005008][T18669] RIP: 0033:0x7fd6379ac799 [ 711.005026][T18669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.005048][T18669] RSP: 002b:00007fd6363ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 711.005136][T18669] RAX: ffffffffffffffda RBX: 00007fd637c25fa0 RCX: 00007fd6379ac799 [ 711.005154][T18669] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 711.005170][T18669] RBP: 00007fd6363ff090 R08: 0000000000000000 R09: 0000000000000000 [ 711.005209][T18669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.005224][T18669] R13: 00007fd637c26038 R14: 00007fd637c25fa0 R15: 00007ffc564576b8 [ 711.005242][T18669] [ 711.596487][T18695] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4172'. [ 711.620132][T18696] loop8: detected capacity change from 0 to 512 [ 711.657862][T18696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 711.715258][T18696] ext4: Unknown parameter 'hash' [ 711.742568][ T28] audit: type=1400 audit(1772677723.761:2480): avc: denied { listen } for pid=18704 comm="syz.6.4176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 711.803261][ T28] audit: type=1400 audit(1772677723.761:2481): avc: denied { connect } for pid=18704 comm="syz.6.4176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 711.845096][T18685] loop5: detected capacity change from 0 to 1024 [ 711.863959][T18686] loop3: detected capacity change from 0 to 164 [ 711.907484][T18685] EXT4-fs: dax option not supported [ 712.490842][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4180'. [ 712.505768][T10180] kernel read not supported for file [fscontext] (pid: 10180 comm: kworker/1:7) [ 712.560373][ T3002] ================================================================== [ 712.566575][ T28] audit: type=1326 audit(1772677724.581:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18727 comm="syz.6.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184c36c799 code=0x7ffc0000 [ 712.568503][ T3002] BUG: KCSAN: data-race in d_delete / step_into_slowpath [ 712.568549][ T3002] [ 712.568556][ T3002] read-write to 0xffff88811b117cc0 of 4 bytes by task 11410 on cpu 1: [ 712.568575][ T3002] d_delete+0xbe/0xe0 [ 712.613631][ T3002] d_delete_notify+0x32/0x100 [ 712.618316][ T3002] vfs_unlink+0x289/0x490 [ 712.622647][ T3002] filename_unlinkat+0x1e2/0x410 [ 712.627587][ T3002] __se_sys_unlink+0x2b/0xe0 [ 712.632188][ T3002] __x64_sys_unlink+0x1f/0x30 [ 712.636871][ T3002] x64_sys_call+0x2eb6/0x3020 [ 712.641556][ T3002] do_syscall_64+0x12c/0x370 [ 712.646148][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.652138][ T3002] [ 712.654471][ T3002] read to 0xffff88811b117cc0 of 4 bytes by task 3002 on cpu 0: [ 712.662013][ T3002] step_into_slowpath+0x139/0x4c0 [ 712.667049][ T3002] path_lookupat+0x330/0x500 [ 712.671644][ T3002] filename_lookup+0x190/0x390 [ 712.676440][ T3002] do_readlinkat+0x74/0x2f0 [ 712.680954][ T3002] __x64_sys_readlink+0x47/0x60 [ 712.685817][ T3002] x64_sys_call+0x2b51/0x3020 [ 712.690675][ T3002] do_syscall_64+0x12c/0x370 [ 712.695266][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.701176][ T3002] [ 712.703496][ T3002] value changed: 0x00300180 -> 0x00004080 [ 712.709211][ T3002] [ 712.711533][ T3002] Reported by Kernel Concurrency Sanitizer on: [ 712.717681][ T3002] CPU: 0 UID: 0 PID: 3002 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 712.726535][ T3002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 712.736592][ T3002] ================================================================== [ 712.759976][ T28] audit: type=1326 audit(1772677724.581:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18727 comm="syz.6.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184c36c799 code=0x7ffc0000 [ 712.822398][ T28] audit: type=1326 audit(1772677724.581:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18727 comm="syz.6.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184c36c799 code=0x7ffc0000 [ 712.846623][ T28] audit: type=1326 audit(1772677724.761:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18727 comm="syz.6.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f184c36c799 code=0x7ffc0000 [ 712.870638][ T28] audit: type=1326 audit(1772677724.761:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18727 comm="syz.6.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184c36c799 code=0x7ffc0000 [ 712.894726][ T28] audit: type=1326 audit(1772677724.761:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18727 comm="syz.6.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184c36c799 code=0x7ffc0000