last executing test programs: 56.343845645s ago: executing program 3 (id=4): r0 = socket(0x11, 0x80000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711814000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000280)={0x2, 0x100, 0xfffc, 0x6, 0x4, "203c002007000000000780fffffffff200", 0xffffffff, 0x5}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0xff) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x1, 0xb2, 0x5, 0x2}, 0x9c) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) capset(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) syz_clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x2}, 0xa0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) 55.358099796s ago: executing program 3 (id=6): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000002c0)=0x200, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, 0x0, &(0x7f0000000300)=0x37) setsockopt(r3, 0x11b, 0x9, 0x0, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="2e1221b23bb601c493d3df163e75963d86dd", 0x12}], 0x1) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r7, 0x890b, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x0, 0xc8, 0x8, 0x1f8, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xff, 0xff000000], [0xff, 0xffffff00, 0x0, 0xff], 'dvmrp0\x00', 'batadv0\x00', {}, {}, 0xff84, 0xbb, 0x0, 0x20}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0xea, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@ipv6header={{0x28}, {0x60, 0x9a, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xe, 0x3, 0x21, '\x00', 'syz1\x00', {0xffffffffffff8001}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'bridge0\x00', 'veth0_to_bond\x00', {}, {}, 0x3c, 0x8, 0x0, 0x8}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 54.920211791s ago: executing program 3 (id=8): r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x282, 0x0) write(r0, &(0x7f0000000380)='27', 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) write$P9_RSYMLINK(r0, &(0x7f00000003c0)={0x14, 0x11, 0x1, {0x40, 0x0, 0x4}}, 0x14) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x205, 0x8401) r2 = syz_open_dev$usbmon(&(0x7f00000004c0), 0x7, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000500)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000540)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r2, &(0x7f0000000580)=[{&(0x7f0000001040)=""/4096, 0x79c5}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r0, 0x84, 0x85, &(0x7f0000002180)={0x1, @in={{0x2, 0x4e23, @multicast1}}, 0x7}, &(0x7f0000002240)=0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x2000, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x230302, 0x0) 54.623772642s ago: executing program 3 (id=9): arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000600)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@nobarrier}, {@oldalloc}, {@orlov}, {@dioread_lock}]}, 0x1, 0x59c, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file1\x00', 0x143042, 0x51) syz_open_dev$usbfs(&(0x7f00000001c0), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x121000) write(r1, &(0x7f0000002a40)="72619c5fb6fbb3ec5a6788a0d1d6e01fa7b7df0ba097e2df997ac54d65efb7cd6bbfcca85bac685bc93de9c2c27ed1f7b9e9584f3248451cd2f41cce2fa6e14a530c67ec00d673f1ea6e6db4bd35cb29d2624c54bc87663d84d2fe13f0618ad3118cfa5c0042f21951699b72d7017d23a0b8b4b2368f63ead8644e8857bf35bee5a0add0f271626aa894c5897ad8ce013f2c8b2b7198eb1550eb1f887e04e7a8a0ab64d384be01f33da59a94bf6bf0ad40aeddbfc9b1356090e6cddc3c32be04548c0368142828150499e71a033c3e78afeb", 0xd2) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000240)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000002c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) fallocate(r0, 0x0, 0x9, 0x10001) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x2, 0x5006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 53.191994128s ago: executing program 3 (id=15): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x7, &(0x7f0000000400)=@framed={{0x18, 0x7, 0x0, 0x0, 0xfffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000440)='syzkaller\x00', 0x5}, 0x94) setsockopt(r0, 0xff, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r1, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000180)='pim6reg\x00'}) 53.003616298s ago: executing program 3 (id=17): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f00000002c0), 0x4000095, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xd4}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = getpid() ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, @perf_config_ext={0x9, 0x3}, 0x4, 0x8, 0x211000, 0x5, 0x0, 0x9000000e, 0xb, 0x0, 0x0, 0x0, 0x20000a4}, r4, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a0000000190001002bbd7000000000001c140000fe03000100000000840013"], 0xa0}}, 0x0) gettid() mmap(&(0x7f000002c000/0x2000)=nil, 0x2000, 0x3000002, 0x50, 0xffffffffffffffff, 0xec778000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 37.988650759s ago: executing program 32 (id=17): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f00000002c0), 0x4000095, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xd4}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = getpid() ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, @perf_config_ext={0x9, 0x3}, 0x4, 0x8, 0x211000, 0x5, 0x0, 0x9000000e, 0xb, 0x0, 0x0, 0x0, 0x20000a4}, r4, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a0000000190001002bbd7000000000001c140000fe03000100000000840013"], 0xa0}}, 0x0) gettid() mmap(&(0x7f000002c000/0x2000)=nil, 0x2000, 0x3000002, 0x50, 0xffffffffffffffff, 0xec778000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 25.866034594s ago: executing program 1 (id=207): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0xbf2288092a27a066) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r1, &(0x7f00000009c0)=""/102380, 0x18fec) perf_event_open(&(0x7f00000199c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x40104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000004, 0xfffffffd, 0x3, 0x9, 0xffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000019b00)="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", 0x558, r2) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, 0x0, &(0x7f000001a0c0)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mount(0x0, 0x0, &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x29, 0x81, 0x8, 0x5, 0x19, @dev={0xfe, 0x80, '\x00', 0x33}, @private1, 0x700, 0x10, 0x4, 0xfffff389}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="0300"/20, @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="0000000003000000000000000000000000000000000000000000000011007377eef41968ba69eb0ccedd00f302693800a0c5a9d7addb019793c49dc5da2b903020d49d06e1c622252c7b8bf76c58fb4556f52919b8a978abcfa8ee002bd00963c8131a4c"], 0x50) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030000001000000004920800024000000001"], 0xfea1}}, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f000031c000/0x11000)=nil, 0x11000, 0x1000003, 0x810, 0xffffffffffffffff, 0xfffff000) munlockall() getrandom(&(0x7f0000000440)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) 25.299880832s ago: executing program 1 (id=215): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7020fddbdf2510000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4040) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="03042cbd00"/14], 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x24008891) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000740)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000780)={0xa, 0x7, 0x1051, @loopback, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000007c0), 0x3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x11a, 0x4, 0x0, 0x0) 25.208603331s ago: executing program 1 (id=216): clock_adjtime(0x0, &(0x7f0000000000)={0xc859, 0x7, 0x6, 0x0, 0xa, 0x9, 0x9, 0xffffffffffffffff, 0x3711, 0xfad, 0x8, 0x398, 0x580ef166, 0x3, 0x0, 0x81, 0x1, 0x8, 0x9, 0x8, 0x1, 0x5, 0x0, 0x94dc, 0xc411, 0xffffffffffff4684}) timer_create(0xfffffffc, 0x0, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) r1 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000800)='asymmetric\x00', 0x0, &(0x7f0000000840)="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", 0x559, r1) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000dc0)={r2, 0x9}, 0x0, &(0x7f0000000e00)="01deebec26a3023dd2", 0x0) 25.207189262s ago: executing program 1 (id=217): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x24, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) socket(0x10, 0x803, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x20000885, 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x204818, &(0x7f0000000080)={[{@map_off}, {@check_strict}, {@unhide}, {@dmode={'dmode', 0x3d, 0x4}}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0xfd, 0x544, &(0x7f0000000f40)="$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") sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000014c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000e80)='ext4\x00', &(0x7f0000000ec0)='./file0\x00', 0x22000011, &(0x7f0000000f00)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000001fc0)="$eJzs3EtvVFUcAPD/nXaKFUoLPnkoo0hsRFtaUFmYGI0mbExMdKHLWipBChioiRAiaAwujZ9AXZr4CVzpxqgrjVvdGxNi2IguzJj7KlM6rdPpTKcyv18y7Tn3dc7/nnt6H+dOA+hbtfRHErEtIn6JiNE8u3SBWv7rxvVLs39dvzSbRL3+yh9Jttyf1y/NlotuK35vLbY5XomofJjEniblnr9w8dTM/PzcuSI/uXD67cnzFy4+cfL0zIm5E3Nnpo8ePXJ46umnpp/sSJwjaV13v3d2765jr3/y0mw93vj+y7T+A8X8xjhyY+susxa1GI56vbJk6lD288C6t765jDSkk8EeVoQ1SY//tLmqWf8fjYG42Xij8eIHPa0c0FX1er2+Y9nU/KxYOZBk84HblT4O/ao846f3v+VnY69Aeuvac/kNUBr3jeKTzxmM9L49Gcvv2Ae6VP62iHjtyt+fpp9o+hwCAKCzvk6vfx5vdv1XiXsblttejA2NRcTBiNgZEXdFxN0RcU9Etux9EXH/Gsuv3ZLPy682TPlpuN3YWpFe/z1TjG0tvf5bHLUZGyhyI1n81eTNk/Nzh4p9Mh7VLWl+apUyvnnh54+zRJNIag3Xf+knLb+8Fizq8fvglqXrHJ9ZmFlv3KVr70fsHny2SfzJ4khAEhG7ImJ3G9tP99nJx77Ym6a3b10+/7/jX0UHxpnqn0c8mrf/lbgl/lKSl7TS+OTkHTE/d2iyPCqW++HHqy835huP7loWRpvxd0Da/nc2Pf6L+MtuUI7Xnl97GVd//WjFe5p2j/+h5NUsPVRMe3dmYeHcVMRQMWHJ9Omb65b5cvk0/vH9zfv/zoh/PivW2xMR6UH8QEQ8GBH7iro/FBEPR8T+VeL/7vlH3lp9D/W2/Y+v1v4RY0kRf+rc4sB964mBU99+tVL5rbX/kSw1Xkxp5e9fqxVsd78BAADA/0klG4NOKhOL6UplYiJ/h7987HKwFu+cOZ6PVY9FtVI+6RpteB46VTwbLvPTt+QPR8SO7E2j4Sw/MXt2fqTHsUO/27pC/0/91q2XXoDNY03jaEn36gFsPN/XhP7VvP939b0rYJNw/of+pf9D/2rW/y9H3OhBVYAN5vwP/av1/u+NALjdOP9D/9L/oS8t/0r8cPGvE9r5pv/NxM5j61p9rYnqBpbV4cRAl7Ycjf+0owuJqPR817WfqGyGauwrElsiotW1Lje0aXna7kYNq/M9/KMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQQf8GAAD//4F+194=") setregid(0x0, 0xee01) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002480)=ANY=[], 0x50) clock_gettime(0x4, &(0x7f00000024c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) sched_getscheduler(r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff12000300686173683a6e65742c706f7274"], 0x60}}, 0x0) 24.649508389s ago: executing program 1 (id=222): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0xa00008, &(0x7f00000001c0), 0x3, 0x7c2, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000a40)='\"', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000001240)='/', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)) 24.451322159s ago: executing program 1 (id=224): mount(0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x73c2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x6}, 0x810, 0x3, 0x40b7, 0x6, 0x5, 0x2008001, 0x7fff, 0x0, 0x200000}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x2, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x5, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) io_setup(0x58, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000300)={0x84, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0x10000004, 0x40008}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000340)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000003c0)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) 24.451206369s ago: executing program 33 (id=224): mount(0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x73c2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x6}, 0x810, 0x3, 0x40b7, 0x6, 0x5, 0x2008001, 0x7fff, 0x0, 0x200000}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x2, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x5, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) io_setup(0x58, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000300)={0x84, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0x10000004, 0x40008}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000340)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000003c0)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) 15.075233112s ago: executing program 6 (id=317): perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000380)=0x1) ioctl$TCGETA(r0, 0x89f3, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001200)={0x1c, 0x100080}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write(r3, &(0x7f0000000140), 0xffffff4a) pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240), &(0x7f0000003940)=0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x8) sendmsg$tipc(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x4}, 0x814) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) r5 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x10040, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20048800) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)=ANY=[@ANYBLOB="1c00000004060101000000050001040700000000d800000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f00000002c0)=0x41) 14.007626922s ago: executing program 6 (id=329): r0 = socket$tipc(0x1e, 0x5, 0x0) (async) setns(0xc9, 0x0) (async) r1 = socket(0x8, 0x5, 0x5) unshare(0x22020600) (async) pselect6(0x40, &(0x7f0000000480)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x4, 0x7}, 0x0, 0x0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async, rerun: 32) r2 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x1) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000800)='fd/3\x00') (async) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000840)={0x6000000d}) ppoll(&(0x7f0000000880)=[{r5, 0xc}], 0x1, 0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) (async, rerun: 32) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x65) (rerun: 32) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000000c0)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026ae7000fcdbdf2502000000080069005e1ced0308000c0100"], 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0x4000040) (async, rerun: 64) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f00000003c0)={0x0, 0xffffffffffffff8c, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="3f76cad0ff5931856234195291fa53b8913f37bee5a37fe253a674c858b72278c7e2ab6c28e13a55066f596d"], 0x28}}, 0x0) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="020029bd7000fcdbdf253100000008000100590000000c009900810000003a00000008000300", @ANYRES32=r11, @ANYBLOB="5650a76991871725a0e2d55c211c7c084788b44c95c8cfd1c16e0e8bcbadad1492617df84c36d6cc5da41a61fada7b5012f4670a98d863dc8744f951e0720e6912fa5d8a32709e7f93424f8d70473211f9ce1984f18a06883a7d153313a5334cd0029a776da7e9a8"], 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x40801) (async, rerun: 64) sendmsg$tipc(r2, &(0x7f00000001c0)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4000004}}, 0x10, 0x0}, 0x0) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000600)={0x1, @in6={{0xa, 0x4e20, 0x8000, @ipv4={'\x00', '\xff\xff', @local}, 0x5}}, 0x0, 0x9}, &(0x7f00000006c0)=0x90) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000700)={r12, 0x3}, &(0x7f0000000740)=0x8) 13.021937193s ago: executing program 6 (id=337): syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008100000182b0000000000000000000000ffffac1414bbfe8000000000000000000000000000aa3a0002000000000000000000001090780200000100000000b3c1f4dd5cf0ff8677aa7f2091c88ef48a87f1e467c0a1cafae586b09956ab94734a0f2401cd7908c83f7146bfb12c56504af524d4d9727474986e60"], 0x0) mount$cgroup(0x0, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000005c0), 0x0, &(0x7f00000000c0)={[{@name={'name', 0x3d, '-'}}, {@name={'name', 0x3d, 'kfree\x00'}}]}) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080)='nsfs\x00', 0x900000, &(0x7f0000000100)='*\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000001380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)={0x5c, 0x1, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040801}, 0x4004044) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000016c0)) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640af, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x2}, 0x80d4, 0x35, 0x6, 0x4, 0x10000, 0x8, 0x9, 0x0, 0x0, 0x0, 0x2000000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$dir(0xffffffffffffff9c, &(0x7f0000001780)='./file0\x00', 0x40, 0x16f) move_pages(0x0, 0x1efe, &(0x7f00000017c0), 0x0, &(0x7f0000001800), 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, 0x0, 0x0, 0x240408d1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff5667f, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x2, "8c11d41aaff44b450422f24f2bc8fd9e"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4004092) syz_open_procfs$pagemap(0x0, &(0x7f0000001ac0)) sendmsg$NFT_BATCH(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=ANY=[@ANYBLOB="1400000010000100000000000000000002000a0020000000000a0100000000000000000002000a000900010073797a300000000060000000120a0100000000000000000002000a000900010073797a30000000000900020073797a300000000008000300000000092800048005000200"], 0xbc}}, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001c00)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000001c40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0xb8, 0x16, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x1cc, 0xb, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xb9, 0xd, 0x1, 0x0, "b301415c91679105f3dfb9e97ee63790608748e1d352252e8b25457be73a55dc726c8194ed4d18dccbd9e92c4501dc4fa5077b5589c9489807d5696b100cef0a434fe4f27328c04f92fb0cdf19c8018098343970f3d3ff0357432f7642759d43f9b9b47b0d91b58b57bf5cf7964d10e3f8bc322203f13f781a85cb7e564e9234ba7d7ef3b7da190879d17c7389a8ea9e8a4873666ea48ab074febf561afa64a9daaf6b9827d0a43f2f556bc997af02800223f9c2ca"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1e}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0xbb}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x108}, @NFTA_SET_USERDATA={0xd4, 0xd, 0x1, 0x0, "ce386605ad8c7afadcd67e7c7a8040d6483e1c3995510cad42fe3b902e44b426af1974f97f3e1f3ae9aaebdc977f135082e5494483ca3fdad6ddd5383c48d9503460427f9d4d0ee46de5747526eb7650fe6a06364f23b085e753ce13a0e30de3996b04b235c3d008c678a016431c96717135f2b8b3da79bbf19b851d7fd996b5fcf97da4d86aea4a41c7803400ed9000c59d05caad98b1fcf8882b450270a27f9a20dc2596d0977c4bf56abea1bc0d4edca898498c1d884a16d0eec8b4daca54dc7e070ee5555e1a8a623efcc141b12d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2ac}}, 0x800) execve(&(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)={[], 0xf5}, &(0x7f0000002040)={[&(0x7f0000002080)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde6\xfd\vQM`\x8f\xec\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0e}\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13?\x87\'S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 12.65689065s ago: executing program 6 (id=339): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x7ffa) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x5, &(0x7f0000000fc0)=ANY=[@ANYRES64=r2, @ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYBLOB="773b6c27d9e5c35a09bb5f55b26b62cd09e284b44396bab51926d38de2504cec3a8ef20c26ed50137ed74df383b6b9a3e67554dce133623809bced8d7b8e3535f72424ab9786e4ad9bac42e93c9cdb1de64af40e5e5495457367a75a96e9344666c197602a768cbef93270b46e2d77d2f6d49fb2e9ab62ceff1ad244e19a7bd37f3cb01d597a3135a09e9488cdb6b92d75737841771da54bdc2350e4d8c03f816e775964e30c2d50111d744fa04e5401b81360056d363cf8b07d9ebdef6d93dea8a2431db465108890848aa99ff61034ee37d1705a71", @ANYBLOB="ffc3cdc0d9e0644e4ebb1dbf228e73083cba790a1039c9544f", @ANYRES64], &(0x7f0000000a80)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0), 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f0000000b80)={r5, &(0x7f0000000bc0), &(0x7f0000000c00)=""/73}, 0x70) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x4, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b40000000000f802dd0a000000000000000000afad0661b349991bfad7575616c98e82f36aa5e403b61f13ec55e1dc6f625399fdb0772143fc4f9156d2124a6832a9477c45aa15d2d39ea49ec3b8dd566b89e1f6da573a466e030d0b1e65e8b31c2d14090b4bf521fde6b938445754405e41d54b9e43def0ca81d4558ce8941e440b3df31961f58b32649cd6ba9d1dfab131ebd99c6585abb2890b8a5b464ac8556317d6ce14e644fa3548d3bd7f2409abddd8578d1b2f89d21051a3b9bb5caeedac84681ba33eda9f5b28f81bd72442fdbffc19eed666ed36c4169028e09b0b7bebce411296ef0301235dad0f3ad6a4868da763c6a4ea072ceb7afab74299d37f324a24441b89aab7489ab61c44ebce7e8f31775b976f57683269acf1e46a6bcbea2ca2be8ee75c"], &(0x7f0000000e00)='GPL\x00', 0x5, 0x192aef55646d16df, &(0x7f0000000e40)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000f40), 0xb5, 0x10, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x1000}, 0x7, 0x0, 0xffffffffffffffff, 0xffffffffffffffcb}, 0x48) r7 = perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x400004, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2a05406, 0x0) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0/../file0\x00', 0x80002) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r4) 11.731539375s ago: executing program 6 (id=344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x48100) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x11fec1, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x2000, 0x101, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f0000000280)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r2, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) r8 = fsopen(&(0x7f0000000f80)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r9, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x94}], 0x1, 0x40000021, 0x0) r10 = fsmount(r8, 0x0, 0x0) fchdir(r10) openat(0xffffffffffffff9c, &(0x7f0000000440)='./net/netfilter/nfnetlink_queue\x00', 0x181100, 0x88) preadv(r6, &(0x7f0000001000)=[{&(0x7f0000000380)=""/153, 0x99}], 0x1, 0x33, 0x4) 11.501668289s ago: executing program 6 (id=349): getresuid(&(0x7f00000004c0), 0x0, &(0x7f0000000500)) r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000800080095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r1, 0xffffffffffffffff, 0x2a, 0x0, @void}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d5, 0x0) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev, [@striped={0x0, 0x48, 0x0, 0x60, 'striped\x00', {0x1, 0x20, '32', [{0x20, {@ram_num={'1:', 0x0}, 0x20, '4096'}}]}}]}) add_key(0x0, 0x0, &(0x7f00000005c0)="3082010c3081baa003020102020101300a06082a85030701010302300c310a30080603550403130141301e170d3230303130313030303030305a170d3330303130313030303030305a300c310a300806035504031301413068302106082a85030701010101301506092a850307010201010106082a85030701010202034300044001010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101300a06082a", 0xc6, 0xfffffffffffffffd) prlimit64(0x0, 0xe, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0), 0x24, 0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x16, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002000)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x46, &(0x7f00000025c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x80, 0xccb}}}}}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002640)='cgroup.events\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002740)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}]}, 0x34}}, 0x4000080) fgetxattr(r3, &(0x7f0000002780)=@known='security.selinux\x00', &(0x7f00000027c0)=""/138, 0xffffffffffffff98) r6 = openat(0xffffffffffffff9c, &(0x7f0000002880)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) perf_event_open(&(0x7f00000028c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xf}, 0x102408, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 11.426749707s ago: executing program 34 (id=349): getresuid(&(0x7f00000004c0), 0x0, &(0x7f0000000500)) r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000800080095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r1, 0xffffffffffffffff, 0x2a, 0x0, @void}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d5, 0x0) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev, [@striped={0x0, 0x48, 0x0, 0x60, 'striped\x00', {0x1, 0x20, '32', [{0x20, {@ram_num={'1:', 0x0}, 0x20, '4096'}}]}}]}) add_key(0x0, 0x0, &(0x7f00000005c0)="3082010c3081baa003020102020101300a06082a85030701010302300c310a30080603550403130141301e170d3230303130313030303030305a170d3330303130313030303030305a300c310a300806035504031301413068302106082a85030701010101301506092a850307010201010106082a85030701010202034300044001010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101300a06082a", 0xc6, 0xfffffffffffffffd) prlimit64(0x0, 0xe, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0), 0x24, 0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x16, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002000)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x46, &(0x7f00000025c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x80, 0xccb}}}}}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002640)='cgroup.events\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002740)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}]}, 0x34}}, 0x4000080) fgetxattr(r3, &(0x7f0000002780)=@known='security.selinux\x00', &(0x7f00000027c0)=""/138, 0xffffffffffffff98) r6 = openat(0xffffffffffffff9c, &(0x7f0000002880)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) perf_event_open(&(0x7f00000028c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xf}, 0x102408, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 5.188473437s ago: executing program 5 (id=405): socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='vxfs\x00', 0x2820001, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) memfd_create(&(0x7f0000000400)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xf2w\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) splice(r2, 0x0, r3, 0x0, 0x10, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000003c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@loopback, @remote, [0xff000000, 0xff, 0xff000000], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 'netpci0\x00', 'vxcan1\x00', {0xff}, {}, 0x32, 0x1, 0x0, 0x40}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11, 0x1, 0x78, 0xfc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="2800000007060300000000ff01000000000000050900020073797a3100000000050001000700000020892652189b7232e0e46b491e29db7695826f1900e34a111023c3fa56dafb8f3efac5e0fd5326f28b82ed988263280adfd3a03ec5b5025d5924669f62de278a4c7ea25fefd963439741a229f7"], 0x28}, 0x1, 0x0, 0x0, 0x842}, 0xc040) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x4, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r5], &(0x7f00000002c0)='GPL\x00', 0xe, 0x0, 0x0, 0x1f00, 0x70, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x1fe) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r5, 0x0, 0x30, 0xe, @void}, 0x10) 4.053232784s ago: executing program 7 (id=418): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0xf4, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc8, 0x2, [@TCA_BPF_ACT={0xc4, 0x1, [@m_skbmod={0xc0, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x91, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xe8}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.954786974s ago: executing program 7 (id=420): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f00000002c0), 0x4000095, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xd4}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = getpid() ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, @perf_config_ext={0x9, 0x3}, 0x4, 0x8, 0x211000, 0x5, 0x0, 0x9000000e, 0xb, 0x0, 0x0, 0x0, 0x20000a4}, r4, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a0000000190001002bbd7000000000001c140000fe03000100000000840013"], 0xa0}}, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x8, 0x0) r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x264200, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 3.926202757s ago: executing program 5 (id=421): unshare(0x60000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing\x00', 0x1ed) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/uprobe_events\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="8500000011000000630a04ff000000004400000000740000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000400000500c094060000000000009500000000000000"], 0x0, 0x2, 0x95, &(0x7f00000007c0)=""/149}, 0x94) write(r1, &(0x7f0000000880)='r:my_probe ./file0:0x0\n', 0xffffff01) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@dellinkprop={0x4c, 0x6d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x3}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bridge0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x4040040) sendmsg$key(r2, &(0x7f0000000100)={0x4000000, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xf, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@local, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xfffc, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0xaf, 0x1}]}, 0x88}}, 0x0) r4 = socket(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0xf0fc, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x2}, 0x1c) openat(r0, &(0x7f0000000440)='./file0\x00', 0x4000, 0x80) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000000280)) semop(0x0, 0x0, 0x0) socket(0x15, 0x2, 0x200000) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x90}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x48004) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0xc00}, 0x38) 3.164431615s ago: executing program 5 (id=435): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000ac0)={0x1, &(0x7f0000000b00)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) close_range(r1, 0xffffffffffffffff, 0x8000000) 3.091549322s ago: executing program 5 (id=436): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000d00)="c8bb4e7dbde79f73008865000800b0ad75acd2df", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x12, 0x9, &(0x7f0000000340)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0x6e, 0x0, 0x8}, @initr0, @exit]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x4bd, &(0x7f0000000600)="$eJzs3E1sG8UeAPD/Oknz+pm8vj6gpUCgICo+kjYttAckPiQkDoCQ4FCOJk2rUrdBTZBIFdGASrkgQSXEFYG4IDhz4MQJASckLhzgjipVKJeWnozWXrt2Yjuu69RN8vtJzs54x5n57+54Z3dsB7BujaR/kogtEfFHRAxFRK6uwAelQmm5qwtzE/8szE0kUSy++neSviyuLMxNVIom2XJzOdOfLnLnk3imQb3Ts2dP5guFyTNZfmzm1Ftj07NnHz9xKn988vjk6fHDhw8e2H/oyfEnuhLnf9O27np3avfOF16/+NLEkYtv/PxtUtPo2jgWbYEODcR8jDVd+1AXaridbK1JJ/0ti3Zj49IlgxGljjpQ6v9D0Xd+W3XdUDz/fk8bB6yoYrFYHB9ounq+CKxhSfS6BUBvVE70VxY+m0ivgeuvg9e+y8+WL4DSuK9mj/JFT3/1QnVg0fVtN81FxJH5a5+nj1hyHwIAoPt+SMc/j5XHHfXjv1zcUVNuWzY3NJzNpWyPiP9FxI6I+H9EqeydEXHXDdY/sii/dPyTu9RRYG1Kx39PZXNblUdWb6XIcF+W21qKfyA5dqIwuS/bJntjYDDN72/435OI+XT528fN6h+pGf+lj7T+ylgwa8el/sH61xzNz+RvOvDM5fcidvU3ij+bwMumyHZGxK4O6zjxyNe765/pq6aWj7+F1vNMbSl+EfFwef/Px6L4K5LW85Nj/4nC5L6xylGx1C+/XnilWf03FX8XpPt/U8Pjvxr/cFI7Xzu95F9sWK6OC39+2PSaZiTi6ejg+N+QvFZX+Tv5mZlrxYgNyYtLnj8zfv21lXxpub8c/949jfv/9ri+Je6OiPQgvici7o2I+7J9d39EPBARe1rE/9NzD77ZIv6e7v/4pvwOVRd/aeM12P+V/VA+EKpHxHKJvpM/ft+s+vbe/w6WUnuzZ9p5/2u3gR1vNwAAAFhFchGxJZLcaDWdy42Olj/DvyM25QpT0zOPHpt6+/TR8ncEhmMgV7nTNZTlI7v/OVzOl66+x6P8ocJz2f3SA9l940/7NpbyoxNThaO9Dh7Wuc1N+n/qr75etw5YcV2YRwNWqVb9/8tDt7AhwC3X+fnfyAFWu0ov3th4tR9sgDXMWRzWr/66Rdm5HrUFuLWan/8nDQ1gjat28k/aKFzzda/FX94EVh8neVi/lu//L6/U718BvdP2t/iTGym8kokkqXsmvopo/aqk923uIPHR7dGM5onINVs1eKM/ENGTRP72aMZyiUpHnT17sr/tX7WYLZ7LFwq/f3cztff2fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBb/g0AAP//mq3f1Q==") (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = syz_open_dev$evdev(&(0x7f0000000ac0), 0x2, 0x8000) (async) getrandom(&(0x7f0000000b00)=""/45, 0x2d, 0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b40), 0x100) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000b80)={0x5, 0x6, 0x1, 'queue1\x00', 0xfffffffc}) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xc, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00'}, 0x27) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x18d881, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x80000, 0x0) 3.091295473s ago: executing program 4 (id=437): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4bb, &(0x7f0000000f00)="$eJzs3cFvFF8dAPDvTFtaSqFVOahRQUSrIey2CzSEE14whpAYiScPUNulabrbbbpbpJVD+R9MJPGkf4IHEw8mnLx705sXPJigEg018bBmZrellG5bpO3+6H4+ycvMm8fu9z2WeW/3S7svgJ51MSLWI+JURDyMiNH29aRd4narZH/uzeunMxuvn84k0Wze/0eSt2fXYttjMmfazzkUET/8XsRPkvfj1lfXFqYrlfJyu15sVJeK9dW1q/PV6bnyXHmxVJqanJq4ee1G6dDGeqH6m1d35u/+6Pe/++rLP65/52dZt0babdvHcZhaQx/YipPpj4i7RxGsC/ra4znV7Y7wf0kj4vMRcSm//0ejL381AYCTrNkcjebo9joAcNKleQ4sSQvtXMBIpGmh0MrhnY/htFKrN648qq0szrZyZWMxkD6ar5Qn2rnCsRhIsvpkfv62XtpRvxYR43cifj54Oq8XZmqV2W6+8QGAHnZmx/r/78HW+g8AnHBD3e4AAHDsrP8A0Hs+eP1/cjT9AACOj8//ANB7rP8A0Hus/wDQe6z/ANBTfnDvXlaaG+3vv559vLqyUHt8dbZcXyhUV2YKM7XlpcJcrTaXf2dPdb/nq9RqS5PXY+VJsVGuN4r11bUH1drKYuNB/r3eD8oDxzIqAGAvn7vw4s9JRKzfOp2X2LaXg7UaTra02x0Auqav2x0AusZuX9C7fMYHdtmi9x0df0To+eH3BTge41+S/4deJf8PvUv+H3rXfvl/7w/g5Go2E3v+A0CPkeMH/P8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfLiRvCRpob3X50ikaaEQcTYixmIgeTRfKU9ExLmI+NPgwGBWn+x2pwGAj5T+LWnv/zU+enlkZ+up5D+D+TEifvrL+794Mt1oLE9m1/+5db3xvH291I3+AwD72VynN9fxTW9eP53ZLMfZn1ffbW0umsXdaJdWS3/058ehGIiI4X8l7XpL9n6l7xDirz+LiC/uNv4kz42MtXc+3Rk/i332WOOn78RP87bWMfu7+MIh9AV6zYts/rm92/2XxsX8uPv9P5TPUB9vc/7beG/+S7fmv74O89/Fg8a4/ofvd2x7FvHl/t3iJ1vxkw7xLx8w/l++8rVLndqav4oYj93jb49VbFSXivXVtavz1em58lx5sVSampyauHntRqmY56iLm5nq9/391pVze41/uEP8oX3G/80Djv/X/33446/vEf/b39j99T+/R/xsTfzWAeNPD/+24/bdWfzZDuPf7/W/csD4L/+6Nru9PnjAxwEAR6O+urYwXamUl504+cRPms1mM/s3/Vnpz6d90u2ZCThqb2/6bvcEAAAAAAAAAAAAAADo5Dh+najbYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODk+l8AAAD//7p22po=") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000780)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x10001, 0x68}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000800)=0x1, 0x4) sendmsg$inet6(r4, &(0x7f0000000840)={&(0x7f0000000880)={0xa, 0x4e24, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000300000000000000000002000000000000000000"], 0x18}, 0xc4) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000900)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000940)={0x0, 0x1c, &(0x7f0000000980)=[@in6={0xa, 0x4e1e, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f00000009c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000a00)=@assoc_value={0x0, 0x401}, &(0x7f0000000a40)=0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x5}, 0x9679149b910765de, 0x80000000, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x200000102fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000a80)={0x0, 0x10, &(0x7f0000000ac0)=[@in={0x2, 0x10, @private=0xa010101}]}, &(0x7f0000000b00)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000b40)={0x1, [0x0]}, &(0x7f0000000b80)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000bc0)={0x0, 0x1, 0x40, 0x4, 0x1000, 0x0, 0x1, 0x5, {r5, @in6={{0xa, 0x4e23, 0x7, @local, 0x4fe9}}, 0x3dd, 0xfffffffc, 0x3, 0x4, 0xffffffff}}, &(0x7f0000000c80)=0xb0) sendmmsg$inet_sctp(r3, &(0x7f0000000d80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x800}], 0x2, 0x80) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000e00)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000e80)={&(0x7f00000013c0)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000001440)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000540)) 2.911722991s ago: executing program 7 (id=439): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000088c0)=ANY=[@ANYBLOB="4c0000001d00010028bd7000fbdbdf251d010900340012803000d5802c000e8008002000", @ANYRES32=0x0, @ANYBLOB="72851876fffd250408cb00000000000000003afafd75810000004100a4ae10f204000680"], 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x0) socketpair(0x1a, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(0x0, r1) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000004380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0x6, 0x2, 0x9, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x401c5820, &(0x7f0000000100)={'\x00', @link_local}) shutdown(0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x43, &(0x7f0000004440), 0x4) perf_event_open(&(0x7f0000004480)={0x2, 0x80, 0x69, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x1000}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffbffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x161042, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0xfd, 0xee, 0x16}]}) 2.843447378s ago: executing program 5 (id=440): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4bb, &(0x7f0000000f00)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000780)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x10001, 0x68}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000800)=0x1, 0x4) sendmsg$inet6(r4, &(0x7f0000000840)={&(0x7f0000000880)={0xa, 0x4e24, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000300000000000000000002000000000000000000"], 0x18}, 0xc4) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000900)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000940)={0x0, 0x1c, &(0x7f0000000980)=[@in6={0xa, 0x4e1e, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f00000009c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000a00)=@assoc_value={0x0, 0x401}, &(0x7f0000000a40)=0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x5}, 0x9679149b910765de, 0x80000000, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x200000102fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000a80)={0x0, 0x10, &(0x7f0000000ac0)=[@in={0x2, 0x10, @private=0xa010101}]}, &(0x7f0000000b00)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000b40)={0x1, [0x0]}, &(0x7f0000000b80)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000bc0)={0x0, 0x1, 0x40, 0x4, 0x1000, 0x0, 0x1, 0x5, {r5, @in6={{0xa, 0x4e23, 0x7, @local, 0x4fe9}}, 0x3dd, 0xfffffffc, 0x3, 0x4, 0xffffffff}}, &(0x7f0000000c80)=0xb0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000cc0)={0x0, 0x60, "128897c20bdcbdbd4f4bcfd93c2472d8fc1ab9ec6a72f8ef71621109fc3cfe413e867bfc259d0f20395b39522d824ce9ce8a33b4b3d6b127fbb3690a138b0323568fb19f6c7477b46764ecd0d417984a285cc122c39d64da734cd128438852a5"}, &(0x7f0000000d40)=0x68) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000e00)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000e80)={&(0x7f00000013c0)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000001440)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000540)) 2.800396083s ago: executing program 5 (id=441): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') readv(r1, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x1e}, {0x0}], 0x9) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x40019, @mcast1, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0x2000000000000216, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb01001a000000000000000c0000000c"], 0x0, 0x26}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x7, 0xc, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xc, 0xe, &(0x7f0000000d80)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x6000000000000000, 0x23, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x18, &(0x7f0000000f40)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000090000800100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b7020000010000008500000085000000b70000000000000095000000000000"], &(0x7f0000001000)='GPL\x00', 0x7, 0xcf, &(0x7f0000001040)=""/207, 0xc3000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001140)=[{0x2, 0x4, 0x8, 0x7}, {0x5, 0x3, 0x3, 0xa}, {0x0, 0x1, 0xb, 0x5}, {0x5, 0x2, 0xc, 0xb}, {0x0, 0x20002, 0xc}, {0x0, 0x5, 0xffffffff, 0x1}], 0x10, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x5, 0x3, 0x0, &(0x7f0000001280)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000012c0)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000001300)='\xff\xa31\xfed<8\x81\xd7\xd2+\x9c\xce\x1e\x8e~\x8a?_\"\x82I\xc3\x87\xcc.\x9d\x97J\xf0\xf4u+}vT\xe4\x1c\xc1\xd5\x0e\xe9\xc1\xd0\xc0\xae\xf1\x1f\x8d/I\b\xdc\xc9\xb0\xf72\x9c \xdfC1#\x82\xfd\xe3\x04_\xe4\x98\xf8*\xc7t\xe8\x12\xa2Z\xcb\x04*%\xe6\x10M\x96]`\x8a`f%\x12\xa0529\xa6\'\xef\x8b\xbb\xe2\xc4,\x83 \x92\xc8@\x15oX.\x8d\xa6\xd0j\xfd2\xcc\xdb\xa5\xcc\xf8.U\x86p\xd7\xe6\x11\x10\xa9\x9bk\x1cnPpGQ#\xc7q\x91I[!P\xb6\xda2\xc7\x02\xb3\xf4q%\x9f\xaaW\x01\xed\xad\x80\vC\x16\t\n\xfc\xfc\x0e\xfb\x18\x919t{\x8bY(S1mH\x82\x0f\x10\xbe\xcel\xe1\nv\xfa\xd2\x85\xe2;\x98U\xa3 \xedi;l\xeb\xb0x&\xfdJ\xf3\x83WB\xe4\xbc\xe5\xf5\xe1;\xfc\x9b\xbd\xa2\xb8Y\xd8\x16\x9cA\xb0G/(ur\x90bB\x05+\xac\x90E3\xc8Q') mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000001440)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000014c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x8, r6}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000001540)={0xa, 0x4e22, 0x4c, @empty, 0x6}, 0x1c) 2.750337368s ago: executing program 35 (id=441): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') readv(r1, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x1e}, {0x0}], 0x9) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x40019, @mcast1, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0x2000000000000216, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb01001a000000000000000c0000000c"], 0x0, 0x26}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x7, 0xc, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xc, 0xe, &(0x7f0000000d80)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x6000000000000000, 0x23, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x18, &(0x7f0000000f40)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000090000800100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b7020000010000008500000085000000b70000000000000095000000000000"], &(0x7f0000001000)='GPL\x00', 0x7, 0xcf, &(0x7f0000001040)=""/207, 0xc3000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001140)=[{0x2, 0x4, 0x8, 0x7}, {0x5, 0x3, 0x3, 0xa}, {0x0, 0x1, 0xb, 0x5}, {0x5, 0x2, 0xc, 0xb}, {0x0, 0x20002, 0xc}, {0x0, 0x5, 0xffffffff, 0x1}], 0x10, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x5, 0x3, 0x0, &(0x7f0000001280)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000012c0)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000001300)='\xff\xa31\xfed<8\x81\xd7\xd2+\x9c\xce\x1e\x8e~\x8a?_\"\x82I\xc3\x87\xcc.\x9d\x97J\xf0\xf4u+}vT\xe4\x1c\xc1\xd5\x0e\xe9\xc1\xd0\xc0\xae\xf1\x1f\x8d/I\b\xdc\xc9\xb0\xf72\x9c \xdfC1#\x82\xfd\xe3\x04_\xe4\x98\xf8*\xc7t\xe8\x12\xa2Z\xcb\x04*%\xe6\x10M\x96]`\x8a`f%\x12\xa0529\xa6\'\xef\x8b\xbb\xe2\xc4,\x83 \x92\xc8@\x15oX.\x8d\xa6\xd0j\xfd2\xcc\xdb\xa5\xcc\xf8.U\x86p\xd7\xe6\x11\x10\xa9\x9bk\x1cnPpGQ#\xc7q\x91I[!P\xb6\xda2\xc7\x02\xb3\xf4q%\x9f\xaaW\x01\xed\xad\x80\vC\x16\t\n\xfc\xfc\x0e\xfb\x18\x919t{\x8bY(S1mH\x82\x0f\x10\xbe\xcel\xe1\nv\xfa\xd2\x85\xe2;\x98U\xa3 \xedi;l\xeb\xb0x&\xfdJ\xf3\x83WB\xe4\xbc\xe5\xf5\xe1;\xfc\x9b\xbd\xa2\xb8Y\xd8\x16\x9cA\xb0G/(ur\x90bB\x05+\xac\x90E3\xc8Q') mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000001440)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000014c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x8, r6}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000001540)={0xa, 0x4e22, 0x4c, @empty, 0x6}, 0x1c) 2.53265297s ago: executing program 7 (id=445): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0xfd, 0x255, &(0x7f00000003c0)="$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") r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x10, &(0x7f00000002c0)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0xa30403, 0x70) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001bc0)={@fallback=r3, r3, 0x2f, 0x0, 0x0, @void, @value=r3}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001c00)={@fallback=r3, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000380)=0x5, 0x4) bind$inet6(r6, &(0x7f0000000880)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000001d40)={0xa, 0x4e20, 0x23e, @empty}, 0x1c) getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, &(0x7f0000001d80)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001c40)={0x0, 0x0}, 0x8) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r8, 0x112, 0x13, 0x0, &(0x7f0000001dc0)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001c80)={@cgroup=r4, r4, 0x2f, 0x2038, 0x4, @void, @void, @value=r7, @void, r5}, 0x20) r9 = open(&(0x7f0000001d00)='.\x00', 0x0, 0x0) flock(r9, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001cc0)={@cgroup=r9, r1, 0x32, 0x4, 0x0, @void, @value, @void, @void, r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x35, &(0x7f0000001ec0)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x400}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0xd, 0x1, 0x0, r2}, @generic={0x0, 0x9, 0x8, 0x9, 0x7}, @map_idx={0x18, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x2}], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r10, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000640)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000840)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3d}, {[@rr={0x7, 0x3, 0x8e}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x2}}}}}}, 0x0) r11 = open(&(0x7f00000006c0)='./bus\x00', 0x64842, 0x0) pwritev2(r11, &(0x7f0000000700)=[{&(0x7f0000000740)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 2.501430803s ago: executing program 4 (id=446): r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x2140, 0x0) 2.412634192s ago: executing program 4 (id=448): socket$kcm(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x4e24, @multicast1=0xe000004f}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @local}}}], 0x20}, 0x4c850) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x8365, 0x0, 0xffffd304, 0x7, 0x40000204, 0x80, 0xffff, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x47f0, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x1000004, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a09040000000000000000020000040900010073797a30000480240001800b00010065787468647200001400028008000640000000010800044000000003140000001100010000000000000000000000000a0000000000"], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000100004095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$evdev(&(0x7f0000000780), 0x2, 0x862b01) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='mountinfo\x00') ppoll(&(0x7f0000000980)=[{r5}], 0x1, 0x0, 0x0, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./tracing\x00', &(0x7f0000000a40)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r8, &(0x7f0000000ac0)='comm', 0x4) mount_setattr(0xffffffffffffff9c, &(0x7f0000000b00)='.\x00', 0x8000, &(0x7f0000000b40)={0x6, 0x8a, 0x20000, {r5}}, 0x20) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r9, 0x8955, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000b80)={{0x2, 0x0, @empty}, {0x6}, 0x8, {0x2, 0x0, @empty}, 'veth0_to_hsr\x00'}) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0x40084504, 0x0) 2.255434768s ago: executing program 7 (id=451): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x4}, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r2, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x2c}}, 0x0) syz_mount_image$vfat(&(0x7f0000001740), &(0x7f0000001780)='./file0\x00', 0x210010, &(0x7f00000017c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT, @ANYBLOB="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", @ANYRES8], 0x1, 0x392, &(0x7f0000002800)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000002bc0)='./file2\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) io_setup(0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='./file2\x00', 0x4432c2, 0x2) socket$netlink(0x10, 0x3, 0x13) 2.23840515s ago: executing program 4 (id=452): unshare(0x60000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing\x00', 0x1ed) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/uprobe_events\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="8500000011000000630a04ff000000004400000000740000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000400000500c094060000000000009500000000000000"], 0x0, 0x2, 0x95, &(0x7f00000007c0)=""/149}, 0x94) write(r1, &(0x7f0000000880)='r:my_probe ./file0:0x0\n', 0xffffff01) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@dellinkprop={0x4c, 0x6d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x3}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bridge0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x4040040) sendmsg$key(r2, &(0x7f0000000100)={0x4000000, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xf, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@local, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xfffc, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0xaf, 0x1}]}, 0x88}}, 0x0) r4 = socket(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0xf0fc, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x2}, 0x1c) openat(r0, &(0x7f0000000440)='./file0\x00', 0x4000, 0x80) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000000280)) semop(0x0, 0x0, 0x0) socket(0x15, 0x2, 0x200000) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x90}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x48004) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0xc00}, 0x38) 1.606062215s ago: executing program 2 (id=455): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000980)={0x9, {"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", 0x1061}}, 0x1006) setns(0xc9, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000200)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0000006}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000900)={0xa0002003}) epoll_pwait(r1, &(0x7f0000000940)=[{}], 0x1, 0xd83, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/nf_conntrack/parameters/hashsize\x00', 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x81084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, @perf_bp={0x0, 0x1}, 0x1103, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1bb0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) write(r4, &(0x7f0000000340)='1', 0x1) 1.344935842s ago: executing program 7 (id=457): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000180)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x0, 0x20}}, 0x6) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11, {{0x0, 0x0, 0xb, "126adaf0f896c52f0cf51f"}, {0x0, 0x0, 0xff, 0x0, 0x1}}}, 0x1f) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000f80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0xf, 0x243, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000004080)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x55b7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd1, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x6bb0157145f3a761, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) write$nci(r0, &(0x7f0000000180)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x0, 0x20}}, 0x6) (async) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11, {{0x0, 0x0, 0xb, "126adaf0f896c52f0cf51f"}, {0x0, 0x0, 0xff, 0x0, 0x1}}}, 0x1f) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000f80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0xf, 0x243, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000004080)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x55b7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd1, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x6bb0157145f3a761, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) 1.284120218s ago: executing program 2 (id=458): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd4, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x100040}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000380)=""/245, 0xf5}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/64, 0x40}, {&(0x7f0000001500)=""/167, 0xa7}], 0x5}, 0x60}], 0x2, 0x12062, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000015c0)={'veth0_macvtap\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001600)={r4, r6, 0x25, 0x4, @void}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x6, 0x5, &(0x7f0000001700)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000001740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001780)={r7, r8, 0x4, r4}, 0x10) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000017c0)) mkdirat(r2, 0x0, 0x1ff) unshare(0x4040480) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001800)={0x2, 0x80, 0x9, 0x4, 0x67, 0xfd, 0x0, 0x1e, 0x8003, 0x1d, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000001880), 0x8}, 0x0, 0x6033, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x6}) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000018c0), 0x9b00, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000001900)=0x2) ioctl$TIOCVHANGUP(r9, 0x5437, 0x200000000000000) syz_mount_image$vfat(&(0x7f0000001940), &(0x7f0000001980)='./file1\x00', 0x1008800, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x4, 0x272, &(0x7f0000001d40)="$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") fstatfs(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000001fc0)={0x3, [0x0, 0x0, 0x0]}) syz_genetlink_get_family_id$nl802154(&(0x7f0000002000), r1) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000002040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x70bd2b, 0x2, {0x7, r11}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x2, 0x0, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) syz_mount_image$ext4(&(0x7f0000002140)='ext4\x00', &(0x7f0000002180)='./file1\x00', 0x2850308, &(0x7f00000021c0)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nodiscard}, {@resgid}, {@resuid}, {@noacl}, {@bh}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x8}}]}, 0x22, 0x4ad, &(0x7f00000022c0)="$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") ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 990.071328ms ago: executing program 4 (id=461): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2982, 0x0) pselect6(0x40, &(0x7f00000004c0)={0x0, 0x0, 0xff, 0x0, 0x100000000000, 0x0, 0x41, 0xa462}, 0x0, &(0x7f0000000540)={0x8, 0x1, 0x6d, 0x1, 0x3, 0x2, 0x100000000, 0xfffffffffffffffd}, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x40801, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x100000001, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40005, 0x41000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x10000d, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x2000001, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300a39edc2b00000040000085000000d00003009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xc6a4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x20, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="020000000400000008000000fffff434b0000061118636baef62418b1ba363", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xa, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000880)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000008c0)={0x1d, r6}, 0x10) bind$can_raw(r5, &(0x7f0000000900), 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000013c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000000080000000000100000340000300003c00018000000340000100000000034000030000000015400000000124000680"], 0xb8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./sys\x00', &(0x7f0000000b00)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./sys/bus/pci/drivers/virtio-pci/module/version\x00', 0x0, 0x0) read(r7, &(0x7f0000000b80)=""/256, 0x100) write(0x1, &(0x7f0000000c80)='\x00'/256, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 826.054525ms ago: executing program 2 (id=463): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000004d00), 0x0, 0x2, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x2404c054) 614.633457ms ago: executing program 2 (id=465): pipe(&(0x7f0000000000)) socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = fsopen(&(0x7f00000003c0)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='vers\x00', &(0x7f0000000500)='3\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="80fd05000000", 0x6}], 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000540)="76657468303a306157c2fd000000f2ff02000000de") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x6, &(0x7f0000000840)=0x4, 0x4) sendmmsg(r6, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[], 0x30f8}}], 0x1, 0x4004044) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000900)={0x0, 0xfb1, "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"}, &(0x7f00000018c0)=0xfb9) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000001900)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001980)={&(0x7f00000019c0)={0x40, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) 592.728389ms ago: executing program 8 (id=442): r0 = signalfd(0xffffffffffffffff, &(0x7f0000001480)={[0x1]}, 0x8) r1 = signalfd4(r0, &(0x7f0000001500)={[0x8000000000005f94]}, 0x8, 0x80800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) linkat(r1, &(0x7f0000001540)='./cgroup\x00', r1, &(0x7f0000001580)='./cgroup\x00', 0x1000) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x1, 0x0) r2 = inotify_init1(0x80000) close_range(r2, 0xffffffffffffffff, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000015c0), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x6c7e, &(0x7f00000000c0)={0x0, 0x4850, 0x3000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x31d1eefdc66fe16b) fcntl$getownex(r3, 0x10, &(0x7f0000000300)) 543.544154ms ago: executing program 8 (id=466): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4bb, &(0x7f0000000f00)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000500)="240000002a0001039900000000000000000000000100"/36, 0x24) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) setgroups(0x0, &(0x7f00000009c0)) chmod(&(0x7f0000000040)='./tracing/events/sched/filter\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000300), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000000440)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000980)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000a80), 0xb5}, 0x48) 403.556178ms ago: executing program 0 (id=467): r0 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x300884c, &(0x7f0000000080)={[{@debug}]}, 0x3, 0x515, &(0x7f00000009c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000f40)=0x20) (async) link(&(0x7f0000000f80)='./file1\x00', &(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001c00)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001cc0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0xed81f99282a93e9c, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=@newtfilter={0x8a4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x870, 0x2, [@TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0xa, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74db, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e8, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x0, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x800, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x7ff, 0xb, 0x39, 0x10001, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x7, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8a4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 256.633814ms ago: executing program 8 (id=468): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095"], 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xc000000000000000, 0xffffffffffffffff, 0x9) syz_emit_ethernet(0x20a, &(0x7f00000009c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x65, 0x0, [0x1, 0x1], "ba65d260c7cc291540775452515f9c37b2cbee607ded1203d1a203c5e041386a425edfff1c7e7dadbeba2901934f1f426af1a5a0edef4b81f36ad1a526c2f9998c1632c5461ae9dbc8e14cac4a66f325d5370bc5ebd0b77e020000000000000027036e1835"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [], "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"}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x6, 0x7}, 0x104521, 0x400004, 0x3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000800), 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setns(0xc9, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='net/hci\x00') preadv(r1, &(0x7f0000000900)=[{&(0x7f0000000940)=""/119, 0x77}], 0x1, 0x3, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000000840)) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={0x0}, 0xc800, 0x2, 0xfffffffc, 0x9, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @void}, 0x40) 175.533882ms ago: executing program 0 (id=469): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x4e24, @multicast1=0xe000004f}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @local}}}], 0x20}, 0x4c850) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x8365, 0x0, 0xffffd304, 0x7, 0x40000204, 0x80, 0xffff, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x47f0, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x1000004, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a09040000000000000000020000040900010073797a30000480240001800b00010065787468647200001400028008000640000000010800044000000003140000001100010000000000000000000000000a0000000000"], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000100004095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$evdev(&(0x7f0000000780), 0x2, 0x862b01) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='mountinfo\x00') ppoll(&(0x7f0000000980)=[{r4}], 0x1, 0x0, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./tracing\x00', &(0x7f0000000a40)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r7, &(0x7f0000000ac0)='comm', 0x4) mount_setattr(0xffffffffffffff9c, &(0x7f0000000b00)='.\x00', 0x8000, &(0x7f0000000b40)={0x6, 0x8a, 0x20000, {r4}}, 0x20) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r8, 0x8955, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000b80)={{0x2, 0x0, @empty}, {0x6}, 0x8, {0x2, 0x0, @empty}, 'veth0_to_hsr\x00'}) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0x40084504, 0x0) 167.938693ms ago: executing program 8 (id=470): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x10, 0x141802) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(r0, 0x11, 0x0, 0x5345) 166.273163ms ago: executing program 0 (id=471): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 153.742594ms ago: executing program 2 (id=472): r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0xbc8ddc50c9d0a44d, 0xff, 0x2, 0x4, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x30, 0x1, 0x4, 0x8, 0x0, 0x7, 0x2520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24a, 0x4e0e7b2abb8edb28, @perf_bp={&(0x7f0000000240), 0xa}, 0x1ccc8, 0x201224, 0xfffffffd, 0x6, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000280)=0x2, r0, &(0x7f00000002c0)=0x100000000, 0x3, 0x5) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000300)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0xfe, "d92984bd1ca44c226af5160e961711a07775b78411e08509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(0xffffffffffffffff, 0xf5f) accept(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x180801600, &(0x7f0000000400)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pidfd_send_signal(r1, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x40000004, 0x0) 117.480238ms ago: executing program 8 (id=473): symlink(0x0, 0x0) r0 = memfd_create(&(0x7f0000000c80)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc020000000000000000000000000001000107144e230000000000003a00", @ANYRES32=0x0, @ANYRES32=0x0], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000003c0), 0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0xffffff16}, [@NFT_MSG_NEWRULE={0x6a, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$key(r6, &(0x7f0000000580)={0x900, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="020afc000700000028bdc16bafccdf2505001a0000000000000000000000000000000000ac14bf194c2f815114890000000000000a0049"], 0x38}}, 0x40408c0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000f00)={0x0, 0x1, 0x71f2, 0x1000007}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r7, &(0x7f0000000f80)='4', 0x1) 115.869678ms ago: executing program 4 (id=474): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000100), 0x1, 0x50a, &(0x7f0000000740)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000cc0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40800) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x40042) ioctl$SG_SET_DEBUG(r6, 0x227e, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x4500, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 55.577804ms ago: executing program 0 (id=475): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f00000000c0)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x9}, &(0x7f0000000280)=0x90) openat$dm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9d0, 0x5}, 0xfa01, 0xfffffffffffffffc, 0x9, 0xb, 0xfffffffffffffffc, 0xd557, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000800)={r4, 0x70, "0d7f1ebd819dbd82de99fd41e6309d6d55dc71cf2f9df2214733ac7be8a3a442abedf1816508d9558636f699cdfb895e3707337661e8809fe31a3eae0d4d2270670603d27f72f7576a319effe98315a78ed72d85d144d84059a4ea7d8306631d8d4f7963ae9ed7b19f29dc43327b71e8"}, &(0x7f0000000880)=0x78) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/216, 0xd8}], 0x1, 0xfffffe01, 0x800) bind$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000540)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0xfffffffd, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x2, {[0x4000, 0xfffffffd, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0x4e24, 0xdd48, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, {0xa, 0x4e23, 0x6460, @empty}, 0x0, {[0x2, 0x5, 0x8, 0xaad9, 0x6, 0x8000c, 0x10, 0x6e]}}, 0x5c) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0, &(0x7f0000000700)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000740)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000780)={0xa, 0x7, 0x1051, @loopback, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000007c0), 0x3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) 40.898646ms ago: executing program 0 (id=476): r0 = signalfd(0xffffffffffffffff, &(0x7f0000001480)={[0x1]}, 0x8) r1 = signalfd4(r0, &(0x7f0000001500)={[0x8000000000005f94]}, 0x8, 0x80800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) linkat(r1, &(0x7f0000001540)='./cgroup\x00', r1, &(0x7f0000001580)='./cgroup\x00', 0x1000) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x1, 0x0) r2 = inotify_init1(0x80000) close_range(r2, 0xffffffffffffffff, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000015c0), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x6c7e, &(0x7f00000000c0)={0x0, 0x4850, 0x3000}) fcntl$getownex(r3, 0x10, &(0x7f0000000300)) 237.47µs ago: executing program 0 (id=477): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890c, &(0x7f0000000200)="000000000f0000000000000000000000000000006c61706230") 0s ago: executing program 2 (id=478): write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x205, 0x8401) r0 = syz_open_dev$usbmon(&(0x7f00000004c0), 0x7, 0x0) readv(r0, &(0x7f0000000580)=[{0x0}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000002180)={0x1, @in={{0x2, 0x4e23, @multicast1}}, 0x7}, &(0x7f0000002240)=0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x2000, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x230302, 0x0) kernel console output (not intermixed with test programs): 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 55.370496][ T3987] RSP: 002b:00007f7c4cb46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.370571][ T3987] RAX: ffffffffffffffda RBX: 00007f7c4cb476c0 RCX: 00007f7c4e0b034e [ 55.370588][ T3987] RDX: 000000000000000f RSI: 00007f7c4cb470a0 RDI: 0000000000000006 [ 55.370601][ T3987] RBP: 00007f7c4cb47090 R08: 0000000000000000 R09: 0000000000000000 [ 55.370614][ T3987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.370628][ T3987] R13: 00007f7c4e376038 R14: 00007f7c4e375fa0 R15: 00007ffe88977f78 [ 55.370651][ T3987] [ 55.399525][ T32] team0 (unregistering): Port device team_slave_1 removed [ 55.411576][ T32] team0 (unregistering): Port device team_slave_0 removed [ 55.465983][ T3017] 8021q: adding VLAN 0 to HW filter on device eth1 [ 55.549146][ T3885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.586534][ T43] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 55.586978][ T43] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.587003][ T43] EXT4-fs (loop4): This should not happen!! Data will be lost [ 55.587003][ T43] [ 55.587016][ T43] EXT4-fs (loop4): Total free blocks count 0 [ 55.587029][ T43] EXT4-fs (loop4): Free/Dirty block details [ 55.587041][ T43] EXT4-fs (loop4): free_blocks=0 [ 55.587053][ T43] EXT4-fs (loop4): dirty_blocks=4 [ 55.587065][ T43] EXT4-fs (loop4): Block reservation details [ 55.587076][ T43] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 55.590543][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.677413][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 55.677429][ T29] audit: type=1400 audit(1793642039.166:579): avc: denied { mount } for pid=3994 comm="syz.2.117" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 55.694779][ T29] audit: type=1400 audit(1793642039.186:580): avc: denied { create } for pid=3988 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.739350][ T29] audit: type=1400 audit(1793642039.226:581): avc: denied { bind } for pid=3988 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.752666][ T29] audit: type=1400 audit(1793642039.246:582): avc: denied { listen } for pid=3988 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.768926][ T29] audit: type=1400 audit(1793642039.246:583): avc: denied { connect } for pid=3988 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.785285][ T29] audit: type=1400 audit(1793642039.266:584): avc: denied { accept } for pid=3988 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.845426][ T43] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 55.845755][ T43] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.845778][ T43] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.845778][ T43] [ 55.845798][ T43] EXT4-fs (loop0): Total free blocks count 0 [ 55.845849][ T43] EXT4-fs (loop0): Free/Dirty block details [ 55.845862][ T43] EXT4-fs (loop0): free_blocks=0 [ 55.845875][ T43] EXT4-fs (loop0): dirty_blocks=4 [ 55.845888][ T43] EXT4-fs (loop0): Block reservation details [ 55.845945][ T43] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 55.848464][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.890102][ T4002] netlink: 40 bytes leftover after parsing attributes in process `syz.4.118'. [ 55.935406][ T29] audit: type=1400 audit(1793642039.416:585): avc: denied { write } for pid=3997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.945909][ T4021] loop1: detected capacity change from 0 to 1024 [ 56.074861][ T4021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.076526][ T29] audit: type=1400 audit(1793642039.566:586): avc: denied { write } for pid=4019 comm="syz.1.121" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.078043][ T29] audit: type=1400 audit(1793642039.566:587): avc: denied { write } for pid=4034 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.078467][ T4021] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.121: missing EA_INODE flag [ 56.078620][ T4021] EXT4-fs (loop1): Remounting filesystem read-only [ 56.259339][ T29] audit: type=1400 audit(1793642039.656:588): avc: denied { mount } for pid=4018 comm="syz.0.120" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.642419][ T3017] 8021q: adding VLAN 0 to HW filter on device eth3 [ 56.665013][ T3885] veth0_vlan: entered promiscuous mode [ 56.668338][ T3885] veth1_vlan: entered promiscuous mode [ 56.678972][ T3885] veth0_macvtap: entered promiscuous mode [ 56.680655][ T3885] veth1_macvtap: entered promiscuous mode [ 56.685184][ T3885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.696373][ T3885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.877503][ T3291] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.878074][ T3017] 8021q: adding VLAN 0 to HW filter on device eth2 [ 56.899390][ T32] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.899449][ T32] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.899485][ T32] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.899575][ T32] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.000867][ T4063] loop0: detected capacity change from 0 to 512 [ 57.014560][ T4063] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.127: iget: bad i_size value: 38620345925642 [ 57.014642][ T4063] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.014766][ T4063] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.127: couldn't read orphan inode 15 (err -117) [ 57.014801][ T4063] loop0: lost filesystem error report for type 5 error -117 [ 57.015399][ T4063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.116601][ T4071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 57.118164][ T4071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 57.118184][ T4071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.128'. [ 57.118324][ T4071] sit0: Master is either lo or non-ether device [ 57.120674][ T4087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.130'. [ 57.121524][ T4087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.130'. [ 57.189862][ T12] IPVS: starting estimator thread 0... [ 57.244513][ T4101] loop2: detected capacity change from 0 to 512 [ 57.247107][ T4101] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.134: iget: bad i_size value: 38620345925642 [ 57.247142][ T4101] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.247763][ T4101] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.134: couldn't read orphan inode 15 (err -117) [ 57.247821][ T4101] loop2: lost filesystem error report for type 5 error -117 [ 57.251267][ T4101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.298380][ T4101] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.299626][ T4095] IPVS: using max 2592 ests per chain, 129600 per kthread [ 57.325358][ T3017] 8021q: adding VLAN 0 to HW filter on device eth4 [ 57.341719][ T4101] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.346069][ T4106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.133'. [ 57.441407][ T4101] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.502386][ T4101] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.569564][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.569777][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.573720][ T4111] No such timeout policy "syz1" [ 57.589450][ T43] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.589497][ T43] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.617892][ T43] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 57.618263][ T43] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.618358][ T43] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.618358][ T43] [ 57.618366][ T43] EXT4-fs (loop2): Total free blocks count 0 [ 57.618405][ T43] EXT4-fs (loop2): Free/Dirty block details [ 57.618412][ T43] EXT4-fs (loop2): free_blocks=0 [ 57.618420][ T43] EXT4-fs (loop2): dirty_blocks=4 [ 57.618428][ T43] EXT4-fs (loop2): Block reservation details [ 57.618435][ T43] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 57.619140][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.698999][ T43] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 57.699218][ T43] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.699400][ T43] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.699400][ T43] [ 57.699415][ T43] EXT4-fs (loop0): Total free blocks count 0 [ 57.699429][ T43] EXT4-fs (loop0): Free/Dirty block details [ 57.699441][ T43] EXT4-fs (loop0): free_blocks=0 [ 57.699453][ T43] EXT4-fs (loop0): dirty_blocks=4 [ 57.699488][ T43] EXT4-fs (loop0): Block reservation details [ 57.699499][ T43] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 57.700459][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.769351][ T4139] loop5: detected capacity change from 0 to 2048 [ 58.791442][ T4139] loop5: p3 < > p4 < > [ 58.791456][ T4139] loop5: partition table partially beyond EOD, truncated [ 58.791513][ T4139] loop5: p3 start 4284289 is beyond EOD, truncated [ 58.830880][ T4152] loop1: detected capacity change from 0 to 512 [ 58.858438][ T4152] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.147: iget: bad i_size value: 38620345925642 [ 58.858516][ T4152] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.858652][ T4152] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.147: couldn't read orphan inode 15 (err -117) [ 58.858676][ T4152] loop1: lost filesystem error report for type 5 error -117 [ 58.859693][ T4152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.918285][ T4152] geneve2: entered promiscuous mode [ 58.918327][ T4152] geneve2: entered allmulticast mode [ 59.109593][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.109644][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.109682][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.814991][ T4152] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.845351][ T4176] 9p: Bad value for 'rfdno' [ 59.862318][ T4152] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.887545][ T4180] loop0: detected capacity change from 0 to 512 [ 59.896511][ T4152] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.012375][ T4180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.012528][ T4180] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.052524][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.059425][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.069380][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.069416][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.116036][ T4188] FAULT_INJECTION: forcing a failure. [ 60.116036][ T4188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.116063][ T4188] CPU: 1 UID: 0 PID: 4188 Comm: syz.4.157 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.116086][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 60.116102][ T4188] Call Trace: [ 60.116110][ T4188] [ 60.116119][ T4188] __dump_stack+0x1d/0x30 [ 60.116148][ T4188] dump_stack_lvl+0x95/0xd0 [ 60.116223][ T4188] dump_stack+0x15/0x1b [ 60.116246][ T4188] should_fail_ex+0x259/0x270 [ 60.116321][ T4188] should_fail+0xb/0x20 [ 60.116410][ T4188] should_fail_usercopy+0x1a/0x20 [ 60.116480][ T4188] strncpy_from_user+0x27/0x250 [ 60.116506][ T4188] strncpy_from_bpfptr+0x43/0x50 [ 60.116557][ T4188] bpf_prog_load+0xa83/0x10b0 [ 60.116697][ T4188] ? vfs_write+0x820/0x990 [ 60.116723][ T4188] __sys_bpf+0xbce/0xc50 [ 60.116801][ T4188] ? vfs_write+0x820/0x990 [ 60.116834][ T4188] ? vfs_write+0x820/0x990 [ 60.116870][ T4188] __x64_sys_bpf+0x69/0x80 [ 60.116907][ T4188] x64_sys_call+0xf26/0x2550 [ 60.116957][ T4188] do_syscall_64+0x112/0x360 [ 60.116993][ T4188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.117019][ T4188] RIP: 0033:0x7f5b44bffb19 [ 60.117037][ T4188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.117055][ T4188] RSP: 002b:00007f5b4360d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.117088][ T4188] RAX: ffffffffffffffda RBX: 00007f5b44e86180 RCX: 00007f5b44bffb19 [ 60.117101][ T4188] RDX: 0000000000000094 RSI: 0000200000000980 RDI: 0000000000000005 [ 60.117187][ T4188] RBP: 00007f5b4360d090 R08: 0000000000000000 R09: 0000000000000000 [ 60.117199][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.117211][ T4188] R13: 00007f5b44e86218 R14: 00007f5b44e86180 R15: 00007ffd521e4db8 [ 60.117236][ T4188] [ 60.338899][ T12] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 60.352604][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 60.352644][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.352644][ T12] [ 60.352681][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 60.352701][ T12] EXT4-fs (loop1): Free/Dirty block details [ 60.352712][ T12] EXT4-fs (loop1): free_blocks=0 [ 60.352723][ T12] EXT4-fs (loop1): dirty_blocks=4 [ 60.352735][ T12] EXT4-fs (loop1): Block reservation details [ 60.352745][ T12] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 60.355689][ T3291] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.473531][ T4193] Driver unsupported XDP return value 0 on prog (id 31) dev N/A, expect packet loss! [ 60.476986][ T4195] netlink: 256 bytes leftover after parsing attributes in process `syz.5.160'. [ 60.477005][ T4195] netlink: 72 bytes leftover after parsing attributes in process `syz.5.160'. [ 60.595270][ T4180] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 3: comm syz.0.156: bad entry in directory: inode out of bounds - offset=108, inode=17959, rec_len=1940, size=2048 fake=0 [ 60.718580][ T4194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.156'. [ 60.718652][ T4194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.156'. [ 60.883272][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 60.883298][ T29] audit: type=1400 audit(1793642044.376:634): avc: denied { bind } for pid=4202 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.205422][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.229123][ T29] audit: type=1400 audit(1793642044.716:635): avc: denied { accept } for pid=4209 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 61.352305][ T4213] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.387785][ T4219] loop5: detected capacity change from 0 to 512 [ 61.424302][ T29] audit: type=1400 audit(1793642044.916:636): avc: denied { create } for pid=4217 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.442086][ T4219] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.169: iget: bad i_size value: 38620345925642 [ 61.442119][ T4219] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.442302][ T4219] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.169: couldn't read orphan inode 15 (err -117) [ 61.442329][ T4219] loop5: lost filesystem error report for type 5 error -117 [ 61.443003][ T4219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.491044][ T29] audit: type=1400 audit(1793642044.986:637): avc: denied { write } for pid=4218 comm="syz.5.169" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.509542][ T4219] geneve2: entered promiscuous mode [ 61.509564][ T4219] geneve2: entered allmulticast mode [ 61.519383][ T29] audit: type=1400 audit(1793642045.006:638): avc: denied { map } for pid=4225 comm="syz.0.170" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.521320][ T29] audit: type=1400 audit(1793642045.006:639): avc: denied { read write } for pid=4225 comm="syz.0.170" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.575860][ T29] audit: type=1400 audit(1793642045.066:640): avc: denied { append } for pid=4225 comm="syz.0.170" name="uprobe_events" dev="tracefs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 61.576045][ T4229] FAULT_INJECTION: forcing a failure. [ 61.576045][ T4229] name failslab, interval 1, probability 0, space 0, times 0 [ 61.576097][ T4229] CPU: 1 UID: 0 PID: 4229 Comm: syz.0.170 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.576250][ T4229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 61.576296][ T4229] Call Trace: [ 61.576302][ T4229] [ 61.576311][ T4229] __dump_stack+0x1d/0x30 [ 61.576337][ T4229] dump_stack_lvl+0x95/0xd0 [ 61.576360][ T4229] dump_stack+0x15/0x1b [ 61.576381][ T4229] should_fail_ex+0x259/0x270 [ 61.576444][ T4229] ? alloc_trace_uprobe+0x2f/0x1e0 [ 61.576543][ T4229] should_failslab+0x8c/0xb0 [ 61.576572][ T4229] __kmalloc_noprof+0xb6/0x4b0 [ 61.576601][ T4229] ? alloc_trace_uprobe+0x2f/0x1e0 [ 61.576683][ T4229] ? snprintf+0x86/0xb0 [ 61.576707][ T4229] alloc_trace_uprobe+0x2f/0x1e0 [ 61.576747][ T4229] __trace_uprobe_create+0x7b8/0xa40 [ 61.576784][ T4229] ? __pfx___trace_uprobe_create+0x10/0x10 [ 61.576815][ T4229] trace_probe_create+0x87/0xd0 [ 61.576841][ T4229] trace_uprobe_create+0x1c/0x30 [ 61.576927][ T4229] dyn_event_create+0x3e/0x70 [ 61.576947][ T4229] create_or_delete_trace_uprobe+0x54/0x80 [ 61.576977][ T4229] trace_parse_run_command+0x198/0x2d0 [ 61.577087][ T4229] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 61.577120][ T4229] probes_write+0x34/0x50 [ 61.577147][ T4229] ? __pfx_probes_write+0x10/0x10 [ 61.577175][ T4229] vfs_write+0x24f/0x990 [ 61.577232][ T4229] ? __fget_files+0x184/0x1c0 [ 61.577255][ T4229] ? mutex_lock+0x52/0x90 [ 61.577280][ T4229] ksys_write+0xdc/0x1a0 [ 61.577323][ T4229] __x64_sys_write+0x40/0x50 [ 61.577421][ T4229] x64_sys_call+0x154e/0x2550 [ 61.577447][ T4229] do_syscall_64+0x112/0x360 [ 61.577535][ T4229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.577557][ T4229] RIP: 0033:0x7f939f0dfb19 [ 61.577575][ T4229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.577714][ T4229] RSP: 002b:00007f939db16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.577736][ T4229] RAX: ffffffffffffffda RBX: 00007f939f366090 RCX: 00007f939f0dfb19 [ 61.577810][ T4229] RDX: 0000000000000017 RSI: 0000200000000400 RDI: 000000000000000c [ 61.577823][ T4229] RBP: 00007f939db16090 R08: 0000000000000000 R09: 0000000000000000 [ 61.577837][ T4229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.577850][ T4229] R13: 00007f939f366128 R14: 00007f939f366090 R15: 00007ffd61d8f328 [ 61.577870][ T4229] [ 61.660076][ T4233] loop2: detected capacity change from 0 to 512 [ 61.678141][ T4233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.678205][ T4233] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.679522][ T4219] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.694009][ T4230] macvtap1: entered allmulticast mode [ 61.694088][ T4230] dummy0: entered allmulticast mode [ 61.785260][ T4230] dummy0: left allmulticast mode [ 61.927497][ T4237] bridge1: entered allmulticast mode [ 61.947449][ T4219] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.988873][ T29] audit: type=1400 audit(1793642045.476:641): avc: denied { create } for pid=4240 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 62.016444][ T4219] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.076517][ T4219] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.101758][ T29] audit: type=1400 audit(1793642045.596:642): avc: denied { read } for pid=4246 comm="syz.0.177" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.101790][ T29] audit: type=1400 audit(1793642045.596:643): avc: denied { open } for pid=4246 comm="syz.0.177" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.193290][ T41] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.193349][ T41] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.262729][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.279613][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.305646][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.305875][ T41] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 62.306232][ T41] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 62.306332][ T41] EXT4-fs (loop5): This should not happen!! Data will be lost [ 62.306332][ T41] [ 62.306347][ T41] EXT4-fs (loop5): Total free blocks count 0 [ 62.306361][ T41] EXT4-fs (loop5): Free/Dirty block details [ 62.306372][ T41] EXT4-fs (loop5): free_blocks=0 [ 62.306385][ T41] EXT4-fs (loop5): dirty_blocks=4 [ 62.306398][ T41] EXT4-fs (loop5): Block reservation details [ 62.306410][ T41] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 62.307576][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.402356][ T4260] netlink: 40 bytes leftover after parsing attributes in process `syz.1.183'. [ 62.406541][ T4259] loop2: detected capacity change from 0 to 512 [ 62.432113][ T4259] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 62.432204][ T4259] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.182: corrupted in-inode xattr: e_value size too large [ 62.432231][ T4259] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.432391][ T4259] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.182: couldn't read orphan inode 15 (err -117) [ 62.432420][ T4259] loop2: lost filesystem error report for type 5 error -117 [ 62.432909][ T4259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.435183][ T4259] FAULT_INJECTION: forcing a failure. [ 62.435183][ T4259] name failslab, interval 1, probability 0, space 0, times 0 [ 62.435209][ T4259] CPU: 1 UID: 0 PID: 4259 Comm: syz.2.182 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.435235][ T4259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 62.435247][ T4259] Call Trace: [ 62.435255][ T4259] [ 62.435264][ T4259] __dump_stack+0x1d/0x30 [ 62.435340][ T4259] dump_stack_lvl+0x95/0xd0 [ 62.435443][ T4259] dump_stack+0x15/0x1b [ 62.435467][ T4259] should_fail_ex+0x259/0x270 [ 62.435494][ T4259] ? ext4_htree_store_dirent+0x55/0x2c0 [ 62.435562][ T4259] should_failslab+0x8c/0xb0 [ 62.435622][ T4259] __kmalloc_noprof+0xb6/0x4b0 [ 62.435650][ T4259] ? ext4_htree_store_dirent+0x55/0x2c0 [ 62.435681][ T4259] ext4_htree_store_dirent+0x55/0x2c0 [ 62.435747][ T4259] htree_dirblock_to_tree+0x48c/0x5e0 [ 62.435773][ T4259] ext4_htree_fill_tree+0x46b/0xa60 [ 62.435797][ T4259] ? lockref_put_return+0xf7/0x130 [ 62.435983][ T4259] ? inode_query_iversion+0xce/0x110 [ 62.436007][ T4259] ext4_readdir+0x1a05/0x2050 [ 62.436039][ T4259] ? __rcu_read_unlock+0x4e/0x70 [ 62.436122][ T4259] ? get_pid_task+0x92/0xc0 [ 62.436148][ T4259] ? proc_fail_nth_write+0x13b/0x160 [ 62.436172][ T4259] ? avc_policy_seqno+0x15/0x30 [ 62.436264][ T4259] ? selinux_file_permission+0x1d7/0x310 [ 62.436288][ T4259] iterate_dir+0x142/0x350 [ 62.436323][ T4259] ? __se_sys_getdents64+0xbb/0x230 [ 62.436410][ T4259] __se_sys_getdents64+0xd2/0x230 [ 62.436439][ T4259] ? __pfx_filldir64+0x10/0x10 [ 62.436484][ T4259] __x64_sys_getdents64+0x43/0x50 [ 62.436514][ T4259] x64_sys_call+0x2387/0x2550 [ 62.436616][ T4259] do_syscall_64+0x112/0x360 [ 62.436707][ T4259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.436728][ T4259] RIP: 0033:0x7fe8e6ecfb19 [ 62.436744][ T4259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.436767][ T4259] RSP: 002b:00007fe8e591f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 62.436789][ T4259] RAX: ffffffffffffffda RBX: 00007fe8e7155fa0 RCX: 00007fe8e6ecfb19 [ 62.436804][ T4259] RDX: 00000000000000d1 RSI: 00002000000024c0 RDI: 0000000000000004 [ 62.436818][ T4259] RBP: 00007fe8e591f090 R08: 0000000000000000 R09: 0000000000000000 [ 62.436831][ T4259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.436845][ T4259] R13: 00007fe8e7156038 R14: 00007fe8e7155fa0 R15: 00007ffedd747888 [ 62.436869][ T4259] [ 62.479609][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.507417][ T4265] loop2: detected capacity change from 0 to 512 [ 62.669758][ T4272] loop2: detected capacity change from 0 to 512 [ 62.778959][ T32] IPVS: starting estimator thread 0... [ 62.859491][ T4281] IPVS: using max 2592 ests per chain, 129600 per kthread [ 62.882737][ T4282] loop4: detected capacity change from 0 to 8192 [ 62.912124][ T4282] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.068428][ T4287] loop1: detected capacity change from 0 to 2048 [ 63.079824][ T4287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.088634][ T4287] EXT4-fs (loop1): stripe (151) is not aligned with cluster size (16), stripe is disabled [ 63.091239][ T4287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.091891][ T4287] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.232910][ T4300] loop4: detected capacity change from 0 to 512 [ 63.246545][ T4300] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.191: iget: bad i_size value: 38620345925642 [ 63.246577][ T4300] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.246731][ T4300] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.191: couldn't read orphan inode 15 (err -117) [ 63.246761][ T4300] loop4: lost filesystem error report for type 5 error -117 [ 63.376918][ T4304] loop5: detected capacity change from 0 to 8192 [ 63.379785][ T4304] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.536349][ T4312] netlink: 40 bytes leftover after parsing attributes in process `syz.2.196'. [ 63.682555][ T32] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 63.682825][ T32] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.682876][ T32] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.682876][ T32] [ 63.682892][ T32] EXT4-fs (loop4): Total free blocks count 0 [ 63.682906][ T32] EXT4-fs (loop4): Free/Dirty block details [ 63.682919][ T32] EXT4-fs (loop4): free_blocks=0 [ 63.682934][ T32] EXT4-fs (loop4): dirty_blocks=4 [ 63.682947][ T32] EXT4-fs (loop4): Block reservation details [ 63.683044][ T32] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 63.846710][ T4326] loop2: detected capacity change from 0 to 8192 [ 63.847621][ T4326] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.978745][ T4335] FAULT_INJECTION: forcing a failure. [ 63.978745][ T4335] name failslab, interval 1, probability 0, space 0, times 0 [ 63.978777][ T4335] CPU: 1 UID: 0 PID: 4335 Comm: syz.4.204 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.978806][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 63.978820][ T4335] Call Trace: [ 63.978827][ T4335] [ 63.978834][ T4335] __dump_stack+0x1d/0x30 [ 63.978917][ T4335] dump_stack_lvl+0x95/0xd0 [ 63.978943][ T4335] dump_stack+0x15/0x1b [ 63.978963][ T4335] should_fail_ex+0x259/0x270 [ 63.979008][ T4335] ? security_inode_alloc+0x37/0x100 [ 63.979050][ T4335] should_failslab+0x8c/0xb0 [ 63.979081][ T4335] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 63.979190][ T4335] ? security_inode_alloc+0x37/0x100 [ 63.979259][ T4335] security_inode_alloc+0x37/0x100 [ 63.979283][ T4335] inode_init_always_gfp+0x49b/0x4e0 [ 63.979311][ T4335] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 63.979393][ T4335] alloc_inode+0x58/0x170 [ 63.979411][ T4335] new_inode+0x1d/0xe0 [ 63.979434][ T4335] shmem_get_inode+0x250/0x7b0 [ 63.979470][ T4335] __shmem_file_setup+0x14f/0x260 [ 63.979578][ T4335] shmem_file_setup+0x3b/0x50 [ 63.979607][ T4335] memfd_alloc_file+0x4e/0x300 [ 63.979639][ T4335] __se_sys_memfd_create+0x2e1/0x3c0 [ 63.979671][ T4335] __x64_sys_memfd_create+0x31/0x40 [ 63.979776][ T4335] x64_sys_call+0x1955/0x2550 [ 63.979806][ T4335] do_syscall_64+0x112/0x360 [ 63.979920][ T4335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.979942][ T4335] RIP: 0033:0x7f5b44bffb19 [ 63.979960][ T4335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.979981][ T4335] RSP: 002b:00007f5b4364ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 63.980075][ T4335] RAX: ffffffffffffffda RBX: 0000000000000284 RCX: 00007f5b44bffb19 [ 63.980093][ T4335] RDX: 00007f5b4364eee0 RSI: 0000000000000000 RDI: 00007f5b44c97ceb [ 63.980109][ T4335] RBP: 0000200000000780 R08: 00000000ffffffff R09: 0000000000000000 [ 63.980125][ T4335] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 63.980178][ T4335] R13: 00007f5b4364eee0 R14: 00007f5b4364eea0 R15: 0000200000000740 [ 63.980199][ T4335] [ 64.352588][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.352743][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.440450][ T4356] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20000 [ 64.535734][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.546873][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.582934][ T4360] Cannot find add_set index 0 as target [ 64.639360][ T41] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.639429][ T41] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.639465][ T41] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.639529][ T41] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.780398][ T4370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.215'. [ 64.825674][ T4373] netlink: 12 bytes leftover after parsing attributes in process `syz.5.214'. [ 64.832065][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.210'. [ 64.869608][ T4375] loop1: detected capacity change from 0 to 164 [ 64.882003][ T4375] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 64.925940][ T4377] loop0: detected capacity change from 0 to 2048 [ 64.945600][ T4377] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.067423][ T4382] netlink: 68 bytes leftover after parsing attributes in process `syz.2.218'. [ 65.357981][ T4393] EXT4-fs: Ignoring removed bh option [ 65.358078][ T4393] EXT4-fs: quotafile must be on filesystem root [ 65.411029][ T3291] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 65.413020][ T3291] ISOFS: unable to read i-node block [ 65.413084][ T3291] ISOFS: unable to read i-node block [ 65.475364][ T4358] ipvlan1: entered promiscuous mode [ 65.478714][ T4358] ipvlan1: left promiscuous mode [ 65.513805][ T4396] team0: Port device team_slave_0 removed [ 65.552258][ T4400] __nla_validate_parse: 1 callbacks suppressed [ 65.552272][ T4400] netlink: 40 bytes leftover after parsing attributes in process `syz.2.223'. [ 65.581784][ T32] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.634290][ T32] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.664199][ T32] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.690981][ T32] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.734707][ T4403] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.764265][ T4419] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.764289][ T4419] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 65.764826][ T4419] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 65.764956][ T4419] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 65.764988][ T4419] System zones: 0-2, 18-18, 34-34 [ 65.765187][ T4419] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.229: bad orphan inode 15 [ 65.765287][ T4419] loop2: lost filesystem error report for type 5 error -117 [ 65.765442][ T4419] ext4_test_bit(bit=14, block=18) = 1 [ 65.765460][ T4419] is_bad_inode(inode)=0 [ 65.765468][ T4419] NEXT_ORPHAN(inode)=2264924160 [ 65.765477][ T4419] max_ino=32 [ 65.765486][ T4419] i_nlink=0 [ 65.766471][ T4419] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #15: comm syz.2.229: corrupted inode contents [ 65.766517][ T4419] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.766689][ T4419] EXT4-fs error (device loop2): ext4_dirty_inode:7679: inode #15: comm syz.2.229: mark_inode_dirty error [ 65.766747][ T4419] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.766864][ T4419] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #15: comm syz.2.229: corrupted inode contents [ 65.766889][ T4419] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.767027][ T4419] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #15: comm syz.2.229: mark_inode_dirty error [ 65.767048][ T4419] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.767268][ T4419] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2965: inode #15: comm syz.2.229: mark inode dirty (error -117) [ 65.767294][ T4419] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.767460][ T4419] EXT4-fs warning (device loop2): ext4_evict_inode:355: xattr delete (err -117) [ 65.801944][ T32] bridge_slave_1: left allmulticast mode [ 65.801969][ T32] bridge_slave_1: left promiscuous mode [ 65.802106][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.848256][ T32] bridge_slave_0: left allmulticast mode [ 65.848279][ T32] bridge_slave_0: left promiscuous mode [ 65.848416][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.934919][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.965980][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.972127][ T32] bond0 (unregistering): Released all slaves [ 66.095121][ T32] hsr_slave_0: left promiscuous mode [ 66.099435][ T32] hsr_slave_1: left promiscuous mode [ 66.099906][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.121172][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.188231][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 66.188248][ T29] audit: type=1400 audit(1793642049.676:678): avc: denied { write } for pid=4428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.252906][ T4437] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.255403][ T29] audit: type=1400 audit(1793642049.746:679): avc: denied { write } for pid=4450 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.260463][ T29] audit: type=1400 audit(1793642049.756:680): avc: denied { write } for pid=4445 comm="syz.0.234" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.260939][ T29] audit: type=1400 audit(1793642049.756:681): avc: denied { map } for pid=4445 comm="syz.0.234" path="/47/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.261488][ T29] audit: type=1400 audit(1793642049.756:682): avc: denied { write } for pid=4436 comm="syz.5.232" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.262647][ T4437] EXT4-fs error (device loop5): ext4_map_blocks:951: inode #15: comm syz.5.232: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.266068][ T4437] EXT4-fs error (device loop5): ext4_ext_remove_space:2977: inode #15: comm syz.5.232: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 66.266303][ T4437] EXT4-fs error (device loop5) in ext4_setattr:7187: Corrupt filesystem [ 66.334858][ T4457] EXT4-fs error (device loop5): ext4_map_blocks:951: inode #15: block 3: comm syz.5.232: lblock 3 mapped to illegal pblock 3 (length 1) [ 66.335197][ T4457] EXT4-fs error (device loop5): ext4_ext_remove_space:2977: inode #15: comm syz.5.232: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 66.344199][ T32] team0 (unregistering): Port device team_slave_1 removed [ 66.356383][ T4459] netlink: 40 bytes leftover after parsing attributes in process `syz.0.235'. [ 66.369926][ T32] team0 (unregistering): Port device team_slave_0 removed [ 66.452032][ T3017] 8021q: adding VLAN 0 to HW filter on device eth5 [ 66.497828][ T4461] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.497923][ T4461] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.511532][ T4461] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 66.511626][ T4461] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 66.512087][ T4461] EXT4-fs (loop2): 1 truncate cleaned up [ 66.544467][ T29] audit: type=1400 audit(1793642050.036:683): avc: denied { name_bind } for pid=4460 comm="syz.2.237" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 66.555144][ T4403] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.555178][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.555230][ T4403] bridge_slave_0: entered allmulticast mode [ 66.555683][ T4403] bridge_slave_0: entered promiscuous mode [ 66.556935][ T4403] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.556965][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.557120][ T4403] bridge_slave_1: entered allmulticast mode [ 66.557565][ T4403] bridge_slave_1: entered promiscuous mode [ 66.569312][ T4403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.570729][ T4403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.582249][ T4403] team0: Port device team_slave_0 added [ 66.583546][ T4403] team0: Port device team_slave_1 added [ 66.599800][ T4403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.599815][ T4403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.599923][ T4403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.600388][ T4403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.600400][ T4403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.600451][ T4403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.617351][ T4403] hsr_slave_0: entered promiscuous mode [ 66.617795][ T4403] hsr_slave_1: entered promiscuous mode [ 66.697250][ T3299] EXT4-fs unmount: 11 callbacks suppressed [ 66.697270][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.779457][ T29] audit: type=1400 audit(1793642050.276:684): avc: denied { create } for pid=4477 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 66.788019][ T4403] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 66.802084][ T29] audit: type=1400 audit(1793642050.286:685): avc: denied { ioctl } for pid=4477 comm="syz.2.241" path="socket:[11314]" dev="sockfs" ino=11314 ioctlcmd=0xc0205865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 66.844456][ T4403] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.844869][ T4403] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 66.882703][ T4492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.882778][ T4492] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.883393][ T29] audit: type=1400 audit(1793642050.376:686): avc: denied { write } for pid=4491 comm="syz.0.244" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.883635][ T4492] EXT4-fs error (device loop0): ext4_map_blocks:951: inode #15: comm syz.0.244: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.885374][ T4492] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: comm syz.0.244: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.885992][ T4492] FAULT_INJECTION: forcing a failure. [ 66.885992][ T4492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.886066][ T4492] CPU: 1 UID: 0 PID: 4492 Comm: syz.0.244 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.886093][ T4492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 66.886107][ T4492] Call Trace: [ 66.886115][ T4492] [ 66.886124][ T4492] __dump_stack+0x1d/0x30 [ 66.886153][ T4492] dump_stack_lvl+0x95/0xd0 [ 66.886215][ T4492] dump_stack+0x15/0x1b [ 66.886283][ T4492] should_fail_ex+0x259/0x270 [ 66.886387][ T4492] should_fail+0xb/0x20 [ 66.886414][ T4492] should_fail_usercopy+0x1a/0x20 [ 66.886453][ T4492] _copy_to_user+0x20/0xa0 [ 66.886478][ T4492] simple_read_from_buffer+0xb5/0x130 [ 66.886590][ T4492] proc_fail_nth_read+0x10e/0x150 [ 66.886615][ T4492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.886643][ T4492] vfs_read+0x18e/0x7c0 [ 66.886679][ T4492] ? __rcu_read_unlock+0x4e/0x70 [ 66.886706][ T4492] ? __fget_files+0x184/0x1c0 [ 66.886731][ T4492] ? mutex_lock+0x52/0x90 [ 66.886785][ T4492] ksys_read+0xdc/0x1a0 [ 66.886871][ T4492] __x64_sys_read+0x40/0x50 [ 66.886900][ T4492] x64_sys_call+0x2135/0x2550 [ 66.886923][ T4492] do_syscall_64+0x112/0x360 [ 66.887022][ T4492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.887049][ T4492] RIP: 0033:0x7f939f0a034e [ 66.887067][ T4492] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 66.887083][ T4492] RSP: 002b:00007f939db36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.887103][ T4492] RAX: ffffffffffffffda RBX: 00007f939db376c0 RCX: 00007f939f0a034e [ 66.887117][ T4492] RDX: 000000000000000f RSI: 00007f939db370a0 RDI: 0000000000000006 [ 66.887176][ T4492] RBP: 00007f939db37090 R08: 0000000000000000 R09: 0000000000000000 [ 66.887231][ T4492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.887243][ T4492] R13: 00007f939f366038 R14: 00007f939f365fa0 R15: 00007ffd61d8f328 [ 66.887262][ T4492] [ 66.964398][ T29] audit: type=1400 audit(1793642050.456:687): avc: denied { execute } for pid=4495 comm="syz.2.245" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.634274][ T4403] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.634778][ T4403] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 67.635658][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 67.653657][ T4403] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.654480][ T3017] 8021q: adding VLAN 0 to HW filter on device eth6 [ 67.666170][ T4514] set_capacity_and_notify: 6 callbacks suppressed [ 67.666188][ T4514] loop0: detected capacity change from 0 to 512 [ 67.671613][ T4514] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.246: iget: bad i_size value: 38620345925642 [ 67.671645][ T4514] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.671900][ T4514] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.246: couldn't read orphan inode 15 (err -117) [ 67.671955][ T4514] loop0: lost filesystem error report for type 5 error -117 [ 67.672501][ T4514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.728456][ T32] IPVS: stop unused estimator thread 0... [ 67.744233][ T4403] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 67.753166][ T4403] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.786265][ T4526] loop5: detected capacity change from 0 to 512 [ 67.808021][ T4526] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.247: iget: bad i_size value: 38620345925642 [ 67.808092][ T4526] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.808282][ T4526] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.247: couldn't read orphan inode 15 (err -117) [ 67.808313][ T4526] loop5: lost filesystem error report for type 5 error -117 [ 67.808754][ T4403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.809078][ T4526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.875481][ T4403] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.881730][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.881767][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.884820][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.884857][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.008916][ T4543] loop4: detected capacity change from 0 to 8192 [ 68.017602][ T3017] 8021q: adding VLAN 0 to HW filter on device eth7 [ 68.072233][ T4403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.179370][ T43] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 68.181442][ T43] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 68.181511][ T43] EXT4-fs (loop0): This should not happen!! Data will be lost [ 68.181511][ T43] [ 68.181524][ T43] EXT4-fs (loop0): Total free blocks count 0 [ 68.181537][ T43] EXT4-fs (loop0): Free/Dirty block details [ 68.181594][ T43] EXT4-fs (loop0): free_blocks=0 [ 68.181606][ T43] EXT4-fs (loop0): dirty_blocks=4 [ 68.181618][ T43] EXT4-fs (loop0): Block reservation details [ 68.181629][ T43] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 68.182570][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.270918][ T4573] /dev/nbd0: Can't lookup blockdev [ 68.299022][ T3017] 8021q: adding VLAN 0 to HW filter on device eth8 [ 68.314908][ T4576] loop0: detected capacity change from 0 to 2048 [ 68.459934][ T4403] veth0_vlan: entered promiscuous mode [ 68.469840][ T4403] veth1_vlan: entered promiscuous mode [ 68.505080][ T4403] veth0_macvtap: entered promiscuous mode [ 68.505221][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 68.512123][ T4403] veth1_macvtap: entered promiscuous mode [ 68.525186][ T4403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.528946][ T4403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.589334][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.589379][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.589438][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.589548][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.592145][ T4603] syz.2.254 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 68.727672][ T41] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 68.727949][ T41] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 68.727976][ T41] EXT4-fs (loop5): This should not happen!! Data will be lost [ 68.727976][ T41] [ 68.728021][ T41] EXT4-fs (loop5): Total free blocks count 0 [ 68.728035][ T41] EXT4-fs (loop5): Free/Dirty block details [ 68.728047][ T41] EXT4-fs (loop5): free_blocks=0 [ 68.728061][ T41] EXT4-fs (loop5): dirty_blocks=4 [ 68.728075][ T41] EXT4-fs (loop5): Block reservation details [ 68.728086][ T41] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 68.728975][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.058889][ T4616] loop6: detected capacity change from 0 to 128 [ 69.287928][ T4617] loop5: detected capacity change from 0 to 512 [ 69.382593][ T4617] netlink: 'syz.5.255': attribute type 10 has an invalid length. [ 69.382622][ T4617] netlink: 55 bytes leftover after parsing attributes in process `syz.5.255'. [ 69.655525][ T4626] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.853185][ T4644] program syz.0.262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.906058][ T4658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 69.913596][ T4658] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 69.919891][ T4656] loop0: detected capacity change from 0 to 2048 [ 69.935418][ T4656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.994950][ T4666] loop2: detected capacity change from 0 to 512 [ 69.995520][ T4666] EXT4-fs (loop2): bad geometry: first data block 1 is beyond end of filesystem (1) [ 70.029928][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.165510][ T4688] loop0: detected capacity change from 0 to 512 [ 70.195844][ T4688] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:21 [ 71.018173][ T4740] loop6: detected capacity change from 0 to 7 [ 71.022708][ C0] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20800800 phys_seg 0 prio class 2 [ 71.632181][ T4760] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 71.632651][ T4760] FAT-fs (loop4): bogus number of directory entries (1) [ 71.633004][ T4760] FAT-fs (loop4): Can't find a valid FAT filesystem [ 71.677402][ T4755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.698991][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 71.699020][ T29] audit: type=1400 audit(1793642055.186:724): avc: denied { write } for pid=4754 comm="syz.0.279" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.755856][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.789490][ T4735] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.789615][ T4735] ext4 filesystem being mounted at /5/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.849359][ T29] audit: type=1400 audit(1793642055.316:725): avc: denied { write } for pid=4734 comm="syz.6.274" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.925745][ T29] audit: type=1400 audit(1793642055.416:726): avc: denied { setopt } for pid=4767 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.001085][ T29] audit: type=1400 audit(1793642055.496:727): avc: denied { create } for pid=4775 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.005643][ T4403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.090813][ T4782] FAULT_INJECTION: forcing a failure. [ 72.090813][ T4782] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 72.092583][ T4782] CPU: 1 UID: 0 PID: 4782 Comm: syz.6.285 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.092615][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.092628][ T4782] Call Trace: [ 72.092635][ T4782] [ 72.092643][ T4782] __dump_stack+0x1d/0x30 [ 72.092747][ T4782] dump_stack_lvl+0x95/0xd0 [ 72.092768][ T4782] dump_stack+0x15/0x1b [ 72.092793][ T4782] should_fail_ex+0x259/0x270 [ 72.092873][ T4782] should_fail_alloc_page+0xf2/0x100 [ 72.092932][ T4782] __alloc_frozen_pages_noprof+0x13b/0x3d0 [ 72.092994][ T4782] alloc_pages_mpol+0xaf/0x1d0 [ 72.093069][ T4782] vma_alloc_folio_noprof+0x1b3/0x300 [ 72.093144][ T4782] do_wp_page+0x663/0x1df0 [ 72.093169][ T4782] ? __css_rstat_updated+0xbb/0x280 [ 72.093241][ T4782] ? __rcu_read_lock+0x36/0x50 [ 72.093299][ T4782] handle_mm_fault+0xe26/0x3af0 [ 72.093327][ T4782] do_user_addr_fault+0x3ce/0xde0 [ 72.093355][ T4782] ? ksys_mmap_pgoff+0xc1/0x310 [ 72.093397][ T4782] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 72.093479][ T4782] ? trace_page_fault_user+0x1f/0xa0 [ 72.093523][ T4782] exc_page_fault+0x62/0xa0 [ 72.093553][ T4782] asm_exc_page_fault+0x26/0x30 [ 72.093578][ T4782] RIP: 0033:0x7fde92cb6458 [ 72.093597][ T4782] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 72.093651][ T4782] RSP: 002b:00007fde91856470 EFLAGS: 00010202 [ 72.093669][ T4782] RAX: 0000000000006005 RBX: 00007fde91856530 RCX: 0000000000000101 [ 72.093731][ T4782] RDX: 00000000000030ff RSI: 0000000000000400 RDI: 00007fde918565d0 [ 72.093744][ T4782] RBP: 0000000000000102 R08: 00007fde89437000 R09: 0000000000000004 [ 72.093819][ T4782] R10: 0000200000000442 R11: 0000000000000473 R12: 0000000000000301 [ 72.093832][ T4782] R13: 00007fde92eb8240 R14: 0000000000000013 R15: 00007fde918565d0 [ 72.093850][ T4782] [ 72.093879][ T4782] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 72.136454][ T4782] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 72.136539][ T4782] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #13: comm syz.6.285: iget: bad i_size value: 12154757448730 [ 72.136622][ T4782] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 72.137758][ T4782] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.285: couldn't read orphan inode 13 (err -117) [ 72.137878][ T4782] loop6: lost filesystem error report for type 5 error -117 [ 72.138488][ T4782] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.201296][ T4779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.201442][ T4779] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.258304][ T4403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.481421][ T29] audit: type=1400 audit(1793642055.976:728): avc: denied { write } for pid=4778 comm="syz.5.286" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.481531][ T4798] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.494631][ T4798] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 72.494768][ T4798] EXT4-fs (loop4): orphan cleanup on readonly fs [ 72.497981][ T4798] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 72.498019][ T4798] EXT4-fs warning (device loop4): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.498117][ T4798] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 72.501383][ T4798] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 72.509245][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 72.509281][ C1] EXT4-fs (loop4): initial error at time 1793642055: mb_free_blocks:2047: inode 12: block 14 [ 72.509317][ C1] EXT4-fs (loop4): last error at time 1793642055: mb_free_blocks:2047: inode 12: block 14 [ 72.515826][ T4798] EXT4-fs (loop4): Remounting filesystem read-only [ 72.516267][ T4798] EXT4-fs (loop4): 1 truncate cleaned up [ 72.516643][ T4798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.554711][ T29] audit: type=1400 audit(1793642056.046:729): avc: denied { write } for pid=4791 comm="syz.6.288" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.590335][ T4802] syzkaller0: entered promiscuous mode [ 72.590356][ T4802] syzkaller0: entered allmulticast mode [ 72.664448][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.712657][ T4779] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 3: comm syz.5.286: bad entry in directory: inode out of bounds - offset=108, inode=17959, rec_len=1940, size=2048 fake=0 [ 72.724693][ T4806] set_capacity_and_notify: 7 callbacks suppressed [ 72.724711][ T4806] loop0: detected capacity change from 0 to 512 [ 72.761045][ T4807] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.779839][ T4806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.779906][ T4806] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.931876][ T4812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4812 comm=syz.2.294 [ 72.975366][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.041579][ T4819] loop6: detected capacity change from 0 to 512 [ 73.069374][ T4819] EXT4-fs error (device loop6): ext4_iget_extra_inode:6027: inode #15: comm syz.6.297: corrupted in-inode xattr: overlapping e_value [ 73.069483][ T4819] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.071615][ T4819] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.297: couldn't read orphan inode 15 (err -117) [ 73.071657][ T4819] loop6: lost filesystem error report for type 5 error -117 [ 73.072566][ T4819] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.087097][ T29] audit: type=1400 audit(1793642056.576:730): avc: denied { bind } for pid=4818 comm="syz.6.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.162407][ T4823] loop4: detected capacity change from 0 to 512 [ 73.172886][ T4823] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.298: iget: bad i_size value: 38620345925642 [ 73.172917][ T4823] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.173050][ T4823] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.298: couldn't read orphan inode 15 (err -117) [ 73.173077][ T4823] loop4: lost filesystem error report for type 5 error -117 [ 73.173706][ T4823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.191765][ T29] audit: type=1400 audit(1793642056.686:731): avc: denied { write } for pid=4822 comm="syz.4.298" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.265905][ T29] audit: type=1400 audit(1793642056.756:732): avc: denied { create } for pid=4829 comm="syz.5.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.527476][ T4836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4836 comm=syz.2.299 [ 73.527723][ T4403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.619462][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.702450][ T4842] device-mapper: table: 252:1: striped: Couldn't parse stripe destination (-ENOENT) [ 73.702473][ T4842] device-mapper: ioctl: error adding target to table [ 73.756597][ T32] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 73.758344][ T32] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 73.758369][ T32] EXT4-fs (loop4): This should not happen!! Data will be lost [ 73.758369][ T32] [ 73.758383][ T32] EXT4-fs (loop4): Total free blocks count 0 [ 73.758397][ T32] EXT4-fs (loop4): Free/Dirty block details [ 73.758424][ T32] EXT4-fs (loop4): free_blocks=0 [ 73.758500][ T32] EXT4-fs (loop4): dirty_blocks=4 [ 73.758515][ T32] EXT4-fs (loop4): Block reservation details [ 73.758528][ T32] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 73.759858][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.799891][ T4850] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 73.804200][ T4849] loop4: detected capacity change from 0 to 512 [ 73.933833][ T4849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.933961][ T4849] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.201517][ T4856] loop5: detected capacity change from 0 to 512 [ 74.202173][ T4856] EXT4-fs: Ignoring removed oldalloc option [ 74.228088][ T4856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.320553][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.432407][ T4867] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.467291][ T4849] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 3: comm syz.4.306: bad entry in directory: inode out of bounds - offset=108, inode=17959, rec_len=1940, size=2048 fake=0 [ 74.634917][ T4875] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.131072.0), cmd(3) [ 74.673304][ T4870] loop2: detected capacity change from 0 to 512 [ 74.682358][ T4877] FAULT_INJECTION: forcing a failure. [ 74.682358][ T4877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.682406][ T4877] CPU: 1 UID: 0 PID: 4877 Comm: syz.0.311 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.682479][ T4877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 74.682492][ T4877] Call Trace: [ 74.682499][ T4877] [ 74.682508][ T4877] __dump_stack+0x1d/0x30 [ 74.682536][ T4877] dump_stack_lvl+0x95/0xd0 [ 74.682559][ T4877] dump_stack+0x15/0x1b [ 74.682630][ T4877] should_fail_ex+0x259/0x270 [ 74.682712][ T4877] should_fail+0xb/0x20 [ 74.682813][ T4877] should_fail_usercopy+0x1a/0x20 [ 74.682922][ T4877] _copy_to_user+0x20/0xa0 [ 74.682951][ T4877] bpf_vlog_reverse_ubuf+0x265/0x360 [ 74.682980][ T4877] bpf_vlog_finalize+0xf2/0x200 [ 74.683004][ T4877] bpf_log_attr_finalize+0x33/0x100 [ 74.683030][ T4877] btf_new_fd+0x34a/0x6a0 [ 74.683103][ T4877] bpf_btf_load+0x116/0x130 [ 74.683128][ T4877] __sys_bpf+0xbee/0xc50 [ 74.683151][ T4877] ? do_futex+0x340/0x460 [ 74.683235][ T4877] __x64_sys_bpf+0x69/0x80 [ 74.683255][ T4877] x64_sys_call+0xf26/0x2550 [ 74.683359][ T4877] do_syscall_64+0x112/0x360 [ 74.683391][ T4877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.683413][ T4877] RIP: 0033:0x7f939f0dfb19 [ 74.683475][ T4877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.683493][ T4877] RSP: 002b:00007f939db37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.683516][ T4877] RAX: ffffffffffffffda RBX: 00007f939f365fa0 RCX: 00007f939f0dfb19 [ 74.683532][ T4877] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 74.683547][ T4877] RBP: 00007f939f177af8 R08: 0000000000000000 R09: 0000000000000000 [ 74.683621][ T4877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.683634][ T4877] R13: 00007f939f366038 R14: 00007f939f365fa0 R15: 00007ffd61d8f328 [ 74.683653][ T4877] [ 74.685070][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.864534][ T4881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 74.867616][ T4870] EXT4-fs: Ignoring removed bh option [ 74.897033][ T4870] EXT4-fs: quotafile must be on filesystem root [ 74.897780][ T4886] loop6: detected capacity change from 0 to 512 [ 74.942782][ T4886] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 74.942910][ T4886] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #13: comm syz.6.315: iget: bad i_size value: 12154757448730 [ 74.942940][ T4886] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 74.943112][ T4886] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.315: couldn't read orphan inode 13 (err -117) [ 74.943141][ T4886] loop6: lost filesystem error report for type 5 error -117 [ 74.943741][ T4886] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.036274][ T4403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.175788][ T4898] loop4: detected capacity change from 0 to 1024 [ 75.176699][ T4898] EXT4-fs: inline encryption not supported [ 75.222345][ T4898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.329302][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.317'. [ 75.333976][ T4928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.320'. [ 75.360603][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.392748][ T4934] loop4: detected capacity change from 0 to 256 [ 75.404085][ T4934] netlink: 40 bytes leftover after parsing attributes in process `syz.4.322'. [ 75.523010][ T4938] loop4: detected capacity change from 0 to 8192 [ 75.595622][ T4938] loop4: p1 p3 p4 [ 75.596451][ T4938] loop4: p3 start 331777 is beyond EOD, truncated [ 75.596475][ T4938] loop4: p4 size 262144 extends beyond EOD, truncated [ 75.600913][ T2978] loop4: p1 p3 p4 [ 75.601375][ T2978] loop4: p3 start 331777 is beyond EOD, truncated [ 75.601396][ T2978] loop4: p4 size 262144 extends beyond EOD, truncated [ 75.922168][ T4933] EXT4-fs: Ignoring removed i_version option [ 75.930989][ T4933] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.935671][ T4964] iso9660: Unknown parameter 'Ù RzL/8a3‚ÿ8�Åi¸uºÎi oëþ@‘)üƒ¸Êð2y«“>\§œ4¾ý¿ÃõRgÌẒ7NˆvÊb˜víº(è¸EB'Ùå&·`ø˜È–ÞôM½uI‰hÝåP Û€9H_ôsȾºÚÙN{z¾‹º-<�²1&B“Ã\®_ëá$ÙÜ<ÆdéÿdÈÿvî$‰?l]Ó' [ 75.968885][ T4933] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.072228][ T4933] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 76.118784][ T4933] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.118883][ T4933] EXT4-fs error (device loop0): ext4_free_blocks:6717: comm syz.0.321: Freeing blocks not in datazone - block = 0, count = 4096 [ 76.118964][ T4933] loop0: lost filesystem error report for type 5 error -117 [ 76.119382][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 76.119405][ C0] EXT4-fs (loop0): initial error at time 1793642059: ext4_free_blocks:6717 [ 76.119431][ C0] EXT4-fs (loop0): last error at time 1793642059: ext4_free_blocks:6717 [ 76.139625][ T4933] EXT4-fs (loop0): Remounting filesystem read-only [ 76.141123][ T4933] EXT4-fs (loop0): 1 orphan inode deleted [ 76.175250][ T4908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.191074][ T4908] ext4 filesystem being mounted at /31/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.262093][ T4977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.329'. [ 76.262171][ T4977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.329'. [ 76.262240][ T4977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.329'. [ 76.262288][ T4977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.329'. [ 76.262335][ T4977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.329'. [ 76.262408][ T4977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.329'. [ 76.312752][ T4933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.610941][ T5014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28176 sclass=netlink_route_socket pid=5014 comm=syz.0.321 [ 76.726679][ T5024] FAULT_INJECTION: forcing a failure. [ 76.726679][ T5024] name failslab, interval 1, probability 0, space 0, times 0 [ 76.726770][ T5024] CPU: 0 UID: 0 PID: 5024 Comm: syz.4.332 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.726797][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 76.726821][ T5024] Call Trace: [ 76.726829][ T5024] [ 76.726839][ T5024] __dump_stack+0x1d/0x30 [ 76.726942][ T5024] dump_stack_lvl+0x95/0xd0 [ 76.727023][ T5024] dump_stack+0x15/0x1b [ 76.727047][ T5024] should_fail_ex+0x259/0x270 [ 76.727105][ T5024] ? alloc_empty_file+0x70/0x1e0 [ 76.727131][ T5024] should_failslab+0x8c/0xb0 [ 76.727160][ T5024] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 76.727219][ T5024] ? alloc_empty_file+0x70/0x1e0 [ 76.727322][ T5024] alloc_empty_file+0x70/0x1e0 [ 76.727343][ T5024] path_openat+0x50/0x11c0 [ 76.727416][ T5024] ? kstrtoull+0x119/0x150 [ 76.727438][ T5024] ? kstrtouint+0x76/0xc0 [ 76.727460][ T5024] do_file_open+0x16c/0x290 [ 76.727576][ T5024] do_sys_openat2+0xa1/0x140 [ 76.727603][ T5024] __x64_sys_openat+0xf2/0x120 [ 76.727639][ T5024] x64_sys_call+0x1f72/0x2550 [ 76.727743][ T5024] do_syscall_64+0x112/0x360 [ 76.727777][ T5024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.727802][ T5024] RIP: 0033:0x7f5b44bffb19 [ 76.727860][ T5024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.727881][ T5024] RSP: 002b:00007f5b4364f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 76.727919][ T5024] RAX: ffffffffffffffda RBX: 00007f5b44e85fa0 RCX: 00007f5b44bffb19 [ 76.727934][ T5024] RDX: 0000000000000001 RSI: 0000200000000700 RDI: ffffffffffffff9c [ 76.727950][ T5024] RBP: 00007f5b4364f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.727965][ T5024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.727980][ T5024] R13: 00007f5b44e86038 R14: 00007f5b44e85fa0 R15: 00007ffd521e4db8 [ 76.728001][ T5024] [ 76.777426][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 76.777449][ T29] audit: type=1400 audit(1793642060.266:910): avc: denied { write } for pid=5017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.908900][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.914576][ T29] audit: type=1400 audit(1793642060.406:911): avc: denied { write } for pid=5032 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.944291][ T5038] vfat: Bad value for 'gid' [ 76.944308][ T5038] vfat: Bad value for 'gid' [ 77.026817][ T5042] cgroup: name respecified [ 77.026848][ T29] audit: type=1400 audit(1793642060.516:912): avc: denied { mounton } for pid=5040 comm="syz.6.337" path="/syzcgroup/cpu/syz6/cgroup.procs" dev="cgroup" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 77.188487][ T29] audit: type=1400 audit(1793642060.676:913): avc: denied { watch watch_reads } for pid=5039 comm="syz.4.336" path="/75" dev="tmpfs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.270734][ T29] audit: type=1400 audit(1793642060.766:914): avc: denied { read write } for pid=4907 comm="syz.5.319" name="uhid" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 77.270766][ T29] audit: type=1400 audit(1793642060.766:915): avc: denied { open } for pid=4907 comm="syz.5.319" path="/dev/uhid" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 77.397888][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.445435][ T29] audit: type=1400 audit(1793642060.936:916): avc: denied { write } for pid=5056 comm="syz.5.338" name="001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 77.476602][ T29] audit: type=1400 audit(1793642060.966:917): avc: denied { map } for pid=5056 comm="syz.5.338" path="/dev/bus/usb/004/001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 77.656520][ T5064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.656639][ T5064] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.817385][ T5041] team0: Device gtp0 is of different type [ 77.934009][ T29] audit: type=1400 audit(1793642061.426:918): avc: denied { mounton } for pid=5057 comm="syz.6.339" path="/18/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 77.963518][ T29] audit: type=1400 audit(1793642061.466:919): avc: denied { write } for pid=5063 comm="syz.2.341" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.964571][ T5072] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 3: comm syz.2.341: bad entry in directory: inode out of bounds - offset=108, inode=17959, rec_len=1940, size=2048 fake=0 [ 78.325955][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.430491][ T5081] set_capacity_and_notify: 5 callbacks suppressed [ 78.430519][ T5081] loop4: detected capacity change from 0 to 2048 [ 78.450492][ T5085] mmap: syz.5.342 (5085) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.451418][ T5075] loop5: detected capacity change from 0 to 512 [ 78.454502][ T5075] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.342: corrupted in-inode xattr: invalid ea_ino [ 78.454533][ T5075] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.454629][ T5075] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.342: couldn't read orphan inode 15 (err -117) [ 78.454658][ T5075] loop5: lost filesystem error report for type 5 error -117 [ 78.455356][ T5082] raw_sendmsg: syz.5.342 forgot to set AF_INET. Fix it! [ 78.458165][ T5075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.533479][ T5081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.571729][ T43] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 78.571796][ T43] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 78.571837][ T43] EXT4-fs (loop4): This should not happen!! Data will be lost [ 78.571837][ T43] [ 78.571851][ T43] EXT4-fs (loop4): Total free blocks count 0 [ 78.571865][ T43] EXT4-fs (loop4): Free/Dirty block details [ 78.571877][ T43] EXT4-fs (loop4): free_blocks=66060288 [ 78.571890][ T43] EXT4-fs (loop4): dirty_blocks=32 [ 78.571903][ T43] EXT4-fs (loop4): Block reservation details [ 78.571924][ T43] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 78.572302][ T43] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 78.572622][ T3296] EXT4-fs warning (device loop4): ext4_evict_inode:261: inode #15: comm syz-executor: data will be lost [ 78.602195][ T32] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.612744][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.698046][ T5101] loop4: detected capacity change from 0 to 512 [ 78.707176][ T32] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.725565][ T5101] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.348: iget: bad i_size value: 38620345925642 [ 78.725600][ T5101] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.725748][ T5101] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.348: couldn't read orphan inode 15 (err -117) [ 78.725779][ T5101] loop4: lost filesystem error report for type 5 error -117 [ 78.726238][ T5101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.787977][ T32] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.826257][ T32] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.917000][ T5103] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.917928][ T5116] netlink: 'syz.5.353': attribute type 12 has an invalid length. [ 78.975511][ T5119] loop0: detected capacity change from 0 to 512 [ 79.017624][ T32] bridge_slave_1: left allmulticast mode [ 79.017651][ T32] bridge_slave_1: left promiscuous mode [ 79.017867][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.018454][ T5119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.018628][ T5119] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.039855][ T32] bridge_slave_0: left allmulticast mode [ 79.039878][ T32] bridge_slave_0: left promiscuous mode [ 79.039979][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.126352][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.127514][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.128174][ T32] bond0 (unregistering): Released all slaves [ 79.157559][ T5131] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 3: comm syz.0.354: bad entry in directory: inode out of bounds - offset=108, inode=17959, rec_len=1940, size=2048 fake=0 [ 79.213201][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.253277][ T32] hsr_slave_0: left promiscuous mode [ 79.253676][ T32] hsr_slave_1: left promiscuous mode [ 79.254064][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.254081][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.254409][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.254422][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.257183][ T32] veth1_macvtap: left promiscuous mode [ 79.257328][ T32] veth0_macvtap: left promiscuous mode [ 79.257375][ T32] veth1_vlan: left promiscuous mode [ 79.257405][ T32] veth0_vlan: left promiscuous mode [ 79.327931][ T5147] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 79.402253][ T32] team0 (unregistering): Port device team_slave_1 removed [ 79.405150][ T32] team0 (unregistering): Port device team_slave_0 removed [ 79.434571][ T3017] 8021q: adding VLAN 0 to HW filter on device eth9 [ 79.598491][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.617394][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.617432][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.617504][ T5103] bridge_slave_0: entered allmulticast mode [ 79.641671][ T5171] loop4: detected capacity change from 0 to 2048 [ 79.642710][ T5103] bridge_slave_0: entered promiscuous mode [ 79.651451][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.651486][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.651628][ T5103] bridge_slave_1: entered allmulticast mode [ 79.652569][ T5103] bridge_slave_1: entered promiscuous mode [ 79.656945][ T5171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.672021][ T5103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.673262][ T5103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.689990][ T5103] team0: Port device team_slave_0 added [ 79.692411][ T5103] team0: Port device team_slave_1 added [ 79.706570][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.706585][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.706666][ T5103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.707372][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.707385][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.707413][ T5103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.715242][ T5174] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 79.715308][ T5174] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 79.715332][ T5174] EXT4-fs (loop4): This should not happen!! Data will be lost [ 79.715332][ T5174] [ 79.715347][ T5174] EXT4-fs (loop4): Total free blocks count 0 [ 79.715412][ T5174] EXT4-fs (loop4): Free/Dirty block details [ 79.715425][ T5174] EXT4-fs (loop4): free_blocks=66060288 [ 79.715439][ T5174] EXT4-fs (loop4): dirty_blocks=32 [ 79.715451][ T5174] EXT4-fs (loop4): Block reservation details [ 79.715463][ T5174] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 79.751972][ T5103] hsr_slave_0: entered promiscuous mode [ 79.753914][ T5103] hsr_slave_1: entered promiscuous mode [ 79.813177][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 79.894384][ T5181] loop4: detected capacity change from 0 to 256 [ 79.961887][ T5103] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 79.965368][ T5103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.965730][ T5103] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 79.970599][ T5192] FAULT_INJECTION: forcing a failure. [ 79.970599][ T5192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.970626][ T5192] CPU: 1 UID: 0 PID: 5192 Comm: syz.5.362 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.970652][ T5192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 79.970665][ T5192] Call Trace: [ 79.970735][ T5192] [ 79.970743][ T5192] __dump_stack+0x1d/0x30 [ 79.970770][ T5192] dump_stack_lvl+0x95/0xd0 [ 79.970877][ T5192] dump_stack+0x15/0x1b [ 79.970898][ T5192] should_fail_ex+0x259/0x270 [ 79.970925][ T5192] should_fail+0xb/0x20 [ 79.970998][ T5192] should_fail_usercopy+0x1a/0x20 [ 79.971026][ T5192] _copy_from_user+0x1c/0xb0 [ 79.971053][ T5192] ___sys_sendmsg+0xc1/0x1e0 [ 79.971169][ T5192] __x64_sys_sendmsg+0xd4/0x160 [ 79.971210][ T5192] x64_sys_call+0x22ab/0x2550 [ 79.971257][ T5192] do_syscall_64+0x112/0x360 [ 79.971287][ T5192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.971309][ T5192] RIP: 0033:0x7f979da0fb19 [ 79.971398][ T5192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.971416][ T5192] RSP: 002b:00007f979c45f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.971439][ T5192] RAX: ffffffffffffffda RBX: 00007f979dc95fa0 RCX: 00007f979da0fb19 [ 79.971488][ T5192] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 79.971571][ T5192] RBP: 00007f979c45f090 R08: 0000000000000000 R09: 0000000000000000 [ 79.971585][ T5192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.971599][ T5192] R13: 00007f979dc96038 R14: 00007f979dc95fa0 R15: 00007fffc5ba1468 [ 79.971618][ T5192] [ 80.051276][ T5103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.051616][ T5103] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 80.064071][ T5103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.064458][ T5103] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 80.074820][ T5103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.092201][ T5188] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.095099][ T5202] loop4: detected capacity change from 0 to 512 [ 80.110936][ T5202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.110999][ T5202] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.111225][ T5195] __nla_validate_parse: 69 callbacks suppressed [ 80.111238][ T5195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.364'. [ 80.232485][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.232523][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.232590][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.232723][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.359496][ T5103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.368396][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.368983][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.372606][ T5103] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.380798][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.380833][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.387475][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.387511][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.434484][ T5221] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 3: comm syz.4.366: bad entry in directory: inode out of bounds - offset=108, inode=17959, rec_len=1940, size=2048 fake=0 [ 80.652916][ T5242] loop2: detected capacity change from 0 to 2048 [ 80.666504][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.685517][ T5242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.716390][ T5103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.742885][ T5252] loop4: detected capacity change from 0 to 512 [ 80.743354][ T5252] EXT4-fs: quotafile must be on filesystem root [ 80.845139][ T5252] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.875521][ T3428] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 80.875587][ T3428] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 80.875614][ T3428] EXT4-fs (loop2): This should not happen!! Data will be lost [ 80.875614][ T3428] [ 80.875683][ T3428] EXT4-fs (loop2): Total free blocks count 0 [ 80.875695][ T3428] EXT4-fs (loop2): Free/Dirty block details [ 80.875705][ T3428] EXT4-fs (loop2): free_blocks=66060288 [ 80.875719][ T3428] EXT4-fs (loop2): dirty_blocks=32 [ 80.875733][ T3428] EXT4-fs (loop2): Block reservation details [ 80.875746][ T3428] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 80.876240][ T3428] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 80.876692][ T3299] EXT4-fs warning (device loop2): ext4_evict_inode:261: inode #15: comm syz-executor: data will be lost [ 80.995840][ T5195] syz.5.364 (5195) used greatest stack depth: 8896 bytes left [ 81.138388][ T5103] veth0_vlan: entered promiscuous mode [ 81.141303][ T5103] veth1_vlan: entered promiscuous mode [ 81.174677][ T5103] veth0_macvtap: entered promiscuous mode [ 81.181533][ T5103] veth1_macvtap: entered promiscuous mode [ 81.204265][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.209501][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.341634][ T5306] loop4: detected capacity change from 0 to 1024 [ 81.360014][ T5306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.360105][ T5306] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.471018][ T43] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.471397][ T43] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.471456][ T43] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.471505][ T43] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.473999][ T3017] 8021q: adding VLAN 0 to HW filter on device eth10 [ 81.712392][ T5326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.712477][ T5326] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.745028][ T5330] netlink: 108 bytes leftover after parsing attributes in process `syz.7.351'. [ 81.805339][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 81.805357][ T29] audit: type=1326 audit(1793642065.296:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.5.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f979da0fb19 code=0x7ffb0000 [ 81.908194][ T29] audit: type=1400 audit(1793642065.396:962): avc: denied { write } for pid=5324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.970877][ T29] audit: type=1400 audit(1793642065.466:963): avc: denied { write } for pid=5348 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.995336][ T29] audit: type=1400 audit(1793642065.486:964): avc: denied { getopt } for pid=5350 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.010347][ T29] audit: type=1400 audit(1793642065.506:965): avc: denied { setopt } for pid=5350 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.010969][ T5351] netlink: 48 bytes leftover after parsing attributes in process `syz.0.381'. [ 82.060554][ T3017] 8021q: adding VLAN 0 to HW filter on device eth11 [ 82.083890][ T5355] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 82.083911][ T5355] audit: out of memory in audit_log_start [ 82.151857][ T3428] EXT4-fs error (device loop4): ext4_map_blocks:951: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 6) [ 82.152119][ T3428] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 82.152147][ T3428] EXT4-fs (loop4): This should not happen!! Data will be lost [ 82.152147][ T3428] [ 82.158808][ T3428] EXT4-fs error (device loop4): ext4_map_blocks:951: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 82.159171][ T3428] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 82.159198][ T3428] EXT4-fs (loop4): This should not happen!! Data will be lost [ 82.159198][ T3428] [ 82.171271][ T29] audit: type=1400 audit(1793642065.666:966): avc: denied { getopt } for pid=5358 comm="syz.0.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.171509][ T29] audit: type=1400 audit(1793642065.666:967): avc: denied { read } for pid=5358 comm="syz.0.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.176884][ T3296] EXT4-fs warning (device loop4): ext4_evict_inode:261: inode #15: comm syz-executor: data will be lost [ 82.181556][ T29] audit: type=1400 audit(1793642065.676:968): avc: denied { ioctl } for pid=5358 comm="syz.0.384" path="socket:[14354]" dev="sockfs" ino=14354 ioctlcmd=0xc018937b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.366755][ T3017] 8021q: adding VLAN 0 to HW filter on device eth12 [ 82.382253][ T5375] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.400142][ T5375] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 82.400162][ T5375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 82.400324][ T5375] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 82.400353][ T5375] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 82.400933][ T5375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 82.452095][ T5375] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.386: dx entry: limit 65535 != root limit 120 [ 82.452133][ T5375] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.386: Corrupt directory, running e2fsck is recommended [ 82.515418][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.539022][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 82.593319][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.883417][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.883609][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.226941][ T5402] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.226965][ T5402] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 83.253886][ T5402] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 83.254080][ T5402] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 83.254136][ T5402] System zones: 0-2, 18-18, 34-34 [ 83.254391][ T5402] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.391: bad orphan inode 15 [ 83.254419][ T5402] loop0: lost filesystem error report for type 5 error -117 [ 83.254550][ T5402] ext4_test_bit(bit=14, block=18) = 1 [ 83.254566][ T5402] is_bad_inode(inode)=0 [ 83.254573][ T5402] NEXT_ORPHAN(inode)=2264924160 [ 83.254581][ T5402] max_ino=32 [ 83.254588][ T5402] i_nlink=0 [ 83.254748][ T5402] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.391: corrupted inode contents [ 83.254770][ T5402] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.254955][ T5402] EXT4-fs error (device loop0): ext4_dirty_inode:7679: inode #15: comm syz.0.391: mark_inode_dirty error [ 83.254982][ T5402] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.255085][ T5402] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.391: corrupted inode contents [ 83.255128][ T5402] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.255230][ T5402] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.391: mark_inode_dirty error [ 83.255252][ T5402] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.255463][ T5402] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2965: inode #15: comm syz.0.391: mark inode dirty (error -117) [ 83.255492][ T5402] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.255655][ T5402] EXT4-fs warning (device loop0): ext4_evict_inode:355: xattr delete (err -117) [ 83.256128][ T5402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.396200][ T5384] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 83.396570][ T5384] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.488165][ T5384] EXT4-fs (loop4): 1 truncate cleaned up [ 83.508279][ T5384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.637165][ T5407] ip_tables: iptables: counters copy to user failed while replacing table [ 83.871556][ T5390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.878156][ T5390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.979987][ T43] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.980034][ T43] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.980071][ T43] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.980205][ T43] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.030435][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.137611][ T3428] ------------[ cut here ]------------ [ 84.137625][ T3428] WARNING: io_uring/sqpoll.c:88 at io_sq_thread_stop+0x8f/0xa0, CPU#1: kworker/u8:7/3428 [ 84.153267][ T3428] Modules linked in: [ 84.157229][ T3428] CPU: 1 UID: 0 PID: 3428 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.166882][ T3428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 84.177260][ T3428] Workqueue: iou_exit io_ring_exit_work [ 84.182942][ T3428] RIP: 0010:io_sq_thread_stop+0x8f/0xa0 [ 84.188533][ T3428] Code: f7 f5 59 ff 48 89 df e8 cf 83 40 ff eb 05 e8 e8 f5 59 ff 4c 89 f7 e8 60 17 ae 03 5b 41 5e c3 cc cc cc cc cc e8 d2 f5 59 ff 90 <0f> 0b 90 eb a0 e8 c7 f5 59 ff 90 0f 0b 90 eb ca 90 90 90 90 90 90 [ 84.208221][ T3428] RSP: 0018:ffffc90001597c20 EFLAGS: 00010293 [ 84.214426][ T3428] RAX: ffffffff8200aaae RBX: ffff888104a1b080 RCX: ffff888103dac500 [ 84.222465][ T3428] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 84.230605][ T3428] RBP: 0000000000000000 R08: 0001c90001597bcf R09: 0000000000000000 [ 84.238656][ T3428] R10: 0001c90001597bcc R11: 0001c90001597bcf R12: ffff888104a1b0a8 [ 84.246675][ T3428] R13: ffff888104a1b0a8 R14: 0000000000000001 R15: ffff888104a1b090 [ 84.254838][ T3428] FS: 0000000000000000(0000) GS:ffff8882ae752000(0000) knlGS:0000000000000000 [ 84.263857][ T3428] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.270566][ T3428] CR2: 00007fe8e7157dac CR3: 00000001149c4000 CR4: 00000000003506f0 [ 84.278587][ T3428] Call Trace: [ 84.281909][ T3428] [ 84.284866][ T3428] io_put_sq_data+0x4e/0xe0 [ 84.289505][ T3428] io_sq_thread_finish+0x1e9/0x230 [ 84.294669][ T3428] io_ring_ctx_free+0x1a/0x460 [ 84.297116][ T5414] set_capacity_and_notify: 4 callbacks suppressed [ 84.297489][ T5414] loop7: detected capacity change from 0 to 512 [ 84.312429][ T3428] io_ring_exit_work+0x3b0/0x3e0 [ 84.317465][ T3428] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 84.322829][ T3428] process_scheduled_works+0x53f/0xa20 [ 84.328356][ T3428] ? __list_add_valid_or_report+0x38/0xe0 [ 84.334175][ T3428] worker_thread+0x56c/0x770 [ 84.338812][ T3428] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 84.344586][ T3428] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 84.350000][ T3428] ? __pfx_worker_thread+0x10/0x10 [ 84.355149][ T3428] kthread+0x223/0x270 [ 84.359291][ T3428] ? __pfx_kthread+0x10/0x10 [ 84.364077][ T3428] ret_from_fork+0x146/0x330 [ 84.368753][ T3428] ? __pfx_kthread+0x10/0x10 [ 84.373438][ T3428] ret_from_fork_asm+0x1a/0x30 [ 84.378306][ T3428] [ 84.381378][ T3428] ---[ end trace 0000000000000000 ]--- [ 84.468420][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.506529][ T5441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.401'. [ 84.539965][ T5437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.540149][ T5437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.597444][ T5414] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.619205][ T5443] tmpfs: Bad value for 'mpol' [ 84.638764][ T5445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.638924][ T5445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.759794][ T5452] loop5: detected capacity change from 0 to 128 [ 84.760115][ T5452] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 84.791043][ T5443] infiniband syz2: set down [ 84.791066][ T5443] infiniband syz2: added ipvlan0 [ 84.840503][ T5443] RDS/IB: syz2: added [ 84.840526][ T5443] smc: adding ib device syz2 with port count 1 [ 84.841075][ T5443] smc: ib device syz2 port 1 has no pnetid [ 85.041051][ T5468] FAULT_INJECTION: forcing a failure. [ 85.041051][ T5468] name failslab, interval 1, probability 0, space 0, times 0 [ 85.041094][ T5468] CPU: 0 UID: 0 PID: 5468 Comm: syz.7.408 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 85.041129][ T5468] Tainted: [W]=WARN [ 85.041155][ T5468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 85.041170][ T5468] Call Trace: [ 85.041176][ T5468] [ 85.041183][ T5468] __dump_stack+0x1d/0x30 [ 85.041212][ T5468] dump_stack_lvl+0x95/0xd0 [ 85.041233][ T5468] dump_stack+0x15/0x1b [ 85.041255][ T5468] should_fail_ex+0x259/0x270 [ 85.041281][ T5468] ? dst_alloc+0xbd/0x100 [ 85.041430][ T5468] should_failslab+0x8c/0xb0 [ 85.041492][ T5468] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 85.041526][ T5468] ? dst_alloc+0xbd/0x100 [ 85.041549][ T5468] dst_alloc+0xbd/0x100 [ 85.041588][ T5468] rt_dst_clone+0x3b/0x2e0 [ 85.041613][ T5468] NF_HOOK+0x65/0x230 [ 85.041637][ T5468] ? __pfx_ip_mc_finish_output+0x10/0x10 [ 85.041664][ T5468] ip_mc_output+0x139/0x370 [ 85.041688][ T5468] ? __pfx_dst_output+0x10/0x10 [ 85.041752][ T5468] ? __pfx_ip_mc_output+0x10/0x10 [ 85.041776][ T5468] ip_send_skb+0x139/0x140 [ 85.041869][ T5468] udp_send_skb+0x542/0x7b0 [ 85.041895][ T5468] udp_sendmsg+0x1094/0x14e0 [ 85.041936][ T5468] ? __pfx_udp_sendmsg+0x10/0x10 [ 85.041957][ T5468] inet_sendmsg+0xac/0xd0 [ 85.041982][ T5468] ? __pfx_inet_sendmsg+0x10/0x10 [ 85.042053][ T5468] ____sys_sendmsg+0x4ed/0x590 [ 85.042078][ T5468] ___sys_sendmsg+0x195/0x1e0 [ 85.042106][ T5468] __sys_sendmmsg+0x1a0/0x310 [ 85.042136][ T5468] __x64_sys_sendmmsg+0x57/0x70 [ 85.042263][ T5468] x64_sys_call+0x1fb4/0x2550 [ 85.042354][ T5468] do_syscall_64+0x112/0x360 [ 85.042388][ T5468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.042412][ T5468] RIP: 0033:0x7f89619ffb19 [ 85.042430][ T5468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.042447][ T5468] RSP: 002b:00007f896044f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 85.042547][ T5468] RAX: ffffffffffffffda RBX: 00007f8961c85fa0 RCX: 00007f89619ffb19 [ 85.042563][ T5468] RDX: 000000000800001d RSI: 00002000000002c0 RDI: 0000000000000005 [ 85.042578][ T5468] RBP: 00007f896044f090 R08: 0000000000000000 R09: 0000000000000000 [ 85.042593][ T5468] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 85.042606][ T5468] R13: 00007f8961c86038 R14: 00007f8961c85fa0 R15: 00007ffca44f2958 [ 85.042626][ T5468] [ 85.091958][ T5471] netlink: 4 bytes leftover after parsing attributes in process `syz.7.408'. [ 85.119573][ T5473] ip_tables: iptables: counters copy to user failed while replacing table [ 85.130368][ T5474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.410'. [ 85.181672][ T5474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.410'. [ 85.181713][ T5474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.410'. [ 85.181746][ T5474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.410'. [ 85.181777][ T5474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.410'. [ 85.181880][ T5474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.410'. [ 85.181961][ T5474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.410'. [ 85.181994][ T5474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.410'. [ 85.182027][ T5474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.410'. [ 85.182066][ T5474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.410'. [ 85.492652][ T5484] loop0: detected capacity change from 0 to 512 [ 85.528100][ T5484] FAULT_INJECTION: forcing a failure. [ 85.528100][ T5484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.528180][ T5484] CPU: 1 UID: 0 PID: 5484 Comm: syz.0.412 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 85.528238][ T5484] Tainted: [W]=WARN [ 85.528246][ T5484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 85.528260][ T5484] Call Trace: [ 85.528269][ T5484] [ 85.528278][ T5484] __dump_stack+0x1d/0x30 [ 85.528309][ T5484] dump_stack_lvl+0x95/0xd0 [ 85.528336][ T5484] dump_stack+0x15/0x1b [ 85.528408][ T5484] should_fail_ex+0x259/0x270 [ 85.528448][ T5484] should_fail+0xb/0x20 [ 85.528520][ T5484] should_fail_usercopy+0x1a/0x20 [ 85.528601][ T5484] copy_folio_from_iter_atomic+0x24b/0x10b0 [ 85.528637][ T5484] ? fat_write_begin+0x52/0xe0 [ 85.528687][ T5484] ? __pfx_fat_get_block+0x10/0x10 [ 85.528721][ T5484] generic_perform_write+0x2c4/0x490 [ 85.528834][ T5484] __generic_file_write_iter+0xec/0x120 [ 85.528864][ T5484] generic_file_write_iter+0x77/0x1f0 [ 85.528909][ T5484] do_iter_readv_writev+0x4f6/0x5a0 [ 85.528948][ T5484] vfs_writev+0x2ce/0x8b0 [ 85.529024][ T5484] ? get_pid_task+0x92/0xc0 [ 85.529061][ T5484] do_pwritev+0x110/0x1d0 [ 85.529104][ T5484] __x64_sys_pwritev2+0x8f/0xc0 [ 85.529126][ T5484] x64_sys_call+0x899/0x2550 [ 85.529149][ T5484] do_syscall_64+0x112/0x360 [ 85.529242][ T5484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.529267][ T5484] RIP: 0033:0x7f939f0dfb19 [ 85.529286][ T5484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.529320][ T5484] RSP: 002b:00007f939db37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 85.529340][ T5484] RAX: ffffffffffffffda RBX: 00007f939f365fa0 RCX: 00007f939f0dfb19 [ 85.529355][ T5484] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004 [ 85.529431][ T5484] RBP: 00007f939db37090 R08: 0000000000000000 R09: 0000000000000003 [ 85.529455][ T5484] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 85.529468][ T5484] R13: 00007f939f366038 R14: 00007f939f365fa0 R15: 00007ffd61d8f328 [ 85.529486][ T5484] [ 85.837361][ T5484] syz.0.412: attempt to access beyond end of device [ 85.837361][ T5484] loop0: rw=2049, sector=528, nr_sectors = 32 limit=512 [ 85.837499][ T5484] syz.0.412: attempt to access beyond end of device [ 85.837499][ T5484] loop0: rw=2049, sector=592, nr_sectors = 32 limit=512 [ 85.837556][ T5484] syz.0.412: attempt to access beyond end of device [ 85.837556][ T5484] loop0: rw=2049, sector=656, nr_sectors = 32 limit=512 [ 85.837650][ T5484] syz.0.412: attempt to access beyond end of device [ 85.837650][ T5484] loop0: rw=2049, sector=720, nr_sectors = 32 limit=512 [ 85.837705][ T5484] syz.0.412: attempt to access beyond end of device [ 85.837705][ T5484] loop0: rw=2049, sector=784, nr_sectors = 32 limit=512 [ 85.837892][ T5484] syz.0.412: attempt to access beyond end of device [ 85.837892][ T5484] loop0: rw=2049, sector=848, nr_sectors = 32 limit=512 [ 85.838024][ T5484] syz.0.412: attempt to access beyond end of device [ 85.838024][ T5484] loop0: rw=2049, sector=912, nr_sectors = 32 limit=512 [ 85.838080][ T5484] syz.0.412: attempt to access beyond end of device [ 85.838080][ T5484] loop0: rw=2049, sector=976, nr_sectors = 32 limit=512 [ 85.838174][ T5484] syz.0.412: attempt to access beyond end of device [ 85.838174][ T5484] loop0: rw=2049, sector=1040, nr_sectors = 32 limit=512 [ 85.838251][ T5484] syz.0.412: attempt to access beyond end of device [ 85.838251][ T5484] loop0: rw=2049, sector=1104, nr_sectors = 32 limit=512 [ 86.087000][ T5508] loop0: detected capacity change from 0 to 256 [ 86.103165][ T5508] FAT-fs (loop0): bogus logical sector size 0 [ 86.103188][ T5508] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 86.103206][ T5508] FAT-fs (loop0): Can't find a valid FAT filesystem [ 86.169075][ T5513] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.184737][ T5515] loop0: detected capacity change from 0 to 512 [ 86.215359][ T5515] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.267866][ T5522] MTRR 1 not used [ 86.341225][ T5516] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.341352][ T5516] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.430468][ T5516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.435509][ T5516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.599336][ T144] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.599427][ T144] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.599503][ T144] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.599577][ T144] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.805571][ T5551] loop0: detected capacity change from 0 to 512 [ 86.852061][ T5551] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.940220][ T5555] loop4: detected capacity change from 0 to 4096 [ 87.023453][ T5564] loop5: detected capacity change from 0 to 512 [ 87.047278][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 87.047296][ T29] audit: type=1400 audit(1793642070.536:1000): avc: denied { write } for pid=5550 comm="syz.0.433" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.048441][ T5567] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 3: comm syz.0.433: bad entry in directory: inode out of bounds - offset=108, inode=17959, rec_len=1940, size=2048 fake=0 [ 87.055905][ T5570] loop4: detected capacity change from 0 to 512 [ 87.134413][ T5570] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.576234][ T5595] loop7: detected capacity change from 0 to 512 [ 87.624957][ T5582] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.747644][ T5604] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.771226][ T29] audit: type=1400 audit(1793642071.266:1001): avc: denied { setattr } for pid=5607 comm="syz.2.450" name="/" dev="configfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.918267][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.116630][ T29] audit: type=1400 audit(1793642071.596:1002): avc: denied { write } for pid=5603 comm="syz.0.449" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.202281][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.202317][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.202373][ T5582] bridge_slave_0: entered allmulticast mode [ 88.205272][ T5582] bridge_slave_0: entered promiscuous mode [ 88.207895][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.207928][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.208038][ T5582] bridge_slave_1: entered allmulticast mode [ 88.210139][ T5582] bridge_slave_1: entered promiscuous mode [ 88.229706][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.231219][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.248740][ T5582] team0: Port device team_slave_0 added [ 88.252729][ T5582] team0: Port device team_slave_1 added [ 88.269897][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.269912][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.269999][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.272264][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.272276][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.272318][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.300352][ T5582] hsr_slave_0: entered promiscuous mode [ 88.304455][ T5582] hsr_slave_1: entered promiscuous mode [ 88.304712][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 88.304726][ T5582] Cannot create hsr debugfs directory [ 88.423910][ T5582] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 88.425989][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.426518][ T5582] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 88.428884][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.429833][ T5582] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 88.449133][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.450123][ T5582] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 88.494730][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.518398][ T29] audit: type=1400 audit(1793642072.006:1003): avc: denied { block_suspend } for pid=5636 comm="syz.2.455" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.527482][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.527529][ T5582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.527667][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.527697][ T5582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.556581][ T5604] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 3: comm syz.0.449: bad entry in directory: inode out of bounds - offset=108, inode=17959, rec_len=1940, size=2048 fake=0 [ 88.578801][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.597362][ T3421] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.667872][ T3421] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.748475][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.751577][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.751610][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.756181][ T3421] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.756215][ T3421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.961267][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.965935][ T5652] FAT-fs (loop2): Directory bread(block 1285) failed [ 88.965977][ T5652] FAT-fs (loop2): Directory bread(block 1286) failed [ 88.966016][ T5652] FAT-fs (loop2): Directory bread(block 1287) failed [ 88.966066][ T5652] FAT-fs (loop2): Directory bread(block 1288) failed [ 89.160050][ T29] audit: type=1326 audit(1793642072.656:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.0.462" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939f0dfb19 code=0x7ffc0000 [ 89.162047][ T29] audit: type=1326 audit(1793642072.656:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.0.462" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939f0dfb19 code=0x7ffc0000 [ 89.162080][ T29] audit: type=1326 audit(1793642072.656:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.0.462" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939f0dfb19 code=0x7ffc0000 [ 89.162149][ T29] audit: type=1326 audit(1793642072.656:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.0.462" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f939f0dfb19 code=0x7ffc0000 [ 89.162177][ T29] audit: type=1326 audit(1793642072.656:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.0.462" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939f0dfb19 code=0x7ffc0000 [ 89.162255][ T29] audit: type=1326 audit(1793642072.656:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.0.462" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939f0dfb19 code=0x7ffc0000 [ 89.240359][ T5582] veth0_vlan: entered promiscuous mode [ 89.242530][ T5582] veth1_vlan: entered promiscuous mode [ 89.263294][ T5582] veth0_macvtap: entered promiscuous mode [ 89.266514][ T5582] veth1_macvtap: entered promiscuous mode [ 89.284600][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.289878][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.324865][ T144] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.325034][ T144] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.325132][ T144] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.325166][ T144] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.522116][ T5714] set_capacity_and_notify: 3 callbacks suppressed [ 89.522137][ T5714] loop8: detected capacity change from 0 to 512 [ 89.589946][ T5714] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.652009][ T5721] loop0: detected capacity change from 0 to 512 [ 89.672141][ T5721] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 89.672172][ T5721] System zones: 0-7 [ 89.778179][ T5714] EXT4-fs error (device loop8): ext4_find_dest_de:2052: inode #2: block 3: comm syz.8.466: bad entry in directory: inode out of bounds - offset=108, inode=17959, rec_len=1940, size=2048 fake=0 [ 89.993946][ T5739] loop4: detected capacity change from 0 to 512 [ 90.010289][ T5739] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.474: iget: bad i_size value: 38620345925642 [ 90.010380][ T5739] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 90.010626][ T5739] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.474: couldn't read orphan inode 15 (err -117) [ 90.010655][ T5739] loop4: lost filesystem error report for type 5 error -117 [ 90.091965][ T5737] ================================================================== [ 90.092008][ T5737] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 90.092046][ T5737] [ 90.092052][ T5737] read-write to 0xffffc9000186fcc0 of 8 bytes by task 5752 on cpu 0: [ 90.092069][ T5737] shmem_writeout+0x2db/0x8f0 [ 90.092094][ T5737] shrink_folio_list+0x1a81/0x2720 [ 90.092122][ T5737] evict_folios+0x1dac/0x2980 [ 90.092141][ T5737] try_to_shrink_lruvec+0x833/0x9a0 [ 90.092160][ T5737] shrink_node+0x943/0x3a90 [ 90.092179][ T5737] do_try_to_free_pages+0x310/0xb70 [ 90.092208][ T5737] try_to_free_mem_cgroup_pages+0x201/0x420 [ 90.092239][ T5737] mem_cgroup_resize_max+0x13d/0x2d0 [ 90.092268][ T5737] mem_cgroup_write+0x132/0x1c0 [ 90.092294][ T5737] cgroup_file_write+0x197/0x350 [ 90.092318][ T5737] kernfs_fop_write_iter+0x1d2/0x2e0 [ 90.092341][ T5737] vfs_write+0x57a/0x990 [ 90.092365][ T5737] ksys_write+0xdc/0x1a0 [ 90.092392][ T5737] __x64_sys_write+0x40/0x50 [ 90.092422][ T5737] x64_sys_call+0x154e/0x2550 [ 90.092449][ T5737] do_syscall_64+0x112/0x360 [ 90.092480][ T5737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.092501][ T5737] [ 90.092508][ T5737] read to 0xffffc9000186fcc0 of 8 bytes by task 5737 on cpu 1: [ 90.092526][ T5737] shmem_fallocate+0x5e2/0x8f0 [ 90.092559][ T5737] vfs_fallocate+0x3ac/0x400 [ 90.092598][ T5737] file_ioctl+0x4e1/0x5b0 [ 90.092630][ T5737] do_vfs_ioctl+0x7c4/0xe50 [ 90.092660][ T5737] __se_sys_ioctl+0x82/0x140 [ 90.092690][ T5737] __x64_sys_ioctl+0x43/0x50 [ 90.092720][ T5737] x64_sys_call+0x239d/0x2550 [ 90.092747][ T5737] do_syscall_64+0x112/0x360 [ 90.092774][ T5737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.092796][ T5737] [ 90.092801][ T5737] value changed: 0x000000000000003c -> 0x0000000000000045 [ 90.092814][ T5737] [ 90.092818][ T5737] Reported by Kernel Concurrency Sanitizer on: [ 90.092831][ T5737] CPU: 1 UID: 0 PID: 5737 Comm: syz.8.473 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 90.092865][ T5737] Tainted: [W]=WARN [ 90.092874][ T5737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 90.092887][ T5737] ================================================================== [ 90.155298][ T3421] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 90.160221][ T3421] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 90.160277][ T3421] EXT4-fs (loop4): This should not happen!! Data will be lost [ 90.160277][ T3421] [ 90.160291][ T3421] EXT4-fs (loop4): Total free blocks count 0 [ 90.160304][ T3421] EXT4-fs (loop4): Free/Dirty block details [ 90.160315][ T3421] EXT4-fs (loop4): free_blocks=0 [ 90.160328][ T3421] EXT4-fs (loop4): dirty_blocks=4 [ 90.160340][ T3421] EXT4-fs (loop4): Block reservation details [ 90.160352][ T3421] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 91.740852][ T5646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 93.161991][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 93.162085][ T29] audit: type=1400 audit(1793642076.656:1249): avc: denied { write } for pid=5759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.206761][ T29] audit: type=1400 audit(1793642076.696:1250): avc: denied { write } for pid=5770 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.291063][ T29] audit: type=1400 audit(1793642076.786:1251): avc: denied { write } for pid=5773 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.328917][ T29] audit: type=1400 audit(1793642076.816:1252): avc: denied { write } for pid=5784 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.479740][ T29] audit: type=1400 audit(1793642076.976:1253): avc: denied { write } for pid=5787 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.513213][ T29] audit: type=1400 audit(1793642076.986:1254): avc: denied { write } for pid=5798 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.504795][ T29] audit: type=1400 audit(1793642077.996:1255): avc: denied { write } for pid=5801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.540802][ T29] audit: type=1400 audit(1793642078.036:1256): avc: denied { write } for pid=5812 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1