last executing test programs: 5m28.829801545s ago: executing program 32 (id=1234): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x4000010, 0xffffffffffffffff, 0x42795000) (async, rerun: 32) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) r3 = socket(0x40000000015, 0x5, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r5 = perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7, 0x50, 0xffffffffffffffff, 0x80000000) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x200000000000011, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x1, 0x81, &(0x7f00000004c0)}) (async) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x10, 0x1fe, 0x6}, 0x10) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r3, 0x0, 0x800) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$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") (async, rerun: 64) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)) (async, rerun: 64) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) creat(&(0x7f0000000240)='./file0\x00', 0x160) 4m39.193564634s ago: executing program 33 (id=1673): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) sched_setscheduler(0x0, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1182, 0x9b) writev(r1, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000300)="f45c00812dbae9051dbdfb3f13f1d3bbbc4bfa2fdea8b9eb4e68da9545017db8d41e9788352ec2456795c9ab6ccaa08904613fae3dbc0aa2436ef407ce87909d3800b89659592d4c00e8510ec2dafa0a630e35fb7cd10be66e09639d0916184f231f82fda52038d8c1ca36667d65a3b92f9684250c4e69d706aa14118a79", 0x7e}], 0x2) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 4m12.178851791s ago: executing program 34 (id=1891): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000"], 0x0, 0x56, 0x0, 0x0, 0x400}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) getgroups(0x1, &(0x7f0000000180)=[0xee00]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5560}}, './file0\x00'}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x0, 0x4000) statx(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x400, 0x404, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r4, &(0x7f0000000940)='./file0\x00', 0x0, r5, 0x1000) setregid(r3, r5) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff0000dd97a83041c4eda78e83e23a8e0850962a03a3853000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r1, @ANYBLOB], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000008840), 0x40001, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) 4m5.644038451s ago: executing program 35 (id=1922): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a80ff1000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000020000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 3m58.161724423s ago: executing program 0 (id=1985): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400", 0x4}, {&(0x7f0000000000)="13475b84", 0x4}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x108000, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYBLOB="87c21ed4465818ef73bde7252f4e2bbdeabd8e1ae96652d02040e9020aad10b5f3f5633a173558fc5e91795e7daa02c3efc622e68660cd20e18eb7b2dc211f9376b7104df98be74d57609eb462920a7246ec36589adabbbb3cb9cdeebe3bfae7a2f7b688a202301bf83ec33abc95c98a8ef9126f659d3958e9c192d1a6447438c6fe1c82ca4263d748452ffc", @ANYRES64], 0x25, 0x359, &(0x7f0000000bc0)="$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") r4 = syz_open_procfs(0xffffffffffffffff, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000001c0)=@sg0, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x280443, 0x72) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff020000000f0000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c000000000000007f000001000000000000000000000000020000000400"], 0xfc}}, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000380)=@base={0x8, 0x4, 0x4, 0xbf22, 0x150, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400eaff00000000fc020000004000000000000000000001fe80000000000000008000000000000000000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fc0000000000000000000000000000017f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a000a000a01010100000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000ac1414340000000000000000000000003c040000002e000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) acct(0x0) 3m56.455900157s ago: executing program 0 (id=2002): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000005ff070000002400000300000d"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0xa, 0x32e}, 0x28) 3m56.370178972s ago: executing program 0 (id=2004): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='\x00', 0x89901) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x2c020400) move_mount(0xffffffffffffffff, 0x0, r1, 0x0, 0x46) 3m56.235689858s ago: executing program 0 (id=2009): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x4, 0x746, 0x6, 0x8, 0x8, 0x6, 0x20000000ffe, 0xf64, 0xffeffffc}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x18228}, [@IFLA_EVENT={0x8, 0x2c, 0x59}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) stat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getrandom(&(0x7f0000000180)=""/279, 0xffffffffffffff8c, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x4, r5, &(0x7f00000011c0), 0xfffffffffffffffe) lchown(&(0x7f0000000080)='./file1\x00', r4, 0xffffffffffffffff) 3m55.810008412s ago: executing program 0 (id=2015): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000080ff0000000000000a01010100000000000000000000000000000003000000000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x8000000) 3m54.90210569s ago: executing program 0 (id=2021): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x12014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x110938, 0x0, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000208000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10) 3m54.853113671s ago: executing program 36 (id=2021): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x12014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x110938, 0x0, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000208000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10) 3m36.122063559s ago: executing program 9 (id=2215): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) 3m36.044281966s ago: executing program 9 (id=2217): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010004802000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 3m35.918756883s ago: executing program 9 (id=2219): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) (async) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x7) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) sendmsg$inet_sctp(r4, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x2a000}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) (async) r8 = gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r8, 0x24, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x40718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) geteuid() sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) (async) r10 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r10, 0x0, 0x0) 3m35.865580153s ago: executing program 9 (id=2221): r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2840, 0x100) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0/file0\x00'}) renameat2(r0, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000300)='./file1\x00', 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@barrier}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f40), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000054}, 0x4) rt_tgsigqueueinfo(0x0, 0x0, 0x3f, &(0x7f00000001c0)={0x28, 0x5, 0x7fff}) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0xffffff55) r7 = getpgid(0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, r8, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x80000000}]}}]}, 0x40}}, 0x4000010) setns(r9, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000001400)={0x0, 0x1c, &(0x7f00000012c0)=[@in6={0xa, 0x4e24, 0xa, @remote, 0x1}]}, &(0x7f0000000240)=0x10) socketpair(0x1, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x80108906, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c90020029e5ff000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000800000000000000000000000000000000000000000000000000000000ffffffff0000000009000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000"]) 3m35.011851031s ago: executing program 9 (id=2238): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0134014030d9"}) 3m34.217676068s ago: executing program 9 (id=2246): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x54, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x220005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a0006ffffff8000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@empty, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x40000000809ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f0000000400), &(0x7f0000000500)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010000040000fedbdf25fe8000000000000000000000000000bbe000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 3m33.966899844s ago: executing program 37 (id=2246): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x54, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x220005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a0006ffffff8000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@empty, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x40000000809ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f0000000400), &(0x7f0000000500)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010000040000fedbdf25fe8000000000000000000000000000bbe000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2m15.352020538s ago: executing program 5 (id=2990): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = dup3(r2, r3, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) 2m12.224656468s ago: executing program 5 (id=3005): lchown(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200), 0x0, 0x0) 2m12.12199872s ago: executing program 5 (id=3006): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, 0x0, 0x810) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x1d, 0x10000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2}, 0xc) close(r3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x1973, &(0x7f0000000380)={0x0, 0x80f7, 0x80, 0x40004, 0x96}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0xf5, 0x0, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad4301000000000095"], 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x7, 0x0, 0x1000000002, 0x0, 0x6, 0x6}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r7, &(0x7f0000000240)=ANY=[], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) socket$inet(0x2, 0x80001, 0x84) r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r8, 0xc3d33000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m11.252371854s ago: executing program 5 (id=3020): open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400", 0x4}, {&(0x7f0000000000)="13475b84", 0x4}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x9, 0x6}, 0x4500, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0x6, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff020000000f0000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c000000000000007f000001000000000000000000000000020000000400"], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001002abd700000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000ffff00020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000017f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a000a00ac1414aa00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000ac1414340000000000000000000000003c020000002e000008000200"/164], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) acct(0x0) acct(0x0) 2m9.506400732s ago: executing program 5 (id=3025): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, 0x0, 0x4000) 2m8.011639314s ago: executing program 5 (id=3034): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) shutdown(r0, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x303}, "7c667758d1a18f1d", "147c828d84e02e279ff1d7419d9e57a2", "c428b11a", "8791a7acc688c6eb"}, 0x28) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0xf23, 0xd800, 0xc, 0x0, 0x0) 2m7.980557399s ago: executing program 38 (id=3034): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) shutdown(r0, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x303}, "7c667758d1a18f1d", "147c828d84e02e279ff1d7419d9e57a2", "c428b11a", "8791a7acc688c6eb"}, 0x28) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0xf23, 0xd800, 0xc, 0x0, 0x0) 2m4.305314161s ago: executing program 2 (id=3082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) 2m4.062073328s ago: executing program 2 (id=3087): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, 0x0, 0x810) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20081, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x9}, 0x2, 0x0, 0x10ffe, 0x2, 0x2, 0x8000000e, 0xfffe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010001fff00000000000400", @ANYRES32=0x0, @ANYBLOB="0c00040000000000280012800b0001006272696467650000180002800a0014000180c200000000000800090000000000"], 0x48}}, 0x4040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x105, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0x294}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000a00000000f00000018010000646c6c240000000000001c007b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b70300009500"/89], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = syz_io_uring_setup(0x1976, &(0x7f0000000380)={0x0, 0x80f7, 0x80, 0x40004, 0x96}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 2m3.187319531s ago: executing program 2 (id=3088): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000"], 0x0, 0x56, 0x0, 0x0, 0x400}, 0x28) getgroups(0x1, &(0x7f0000000180)=[0xee00]) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffffff, 0x0, 0x400, 0x404, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', r2, r3, 0x1000) setregid(r1, r3) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x11, 0x1, 0x0, 0x40, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0x6}, 0x8887, 0x10000, 0x8, 0x1, 0x80d, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2m0.097522068s ago: executing program 2 (id=3126): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES16=r3], 0x24}, 0x1, 0x0, 0x0, 0x4881}, 0x404c000) r4 = syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x84}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r3], 0x3ffffcdf) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f0000000b00)=""/176, 0x1b, 0xb0, 0x1, 0x3}, 0x28) r6 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/114, 0x72}, {&(0x7f0000000680)=""/29, 0x1d}], 0x2, &(0x7f0000000700)=""/27, 0x1b}, 0x2022) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7d23b6f07763b4d0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r9, 0xc0185879, &(0x7f0000001280)={0x58f5, 0xd0002, 0x2, 0xfffffff7fffffffd, 0x1, 0x0, 0x2401}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r10, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m59.249162777s ago: executing program 2 (id=3135): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x10000000}, 0x90) 1m58.459546215s ago: executing program 2 (id=3136): r0 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="100000000000000000000000000000001800003f00000000290000000b"], 0x28}, 0x0) 1m58.379789671s ago: executing program 39 (id=3136): r0 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="100000000000000000000000000000001800003f00000000290000000b"], 0x28}, 0x0) 44.490012061s ago: executing program 7 (id=3741): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_DST={0x8, 0x1, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@errors_remount}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002fbd70100402ffff04"], 0x34}}, 0x20) 43.893317934s ago: executing program 7 (id=3756): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x60866, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x7f}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (fail_nth: 24) 43.379145051s ago: executing program 7 (id=3757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}, 0x1, 0x24000000}, 0x0) 43.242004947s ago: executing program 7 (id=3758): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='./cgroup\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x1, 0x0, 0x2, 0x1444, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffdfffa, 0x2, @perf_config_ext={0x4, 0x2}, 0x10414a, 0x1, 0x6, 0x1, 0x3, 0xffc, 0x4, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x80) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) statx(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x34, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d04000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x8804}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd29, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0xd}, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x4, 0x1000000, 0xffffffff, 0x0, 0x0, 0x0, 0x1d}, {0x7f, 0xc99, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x6dd577ecccb2aad0}}]}, 0xc4}}, 0x40044) close(0x3) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.L'}, 0x15) 43.038023411s ago: executing program 7 (id=3761): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25640101018dffffffffffffff000000007f00000100000000000000000000000000000020001d00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e23, @broadcast}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0xfffff801, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000440)=""/138, 0x8a) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000340)=ANY=[]) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f00000001c0)='async\x00', 0x0, 0x0) 42.828570433s ago: executing program 7 (id=3768): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0xffffffffffffff7a, &(0x7f0000000300)=[{&(0x7f0000000080)="f7", 0xb}, {&(0x7f0000000140)="5a608dc4eb42a6028341c0905257648699555770d29687c0e78c93891bc65975de02f60627e215fea346cf39f2a2fceecb00191e6b082541d865d8cd9cd8f4c46d085afed7e9edfdb62954968cb86658450e5a1b56b1abe038ccfa8d1ad5e4"}, {&(0x7f0000000240)="dd7293555458c4915e6890fc0b334c7a014ca7ade0a0c0f4e6af8b79c72de1fe3dbe31056439d27c27af874b99bb1c7aa842722ee7bc5782ebc70d4a92dc7d7d6c9ff6289cb9ef8cb23ff98c6a6ab7a4ef7a8ee53e89d6a0b3d584ee66fdf58e90725950d42c06570826ac805d31161d8f5c7341527284b0cafde971ba80098169fa6f7484e89a9d70804cfe36fc3644ed3e4047babfbca3987ee01b31028e9754fd7d2bd3514e53df01560b1be4cb7a274369ecc38eb4578acc51"}], 0x1}, 0x4048880) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000008c0)=""/192, 0xc0}], 0x1}, 0x0, 0x40000103}) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) 42.828419573s ago: executing program 40 (id=3768): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0xffffffffffffff7a, &(0x7f0000000300)=[{&(0x7f0000000080)="f7", 0xb}, {&(0x7f0000000140)="5a608dc4eb42a6028341c0905257648699555770d29687c0e78c93891bc65975de02f60627e215fea346cf39f2a2fceecb00191e6b082541d865d8cd9cd8f4c46d085afed7e9edfdb62954968cb86658450e5a1b56b1abe038ccfa8d1ad5e4"}, {&(0x7f0000000240)="dd7293555458c4915e6890fc0b334c7a014ca7ade0a0c0f4e6af8b79c72de1fe3dbe31056439d27c27af874b99bb1c7aa842722ee7bc5782ebc70d4a92dc7d7d6c9ff6289cb9ef8cb23ff98c6a6ab7a4ef7a8ee53e89d6a0b3d584ee66fdf58e90725950d42c06570826ac805d31161d8f5c7341527284b0cafde971ba80098169fa6f7484e89a9d70804cfe36fc3644ed3e4047babfbca3987ee01b31028e9754fd7d2bd3514e53df01560b1be4cb7a274369ecc38eb4578acc51"}], 0x1}, 0x4048880) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000008c0)=""/192, 0xc0}], 0x1}, 0x0, 0x40000103}) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) 3.802956451s ago: executing program 3 (id=4259): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000480000000000000000a000087"], 0xc4}}, 0x0) 3.729697607s ago: executing program 3 (id=4262): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2018808, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c646f733178666c6f7070792c6e6f646f74732c6e66733d6e6f7374616c655f726f00006c7573682c007c32e6ed807e489371f36801ce050bf44a544254090f402f7118d54d9ab682086b2837a98d2ba3e5fdafcfdc2299feec75ae06d3eafa38e22c3acf88"], 0x0, 0x1224, &(0x7f0000001480)="$eJzs3U2LW1UcB+C/zYzzUmc6aq22Gw+KoJtgu3DlooPMgDSg1I74gsItc1vDxCTkZjERFxXBlQs/h7h0J4hfYL6DC3EzCKIbF+KVkHamLwmNY5No53k2OdzfufeelxC44Rzu/qtffbxzbSna0bcQc+34syzLSHEiKjFwI176fPP3pYi4tF6rbVxOaXP9yvlXUkqrz37//qffPPdD9+Tb365+txB7ax/u/3rhp70ze2f3/7ryUb1I9SI1W92UpautVje72sjTdr3Yqab0ZiPPijzVm0XeuSO/1mi1272UNbdXltudvChS1uylnbyXuq3U7fRSdj2rN1O1Wk0ry8FdLv6Tyltf/9Gf7CjL+Xg0yrIsl2I5TsZjsRKrcSrW4vF4Ip6M0/FUnImn45k4G2V5+vrkmg8AAAAAAAAAAAAAAAAAAADH0Yj9/3O38iH7/3+OcrZtBgAAAAAAAAAAAAAAAAAAgIfNUd7/X9r/DwAAAAAAAAAAAAAAAAAAAA/UePv/F+3/BwAAAAAAAAAAAAAAAAAAgAl66933Lq3XahuXU1qM+OXG7tbu1uBzkG++Xtt4OaWU5m8/67fd3a3KQX4+DdyZL8TyzfzC0HwxXnx+kPez196o3ZWfi+1Jdx4AAACOiWo6sHZ49PD5vlodlQ9KB/8P3PN8Pxfn5qbWDY6o6H2ykzUaeef/VKiManwlbj9yYgJ3v/WVvm/lxYjIO0V5KmL8W1TinS++/GBUnUdmP/JDChfvV2cpxrvgws2hvSfqj/m/bupn80OuPIXCfBzhrBf+A5M7ox8kpupw0kdW+XGqDQIAAAAAAAAAAGAsQ1f/xWDt6oNaTjjrPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Dc7cCwAAAAAIMzfOo2ODQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICrAgAA///SdX4n") ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setuid(0xee00) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000cc0)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/\x00'/12, @ANYRES32=r2, @ANYBLOB="9ea4821188e3eba8c3b36de88eba8deb59743026d6ee8b2df4c0dc59b707bfbbf7ee926ab242f87cb626d362548739c91c6bb8c3c32363e10fbc5e71e34b65fe7146d77c6ab6607f2736875feaf001a8ba19a834de5f5c24a4422504e7469fc7bd4dcdfd491450163b0ad9952955b42f790de64708b2b96af6ceafd8b5c559170fb11e3722b1a98df78f6f1c83fd2bf4fd3eb83ec83fda425036f7a6f8cdda4c01b72b0867f0e07a", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r2, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0, 0x0], 0x0, 0x0}, 0x40) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x4a1d, 0x1, @mcast2, 0x1000}, 0x1c) r3 = dup(r1) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x0, 0x5, 0x0, 0x0, 0x8000000005, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10003, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0xfffffffe, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, r0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) sync() sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000200)={'veth1_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) sendmsg$AUDIT_SET(r5, 0x0, 0x20040090) write$tun(r4, &(0x7f0000000740)=ANY=[], 0x2e) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x68800, &(0x7f0000000c40)={[{@errors_remount}, {@debug}, {@quota}, {@noauto_da_alloc}, {@data_ordered}, {@usrjquota}, {@bsdgroups}]}, 0x0, 0x476, &(0x7f0000000540)="$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") 3.229980898s ago: executing program 3 (id=4264): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x8004, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x88, 0xb, 0x1, 0x42}, {0x6, 0x400004, 0x8, 0x8}, {0x8001, 0xf2ff0000, 0x0, 0x8}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) 2.981789954s ago: executing program 3 (id=4268): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x9805, 0x3, 0x7fc, 0x6, 0x0, 0x1, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20004084) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000180)={[{@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}, 0x1, 0xbd7, &(0x7f00000023c0)="$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") truncate(&(0x7f0000000280)='./file1\x00', 0x40003) r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x449) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6a, 0x0, &(0x7f0000000480)="07003d8cfa7dbecb9093317efc4e550fe40f9d55dfe5b573b9861c207b358592cca77412039e58ef41cb725dc463f283798900589cc275a3f91190a5ea9235ae83bfac8ecc05032000246ad645e09c87c5a817ef4b935f4509ccfb39e1106269dcd6a2a0b9abd30f947e", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 2.979318023s ago: executing program 1 (id=4269): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='./cgroup/../file0\x00', 0x2000081, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRES64, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRESOCT], 0x2, 0x262, &(0x7f0000000a40)="$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") clock_gettime(0x0, &(0x7f00000021c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000002100)={0x5, 0x7, 0x1, 0x7fff, 0x7, 0x100, 0x2, 0x5}, &(0x7f0000002140)={0x0, 0x1, 0x4, 0x9, 0x7, 0x7fffffffffffffff, 0x8, 0x7}, &(0x7f0000002180)={0x9, 0x1, 0x100000000, 0xfffffffffffff173, 0x3, 0x1ff, 0x246a, 0xc}, &(0x7f0000002200)={r0, r1+60000000}, &(0x7f0000002280)={&(0x7f0000002240)={[0x40]}, 0x8}) mprotect(&(0x7f0000165000/0x1000)=nil, 0x1000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) socket$kcm(0x10, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f0000000580)=0x8000000000) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x850) recvmmsg(r4, &(0x7f0000000540), 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000050) r6 = syz_io_uring_setup(0x126b, &(0x7f0000000480)={0x0, 0x72d9, 0x0, 0x0, 0x18f}, &(0x7f0000000500), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 2.869787774s ago: executing program 6 (id=4271): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00001000000080ffffff000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000020000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 2.730229139s ago: executing program 6 (id=4275): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') pread64(r3, &(0x7f0000002180)=""/4094, 0xffe, 0x0) 2.700115913s ago: executing program 1 (id=4276): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x1d, 0x10000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x48) close(0xffffffffffffffff) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x1973, &(0x7f0000000380)={0x0, 0x80f7, 0x80, 0x40004, 0x96}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0xf5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad4301000000000095"], 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x7, 0x0, 0x1000000002, 0x0, 0x6, 0x6}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r5, &(0x7f0000000240)=ANY=[], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) socket$inet(0x2, 0x80001, 0x84) r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r6, 0xc3d33000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.661305196s ago: executing program 3 (id=4277): socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='ns\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4000}], 0x1, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000400000000000000140001800d2a79075827af5aa534d6815c2e93f1"], 0x3c}}, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x10) setxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, 0x0, 0x24000000) 2.050179937s ago: executing program 4 (id=4280): perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b000000000000cf420000000000ac1414aa000086dd"], 0xcfa4) 2.029751084s ago: executing program 4 (id=4281): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f00000000c0)={0x0, 0xfffffffffffffefe, 0x0, 0x1, 0x4, 0x6d, 0x0, 0x0, 0x1100a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x3ffff, 0x0, 0x3}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xe}, 0x16000, 0x0, 0x4, 0x6, 0x0, 0x2001000a, 0xfffc, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xd) socket$kcm(0xa, 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc974, 0x1, @perf_config_ext={0x6, 0x3}, 0x9030, 0xa88, 0x8409, 0x7, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(0x0, 0x3) fcntl$addseals(r2, 0x409, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 1.997924398s ago: executing program 4 (id=4283): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x34, 0xb, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xcaf}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x30000004}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$TCFLSH(r1, 0x541b, 0x7ffffffffffffffe) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0xfffffffffffffd6a, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000b40)={0xd0, 0x0, 0x200, 0x70bd31, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10000004}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x40}}, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x8402, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getcwd(&(0x7f00000003c0)=""/257, 0x101) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x17, r0, 0x19dee000) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r9, 0x0, 0x0, 0xa, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010326bd7000fbdbdf251c00000018000180140002006c6f00"/38], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x40006) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e5a, &(0x7f0000000040)={[{@noblock_validity}, {@abort}, {}, {@nombcache}, {@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@nobh}]}, 0x2a, 0x645, &(0x7f0000000600)="$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") 1.906099911s ago: executing program 8 (id=4284): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000100003042dbd70003d000000ff000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d0001000000140007000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) 1.902823331s ago: executing program 6 (id=4285): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0xffd9, 0x0, 0x60866, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x7f}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.891697149s ago: executing program 8 (id=4286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0xd9, 0x4000850}, 0x40) 1.853313552s ago: executing program 8 (id=4287): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x39, 0x0, @thr={&(0x7f00000001c0)="d720af1aa3c8fbc1458ee3a92eb17287db9f48991609160ea3100f7b0b82d826ac520f2187efb423ceccd2d729b08e1938df9266a960e2a4c762ee289a22132ec73063feaff7744f944e1df44e4b52986a382ebb7fa26553c32cdc515a0984ea83ca3b99a53628de7e7539cf3033c189e82adc044816b48c4ab519b5d9827c5c622fb6e55e1e126fd31ac56a35853935f9350edfcb340c2b3b0933584f85db42b2e21bc5730761e40e9a50ae82bbf13dc77d3fdb3f770587a554a3aadde12afe", &(0x7f0000000040)="03463d41adb4b8eff62c3b07ffb76b62c55bc007847f501ce53f679609b80085858d36dac3"}}, &(0x7f0000000140)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280), &(0x7f0000000340)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000400000001000084010000000a0000000200000006000000000000000000000105000000200000000a0000000000000e02000000000000000061002e2e61610061005f"], 0x0, 0x5c}, 0x28) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.797987642s ago: executing program 4 (id=4288): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r1 = getpgid(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)=[0x7], 0xfffffffffffffffe, 0x39, 0x1, 0x0, r1}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x8, 0x200, 0x5, 0x3, 0x4a600, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x244cd1, &(0x7f0000000500)=ANY=[@ANYBLOB="646f733178666c6f7070792c666d61736b3d3030303031303030daff303030303030303030303031312c726f6469722c75e1e2383d312c73686f72746e616d653d776e695f786c6174653d302c6e6f6e756d7461696c3d302c73686f5f746e616d653d6d697865642c6769643de96b4ed6f7728138ac0ae030ccce3bdaf21ada550c64832b8f0ef867d0e2f7cdee30a1900d03d380790431b8d57d019119236f1487aec979883447fdba60bc14d7e80341", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=1,uni_xlate=0,shortname=winnt,\x00'], 0xfe, 0x284, &(0x7f0000000700)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0/file0\x00', 0x808719, &(0x7f0000000300)={[{@nogrpid}, {@oldalloc}, {@discard}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@mblk_io_submit}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@minixdf}, {@nolazytime}, {@dax_inode}, {@prjquota}, {@nouid32}, {@data_writeback}, {@resgid}], [{@smackfshat={'smackfshat', 0x3d, '-@):.#})#'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fsname={'fsname', 0x3d, 'errors=remount-ro'}}], 0x2c}, 0x2, 0x4fc, &(0x7f0000000e40)="$eJzs3MtrXNUfAPDvnSRN0ja/5FeffWhHqxAUmyZ9Lly0RaEbQVCkLmOSltq0lSZCW4JNRVpwofQvUNwJ/gWudCMqLhS3FrciFMmm0YWM3Jl7x0kmk1cnGdN8PjDTc+5j7vnee0/nPOYmgE2rmL4lEdsj4peI6K1k525QrPwzOzM18ufM1EgSpdJrfyTl7e7NTI3km+b7bcsy/YWIwgdJ7K4/bOfE1Wvnh8fHxy5nCwYmC1nqwvDZsbNjF4eOHTt0sPvokaHDTYkzLdO9Xe9d2rPz1Ju3Xxk5ffut775Iy1vK1tfGUdFXft+y7CO01S0pRnHuuazx7PKLviH01KST9vS90LrCsGzpXZtero5y/e+NtnKuojdefr+lhQPWVKlUKnXWLa1+l02XaiVJZYdS6UYJeAAk0eoSAK2Rf9Hfm0l7qlMj9f3gB9vdE1HuAaVxz3ZFRDX+9nIPtthX6Rt1rNHxH46I09N/fZK+YsFxCACA5vrqRMStk5V2R/6qrCnEozXb/S+bG+qLiP9HxI6IeChrvzwSUd72sYh4vGafnmXMAhTn5evbPz91Z4na5mrTpO2/F7O5rfxVWVMteV9bluspx9+RnDk3PnYgOyf90dGZ5gfrP7o6rPb1Sz9/3Oj4xZr2X/pKj5+3BbNy/N4+b4BudHhy+H7jzt29UT6x1+vjT6I9yVMROyNi1yo+Pz1n5577fE+j9XPi76y0v+fG/1HjD29fRYEafMTszNR0zIs/svm/pDw/eeGdgYmr1144Vzs/OXj0yNDhga4YHzswkN8V9b7/8earWbKuG7HI9c+rxppOpKXXf+uC93915rIvTVXnaydWfoybd2417NOs/P7fWr7/tySvl3P5/OyV4cnJy4MRW5Lp+uVD/+59Zbh7zvZp/P37Fq7/OyL+/jTbb3dEpDfxExHxZETszcr+VEQ8HRH7Fon/25PPvN2oC7l0/GsrjX90Rde/UeL4DxELr2o7/82XdQf+sFgXf0c0uv6Hyqn+bMno8GTXUnEtVtLaxH2fQAAAANgA9kbE9kgK+7OBpu1RKOzfH7GtOoIyMfn8mUvvXhytPCPQFx2FfKSrt2Y8dDAbG07z6V5DNfl0/cHyuHGpVCp1p/m0/z7e09rQYdPb1qD+p36rf6QFeNCsaB6t0RNtwIY0v/7fWfaezf9BBrC+mvA7GmCDUv9h81p2/V+rp+CAllmo/l+PmG1BUYB1tlD9f6NuyfF1KQuwvvT/YfNaff33YwDY6Hz/w6a0rIfkV5HYcWqRbZL2tTlo40QhFv8rAH0R+ZK8TbP4B/5aiGhOCduaGmn3nGtaWHCbrmjGsaKw5DbtK/hDDOubKPw3ilFJdEbEEndv9Wa7nieurXXBypXgs9b+7wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD//gkAAP//hALPcw==") ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x700, 0x20, 0x2, 0x80000001, {{0x10, 0x4, 0x0, 0xc, 0x40, 0x68, 0x0, 0xdc, 0x4, 0x0, @remote, @loopback, {[@cipso={0x86, 0x27, 0xffffffffffffffff, [{0x1, 0x11, "a73dd9de8b44940b17fca50edec540"}, {0x5, 0x10, "fdd80dee6dad4e898603243460a5"}]}, @noop, @noop]}}}}}) 1.797685292s ago: executing program 6 (id=4289): r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x8, 0x1c, 0x65, 0x0, 0x2, 0x11, 0x0, @empty, @private=0x8010901}, {0x4e23, 0x4e23, 0x8}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2c7, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xc0102, 0x0) statfs(&(0x7f0000000200)='.\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x80, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x40, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}]}, 0x80}}, 0x0) socket(0x10, 0x3, 0xc9b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) r3 = socket$inet6(0xa, 0xa, 0xfffe0000) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) syz_emit_ethernet(0x26, 0x0, &(0x7f00000004c0)={0x0, 0x3, [0x51, 0xaac, 0xfc, 0x144]}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblc\x00', 0x0, 0x10001, 0x6f}, 0x2c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000040)="515538ee257db11a24ce1665feada594254e88309ac876c463e459fffc2a58447e45a571ccfa6c67e1fcaaf331e3669853b522861d90c0310d3b75405d914040f7149e21c304bed80ba99514a45c977b71d46a823a5bb0e262cb394d2bed6f5705120a425664db62cdbc932f3e6f03342759ba870c1eba12358a685399da87b9", 0x80, 0x4000000, &(0x7f00000000c0)={0x11, 0x10, r6, 0x1, 0x6, 0x6, @multicast}, 0x14) 1.78975646s ago: executing program 3 (id=4290): socket(0x11, 0x3, 0x10001) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8008, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004f7000/0x2000)=nil, 0x2000, 0x3000007, 0x8010, r0, 0xffffd000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800002018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x1002, &(0x7f0000002500)=""/4098, 0x41100}, 0x94) r1 = socket(0x28, 0x5, 0x0) r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000200)={0x0, 0x80fd, 0x1000, 0x1, 0x2cf}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x0, 0x0, 0x1}) r5 = syz_io_uring_complete(r3) io_uring_enter(r2, 0x47bc, 0xf5, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f00000004c0)="a6078c84706efdea0645a5d41b753926a3848ce6781be650989ad73caff8c916bc4ba26f51cc5c54a633952e65cc2e7d3131acb0c0725207a04131c501e045a794b24554e97700d72655efc5ac13c6a77e50681748576c90355322fcf593a4b16ffab5643d014064622f5d47598ce10eb5cbcd59e8e32010a5149035a0b500e0e45aa07ffbbe8ffc946f67afec768f5e8cc53fb60803b541582c779eb12f08ca669d83c291073addc6cd0b35de5565dc059c8f7c4193cb0d4f046274c9ae2d6b0195044dc60c1b129c92705d7bd4d8b42960ef05c845c67b0d26219a4f1f1c7420f6b014d012ee8659b304665e5c6844e4cb71e7714a7193e9bb4de756f7a647") ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) r10 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6020400) quotactl_fd$Q_GETINFO(r10, 0xffffffff80000500, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.73169229s ago: executing program 8 (id=4291): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getxattr(&(0x7f0000000140)='\x00', &(0x7f00000001c0)=@random={'os2.', '~{&\x03\x00'}, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000001000ffff27a87000fedb00", @ANYRES32=0x0, @ANYBLOB="170c0000000000005000128009000100766c616e0000000040000280340003800c00010001000000008000000c000100f1ffffff0c0000000c00010001000000050000000c0001000100000040000000060001000400000008000500", @ANYRES32=r4], 0x78}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 1.683625032s ago: executing program 4 (id=4292): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, 0x0, 0x0}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r6, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 1.569697011s ago: executing program 1 (id=4293): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 1.544375807s ago: executing program 1 (id=4294): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x1d, 0x10000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x48) close(0xffffffffffffffff) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x1973, &(0x7f0000000380)={0x0, 0x80f7, 0x80, 0x40004, 0x96}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0xf5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad4301000000000095"], 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x7, 0x0, 0x1000000002, 0x0, 0x6, 0x6}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r5, &(0x7f0000000240)=ANY=[], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) socket$inet(0x2, 0x80001, 0x84) r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r6, 0xc3d33000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 648.328356ms ago: executing program 8 (id=4295): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") 550.825549ms ago: executing program 6 (id=4296): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xaf, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x6004c040}, 0x40) 463.206323ms ago: executing program 1 (id=4297): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@barrier}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x14000000, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]}) 122.762952ms ago: executing program 4 (id=4298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r2, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) shutdown(r0, 0x1) r3 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x303}, "7c667758d1a18f1d", "147c828d84e02e279ff1d7419d9e57a2", "c428b11a", "8791a7acc688c6eb"}, 0x28) r4 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r3}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x10d080, 0x160, 0xd}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4004, @fd=r7, 0x8000000000000000, 0x0, 0x0, 0xa, 0x0, {0x0, r8}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fff1f00006000540001c020008000640"], 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x24008000) io_uring_enter(r4, 0xf23, 0x0, 0xc, 0x0, 0x0) 70.241313ms ago: executing program 6 (id=4299): r0 = socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYRES32=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000054}, 0x8000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x5e) 55.88418ms ago: executing program 8 (id=4300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x0, 0x353}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd) r6 = syz_io_uring_setup(0xd7, &(0x7f0000000000)={0x0, 0xb46, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0xfffffe4c, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd, 0xd4b, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$AUTOFS_IOC_READY(r9, 0x9360, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) 0s ago: executing program 1 (id=4301): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000d042dbd7000fcffff1f00000000", @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) kernel console output (not intermixed with test programs): 1, 0] type 2 family 0 port 6081 - 0 [ 422.822302][T18432] loop4: detected capacity change from 0 to 256 [ 422.830509][T18432] vfat: Unknown parameter 'shoPtname' [ 422.960515][T18435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3641'. [ 423.090514][ T28] audit: type=1400 audit(1772869127.947:14907): avc: denied { create } for pid=18437 comm="syz.6.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 423.150537][ T28] audit: type=1400 audit(1772869128.007:14908): avc: denied { create } for pid=18440 comm="syz.6.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 423.172513][ T28] audit: type=1400 audit(1772869128.027:14909): avc: denied { write } for pid=18440 comm="syz.6.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 423.391342][T18388] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.450924][T18388] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.542829][T18388] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.569102][T18388] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.657703][T18454] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3648'. [ 423.669581][T18388] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.707371][T18388] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.825560][T18403] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.844866][T18403] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.911222][T18403] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.939890][T18403] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.970333][T18403] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.989790][T18403] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.039445][T18403] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.078236][T18403] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.087843][T18460] loop6: detected capacity change from 0 to 512 [ 424.112025][T18460] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.3651: corrupted inode contents [ 424.191167][T18460] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 424.194072][T18460] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 424.203239][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 424.203260][ C0] EXT4-fs (loop6): initial error at time 1772869129: ext4_do_update_inode:5569: inode 15 [ 424.203305][ C0] EXT4-fs (loop6): last error at time 1772869129: ext4_do_update_inode:5569: inode 15 [ 424.259722][T18460] loop6: lost filesystem error report for type 5 error -117 [ 424.260840][T18460] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.3651: corrupted inode contents [ 424.279981][T18460] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 424.280205][T18460] EXT4-fs error (device loop6): ext4_evict_inode:303: inode #15: comm syz.6.3651: mark_inode_dirty error [ 424.302917][T18460] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 424.303128][T18460] EXT4-fs (loop6): 1 orphan inode deleted [ 424.318334][T18460] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.412023][T18470] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3653'. [ 424.428051][ T28] audit: type=1400 audit(1772869129.247:14910): avc: denied { bind } for pid=18466 comm="syz.4.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 424.457714][ T28] audit: type=1400 audit(1772869129.247:14911): avc: denied { setopt } for pid=18466 comm="syz.4.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 424.481322][ T28] audit: type=1400 audit(1772869129.307:14912): avc: denied { create } for pid=18459 comm="syz.6.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 424.501979][ T28] audit: type=1400 audit(1772869129.307:14913): avc: denied { bind } for pid=18459 comm="syz.6.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 424.612487][T16347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.985940][T18481] loop6: detected capacity change from 0 to 256 [ 425.021098][T18481] FAT-fs (loop6): Directory bread(block 64) failed [ 425.029408][T18481] FAT-fs (loop6): Directory bread(block 65) failed [ 425.038333][T18481] FAT-fs (loop6): Directory bread(block 66) failed [ 425.045738][T18481] FAT-fs (loop6): Directory bread(block 67) failed [ 425.053094][T18481] FAT-fs (loop6): Directory bread(block 68) failed [ 425.059775][T18481] FAT-fs (loop6): Directory bread(block 69) failed [ 425.068006][T18481] FAT-fs (loop6): Directory bread(block 70) failed [ 425.075019][T18481] FAT-fs (loop6): Directory bread(block 71) failed [ 425.082970][T18481] FAT-fs (loop6): Directory bread(block 72) failed [ 425.089534][T18481] FAT-fs (loop6): Directory bread(block 73) failed [ 425.111950][T18481] random: crng reseeded on system resumption [ 425.515648][ T28] audit: type=1400 audit(1772869130.367:14914): avc: denied { create } for pid=18485 comm="syz.3.3658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 425.554402][T18488] loop7: detected capacity change from 0 to 16384 [ 425.858194][T18496] bridge0: entered promiscuous mode [ 425.890803][T18496] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3660'. [ 425.983915][T18509] loop6: detected capacity change from 0 to 128 [ 426.003652][T18510] xt_CT: You must specify a L4 protocol and not use inversions on it [ 426.154800][T18524] syzkaller0: entered promiscuous mode [ 426.160434][T18524] syzkaller0: entered allmulticast mode [ 426.779583][T18535] netlink: 140 bytes leftover after parsing attributes in process `syz.8.3675'. [ 427.428991][T18537] loop8: detected capacity change from 0 to 32768 [ 427.731589][T18549] loop7: detected capacity change from 0 to 128 [ 427.741597][ T3791] loop8: p1 p3 < > [ 427.752447][T18557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.761628][T18557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.769682][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 427.769697][ T28] audit: type=1400 audit(1772869132.607:14928): avc: denied { read write } for pid=18556 comm="syz.4.3681" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 427.807403][T18555] loop6: detected capacity change from 0 to 1024 [ 427.830146][T18537] loop8: p1 p3 < > [ 427.844292][T18555] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 427.922500][ T28] audit: type=1400 audit(1772869132.607:14929): avc: denied { open } for pid=18556 comm="syz.4.3681" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 427.963511][T18562] loop7: detected capacity change from 0 to 128 [ 427.978810][T18555] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 427.985842][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 428.010088][ T3794] udevd[3794]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 428.034242][T18562] loop7: detected capacity change from 0 to 512 [ 428.041011][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 428.043648][ T3794] udevd[3794]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 428.070432][ T28] audit: type=1400 audit(1772869132.607:14930): avc: denied { ioctl } for pid=18556 comm="syz.4.3681" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 428.098056][T18564] loop8: detected capacity change from 0 to 512 [ 428.104721][T18562] EXT4-fs: Ignoring removed oldalloc option [ 428.123510][T18562] EXT4-fs: Ignoring removed mblk_io_submit option [ 428.150950][T18562] EXT4-fs (loop7): Invalid log block size: 4294967295 [ 428.162081][ T28] audit: type=1400 audit(1772869132.657:14931): avc: denied { read } for pid=18556 comm="syz.4.3681" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 428.188207][T18564] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 428.220221][ T28] audit: type=1400 audit(1772869132.657:14932): avc: denied { open } for pid=18556 comm="syz.4.3681" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 428.244438][ T28] audit: type=1400 audit(1772869132.747:14933): avc: denied { create } for pid=18556 comm="syz.4.3681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 428.264329][ T28] audit: type=1400 audit(1772869132.757:14934): avc: denied { bind } for pid=18556 comm="syz.4.3681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 428.284087][ T28] audit: type=1400 audit(1772869132.827:14935): avc: denied { mac_admin } for pid=18554 comm="syz.6.3680" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 428.305787][ T28] audit: type=1400 audit(1772869132.877:14936): avc: denied { relabelto } for pid=18554 comm="syz.6.3680" name="106" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 428.333182][T18564] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 428.391415][T18564] EXT4-fs (loop8): 1 truncate cleaned up [ 428.395020][ T28] audit: type=1400 audit(1772869132.877:14937): avc: denied { associate } for pid=18554 comm="syz.6.3680" name="106" dev="tmpfs" ino=573 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 428.407678][T18564] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.563367][T18576] vhci_hcd vhci_hcd.4: default hub control req: 8001 v0101 i0003 l0 [ 428.615089][T18576] loop6: detected capacity change from 0 to 128 [ 428.635670][T11401] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.651889][T18576] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 428.696456][T18576] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 428.759653][T18575] lo speed is unknown, defaulting to 1000 [ 428.775464][T18575] lo speed is unknown, defaulting to 1000 [ 428.797894][T18575] lo speed is unknown, defaulting to 1000 [ 428.897019][ T35] lo speed is unknown, defaulting to 1000 [ 428.904531][T18575] infiniband syU×: set down [ 428.913164][T18575] infiniband syU×: added lo [ 428.942359][T18575] RDS/IB: syU×: added [ 428.950521][T18575] smc: adding ib device syU× with port count 1 [ 428.963273][T18575] smc: ib device syU× port 1 has no pnetid [ 428.975798][ T35] lo speed is unknown, defaulting to 1000 [ 428.984684][T18575] lo speed is unknown, defaulting to 1000 [ 429.028749][T18575] lo speed is unknown, defaulting to 1000 [ 429.118785][T18575] lo speed is unknown, defaulting to 1000 [ 429.210816][T18575] lo speed is unknown, defaulting to 1000 [ 429.342560][T18575] lo speed is unknown, defaulting to 1000 [ 429.468320][T18575] lo speed is unknown, defaulting to 1000 [ 429.610608][T18575] lo speed is unknown, defaulting to 1000 [ 429.825087][T16347] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 431.009260][T18608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3697'. [ 431.039946][T18608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15442 sclass=netlink_route_socket pid=18608 comm=syz.4.3697 [ 431.060482][T18608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3697'. [ 431.082194][T18608] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3697'. [ 431.128510][T18610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3698'. [ 431.244093][T18616] loop3: detected capacity change from 0 to 512 [ 431.369108][T18616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.387148][T18601] netlink: 'syz.7.3694': attribute type 3 has an invalid length. [ 431.400461][T18616] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.418023][T18601] netlink: 'syz.7.3694': attribute type 3 has an invalid length. [ 431.439386][T18623] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3694'. [ 431.450135][T18601] netlink: 'syz.7.3694': attribute type 3 has an invalid length. [ 431.458008][T18601] netlink: 'syz.7.3694': attribute type 3 has an invalid length. [ 431.476816][T18601] netlink: 'syz.7.3694': attribute type 3 has an invalid length. [ 431.485749][T18601] netlink: 'syz.7.3694': attribute type 3 has an invalid length. [ 431.494171][T18601] netlink: 'syz.7.3694': attribute type 3 has an invalid length. [ 431.502870][T18601] netlink: 'syz.7.3694': attribute type 3 has an invalid length. [ 431.511100][T18601] netlink: 'syz.7.3694': attribute type 3 has an invalid length. [ 431.518995][T18601] netlink: 'syz.7.3694': attribute type 3 has an invalid length. [ 431.539205][T18624] loop4: detected capacity change from 0 to 128 [ 431.652483][T18629] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3703'. [ 431.786819][T18635] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3706'. [ 431.861479][T15783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.032303][T18644] loop6: detected capacity change from 0 to 512 [ 432.058889][T18644] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 432.081431][T18646] loop4: detected capacity change from 0 to 512 [ 432.099400][T18647] loop3: detected capacity change from 0 to 256 [ 432.102365][T18649] lo speed is unknown, defaulting to 1000 [ 432.117735][T18644] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 432.148141][T18644] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3710: bg 0: block 248: padding at end of block bitmap is not set [ 432.165773][T18647] FAT-fs (loop3): Directory bread(block 64) failed [ 432.176197][T18646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.180631][T18644] loop6: lost filesystem error report for type 5 error -117 [ 432.200295][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 432.204685][T18647] FAT-fs (loop3): Directory bread(block 65) failed [ 432.207825][ C1] EXT4-fs (loop6): last error at time 1772869137: ext4_validate_block_bitmap:441 [ 432.235580][T18646] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.235808][T18644] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.3710: Failed to acquire dquot type 1 [ 432.247502][T18647] FAT-fs (loop3): Directory bread(block 66) failed [ 432.270274][T18647] FAT-fs (loop3): Directory bread(block 67) failed [ 432.276837][T18647] FAT-fs (loop3): Directory bread(block 68) failed [ 432.287154][T18647] FAT-fs (loop3): Directory bread(block 69) failed [ 432.290907][T18644] loop6: lost filesystem error report for type 5 error -117 [ 432.293758][T18647] FAT-fs (loop3): Directory bread(block 70) failed [ 432.294332][T15208] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.301230][T18647] FAT-fs (loop3): Directory bread(block 71) failed [ 432.317204][T18644] EXT4-fs (loop6): 1 truncate cleaned up [ 432.323221][T18647] FAT-fs (loop3): Directory bread(block 72) failed [ 432.323319][T18647] FAT-fs (loop3): Directory bread(block 73) failed [ 432.350376][T18647] random: crng reseeded on system resumption [ 432.379259][T18644] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 432.439999][T16347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 432.614921][T18666] SET target dimension over the limit! [ 433.127436][T18676] loop8: detected capacity change from 0 to 512 [ 433.152639][T18676] EXT4-fs: Ignoring removed nobh option [ 433.170095][T18676] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 433.211315][T18676] EXT4-fs (loop8): 1 truncate cleaned up [ 433.224734][T18676] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.295120][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 433.295143][ T28] audit: type=1400 audit(1772869138.147:14947): avc: denied { read append open } for pid=18675 comm="syz.8.3715" path="/373/file2/blkio.bfq.avg_queue_size" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 433.463579][T11401] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.475043][ T28] audit: type=1400 audit(1772869138.327:14948): avc: denied { unmount } for pid=18724 comm="syz.4.3720" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 433.534810][ T28] audit: type=1326 audit(1772869138.347:14949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18728 comm="syz.7.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c948c799 code=0x7ffc0000 [ 433.571727][ T28] audit: type=1326 audit(1772869138.347:14950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18728 comm="syz.7.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c948c799 code=0x7ffc0000 [ 433.597207][ T28] audit: type=1326 audit(1772869138.347:14951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18728 comm="syz.7.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fc5c948c799 code=0x7ffc0000 [ 433.622914][ T28] audit: type=1326 audit(1772869138.387:14952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18728 comm="syz.7.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c948c799 code=0x7ffc0000 [ 433.632511][T18736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3723'. [ 433.646903][ T28] audit: type=1326 audit(1772869138.387:14953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18728 comm="syz.7.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c948c799 code=0x7ffc0000 [ 433.683153][T18738] loop7: detected capacity change from 0 to 256 [ 433.695966][ T28] audit: type=1326 audit(1772869138.427:14954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18728 comm="syz.7.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fc5c948c799 code=0x7ffc0000 [ 433.770313][ T28] audit: type=1326 audit(1772869138.617:14955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18728 comm="syz.7.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c948c799 code=0x7ffc0000 [ 433.800015][ T28] audit: type=1326 audit(1772869138.627:14956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18728 comm="syz.7.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c948c799 code=0x7ffc0000 [ 433.959103][T18749] rdma_rxe: rxe_newlink: failed to add lo [ 434.009708][T18745] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3727'. [ 434.030321][T18755] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3731'. [ 434.060810][T18762] loop7: detected capacity change from 0 to 128 [ 434.235635][T18780] vlan5: entered promiscuous mode [ 434.243194][T18770] loop6: detected capacity change from 0 to 256 [ 434.255020][T18779] lo speed is unknown, defaulting to 1000 [ 434.277666][T18770] FAT-fs (loop6): Directory bread(block 64) failed [ 434.284386][T18770] FAT-fs (loop6): Directory bread(block 65) failed [ 434.291294][T18770] FAT-fs (loop6): Directory bread(block 66) failed [ 434.298004][T18770] FAT-fs (loop6): Directory bread(block 67) failed [ 434.330132][T18770] FAT-fs (loop6): Directory bread(block 68) failed [ 434.355650][T18770] FAT-fs (loop6): Directory bread(block 69) failed [ 434.386037][T18770] FAT-fs (loop6): Directory bread(block 70) failed [ 434.417909][T18770] FAT-fs (loop6): Directory bread(block 71) failed [ 434.436087][T18770] FAT-fs (loop6): Directory bread(block 72) failed [ 434.445053][T18796] loop3: detected capacity change from 0 to 512 [ 434.451774][T18770] FAT-fs (loop6): Directory bread(block 73) failed [ 434.460811][T18796] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 434.492337][T18770] random: crng reseeded on system resumption [ 434.513415][T18796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.556354][T18796] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.580453][T18779] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 434.609064][T18779] EXT4-fs error (device loop7): ext4_init_orphan_info:618: comm syz.7.3741: orphan file block 0: bad magic [ 434.644151][T18779] loop7: lost filesystem error report for type 5 error -117 [ 434.647282][T18779] EXT4-fs (loop7): Remounting filesystem read-only [ 434.654719][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 434.654741][ C0] EXT4-fs (loop7): initial error at time 1772869139: ext4_init_orphan_info:618 [ 434.654767][ C0] EXT4-fs (loop7): last error at time 1772869139: ext4_init_orphan_info:618 [ 434.686017][T18779] EXT4-fs (loop7): mount failed [ 434.691341][ T3309] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 434.698623][ T3309] loop8: p1 start 460800 is beyond EOD, truncated [ 434.728012][ T3309] loop8: p2 size 83886080 extends beyond EOD, truncated [ 434.761803][ T3309] loop8: p5 start 460800 is beyond EOD, truncated [ 434.799530][ T3309] loop8: p6 size 83886080 extends beyond EOD, truncated [ 434.846272][T15783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.879672][T18822] FAULT_INJECTION: forcing a failure. [ 434.879672][T18822] name failslab, interval 1, probability 0, space 0, times 0 [ 434.935870][T18822] CPU: 0 UID: 0 PID: 18822 Comm: syz.7.3756 Tainted: G W syzkaller #0 PREEMPT(full) [ 434.936012][T18822] Tainted: [W]=WARN [ 434.936018][T18822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 434.936031][T18822] Call Trace: [ 434.936036][T18822] [ 434.936043][T18822] __dump_stack+0x1d/0x30 [ 434.936067][T18822] dump_stack_lvl+0x95/0xd0 [ 434.936091][T18822] dump_stack+0x15/0x1b [ 434.936126][T18822] should_fail_ex+0x263/0x280 [ 434.936150][T18822] should_failslab+0x8c/0xb0 [ 434.936172][T18822] __kmalloc_noprof+0xb8/0x4e0 [ 434.936195][T18822] ? alloc_workqueue_noprof+0x163/0x15c0 [ 434.936260][T18822] alloc_workqueue_noprof+0x163/0x15c0 [ 434.936286][T18822] ? snprintf+0x86/0xb0 [ 434.936335][T18822] ? bitmap_free+0x15/0x20 [ 434.936397][T18822] ? register_netdevice+0x19e/0x1000 [ 434.936426][T18822] bond_init+0x94/0x2a0 [ 434.936450][T18822] register_netdevice+0x23a/0x1000 [ 434.936474][T18822] bond_newlink+0x2f/0xb0 [ 434.936551][T18822] ? __pfx_bond_newlink+0x10/0x10 [ 434.936573][T18822] rtnl_newlink_create+0x1e4/0x650 [ 434.936597][T18822] ? security_capable+0x7b/0x90 [ 434.936702][T18822] ? netlink_ns_capable+0x86/0xa0 [ 434.936729][T18822] rtnl_newlink+0x10a0/0x1330 [ 434.936784][T18822] ? __memcg_slab_free_hook+0x14b/0x240 [ 434.936820][T18822] ? __rcu_read_unlock+0x4e/0x70 [ 434.936841][T18822] ? avc_has_perm_noaudit+0xab/0x130 [ 434.936865][T18822] ? cred_has_capability+0x224/0x2a0 [ 434.936952][T18822] ? selinux_capable+0x31/0x40 [ 434.936979][T18822] ? security_capable+0x7b/0x90 [ 434.937003][T18822] ? ns_capable+0x7c/0xb0 [ 434.937040][T18822] ? __pfx_rtnl_newlink+0x10/0x10 [ 434.937072][T18822] rtnetlink_rcv_msg+0x64b/0x720 [ 434.937162][T18822] netlink_rcv_skb+0x123/0x220 [ 434.937247][T18822] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 434.937339][T18822] rtnetlink_rcv+0x1c/0x30 [ 434.937362][T18822] netlink_unicast+0x5c0/0x690 [ 434.937390][T18822] netlink_sendmsg+0x5c8/0x6f0 [ 434.937422][T18822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.937455][T18822] ____sys_sendmsg+0x563/0x5b0 [ 434.937575][T18822] ___sys_sendmsg+0x195/0x1e0 [ 434.937616][T18822] __x64_sys_sendmsg+0xd4/0x160 [ 434.937730][T18822] x64_sys_call+0x194c/0x3020 [ 434.937755][T18822] do_syscall_64+0x12c/0x370 [ 434.937808][T18822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.937834][T18822] RIP: 0033:0x7fc5c948c799 [ 434.937873][T18822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.937889][T18822] RSP: 002b:00007fc5c7edf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.937907][T18822] RAX: ffffffffffffffda RBX: 00007fc5c9705fa0 RCX: 00007fc5c948c799 [ 434.937920][T18822] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 434.937934][T18822] RBP: 00007fc5c7edf090 R08: 0000000000000000 R09: 0000000000000000 [ 434.938025][T18822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 434.938036][T18822] R13: 00007fc5c9706038 R14: 00007fc5c9705fa0 R15: 00007ffd44214aa8 [ 434.938053][T18822] [ 435.279495][T18792] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 435.285518][T18792] loop8: p1 start 460800 is beyond EOD, truncated [ 435.293155][T18792] loop8: p2 size 83886080 extends beyond EOD, truncated [ 435.323430][T18792] loop8: p5 start 460800 is beyond EOD, truncated [ 435.336805][T18792] loop8: p6 size 83886080 extends beyond EOD, truncated [ 435.419962][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 435.420003][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 435.430814][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 435.451267][ T3794] udevd[3794]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 435.502159][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 435.502286][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 435.521129][T18831] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.522933][ T3794] udevd[3794]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 435.540401][T18831] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.556226][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 435.647587][T18838] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.673654][T11225] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 435.717615][T11225] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 435.759518][T11401] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.833615][T18848] geneve2: entered promiscuous mode [ 435.852482][T11225] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.872929][T18854] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.3767: invalid block [ 435.885109][T18854] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 435.885398][T18854] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3767: invalid indirect mapped block 4294967295 (level 1) [ 435.894599][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 435.894623][ C0] EXT4-fs (loop6): initial error at time 1772869140: ext4_get_branch:178: inode 11: block 4294967295 [ 435.894655][ C0] EXT4-fs (loop6): last error at time 1772869140: ext4_get_branch:178: inode 11: block 4294967295 [ 435.940334][T18854] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 435.943349][T18854] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3767: invalid indirect mapped block 4294967295 (level 1) [ 436.013504][T18854] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 436.013727][T18854] EXT4-fs (loop6): 2 truncates cleaned up [ 436.035274][T18847] lo speed is unknown, defaulting to 1000 [ 436.046011][T18854] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.131647][T18409] vlan2: left allmulticast mode [ 436.155272][T18409] bridge_slave_0: left allmulticast mode [ 436.165194][T16347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.166669][T18409] vlan2: left promiscuous mode [ 436.179311][T18409] bridge_slave_0: left promiscuous mode [ 436.185880][T18409] bridge0: port 1(vlan2) entered disabled state [ 436.320295][ T3424] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 436.368342][T18882] set_capacity_and_notify: 5 callbacks suppressed [ 436.368358][T18882] loop6: detected capacity change from 0 to 256 [ 436.396294][T18882] FAT-fs (loop6): Directory bread(block 64) failed [ 436.405482][T18882] FAT-fs (loop6): Directory bread(block 65) failed [ 436.413804][T18882] FAT-fs (loop6): Directory bread(block 66) failed [ 436.421298][T18882] FAT-fs (loop6): Directory bread(block 67) failed [ 436.428012][T18882] FAT-fs (loop6): Directory bread(block 68) failed [ 436.434795][T18882] FAT-fs (loop6): Directory bread(block 69) failed [ 436.441584][T18882] FAT-fs (loop6): Directory bread(block 70) failed [ 436.448139][T18882] FAT-fs (loop6): Directory bread(block 71) failed [ 436.457089][T18882] FAT-fs (loop6): Directory bread(block 72) failed [ 436.463805][T18882] FAT-fs (loop6): Directory bread(block 73) failed [ 436.475973][T18882] random: crng reseeded on system resumption [ 436.503696][T18409] bond0 (unregistering): Released all slaves [ 436.518219][T18409] bond1 (unregistering): Released all slaves [ 436.527682][T18409] bond2 (unregistering): Released all slaves [ 436.837367][T18409] tipc: Left network mode [ 436.850978][T18407] netdevsim netdevsim3 ì: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.861032][T18407] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.875271][T18407] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.907022][T18892] __nla_validate_parse: 5 callbacks suppressed [ 436.907037][T18892] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3774'. [ 436.924742][T18407] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.933681][T18859] lo speed is unknown, defaulting to 1000 [ 437.041284][T18898] team0: entered promiscuous mode [ 437.056939][T18898] team0: entered allmulticast mode [ 437.065856][T18898] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.137795][T18859] chnl_net:caif_netlink_parms(): no params data found [ 437.155770][T18916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3778'. [ 437.173526][T18916] vlan0: entered allmulticast mode [ 437.179469][T18916] bridge_slave_0: entered allmulticast mode [ 437.195038][T18916] bridge0: port 1(vlan0) entered blocking state [ 437.202173][T18916] bridge0: port 1(vlan0) entered disabled state [ 437.209024][T18916] vlan0: entered promiscuous mode [ 437.216596][T18916] bridge_slave_0: entered promiscuous mode [ 437.294087][T18932] validate_nla: 61 callbacks suppressed [ 437.294101][T18932] netlink: 'syz.8.3782': attribute type 10 has an invalid length. [ 437.313892][T18859] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.324933][T18859] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.332534][T18932] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3782'. [ 437.341941][T18859] bridge_slave_0: entered allmulticast mode [ 437.349511][T18934] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3784'. [ 437.355136][T18859] bridge_slave_0: entered promiscuous mode [ 437.365798][T18859] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.373057][T18859] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.380926][T18859] bridge_slave_1: entered allmulticast mode [ 437.387435][T18859] bridge_slave_1: entered promiscuous mode [ 437.395226][T18932] bridge0: port 2(team0) entered blocking state [ 437.413668][T18932] bridge0: port 2(team0) entered disabled state [ 437.465703][T18859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.501900][T18859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.548805][T18859] team0: Port device team_slave_0 added [ 437.564488][T18859] team0: Port device team_slave_1 added [ 437.603147][T18956] loop3: detected capacity change from 0 to 512 [ 437.612950][T18859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.636122][T18859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.714513][T18859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.754980][T18859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.763329][T18859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.790114][T18963] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3789'. [ 437.799150][T18859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.819730][T18963] loop8: detected capacity change from 0 to 1024 [ 437.828477][T18963] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 437.859541][T18859] hsr_slave_0: entered promiscuous mode [ 437.859730][T18963] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 437.860340][T18859] hsr_slave_1: entered promiscuous mode [ 437.866587][T18963] JBD2: no valid journal superblock found [ 437.875592][T18859] debugfs: 'hsr0' already exists in 'hsr' [ 437.882022][T18963] EXT4-fs (loop8): Could not load journal inode [ 437.886625][T18859] Cannot create hsr debugfs directory [ 437.954194][T18976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3793'. [ 437.974957][T18973] tap0: tun_chr_ioctl cmd 1074025677 [ 437.990357][T18973] tap0: linktype set to 774 [ 438.028077][T18984] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3795'. [ 438.146706][T18988] lo speed is unknown, defaulting to 1000 [ 438.458244][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 438.458260][ T28] audit: type=1400 audit(1772869143.307:15008): avc: denied { block_suspend } for pid=19018 comm="syz.3.3802" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 438.504286][T19025] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3803'. [ 438.530229][T18859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 438.568775][T18859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 438.582909][T18859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 438.592788][T18859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 438.730014][T18859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.743090][T18859] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.795438][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3809'. [ 438.813721][T18412] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.820802][T18412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.842721][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3809'. [ 438.874337][T18412] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.881450][T18412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.922205][T19074] loop6: detected capacity change from 0 to 128 [ 438.929159][ T28] audit: type=1400 audit(1772869143.777:15009): avc: denied { egress } for pid=18401 comm="kworker/u8:39" daddr=ff02::1:ffaa:aa1c netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 438.949640][T19069] loop3: detected capacity change from 0 to 4096 [ 438.961332][T18859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 438.982982][T19074] loop6: detected capacity change from 0 to 512 [ 438.996693][T19074] EXT4-fs: Ignoring removed oldalloc option [ 439.001469][ T28] audit: type=1400 audit(1772869143.777:15010): avc: denied { sendto } for pid=18401 comm="kworker/u8:39" daddr=ff02::1:ffaa:aa1c netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 439.007038][T19069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.071585][T18859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.082224][T19074] EXT4-fs: Ignoring removed mblk_io_submit option [ 439.108580][T19074] EXT4-fs (loop6): blocks per group (2) and clusters per group (8192) inconsistent [ 439.218832][ T28] audit: type=1400 audit(1772869144.067:15011): avc: denied { connect } for pid=19089 comm="syz.6.3815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 439.253039][T15783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.279668][T18859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.493017][ T28] audit: type=1400 audit(1772869144.347:15012): avc: denied { map } for pid=19115 comm="syz.8.3821" path="socket:[53293]" dev="sockfs" ino=53293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 439.566520][T18859] veth0_vlan: entered promiscuous mode [ 439.594214][ T28] audit: type=1400 audit(1772869144.347:15013): avc: denied { read } for pid=19115 comm="syz.8.3821" path="socket:[53293]" dev="sockfs" ino=53293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 439.612783][T18859] veth1_vlan: entered promiscuous mode [ 439.633949][T19102] loop6: detected capacity change from 0 to 1024 [ 439.686207][T18859] veth0_macvtap: entered promiscuous mode [ 439.702546][T19102] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 439.728028][T18859] veth1_macvtap: entered promiscuous mode [ 439.753869][T18859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.772867][T18859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.778269][T19102] System zones: [ 439.805504][T18401] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.819732][T19102] 0-1, 3-36 [ 439.841366][ T28] audit: type=1400 audit(1772869144.697:15014): avc: denied { mount } for pid=19141 comm="syz.4.3826" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 439.865677][T19102] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3819: bad orphan inode 134217728 [ 439.883821][T18401] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.900434][T19102] loop6: lost filesystem error report for type 5 error -117 [ 439.909210][T19102] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.930688][T18401] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.960272][T18401] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.996785][ T28] audit: type=1400 audit(1772869144.847:15015): avc: denied { mounton } for pid=18859 comm="syz-executor" path="/root/syzkaller.a5cbZT/syz-tmp" dev="sda1" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 440.054557][ T28] audit: type=1400 audit(1772869144.847:15016): avc: denied { mounton } for pid=18859 comm="syz-executor" path="/root/syzkaller.a5cbZT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 440.122183][ T28] audit: type=1400 audit(1772869144.847:15017): avc: denied { mounton } for pid=18859 comm="syz-executor" path="/root/syzkaller.a5cbZT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=54336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 440.322921][T16347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.685649][T19211] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=24347 sclass=netlink_xfrm_socket pid=19211 comm=syz.3.3837 [ 441.168375][T19257] syzkaller0: entered promiscuous mode [ 441.178891][T19257] syzkaller0: entered allmulticast mode [ 441.191434][T19262] loop8: detected capacity change from 0 to 4096 [ 441.256812][T19270] loop1: detected capacity change from 0 to 512 [ 441.267225][T19270] tipc: Can't bind to reserved service type 1 [ 441.298175][T19262] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.324230][T19262] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.3847: Failed to acquire dquot type 0 [ 441.676165][T19291] netlink: 'syz.6.3854': attribute type 8 has an invalid length. [ 441.692730][T19291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.709683][T19292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=19292 comm=syz.1.3856 [ 441.758089][T19292] netlink: 'syz.1.3856': attribute type 2 has an invalid length. [ 441.774373][T19291] loop6: detected capacity change from 0 to 4096 [ 441.825780][T19291] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.891243][T19286] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.3854: Failed to acquire dquot type 0 [ 441.983971][T16347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.269192][T11401] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.450365][T19317] loop8: detected capacity change from 0 to 512 [ 442.547734][T19323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.556554][T19323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.977182][T19346] __nla_validate_parse: 9 callbacks suppressed [ 442.977197][T19346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3869'. [ 443.032505][T19346] geneve3: entered promiscuous mode [ 443.126233][T19369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3874'. [ 443.166863][T19369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3874'. [ 443.274933][T19369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3874'. [ 443.372748][T19378] loop6: detected capacity change from 0 to 256 [ 443.390844][T19378] FAT-fs (loop6): Directory bread(block 64) failed [ 443.392308][T19385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3877'. [ 443.397518][T19378] FAT-fs (loop6): Directory bread(block 65) failed [ 443.414109][T19378] FAT-fs (loop6): Directory bread(block 66) failed [ 443.420818][T19378] FAT-fs (loop6): Directory bread(block 67) failed [ 443.427542][T19378] FAT-fs (loop6): Directory bread(block 68) failed [ 443.437192][T19378] FAT-fs (loop6): Directory bread(block 69) failed [ 443.466999][T19386] loop3: detected capacity change from 0 to 256 [ 443.536144][T19386] FAT-fs (loop3): Directory bread(block 64) failed [ 443.542949][T19386] FAT-fs (loop3): Directory bread(block 65) failed [ 443.549606][T19386] FAT-fs (loop3): Directory bread(block 66) failed [ 443.556288][T19386] FAT-fs (loop3): Directory bread(block 67) failed [ 443.563160][T19386] FAT-fs (loop3): Directory bread(block 68) failed [ 443.569873][T19386] FAT-fs (loop3): Directory bread(block 69) failed [ 443.576544][T19386] FAT-fs (loop3): Directory bread(block 70) failed [ 443.583152][T19386] FAT-fs (loop3): Directory bread(block 71) failed [ 443.590011][T19386] FAT-fs (loop3): Directory bread(block 72) failed [ 443.596558][T19386] FAT-fs (loop3): Directory bread(block 73) failed [ 443.629210][T19378] FAT-fs (loop6): Directory bread(block 70) failed [ 443.683666][T19378] FAT-fs (loop6): Directory bread(block 71) failed [ 443.745326][T19378] FAT-fs (loop6): Directory bread(block 72) failed [ 443.782058][T19378] FAT-fs (loop6): Directory bread(block 73) failed [ 443.921267][T19378] random: crng reseeded on system resumption [ 444.273410][T19400] loop6: detected capacity change from 0 to 512 [ 444.367987][T19400] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.420335][T19400] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.540599][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 444.540615][ T28] audit: type=1400 audit(1772869149.317:15043): avc: denied { write } for pid=19414 comm="syz.4.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 444.616011][T19422] xt_bpf: check failed: parse error [ 445.070737][T16347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.177895][T19441] loop3: detected capacity change from 0 to 256 [ 445.213741][T19440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3896'. [ 445.298698][T19441] FAT-fs (loop3): Directory bread(block 64) failed [ 445.306130][T19441] FAT-fs (loop3): Directory bread(block 65) failed [ 445.312716][T19441] FAT-fs (loop3): Directory bread(block 66) failed [ 445.319223][T19441] FAT-fs (loop3): Directory bread(block 67) failed [ 445.325930][T19441] FAT-fs (loop3): Directory bread(block 68) failed [ 445.333256][T19441] FAT-fs (loop3): Directory bread(block 69) failed [ 445.339903][T19441] FAT-fs (loop3): Directory bread(block 70) failed [ 445.346595][T19441] FAT-fs (loop3): Directory bread(block 71) failed [ 445.353265][T19441] FAT-fs (loop3): Directory bread(block 72) failed [ 445.359911][T19441] FAT-fs (loop3): Directory bread(block 73) failed [ 445.461235][T19450] SET target dimension over the limit! [ 445.487932][T19441] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 446.883140][T19518] loop8: detected capacity change from 0 to 512 [ 446.951942][T19527] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3901'. [ 446.990024][T19518] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.016570][T19518] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.050325][T19547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=19547 comm=syz.1.3902 [ 447.098431][T19547] netlink: 'syz.1.3902': attribute type 2 has an invalid length. [ 447.141183][T11401] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.154114][T19554] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3903'. [ 447.163868][T19554] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3903'. [ 447.279133][ T28] audit: type=1400 audit(1772869152.127:15044): avc: denied { create } for pid=19564 comm="syz.1.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 447.308908][T19571] loop8: detected capacity change from 0 to 128 [ 447.309223][ T28] audit: type=1400 audit(1772869152.157:15045): avc: denied { write } for pid=19564 comm="syz.1.3906" path="socket:[53727]" dev="sockfs" ino=53727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 447.371267][T19571] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 447.387302][T19571] ext4 filesystem being mounted at /414/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 447.425508][T19579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3908'. [ 447.438041][T19569] loop1: detected capacity change from 0 to 1024 [ 447.447828][T11401] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 447.461899][T19569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 447.475400][T19569] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.489498][ T28] audit: type=1400 audit(1772869152.337:15046): avc: denied { mounton } for pid=19564 comm="syz.1.3906" path="/16/file1" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 447.553303][ T28] audit: type=1400 audit(1772869152.337:15047): avc: denied { execute } for pid=19564 comm="syz.1.3906" dev="tmpfs" ino=1897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 447.622585][ T28] audit: type=1400 audit(1772869152.337:15048): avc: denied { execute_no_trans } for pid=19564 comm="syz.1.3906" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 447.733660][T19588] loop8: detected capacity change from 0 to 8192 [ 447.740549][T19588] vfat: Unknown parameter 'oñžomq?NÍçÀ÷' [ 447.760923][ T28] audit: type=1400 audit(1772869152.407:15049): avc: denied { mount } for pid=19586 comm="syz.8.3911" name="/" dev="ramfs" ino=54713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 447.792411][T19588] batadv_slave_1: entered promiscuous mode [ 447.822318][T19588] batadv_slave_1: left promiscuous mode [ 447.935993][T19600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.946085][T19600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.059220][T18859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 448.290426][T19611] loop1: detected capacity change from 0 to 1024 [ 448.429056][T19613] loop6: detected capacity change from 0 to 512 [ 448.449143][T19611] EXT4-fs: inline encryption not supported [ 448.454466][T19613] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.514500][T19611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.528860][T19613] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.559808][ T28] audit: type=1400 audit(1772869153.397:15050): avc: denied { accept } for pid=19618 comm="syz.4.3924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 448.620852][T19611] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 448.662354][T19611] EXT4-fs (loop1): Remounting filesystem read-only [ 448.678939][T16347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.720868][T18859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.913423][T19627] loop6: detected capacity change from 0 to 256 [ 448.947365][T19627] FAT-fs (loop6): Directory bread(block 64) failed [ 448.956010][T19627] FAT-fs (loop6): Directory bread(block 65) failed [ 448.974363][T19627] FAT-fs (loop6): Directory bread(block 66) failed [ 448.981217][T19627] FAT-fs (loop6): Directory bread(block 67) failed [ 448.988253][T19627] FAT-fs (loop6): Directory bread(block 68) failed [ 448.995133][T19627] FAT-fs (loop6): Directory bread(block 69) failed [ 449.012581][T19627] FAT-fs (loop6): Directory bread(block 70) failed [ 449.021650][T19633] __nla_validate_parse: 3 callbacks suppressed [ 449.021666][T19633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3929'. [ 449.036884][T19631] loop1: detected capacity change from 0 to 4096 [ 449.038599][T19631] EXT4-fs: Ignoring removed bh option [ 449.046556][T19627] FAT-fs (loop6): Directory bread(block 71) failed [ 449.058130][T19627] FAT-fs (loop6): Directory bread(block 72) failed [ 449.066050][T19627] FAT-fs (loop6): Directory bread(block 73) failed [ 449.075333][T19633] geneve4: entered promiscuous mode [ 449.100875][T19631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.133998][T19627] random: crng reseeded on system resumption [ 449.199255][T18859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.220393][T19639] loop3: detected capacity change from 0 to 32768 [ 449.250634][ T3791] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 449.255972][ T3791] loop3: p1 start 460800 is beyond EOD, truncated [ 449.272972][ T3791] loop3: p2 size 83886080 extends beyond EOD, truncated [ 449.285041][T19646] lo speed is unknown, defaulting to 1000 [ 449.292237][ T3791] loop3: p5 start 460800 is beyond EOD, truncated [ 449.300188][ T3791] loop3: p6 size 83886080 extends beyond EOD, truncated [ 449.333188][T19639] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 449.348865][T19639] loop3: p1 start 460800 is beyond EOD, truncated [ 449.371108][T19639] loop3: p2 size 83886080 extends beyond EOD, truncated [ 449.397359][T19639] loop3: p5 start 460800 is beyond EOD, truncated [ 449.421447][T19639] loop3: p6 size 83886080 extends beyond EOD, truncated [ 449.730789][T19648] loop1: detected capacity change from 0 to 128 [ 449.786272][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 449.800524][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 449.811651][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 449.823016][ T3794] udevd[3794]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 449.862223][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 449.873479][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 449.884987][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 449.901501][ T3794] udevd[3794]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 449.992643][T19666] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.3940: invalid block [ 450.005249][T19666] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 450.005376][T19666] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3940: invalid indirect mapped block 4294967295 (level 1) [ 450.014580][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 450.014604][ C0] EXT4-fs (loop3): initial error at time 1772869154: ext4_get_branch:178: inode 11: block 4294967295 [ 450.014639][ C0] EXT4-fs (loop3): last error at time 1772869154: ext4_get_branch:178: inode 11: block 4294967295 [ 450.057386][T19666] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 450.067953][T19666] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3940: invalid indirect mapped block 4294967295 (level 1) [ 450.097551][T19666] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 450.097764][T19666] EXT4-fs (loop3): 2 truncates cleaned up [ 450.114331][T19666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.326891][T19680] FAT-fs (loop6): Directory bread(block 64) failed [ 450.333559][T19680] FAT-fs (loop6): Directory bread(block 65) failed [ 450.340144][T19680] FAT-fs (loop6): Directory bread(block 66) failed [ 450.347451][T19680] FAT-fs (loop6): Directory bread(block 67) failed [ 450.354018][T19680] FAT-fs (loop6): Directory bread(block 68) failed [ 450.360635][T19680] FAT-fs (loop6): Directory bread(block 69) failed [ 450.367191][T19680] FAT-fs (loop6): Directory bread(block 70) failed [ 450.374401][T19680] FAT-fs (loop6): Directory bread(block 71) failed [ 450.381164][T19680] FAT-fs (loop6): Directory bread(block 72) failed [ 450.387844][T19680] FAT-fs (loop6): Directory bread(block 73) failed [ 450.410363][T19680] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 450.541082][T19678] EXT4-fs: Ignoring removed bh option [ 450.629043][T19688] FAT-fs (loop1): Directory bread(block 64) failed [ 450.644750][T19688] FAT-fs (loop1): Directory bread(block 65) failed [ 450.664758][T19678] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.692600][T19688] FAT-fs (loop1): Directory bread(block 66) failed [ 450.708506][T19688] FAT-fs (loop1): Directory bread(block 67) failed [ 450.740604][T19688] FAT-fs (loop1): Directory bread(block 68) failed [ 450.781055][T11401] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.797035][T19688] FAT-fs (loop1): Directory bread(block 69) failed [ 450.818444][T19688] FAT-fs (loop1): Directory bread(block 70) failed [ 450.846023][T19688] FAT-fs (loop1): Directory bread(block 71) failed [ 450.878679][T19688] FAT-fs (loop1): Directory bread(block 72) failed [ 450.888949][T19688] FAT-fs (loop1): Directory bread(block 73) failed [ 450.907795][T19688] random: crng reseeded on system resumption [ 451.344738][T15783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.578160][T19709] batadv_slave_1: entered promiscuous mode [ 451.617412][T19708] batadv_slave_1: left promiscuous mode [ 451.794139][T19714] syzkaller0: entered promiscuous mode [ 451.817221][T19714] syzkaller0: entered allmulticast mode [ 451.848707][T19714] Invalid option length (0) for dns_resolver key [ 452.005326][T19723] set_capacity_and_notify: 4 callbacks suppressed [ 452.005386][T19723] loop8: detected capacity change from 0 to 4096 [ 452.019892][T19723] EXT4-fs: Ignoring removed bh option [ 452.086862][T19732] loop3: detected capacity change from 0 to 512 [ 452.093958][T19732] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 452.103117][T19732] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 452.120717][T19723] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.130566][T19732] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 452.143241][T19732] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 452.161864][T11401] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.202607][T19732] System zones: 0-2, 18-18, 34-35 [ 452.215829][T19732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.245255][T19736] loop1: detected capacity change from 0 to 128 [ 452.433008][ T28] audit: type=1400 audit(1772869157.287:15051): avc: denied { read } for pid=19738 comm="syz.8.3960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 452.545181][T19740] lo speed is unknown, defaulting to 1000 [ 452.556045][ T28] audit: type=1400 audit(1772869157.387:15052): avc: denied { execute } for pid=19728 comm="syz.3.3959" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 452.623543][T15783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.639661][ T28] audit: type=1400 audit(1772869157.387:15053): avc: denied { execute_no_trans } for pid=19728 comm="syz.3.3959" path="/169/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 452.676070][T19745] loop3: detected capacity change from 0 to 512 [ 452.684918][T19745] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 452.711852][T19742] batadv_slave_1: entered promiscuous mode [ 452.712419][T19745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.731139][T19745] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 452.744041][T19745] netlink: 'syz.3.3964': attribute type 10 has an invalid length. [ 452.752014][T19745] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3964'. [ 452.762243][T19745] bridge0: port 2(team0) entered blocking state [ 452.768625][T19745] bridge0: port 2(team0) entered disabled state [ 452.776935][T19741] batadv_slave_1: left promiscuous mode [ 452.792727][T15783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.892154][ T28] audit: type=1400 audit(1772869157.747:15054): avc: denied { write } for pid=19753 comm="syz.3.3967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 453.034576][T19768] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 453.091727][T19771] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3974'. [ 453.137418][T19774] FAULT_INJECTION: forcing a failure. [ 453.137418][T19774] name failslab, interval 1, probability 0, space 0, times 0 [ 453.146620][T19776] loop6: detected capacity change from 0 to 2048 [ 453.158819][T19774] CPU: 0 UID: 0 PID: 19774 Comm: syz.8.3976 Tainted: G W syzkaller #0 PREEMPT(full) [ 453.158878][T19774] Tainted: [W]=WARN [ 453.158884][T19774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.158898][T19774] Call Trace: [ 453.158905][T19774] [ 453.158912][T19774] __dump_stack+0x1d/0x30 [ 453.158988][T19774] dump_stack_lvl+0x95/0xd0 [ 453.159012][T19774] dump_stack+0x15/0x1b [ 453.159035][T19774] should_fail_ex+0x263/0x280 [ 453.159110][T19774] should_failslab+0x8c/0xb0 [ 453.159134][T19774] kmem_cache_alloc_noprof+0x66/0x400 [ 453.159184][T19774] ? skb_clone+0x151/0x1f0 [ 453.159213][T19774] skb_clone+0x151/0x1f0 [ 453.159240][T19774] __netlink_deliver_tap+0x2c9/0x500 [ 453.159275][T19774] netlink_unicast+0x66b/0x690 [ 453.159308][T19774] netlink_sendmsg+0x5c8/0x6f0 [ 453.159419][T19774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.159448][T19774] ____sys_sendmsg+0x563/0x5b0 [ 453.159524][T19774] ___sys_sendmsg+0x195/0x1e0 [ 453.159562][T19774] __x64_sys_sendmsg+0xd4/0x160 [ 453.159593][T19774] x64_sys_call+0x194c/0x3020 [ 453.159620][T19774] do_syscall_64+0x12c/0x370 [ 453.159700][T19774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.159722][T19774] RIP: 0033:0x7efef9c8c799 [ 453.159769][T19774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.159788][T19774] RSP: 002b:00007efef86df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.159810][T19774] RAX: ffffffffffffffda RBX: 00007efef9f05fa0 RCX: 00007efef9c8c799 [ 453.159825][T19774] RDX: 0000000020040000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 453.159841][T19774] RBP: 00007efef86df090 R08: 0000000000000000 R09: 0000000000000000 [ 453.159855][T19774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.159916][T19774] R13: 00007efef9f06038 R14: 00007efef9f05fa0 R15: 00007ffd9f7ba538 [ 453.159933][T19774] [ 453.464375][T19788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3979'. [ 453.487372][T19790] FAULT_INJECTION: forcing a failure. [ 453.487372][T19790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.501016][T19790] CPU: 1 UID: 0 PID: 19790 Comm: syz.8.3980 Tainted: G W syzkaller #0 PREEMPT(full) [ 453.501095][T19790] Tainted: [W]=WARN [ 453.501102][T19790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.501113][T19790] Call Trace: [ 453.501119][T19790] [ 453.501202][T19790] __dump_stack+0x1d/0x30 [ 453.501229][T19790] dump_stack_lvl+0x95/0xd0 [ 453.501259][T19790] dump_stack+0x15/0x1b [ 453.501282][T19790] should_fail_ex+0x263/0x280 [ 453.501342][T19790] should_fail+0xb/0x20 [ 453.501359][T19790] should_fail_usercopy+0x1a/0x20 [ 453.501418][T19790] _copy_from_user+0x1c/0xb0 [ 453.501512][T19790] memdup_user+0x5e/0xd0 [ 453.501533][T19790] strndup_user+0x68/0xb0 [ 453.501584][T19790] __se_sys_mount+0x4d/0x2e0 [ 453.501603][T19790] ? fput+0x8f/0xc0 [ 453.501624][T19790] ? ksys_write+0x194/0x1a0 [ 453.501705][T19790] __x64_sys_mount+0x67/0x80 [ 453.501729][T19790] x64_sys_call+0x2d61/0x3020 [ 453.501795][T19790] do_syscall_64+0x12c/0x370 [ 453.501817][T19790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.501837][T19790] RIP: 0033:0x7efef9c8c799 [ 453.501877][T19790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.501893][T19790] RSP: 002b:00007efef86df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 453.501912][T19790] RAX: ffffffffffffffda RBX: 00007efef9f05fa0 RCX: 00007efef9c8c799 [ 453.501980][T19790] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 453.501994][T19790] RBP: 00007efef86df090 R08: 0000200000000480 R09: 0000000000000000 [ 453.502016][T19790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.502026][T19790] R13: 00007efef9f06038 R14: 00007efef9f05fa0 R15: 00007ffd9f7ba538 [ 453.502043][T19790] [ 453.772734][T19797] loop8: detected capacity change from 0 to 8192 [ 453.786825][T19797] vfat: Unknown parameter 'oñžomq?NÍçÀ÷' [ 453.821430][T19797] batadv_slave_1: entered promiscuous mode [ 453.870948][T19795] batadv_slave_1: left promiscuous mode [ 453.947413][ T28] audit: type=1400 audit(1772869158.797:15055): avc: denied { module_load } for pid=19812 comm="syz.4.3991" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=54133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 454.020531][T19813] Invalid ELF header magic: != ELF [ 454.060125][T19815] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3992'. [ 454.063235][ T28] audit: type=1400 audit(1772869158.857:15056): avc: denied { connect } for pid=19812 comm="syz.4.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 454.102261][ T28] audit: type=1400 audit(1772869158.857:15057): avc: denied { kexec_image_load } for pid=19810 comm="syz.1.3990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 454.137093][T19828] loop6: detected capacity change from 0 to 256 [ 454.228485][T19828] FAT-fs (loop6): Directory bread(block 64) failed [ 454.278397][T19828] FAT-fs (loop6): Directory bread(block 65) failed [ 454.297319][T19831] loop3: detected capacity change from 0 to 4096 [ 454.303870][T19828] FAT-fs (loop6): Directory bread(block 66) failed [ 454.328441][T19831] EXT4-fs: Ignoring removed bh option [ 454.334314][T19828] FAT-fs (loop6): Directory bread(block 67) failed [ 454.365874][T19828] FAT-fs (loop6): Directory bread(block 68) failed [ 454.442214][T19831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.497829][T19828] FAT-fs (loop6): Directory bread(block 69) failed [ 454.504487][T19828] FAT-fs (loop6): Directory bread(block 70) failed [ 454.504507][T19828] FAT-fs (loop6): Directory bread(block 71) failed [ 454.504536][T19828] FAT-fs (loop6): Directory bread(block 72) failed [ 454.524816][T19828] FAT-fs (loop6): Directory bread(block 73) failed [ 454.526012][T15783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.566776][T19828] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 454.614785][T19863] loop3: detected capacity change from 0 to 1024 [ 454.652214][T19869] xt_ecn: cannot match TCP bits for non-tcp packets [ 454.663517][ T28] audit: type=1400 audit(1772869159.517:15058): avc: denied { create } for pid=19868 comm="syz.4.4006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 454.701337][T19863] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #2: comm syz.3.4004: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 2308(4), depth 0(0) [ 454.747881][ T28] audit: type=1400 audit(1772869159.517:15059): avc: denied { connect } for pid=19868 comm="syz.4.4006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 454.770062][T19863] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 454.770166][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 454.785661][ C0] EXT4-fs (loop3): initial error at time 1772869159: ext4_ext_check_inode:521: inode 2 [ 454.791066][T19863] EXT4-fs (loop3): get root inode failed [ 454.795461][ C0] EXT4-fs (loop3): last error at time 1772869159: ext4_ext_check_inode:521: inode 2 [ 454.803508][T19863] EXT4-fs (loop3): mount failed [ 454.810632][ T28] audit: type=1400 audit(1772869159.517:15060): avc: denied { read } for pid=19868 comm="syz.4.4006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 454.860958][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4009'. [ 454.893852][T19895] loop1: detected capacity change from 0 to 512 [ 454.943113][T19895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.957226][T19895] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.016535][T18859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.071549][T19905] EXT4-fs: Ignoring removed bh option [ 455.096265][T19908] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4015'. [ 455.109624][T19905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.135982][T19911] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4016'. [ 455.209608][T15783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.367886][T19926] lo speed is unknown, defaulting to 1000 [ 455.895011][T19933] lo speed is unknown, defaulting to 1000 [ 456.222718][T19957] EXT4-fs: inline encryption not supported [ 456.308929][T19960] EXT4-fs: Ignoring removed bh option [ 456.321021][T19957] EXT4-fs: Ignoring removed i_version option [ 456.330109][T19957] EXT4-fs (loop8): 1 orphan inode deleted [ 456.351340][T19957] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.489196][T19960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.523595][T19971] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4029'. [ 456.586843][T11401] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.665361][T15783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.688311][T19980] FAULT_INJECTION: forcing a failure. [ 456.688311][T19980] name failslab, interval 1, probability 0, space 0, times 0 [ 456.713592][T19980] CPU: 1 UID: 0 PID: 19980 Comm: syz.8.4030 Tainted: G W syzkaller #0 PREEMPT(full) [ 456.713624][T19980] Tainted: [W]=WARN [ 456.713630][T19980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 456.713642][T19980] Call Trace: [ 456.713649][T19980] [ 456.713657][T19980] __dump_stack+0x1d/0x30 [ 456.713730][T19980] dump_stack_lvl+0x95/0xd0 [ 456.713775][T19980] dump_stack+0x15/0x1b [ 456.713806][T19980] should_fail_ex+0x263/0x280 [ 456.713889][T19980] should_failslab+0x8c/0xb0 [ 456.713910][T19980] kmem_cache_alloc_noprof+0x66/0x400 [ 456.713934][T19980] ? skb_clone+0x151/0x1f0 [ 456.713960][T19980] skb_clone+0x151/0x1f0 [ 456.714044][T19980] __netlink_deliver_tap+0x2c9/0x500 [ 456.714077][T19980] netlink_unicast+0x66b/0x690 [ 456.714148][T19980] netlink_sendmsg+0x5c8/0x6f0 [ 456.714175][T19980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.714200][T19980] ____sys_sendmsg+0x563/0x5b0 [ 456.714227][T19980] ___sys_sendmsg+0x195/0x1e0 [ 456.714262][T19980] __x64_sys_sendmsg+0xd4/0x160 [ 456.714293][T19980] x64_sys_call+0x194c/0x3020 [ 456.714318][T19980] do_syscall_64+0x12c/0x370 [ 456.714342][T19980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.714486][T19980] RIP: 0033:0x7efef9c8c799 [ 456.714570][T19980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.714596][T19980] RSP: 002b:00007efef86df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.714624][T19980] RAX: ffffffffffffffda RBX: 00007efef9f05fa0 RCX: 00007efef9c8c799 [ 456.714637][T19980] RDX: 0000000000004804 RSI: 0000200000000000 RDI: 0000000000000003 [ 456.714650][T19980] RBP: 00007efef86df090 R08: 0000000000000000 R09: 0000000000000000 [ 456.714663][T19980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.714688][T19980] R13: 00007efef9f06038 R14: 00007efef9f05fa0 R15: 00007ffd9f7ba538 [ 456.714710][T19980] [ 456.716945][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4030'. [ 456.932771][T19980] geneve2: entered promiscuous mode [ 456.978146][T19988] ext4: Unknown parameter 'fowner>00000000000000000000' [ 457.084764][T19996] set_capacity_and_notify: 4 callbacks suppressed [ 457.084778][T19996] loop1: detected capacity change from 0 to 512 [ 457.136028][T20001] loop3: detected capacity change from 0 to 512 [ 457.153374][T20001] EXT4-fs: Ignoring removed i_version option [ 457.178599][T19996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.206306][T20008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4042'. [ 457.227262][T20001] EXT4-fs: Ignoring removed bh option [ 457.256206][T19996] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 457.271581][T20001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.324489][T20014] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 457.324511][T20001] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 457.361533][T18859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.410240][T20027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4046'. [ 457.456297][T20029] SET target dimension over the limit! [ 457.606230][T20043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4048'. [ 457.646400][T20043] loop1: detected capacity change from 0 to 512 [ 457.663507][T20043] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 457.687556][T20043] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 457.725889][T20043] EXT4-fs (loop1): group descriptors corrupted! [ 457.745589][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 457.745604][ T28] audit: type=1326 audit(1772869162.597:15076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec546dc799 code=0x7ffc0000 [ 457.790534][ T28] audit: type=1326 audit(1772869162.627:15077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec546dc799 code=0x7ffc0000 [ 457.829664][ T28] audit: type=1326 audit(1772869162.627:15078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec546dc799 code=0x7ffc0000 [ 457.877558][ T28] audit: type=1326 audit(1772869162.627:15079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec546dc799 code=0x7ffc0000 [ 457.916524][T20058] loop1: detected capacity change from 0 to 1024 [ 457.925026][ T28] audit: type=1326 audit(1772869162.627:15080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec546dc799 code=0x7ffc0000 [ 457.962386][T15783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.987684][T20058] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 457.996042][T20058] System zones: 0-1, 3-8 [ 458.001167][ T28] audit: type=1326 audit(1772869162.637:15081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec546dc799 code=0x7ffc0000 [ 458.027483][T20058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 458.039821][T20058] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.050557][ T28] audit: type=1326 audit(1772869162.637:15082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec546dc799 code=0x7ffc0000 [ 458.079382][ T28] audit: type=1326 audit(1772869162.637:15083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec546dc799 code=0x7ffc0000 [ 458.103598][ T28] audit: type=1326 audit(1772869162.637:15084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec546dc799 code=0x7ffc0000 [ 458.434026][ T28] audit: type=1326 audit(1772869162.637:15085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fec546dc799 code=0x7ffc0000 [ 458.484709][T20091] loop8: detected capacity change from 0 to 512 [ 458.491782][T18859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 458.525057][T20091] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.538521][T20091] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.577570][T20097] loop3: detected capacity change from 0 to 256 [ 458.584351][T11401] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.634324][T20099] loop1: detected capacity change from 0 to 512 [ 458.671174][T20097] FAT-fs (loop3): Directory bread(block 64) failed [ 458.683650][T20099] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.4055: Invalid inode bitmap blk 4 in block_group 0 [ 458.717246][T20097] FAT-fs (loop3): Directory bread(block 65) failed [ 458.734124][T20097] FAT-fs (loop3): Directory bread(block 66) failed [ 458.754169][T20099] loop1: lost filesystem error report for type 5 error -117 [ 458.754685][T20099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.786304][T20109] xt_policy: output policy not valid in PREROUTING and INPUT [ 458.794106][T20097] FAT-fs (loop3): Directory bread(block 67) failed [ 458.810710][T20097] FAT-fs (loop3): Directory bread(block 68) failed [ 458.825211][T20097] FAT-fs (loop3): Directory bread(block 69) failed [ 458.837073][T20097] FAT-fs (loop3): Directory bread(block 70) failed [ 458.844093][T20099] EXT4-fs (loop1): shut down requested (1) [ 458.850371][T20097] FAT-fs (loop3): Directory bread(block 71) failed [ 458.858632][T20097] FAT-fs (loop3): Directory bread(block 72) failed [ 458.878586][T20097] FAT-fs (loop3): Directory bread(block 73) failed [ 458.893460][T20109] lo speed is unknown, defaulting to 1000 [ 458.905465][T20097] random: crng reseeded on system resumption [ 458.930349][T18859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.948451][T20118] loop8: detected capacity change from 0 to 4096 [ 458.955409][T20122] loop6: detected capacity change from 0 to 512 [ 458.970018][T20118] EXT4-fs: Ignoring removed bh option [ 458.991422][T20122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.015506][T20122] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.032038][T20118] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.065201][T11401] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.141497][T16347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.302834][T20137] FAULT_INJECTION: forcing a failure. [ 459.302834][T20137] name failslab, interval 1, probability 0, space 0, times 0 [ 459.326539][T20137] CPU: 1 UID: 0 PID: 20137 Comm: syz.6.4065 Tainted: G W syzkaller #0 PREEMPT(full) [ 459.326580][T20137] Tainted: [W]=WARN [ 459.326586][T20137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.326664][T20137] Call Trace: [ 459.326671][T20137] [ 459.326677][T20137] __dump_stack+0x1d/0x30 [ 459.326700][T20137] dump_stack_lvl+0x95/0xd0 [ 459.326720][T20137] dump_stack+0x15/0x1b [ 459.326739][T20137] should_fail_ex+0x263/0x280 [ 459.326818][T20137] ? apply_wqattrs_prepare+0x8c/0x850 [ 459.326889][T20137] should_failslab+0x8c/0xb0 [ 459.326908][T20137] __kmalloc_cache_noprof+0x5f/0x410 [ 459.326932][T20137] apply_wqattrs_prepare+0x8c/0x850 [ 459.326957][T20137] ? alloc_workqueue_noprof+0x6e1/0x15c0 [ 459.327052][T20137] alloc_workqueue_noprof+0xbed/0x15c0 [ 459.327080][T20137] ? register_netdevice+0x19e/0x1000 [ 459.327213][T20137] bond_init+0x94/0x2a0 [ 459.327236][T20137] register_netdevice+0x23a/0x1000 [ 459.327262][T20137] bond_newlink+0x2f/0xb0 [ 459.327324][T20137] ? __pfx_bond_newlink+0x10/0x10 [ 459.327432][T20137] rtnl_newlink_create+0x1e4/0x650 [ 459.327455][T20137] ? security_capable+0x7b/0x90 [ 459.327528][T20137] ? netlink_ns_capable+0x86/0xa0 [ 459.327613][T20137] rtnl_newlink+0x10a0/0x1330 [ 459.327653][T20137] ? __rcu_read_unlock+0x4e/0x70 [ 459.327676][T20137] ? xa_load+0xb1/0xe0 [ 459.327739][T20137] ? __rcu_read_unlock+0x4e/0x70 [ 459.327760][T20137] ? avc_has_perm_noaudit+0xab/0x130 [ 459.327891][T20137] ? cred_has_capability+0x224/0x2a0 [ 459.327962][T20137] ? selinux_capable+0x31/0x40 [ 459.328057][T20137] ? security_capable+0x7b/0x90 [ 459.328082][T20137] ? ns_capable+0x7c/0xb0 [ 459.328102][T20137] ? __pfx_rtnl_newlink+0x10/0x10 [ 459.328134][T20137] rtnetlink_rcv_msg+0x64b/0x720 [ 459.328237][T20137] ? avc_has_perm_noaudit+0xab/0x130 [ 459.328342][T20137] netlink_rcv_skb+0x123/0x220 [ 459.328368][T20137] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 459.328404][T20137] rtnetlink_rcv+0x1c/0x30 [ 459.328434][T20137] netlink_unicast+0x5c0/0x690 [ 459.328456][T20137] netlink_sendmsg+0x5c8/0x6f0 [ 459.328481][T20137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.328560][T20137] ____sys_sendmsg+0x563/0x5b0 [ 459.328665][T20137] ___sys_sendmsg+0x195/0x1e0 [ 459.328734][T20137] __x64_sys_sendmsg+0xd4/0x160 [ 459.328819][T20137] x64_sys_call+0x194c/0x3020 [ 459.328840][T20137] do_syscall_64+0x12c/0x370 [ 459.328922][T20137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.328942][T20137] RIP: 0033:0x7feb9002c799 [ 459.328964][T20137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.328979][T20137] RSP: 002b:00007feb8ea7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.329074][T20137] RAX: ffffffffffffffda RBX: 00007feb902a5fa0 RCX: 00007feb9002c799 [ 459.329087][T20137] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 459.329098][T20137] RBP: 00007feb8ea7f090 R08: 0000000000000000 R09: 0000000000000000 [ 459.329109][T20137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 459.329120][T20137] R13: 00007feb902a6038 R14: 00007feb902a5fa0 R15: 00007fffb712db58 [ 459.329203][T20137] [ 459.665958][T20146] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4070'. [ 459.680082][T20144] loop6: detected capacity change from 0 to 512 [ 459.700942][T20144] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 459.746192][T20144] EXT4-fs (loop6): 1 truncate cleaned up [ 459.757899][T20144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.867159][T20162] netlink: 'syz.6.4069': attribute type 21 has an invalid length. [ 459.916417][T20162] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4069'. [ 459.926524][T20164] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4074'. [ 459.946531][T20162] netlink: 'syz.6.4069': attribute type 5 has an invalid length. [ 459.960541][T20162] netlink: 'syz.6.4069': attribute type 6 has an invalid length. [ 459.990505][T20162] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4069'. [ 460.048478][T20168] FAT-fs (loop1): Directory bread(block 64) failed [ 460.100875][T20168] FAT-fs (loop1): Directory bread(block 65) failed [ 460.111420][T16347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.120278][T20168] FAT-fs (loop1): Directory bread(block 66) failed [ 460.126952][T20168] FAT-fs (loop1): Directory bread(block 67) failed [ 460.169028][T20168] FAT-fs (loop1): Directory bread(block 68) failed [ 460.197233][T20168] FAT-fs (loop1): Directory bread(block 69) failed [ 460.223177][T20168] FAT-fs (loop1): Directory bread(block 70) failed [ 460.239973][T20168] FAT-fs (loop1): Directory bread(block 71) failed [ 460.251772][T20168] FAT-fs (loop1): Directory bread(block 72) failed [ 460.258295][T20168] FAT-fs (loop1): Directory bread(block 73) failed [ 460.365974][T20176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=20176 comm=syz.4.4080 [ 460.397700][T20188] FAT-fs (loop8): Directory bread(block 64) failed [ 460.414468][T20188] FAT-fs (loop8): Directory bread(block 65) failed [ 460.430336][T20188] FAT-fs (loop8): Directory bread(block 66) failed [ 460.437330][T20188] FAT-fs (loop8): Directory bread(block 67) failed [ 460.451804][T20188] FAT-fs (loop8): Directory bread(block 68) failed [ 460.458434][T20188] FAT-fs (loop8): Directory bread(block 69) failed [ 460.471879][T20191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.490239][T20188] FAT-fs (loop8): Directory bread(block 70) failed [ 460.496781][T20188] FAT-fs (loop8): Directory bread(block 71) failed [ 460.510371][T20191] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.532595][T20188] FAT-fs (loop8): Directory bread(block 72) failed [ 460.539283][T20188] FAT-fs (loop8): Directory bread(block 73) failed [ 460.551077][T20188] random: crng reseeded on system resumption [ 460.590706][T20168] bridge_slave_0: left allmulticast mode [ 460.601690][T20168] bridge_slave_0: left promiscuous mode [ 460.608305][T20168] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.611165][T16347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.652663][T20168] bridge_slave_1: left allmulticast mode [ 460.658944][T20168] bridge_slave_1: left promiscuous mode [ 460.682804][T20168] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.730050][T20168] bond0: (slave bond_slave_0): Releasing backup interface [ 460.776978][T20168] bond0: (slave bond_slave_1): Releasing backup interface [ 460.858686][T20168] team0: Port device team_slave_0 removed [ 460.911071][T20168] team0: Port device team_slave_1 removed [ 460.942013][T20168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.960675][T20168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.983212][T20168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.992907][T20168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.012618][T20168] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 461.228581][T20212] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4093'. [ 461.233130][T20213] xt_CT: You must specify a L4 protocol and not use inversions on it [ 461.344278][T20228] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4096'. [ 461.393679][T20233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4099'. [ 461.440350][T20238] FAULT_INJECTION: forcing a failure. [ 461.440350][T20238] name failslab, interval 1, probability 0, space 0, times 0 [ 461.476841][T20238] CPU: 1 UID: 0 PID: 20238 Comm: syz.3.4101 Tainted: G W syzkaller #0 PREEMPT(full) [ 461.476951][T20238] Tainted: [W]=WARN [ 461.476958][T20238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.476972][T20238] Call Trace: [ 461.476980][T20238] [ 461.476988][T20238] __dump_stack+0x1d/0x30 [ 461.477053][T20238] dump_stack_lvl+0x95/0xd0 [ 461.477100][T20238] dump_stack+0x15/0x1b [ 461.477123][T20238] should_fail_ex+0x263/0x280 [ 461.477147][T20238] ? __se_sys_mount+0xef/0x2e0 [ 461.477166][T20238] should_failslab+0x8c/0xb0 [ 461.477192][T20238] __kmalloc_cache_noprof+0x5f/0x410 [ 461.477252][T20238] ? memdup_user+0x99/0xd0 [ 461.477271][T20238] __se_sys_mount+0xef/0x2e0 [ 461.477292][T20238] ? fput+0x8f/0xc0 [ 461.477312][T20238] ? ksys_write+0x194/0x1a0 [ 461.477328][T20238] __x64_sys_mount+0x67/0x80 [ 461.477352][T20238] x64_sys_call+0x2d61/0x3020 [ 461.477396][T20238] do_syscall_64+0x12c/0x370 [ 461.477419][T20238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.477442][T20238] RIP: 0033:0x7fec546dc799 [ 461.477459][T20238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.477507][T20238] RSP: 002b:00007fec5312f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 461.477527][T20238] RAX: ffffffffffffffda RBX: 00007fec54955fa0 RCX: 00007fec546dc799 [ 461.477543][T20238] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 461.477601][T20238] RBP: 00007fec5312f090 R08: 0000200000000480 R09: 0000000000000000 [ 461.477613][T20238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.477624][T20238] R13: 00007fec54956038 R14: 00007fec54955fa0 R15: 00007ffc1357c608 [ 461.477718][T20238] [ 461.765188][T20246] nfs: Bad value for 'source' [ 461.841157][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4104'. [ 461.858229][T20254] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4104'. [ 461.867912][T20256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4108'. [ 462.127635][T20277] lo speed is unknown, defaulting to 1000 [ 462.896521][T20293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=20293 comm=syz.3.4120 [ 462.969745][T20294] netlink: 'syz.3.4120': attribute type 2 has an invalid length. [ 463.713707][T20296] netlink: 'syz.4.4121': attribute type 3 has an invalid length. [ 463.743174][T20296] netlink: 'syz.4.4121': attribute type 3 has an invalid length. [ 463.795153][T20296] netlink: 'syz.4.4121': attribute type 3 has an invalid length. [ 463.832554][T20296] netlink: 'syz.4.4121': attribute type 3 has an invalid length. [ 463.870965][T20296] netlink: 'syz.4.4121': attribute type 3 has an invalid length. [ 463.913396][T20296] netlink: 'syz.4.4121': attribute type 3 has an invalid length. [ 464.420840][T20326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=20326 comm=syz.3.4132 [ 465.916456][T20359] SET target dimension over the limit! [ 465.931580][T20363] set_capacity_and_notify: 3 callbacks suppressed [ 465.931595][T20363] loop1: detected capacity change from 0 to 512 [ 466.018308][T20363] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 466.074757][T20363] EXT4-fs (loop1): 1 truncate cleaned up [ 466.096087][T20363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.226849][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 466.226862][ T28] audit: type=1400 audit(1772869171.077:15131): avc: denied { ioctl } for pid=20362 comm="syz.1.4143" path="/56/file1/memory.events" dev="loop1" ino=19 ioctlcmd=0x54e0 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 466.279426][T20373] xt_policy: output policy not valid in PREROUTING and INPUT [ 466.287834][T20368] loop6: detected capacity change from 0 to 4096 [ 466.294488][T20369] __nla_validate_parse: 2 callbacks suppressed [ 466.294500][T20369] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4143'. [ 466.319435][T20368] EXT4-fs: Ignoring removed bh option [ 466.359345][T20368] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.388209][T20373] lo speed is unknown, defaulting to 1000 [ 466.397652][ T28] audit: type=1400 audit(1772869171.227:15132): avc: denied { setattr } for pid=20362 comm="syz.1.4143" name="memory.events.local" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 466.443406][T16347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.505897][T20363] validate_nla: 48 callbacks suppressed [ 466.505914][T20363] netlink: 'syz.1.4143': attribute type 21 has an invalid length. [ 466.595599][T20363] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4143'. [ 466.635875][T20363] netlink: 'syz.1.4143': attribute type 5 has an invalid length. [ 466.637518][T20422] loop3: detected capacity change from 0 to 512 [ 466.654854][T20363] netlink: 'syz.1.4143': attribute type 6 has an invalid length. [ 466.671568][T20363] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4143'. [ 466.701147][T20422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.722995][T20426] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4148'. [ 466.733986][T20422] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.783930][T20432] loop6: detected capacity change from 0 to 512 [ 466.826674][T20432] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.884359][T20438] FAULT_INJECTION: forcing a failure. [ 466.884359][T20438] name failslab, interval 1, probability 0, space 0, times 0 [ 466.898346][T20438] CPU: 1 UID: 0 PID: 20438 Comm: syz.8.4153 Tainted: G W syzkaller #0 PREEMPT(full) [ 466.898380][T20438] Tainted: [W]=WARN [ 466.898388][T20438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.898400][T20438] Call Trace: [ 466.898462][T20438] [ 466.898470][T20438] __dump_stack+0x1d/0x30 [ 466.898498][T20438] dump_stack_lvl+0x95/0xd0 [ 466.898522][T20438] dump_stack+0x15/0x1b [ 466.898543][T20438] should_fail_ex+0x263/0x280 [ 466.898579][T20438] ? apply_wqattrs_prepare+0x8c/0x850 [ 466.898602][T20438] should_failslab+0x8c/0xb0 [ 466.898621][T20438] __kmalloc_cache_noprof+0x5f/0x410 [ 466.898647][T20438] apply_wqattrs_prepare+0x8c/0x850 [ 466.898695][T20438] ? alloc_workqueue_noprof+0x6e1/0x15c0 [ 466.898723][T20438] alloc_workqueue_noprof+0xbed/0x15c0 [ 466.898809][T20438] ? register_netdevice+0x19e/0x1000 [ 466.898915][T20438] bond_init+0x94/0x2a0 [ 466.898934][T20438] register_netdevice+0x23a/0x1000 [ 466.898965][T20438] bond_newlink+0x2f/0xb0 [ 466.899064][T20438] ? __pfx_bond_newlink+0x10/0x10 [ 466.899085][T20438] rtnl_newlink_create+0x1e4/0x650 [ 466.899111][T20438] rtnl_newlink+0x10a0/0x1330 [ 466.899142][T20438] ? __memcg_slab_free_hook+0x14b/0x240 [ 466.899178][T20438] ? __rcu_read_unlock+0x4e/0x70 [ 466.899214][T20438] ? avc_has_perm_noaudit+0xab/0x130 [ 466.899240][T20438] ? cred_has_capability+0x224/0x2a0 [ 466.899263][T20438] ? selinux_capable+0x31/0x40 [ 466.899294][T20438] ? security_capable+0x7b/0x90 [ 466.899318][T20438] ? ns_capable+0x7c/0xb0 [ 466.899362][T20438] ? __pfx_rtnl_newlink+0x10/0x10 [ 466.899421][T20438] rtnetlink_rcv_msg+0x64b/0x720 [ 466.899470][T20438] netlink_rcv_skb+0x123/0x220 [ 466.899497][T20438] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 466.899568][T20438] rtnetlink_rcv+0x1c/0x30 [ 466.899593][T20438] netlink_unicast+0x5c0/0x690 [ 466.899620][T20438] netlink_sendmsg+0x5c8/0x6f0 [ 466.899692][T20438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.899719][T20438] ____sys_sendmsg+0x563/0x5b0 [ 466.899747][T20438] ___sys_sendmsg+0x195/0x1e0 [ 466.899778][T20438] __x64_sys_sendmsg+0xd4/0x160 [ 466.899826][T20438] x64_sys_call+0x194c/0x3020 [ 466.899851][T20438] do_syscall_64+0x12c/0x370 [ 466.899872][T20438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.899894][T20438] RIP: 0033:0x7efef9c8c799 [ 466.899987][T20438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.900004][T20438] RSP: 002b:00007efef86df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.900024][T20438] RAX: ffffffffffffffda RBX: 00007efef9f05fa0 RCX: 00007efef9c8c799 [ 466.900037][T20438] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 466.900048][T20438] RBP: 00007efef86df090 R08: 0000000000000000 R09: 0000000000000000 [ 466.900104][T20438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.900117][T20438] R13: 00007efef9f06038 R14: 00007efef9f05fa0 R15: 00007ffd9f7ba538 [ 466.900199][T20438] [ 467.194972][T20447] loop6: detected capacity change from 0 to 256 [ 467.195944][T20449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4157'. [ 467.216274][T20447] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 467.241562][ T28] audit: type=1400 audit(1772869172.067:15133): avc: denied { relabelfrom } for pid=20433 comm="syz.1.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 467.287236][ T28] audit: type=1400 audit(1772869172.067:15134): avc: denied { relabelto } for pid=20433 comm="syz.1.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 467.360675][T20458] loop3: detected capacity change from 0 to 512 [ 467.372908][ T28] audit: type=1400 audit(1772869172.227:15135): avc: denied { accept } for pid=20454 comm="syz.8.4159" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 467.395893][T20458] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.408433][T20456] netlink: 'syz.8.4159': attribute type 1 has an invalid length. [ 467.601563][T20456] 8021q: adding VLAN 0 to HW filter on device bond5 [ 467.658184][T20464] bond5: (slave gretap1): making interface the new active one [ 467.678919][T20464] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 467.761675][T20478] loop3: detected capacity change from 0 to 8192 [ 467.832257][T20478] vfat: Unknown parameter 'oñžomq?NÍçÀ÷' [ 467.881963][T20478] batadv_slave_1: entered promiscuous mode [ 467.925128][T20477] batadv_slave_1: left promiscuous mode [ 467.931181][T20500] loop1: detected capacity change from 0 to 128 [ 467.975083][ T28] audit: type=1400 audit(1772869172.827:15136): avc: denied { override_creds } for pid=20499 comm="syz.1.4173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 467.975969][T20500] loop1: detected capacity change from 0 to 128 [ 468.011640][T20500] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 468.011663][T20500] FAT-fs (loop1): Filesystem has been set read-only [ 468.011676][T20500] bio_check_eod: 101 callbacks suppressed [ 468.011686][T20500] syz.1.4173: attempt to access beyond end of device [ 468.011686][T20500] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 468.011874][T20500] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 468.011897][T20500] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 468.021128][T20500] syz.1.4173: attempt to access beyond end of device [ 468.021128][T20500] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 468.021327][T20500] syz.1.4173: attempt to access beyond end of device [ 468.021327][T20500] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 468.021441][T20500] syz.1.4173: attempt to access beyond end of device [ 468.021441][T20500] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 468.021538][T20500] syz.1.4173: attempt to access beyond end of device [ 468.021538][T20500] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 468.021611][T20500] syz.1.4173: attempt to access beyond end of device [ 468.021611][T20500] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 468.021649][T20500] syz.1.4173: attempt to access beyond end of device [ 468.021649][T20500] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 468.021687][T20500] syz.1.4173: attempt to access beyond end of device [ 468.021687][T20500] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 468.021793][T20500] syz.1.4173: attempt to access beyond end of device [ 468.021793][T20500] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 468.021865][T20500] syz.1.4173: attempt to access beyond end of device [ 468.021865][T20500] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 468.077726][T20514] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4176'. [ 468.078848][T20514] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4176'. [ 468.087644][T20515] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4175'. [ 468.087721][T20515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4175'. [ 468.094847][ T28] audit: type=1400 audit(1772869172.947:15137): avc: denied { accept } for pid=20510 comm="syz.4.4175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 468.455806][ T28] audit: type=1400 audit(1772869173.307:15138): avc: denied { getopt } for pid=20533 comm="syz.3.4184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 468.657295][T20541] loop3: detected capacity change from 0 to 8192 [ 468.697550][T20545] EXT4-fs: Ignoring removed oldalloc option [ 468.718676][T20545] EXT4-fs: Ignoring removed mblk_io_submit option [ 468.720997][T20541] vfat: Unknown parameter 'oñžomq?NÍçÀ÷' [ 468.743113][T20545] EXT4-fs (loop6): blocks per group (11) and clusters per group (8192) inconsistent [ 468.780753][T20541] batadv_slave_1: entered promiscuous mode [ 468.835211][T20540] batadv_slave_1: left promiscuous mode [ 468.859333][T18411] Bluetooth: hci0: Frame reassembly failed (-84) [ 468.934295][T20557] FAULT_INJECTION: forcing a failure. [ 468.934295][T20557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.956396][T20558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4192'. [ 468.960845][T20557] CPU: 0 UID: 0 PID: 20557 Comm: syz.6.4193 Tainted: G W syzkaller #0 PREEMPT(full) [ 468.960877][T20557] Tainted: [W]=WARN [ 468.960884][T20557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.960898][T20557] Call Trace: [ 468.960904][T20557] [ 468.960912][T20557] __dump_stack+0x1d/0x30 [ 468.960953][T20557] dump_stack_lvl+0x95/0xd0 [ 468.960976][T20557] dump_stack+0x15/0x1b [ 468.960997][T20557] should_fail_ex+0x263/0x280 [ 468.961020][T20557] should_fail+0xb/0x20 [ 468.961077][T20557] should_fail_usercopy+0x1a/0x20 [ 468.961101][T20557] _copy_to_user+0x20/0xa0 [ 468.961127][T20557] simple_read_from_buffer+0xb5/0x130 [ 468.961151][T20557] proc_fail_nth_read+0x10e/0x150 [ 468.961192][T20557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.961219][T20557] vfs_read+0x1ab/0x7f0 [ 468.961248][T20557] ? __rcu_read_unlock+0x4e/0x70 [ 468.961335][T20557] ? __fget_files+0x184/0x1c0 [ 468.961358][T20557] ? mutex_lock+0x57/0x90 [ 468.961456][T20557] ksys_read+0xdc/0x1a0 [ 468.961486][T20557] __x64_sys_read+0x40/0x50 [ 468.961504][T20557] x64_sys_call+0x2886/0x3020 [ 468.961558][T20557] do_syscall_64+0x12c/0x370 [ 468.961579][T20557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.961601][T20557] RIP: 0033:0x7feb8ffecfce [ 468.961623][T20557] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 468.961642][T20557] RSP: 002b:00007feb8ea7efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.961697][T20557] RAX: ffffffffffffffda RBX: 00007feb8ea7f6c0 RCX: 00007feb8ffecfce [ 468.961711][T20557] RDX: 000000000000000f RSI: 00007feb8ea7f0a0 RDI: 0000000000000004 [ 468.961766][T20557] RBP: 00007feb8ea7f090 R08: 0000000000000000 R09: 0000000000000000 [ 468.961779][T20557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.961839][T20557] R13: 00007feb902a6038 R14: 00007feb902a5fa0 R15: 00007fffb712db58 [ 468.961859][T20557] [ 469.261399][T20566] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 469.279682][T20566] EXT4-fs (loop8): 1 truncate cleaned up [ 469.285883][T20566] EXT4-fs mount: 6 callbacks suppressed [ 469.285968][T20566] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.310460][T20574] batadv0: entered promiscuous mode [ 469.325236][T20574] debugfs: 'hsr1' already exists in 'hsr' [ 469.331784][T20574] Cannot create hsr debugfs directory [ 469.337500][T20574] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 469.347496][T20574] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 469.357740][T20574] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 469.366327][T20574] batadv0: left promiscuous mode [ 469.375504][ T28] audit: type=1400 audit(1772869174.227:15139): avc: denied { setattr } for pid=20565 comm="syz.8.4195" path="pipe:[27869]" dev="pipefs" ino=27869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 469.492383][T20583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.505372][T20583] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.527153][T16347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.619799][T20589] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.634750][T20589] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.647457][ T28] audit: type=1400 audit(1772869174.497:15140): avc: denied { append } for pid=20587 comm="syz.6.4200" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 469.734202][T20589] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #19: comm syz.6.4200: corrupted inode contents [ 469.760116][T20589] loop6: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 469.760517][T20589] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #19: comm syz.6.4200: mark_inode_dirty error [ 469.785805][T20589] loop6: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 469.786050][T20589] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #19: comm syz.6.4200: corrupted inode contents [ 469.809131][T20589] loop6: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 469.809320][T20589] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #19: comm syz.6.4200: mark_inode_dirty error [ 469.831701][T20589] loop6: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 469.831852][T20589] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3002: inode #19: comm syz.6.4200: mark inode dirty (error -117) [ 469.858805][T20594] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 469.877709][T20589] loop6: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 469.877943][T20589] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -117) [ 469.950294][T20598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.988694][T20598] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.077837][T11401] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.400782][T16347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.446544][T20620] syz_tun: entered allmulticast mode [ 470.459971][T20619] syz_tun: left allmulticast mode [ 470.809295][T15783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.920198][ T3595] Bluetooth: hci0: command 0x1003 tx timeout [ 470.920223][ T5177] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 471.543852][T20650] set_capacity_and_notify: 7 callbacks suppressed [ 471.543870][T20650] loop1: detected capacity change from 0 to 4096 [ 471.725904][T20652] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=50 sclass=netlink_xfrm_socket pid=20652 comm=syz.1.4220 [ 472.020955][T20662] loop8: detected capacity change from 0 to 256 [ 472.035746][T20662] FAT-fs (loop8): Directory bread(block 64) failed [ 472.042586][T20662] FAT-fs (loop8): Directory bread(block 65) failed [ 472.049116][T20662] FAT-fs (loop8): Directory bread(block 66) failed [ 472.055800][T20662] FAT-fs (loop8): Directory bread(block 67) failed [ 472.062379][T20662] FAT-fs (loop8): Directory bread(block 68) failed [ 472.068979][T20662] FAT-fs (loop8): Directory bread(block 69) failed [ 472.075520][T20662] FAT-fs (loop8): Directory bread(block 70) failed [ 472.086125][T20662] FAT-fs (loop8): Directory bread(block 71) failed [ 472.092760][T20662] FAT-fs (loop8): Directory bread(block 72) failed [ 472.099459][T20662] FAT-fs (loop8): Directory bread(block 73) failed [ 472.167863][T20663] random: crng reseeded on system resumption [ 472.452669][T20666] loop6: detected capacity change from 0 to 4096 [ 472.489831][T20666] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.520545][T20668] loop1: detected capacity change from 0 to 8192 [ 472.521833][T20672] Invalid ELF header magic: != ELF [ 472.527150][T20668] vfat: Unknown parameter 'oñžomq?NÍçÀ÷' [ 472.540249][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 472.540263][ T28] audit: type=1400 audit(1772869177.377:15170): avc: denied { module_load } for pid=20671 comm="syz.4.4227" path="/286/bus" dev="tmpfs" ino=1533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 472.583110][T20668] batadv_slave_1: entered promiscuous mode [ 472.592555][T20667] batadv_slave_1: left promiscuous mode [ 472.606150][T20666] EXT4-fs (loop6): resizing filesystem from 512 to 0 blocks [ 472.644889][T20666] EXT4-fs warning (device loop6): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 472.656621][T20683] __nla_validate_parse: 2 callbacks suppressed [ 472.656664][T20683] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4227'. [ 472.681685][ T28] audit: type=1400 audit(1772869177.517:15171): avc: denied { connect } for pid=20665 comm="syz.6.4224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 472.719697][ T28] audit: type=1400 audit(1772869177.557:15172): avc: denied { create } for pid=20685 comm="syz.3.4232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 472.751083][ T28] audit: type=1400 audit(1772869177.597:15173): avc: denied { ioctl } for pid=20685 comm="syz.3.4232" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 472.819600][T20696] loop3: detected capacity change from 0 to 512 [ 472.880857][T20696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.900567][T20696] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.923491][T15783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.933689][T16347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.666124][T20714] loop6: detected capacity change from 0 to 1024 [ 473.680585][T20714] EXT4-fs: Ignoring removed oldalloc option [ 473.704429][T20714] EXT4-fs: Ignoring removed bh option [ 473.781777][T20714] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.810768][ T28] audit: type=1400 audit(1772869178.657:15174): avc: denied { create } for pid=20712 comm="syz.6.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 473.849804][ T28] audit: type=1400 audit(1772869178.657:15175): avc: denied { setopt } for pid=20712 comm="syz.6.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 473.910499][ T28] audit: type=1400 audit(1772869178.757:15176): avc: denied { read } for pid=20705 comm="syz.3.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 473.970964][ T28] audit: type=1400 audit(1772869178.807:15177): avc: denied { bind } for pid=20705 comm="syz.3.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 474.032854][T20722] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 474.039382][T20722] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 474.050818][ T28] audit: type=1400 audit(1772869178.807:15178): avc: denied { name_bind } for pid=20705 comm="syz.3.4239" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 474.103958][T20725] loop3: detected capacity change from 0 to 256 [ 474.122888][T20722] vhci_hcd vhci_hcd.0: Device attached [ 474.164837][ T28] audit: type=1400 audit(1772869178.807:15179): avc: denied { node_bind } for pid=20705 comm="syz.3.4239" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 474.247439][T20728] loop8: detected capacity change from 0 to 8192 [ 474.268989][T20728] vfat: Unknown parameter 'oñžomq?NÍçÀ÷' [ 474.341153][T20728] batadv_slave_1: entered promiscuous mode [ 474.356225][T20727] batadv_slave_1: left promiscuous mode [ 474.370321][ T9] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 474.442716][T20730] FAULT_INJECTION: forcing a failure. [ 474.442716][T20730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.470430][T20730] CPU: 0 UID: 0 PID: 20730 Comm: syz.8.4245 Tainted: G W syzkaller #0 PREEMPT(full) [ 474.470466][T20730] Tainted: [W]=WARN [ 474.470473][T20730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 474.470485][T20730] Call Trace: [ 474.470491][T20730] [ 474.470498][T20730] __dump_stack+0x1d/0x30 [ 474.470525][T20730] dump_stack_lvl+0x95/0xd0 [ 474.470618][T20730] dump_stack+0x15/0x1b [ 474.470640][T20730] should_fail_ex+0x263/0x280 [ 474.470665][T20730] should_fail+0xb/0x20 [ 474.470684][T20730] should_fail_usercopy+0x1a/0x20 [ 474.470711][T20730] _copy_from_user+0x1c/0xb0 [ 474.470782][T20730] proc_control_compat+0x44/0xe0 [ 474.470812][T20730] usbdev_ioctl+0xed7/0x1750 [ 474.470841][T20730] ? __pfx_usbdev_ioctl+0x10/0x10 [ 474.470897][T20730] __se_sys_ioctl+0xce/0x140 [ 474.470921][T20730] __x64_sys_ioctl+0x43/0x50 [ 474.471089][T20730] x64_sys_call+0x1563/0x3020 [ 474.471116][T20730] do_syscall_64+0x12c/0x370 [ 474.471165][T20730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.471189][T20730] RIP: 0033:0x7efef9c8c799 [ 474.471206][T20730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.471225][T20730] RSP: 002b:00007efef86df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.471247][T20730] RAX: ffffffffffffffda RBX: 00007efef9f05fa0 RCX: 00007efef9c8c799 [ 474.471287][T20730] RDX: 00002000000000c0 RSI: 00000000c0105500 RDI: 0000000000000003 [ 474.471299][T20730] RBP: 00007efef86df090 R08: 0000000000000000 R09: 0000000000000000 [ 474.471311][T20730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.471325][T20730] R13: 00007efef9f06038 R14: 00007efef9f05fa0 R15: 00007ffd9f7ba538 [ 474.471345][T20730] [ 474.672043][T16347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.766758][T20744] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4251'. [ 474.797547][T20744] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4251'. [ 474.861092][T20723] vhci_hcd: connection reset by peer [ 474.891266][T18393] vhci_hcd vhci_hcd.3: stop threads [ 474.896488][T18393] vhci_hcd vhci_hcd.3: release socket [ 474.916256][T20759] netlink: 'syz.3.4257': attribute type 3 has an invalid length. [ 474.924782][T18393] vhci_hcd vhci_hcd.3: disconnect device [ 474.954920][T20762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4259'. [ 474.986072][T20753] loop1: detected capacity change from 0 to 8192 [ 474.999397][T20764] lo speed is unknown, defaulting to 1000 [ 475.056899][T20767] loop3: detected capacity change from 0 to 8192 [ 475.085375][T20753] vfat: Unknown parameter 'oñžomq?NÍçÀ÷' [ 475.100257][T20753] batadv_slave_1: entered promiscuous mode [ 475.107495][T20751] batadv_slave_1: left promiscuous mode [ 475.392396][T20777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.521739][T15783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.573970][T20774] pimreg: entered allmulticast mode [ 475.788093][T20799] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿ0x00000000000000001844674407370955161501777777777777777777777' [ 475.824015][T20797] EXT4-fs: quotafile must be on filesystem root [ 475.832551][T20765] pimreg: left allmulticast mode [ 475.944822][T20809] xt_policy: output policy not valid in PREROUTING and INPUT [ 476.006346][T20799] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 476.070555][T20809] lo speed is unknown, defaulting to 1000 [ 476.174710][T20823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4277'. [ 476.303822][T20826] bond6: entered allmulticast mode [ 476.347425][T20831] bridge2: entered promiscuous mode [ 476.354087][T20831] bridge2: entered allmulticast mode [ 476.378672][T20831] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 476.570709][T20834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4279'. [ 476.602164][T20836] set_capacity_and_notify: 4 callbacks suppressed [ 476.602209][T20836] loop8: detected capacity change from 0 to 8192 [ 476.757494][T20844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=20844 comm=syz.4.4283 [ 476.814514][T20849] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4284'. [ 476.987261][T20860] loop6: detected capacity change from 0 to 128 [ 477.047395][T20860] FAT-fs (loop6): Directory bread(block 414) failed [ 477.054206][T20865] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4291'. [ 477.061027][T20860] FAT-fs (loop6): Directory bread(block 415) failed [ 477.119370][T20860] FAT-fs (loop6): Directory bread(block 416) failed [ 477.126366][T20860] FAT-fs (loop6): Directory bread(block 417) failed [ 477.133323][T20860] FAT-fs (loop6): Directory bread(block 418) failed [ 477.140068][T20860] FAT-fs (loop6): Directory bread(block 419) failed [ 477.146939][T20860] FAT-fs (loop6): Directory bread(block 420) failed [ 477.153820][T20860] FAT-fs (loop6): Directory bread(block 421) failed [ 477.165176][T20860] FAT-fs (loop6): Directory bread(block 414) failed [ 477.175300][T20860] FAT-fs (loop6): Directory bread(block 415) failed [ 477.232089][ T3425] IPVS: starting estimator thread 0... [ 478.159131][T20882] loop8: detected capacity change from 0 to 512 [ 478.179153][T20882] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 478.212713][T20863] hub 9-0:1.0: USB hub found [ 478.237111][T20863] hub 9-0:1.0: 8 ports detected [ 478.247910][T20882] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.4295: bad orphan inode 131083 [ 478.270866][T20873] IPVS: using max 2544 ests per chain, 127200 per kthread [ 478.312668][T20888] loop1: detected capacity change from 0 to 512 [ 478.319317][T20882] loop8: lost filesystem error report for type 5 error -117 [ 478.319844][T20882] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.341194][T20884] loop6: detected capacity change from 0 to 4096 [ 478.368994][T20884] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.391345][T20888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.412989][T20882] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.432075][T20888] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.670325][T16347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.728820][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 478.728834][ T28] audit: type=1326 audit(1772869183.577:15189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20897 comm="syz.6.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9002c799 code=0x7ffc0000 [ 478.759303][T18859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.760666][ T28] audit: type=1326 audit(1772869183.607:15190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20897 comm="syz.6.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9002c799 code=0x7ffc0000 [ 478.792658][T20898] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4299'. [ 478.840575][ T3309] ================================================================== [ 478.848676][ T3309] BUG: KCSAN: data-race in set_nlink / set_nlink [ 478.854998][ T3309] [ 478.857318][ T3309] read to 0xffff88810850e780 of 4 bytes by task 3005 on cpu 1: [ 478.864845][ T3309] set_nlink+0x29/0xb0 [ 478.868907][ T3309] kernfs_iop_permission+0x1e2/0x220 [ 478.874182][ T3309] inode_permission+0x31f/0x3b0 [ 478.879022][ T3309] link_path_walk+0x779/0xe30 [ 478.883689][ T3309] path_lookupat+0x8c/0x500 [ 478.888190][ T3309] filename_lookup+0x190/0x390 [ 478.892962][ T3309] vfs_statx+0x96/0x170 [ 478.897120][ T3309] vfs_fstatat+0x118/0x170 [ 478.901537][ T3309] __se_sys_newfstatat+0x55/0x3e0 [ 478.906559][ T3309] __x64_sys_newfstatat+0x55/0x70 [ 478.911579][ T3309] x64_sys_call+0x2c64/0x3020 [ 478.916254][ T3309] do_syscall_64+0x12c/0x370 [ 478.920828][ T3309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.926721][ T3309] [ 478.929073][ T3309] write to 0xffff88810850e780 of 4 bytes by task 3309 on cpu 0: [ 478.936771][ T3309] set_nlink+0x99/0xb0 [ 478.940825][ T3309] kernfs_iop_permission+0x1e2/0x220 [ 478.946100][ T3309] inode_permission+0x31f/0x3b0 [ 478.950940][ T3309] link_path_walk+0x779/0xe30 [ 478.955604][ T3309] path_openat+0x1c6/0x2050 [ 478.960099][ T3309] do_file_open+0x16c/0x290 [ 478.964603][ T3309] do_sys_openat2+0x94/0x130 [ 478.969180][ T3309] __x64_sys_openat+0xf2/0x120 [ 478.973931][ T3309] x64_sys_call+0x1e39/0x3020 [ 478.978595][ T3309] do_syscall_64+0x12c/0x370 [ 478.983169][ T3309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.989045][ T3309] [ 478.991349][ T3309] value changed: 0x00000009 -> 0x00000008 [ 478.997043][ T3309] [ 478.999344][ T3309] Reported by Kernel Concurrency Sanitizer on: [ 479.005582][ T3309] CPU: 0 UID: 0 PID: 3309 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 479.015980][ T3309] Tainted: [W]=WARN [ 479.019764][ T3309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 479.029801][ T3309] ================================================================== [ 479.043599][T20904] netlink: 'syz.1.4301': attribute type 3 has an invalid length. [ 479.051623][T20904] netlink: 'syz.1.4301': attribute type 3 has an invalid length. [ 479.059410][T20904] netlink: 'syz.1.4301': attribute type 3 has an invalid length. [ 479.060173][ T28] audit: type=1326 audit(1772869183.627:15191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20897 comm="syz.6.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9002c799 code=0x7ffc0000 [ 479.067482][T20904] netlink: 'syz.1.4301': attribute type 3 has an invalid length. [ 479.104229][T20904] netlink: 'syz.1.4301': attribute type 3 has an invalid length. [ 479.113098][T20904] netlink: 'syz.1.4301': attribute type 3 has an invalid length. [ 479.121993][T20904] netlink: 'syz.1.4301': attribute type 3 has an invalid length. [ 479.129911][T20904] netlink: 'syz.1.4301': attribute type 3 has an invalid length. [ 479.140195][ T28] audit: type=1326 audit(1772869183.627:15192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20897 comm="syz.6.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9002c799 code=0x7ffc0000 [ 479.143010][T20904] netlink: 'syz.1.4301': attribute type 3 has an invalid length. [ 479.180646][T20906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4301'. [ 479.187091][ T28] audit: type=1326 audit(1772869183.647:15193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20897 comm="syz.6.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb9002c799 code=0x7ffc0000 [ 479.250284][ T28] audit: type=1326 audit(1772869183.647:15194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20897 comm="syz.6.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9002c799 code=0x7ffc0000 [ 479.275495][ T28] audit: type=1326 audit(1772869183.647:15195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20897 comm="syz.6.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9002c799 code=0x7ffc0000 [ 479.299927][ T28] audit: type=1326 audit(1772869183.647:15196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20897 comm="syz.6.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9002c799 code=0x7ffc0000 [ 479.338680][ T28] audit: type=1326 audit(1772869183.647:15197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20897 comm="syz.6.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9002c799 code=0x7ffc0000 [ 479.372066][ T28] audit: type=1326 audit(1772869183.647:15198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20897 comm="syz.6.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feb9002c799 code=0x7ffc0000 [ 479.470262][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set