last executing test programs: 2m20.093503001s ago: executing program 32 (id=195): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x400, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100039042dbdccbc69a86a2f101f02e8c59106bebbaea3d65b17f7e04ccc83b2a3346dcacbb634c6262d566fb83ccb1535668927c2c3ffafbe7e7d87c19f8bc19e7180cc5a731a6d3a82ad00933726fd7150353f422dc283a0", @ANYRES32=r2, @ANYBLOB="0118020043110000280012800b00010065727370616e000018000280040012000500170000000000080015001cb70b00"], 0x48}, 0x1, 0x0, 0x0, 0x40418c0}, 0x4008000) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x24004000) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 2m6.902222234s ago: executing program 33 (id=338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x9c}, 0x1, 0x0, 0x3a000000}, 0x0) 2m0.283426576s ago: executing program 34 (id=368): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x2c, r1, 0x1, 0x400a00, 0x9fffffe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$eJzs3M9vFGUfAPDvbLu0wMtLRSQBUQtobExsoaBw8IKJiQdNjHiQY9MWUlnA0B6ENLIkBs8k3o1H400Tr3o0nvwD8ODBxJAQ5QJ4WjO7M9vt/uh2S2nT7ueTLDzP7PPM8zwz88w+M09nAuhbo+k/ScT/IuJuROytRZcnGK399+jB4vTjB4vTUa5Uzv2dVNM9TOOZPN/uLDJWiCh8kTStsGb++o1LU6XS7LUoV+MTC5c/nZi/fuP1uctTF2cvzl6ZPHPm1MkTp9+cfKM563DXRrUpL23Xw0OfXz188N3zd96fHmxeWWM7Ospz/VPumjTybdvBK43r2wb2NIST1nbd3NDKsGrD2WFYTPv/Yuno+c2uELBhKpVKZajz1+VKs1stS4AtK4nNrgGwOfIf+vT6N//UlhQ3Yvix6e6frV0APXywWLkZMf2o3v7BKGRpik3Xt6kVxkw9GY2Ij8v/fp1+YqX7EH+sU4EAQN/7+Ww2DEyiafxXiAMN6f6fzaGMRMQzEbEvIp6NiP0R8VzEsrTLJBGVFcrf37ygXv4P2SxC4d5a27Ya6fjvrWxuK/9k5eZJRgay2J6IfMA8ezzbJmNRHLowV5o90WH9O7qU3zj+Sz9p+flYMKvHvcGmwebM1MLU2lrb6v6tiEODze1PBtMdl0/jJBFxMCIO9bDekYbw3GvfHq5Hmi4rure/qtJmSm9d5s8q30S8Wtv/5Vi2/5dKTBrnJwst85MTw1GaPT6RHgXH25bx62+3P+hUftf2//hnc5Z3Tv907kmbXZfu/10Nx3/k87dL7R9JIpL6fO18RGWgtzJu//5ldb2jx1q/W+vxvyP5qBrO+9dnUwsL105E7Ejea10+uZQ3j+fp0/aPHWvf//dledIt8XxEpAfxCxHxYsRAXvcjEXE0Ito0re6Xt1/+pNN3qzz+n5q0/TNtz3/L9v/SfP0qA3nmdMnApSN3H3c4eWTt37vy/j9VDY1lS9qf/5Jlp4jV1vTJth4AAABsDYWo/u1/YbweLhTGx2v3gPbHrkLp6vzCSxFxZab2jMBIFAsX5kqz+Q25kSgm+f3PkYb4ZFP8ZHbf+KuBndX4+PTV0sxmNx763O5qn09a+n/qrx7v8wJb0DZ6Dg3oUbf+f+DOBlUE2HB+/6F/NfT/Tm+2KPtLGdie/P5D/2rX/2/Gdys+u+CcAVtfRV+GvrZy/+/+vk1g6xqMD+vh6mPPbZ+2BbYj43/oS70+199boDLU/qvhaPPGgOGnU42dbcralEA6slrHFRYjYnWJd66liHwI2PkND4XeVjgUrV8NxEq5kvbvcYiIcsdc6VbpWp+LB9b94M/fibLeh833S/20uMrd/aQB1/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC28l8AAAD//w1dzgU=") r2 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x2000000000006) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc295, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) lseek(r2, 0x8, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1m46.177411605s ago: executing program 35 (id=444): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) accept$packet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x14) 1m39.037617084s ago: executing program 36 (id=489): unshare(0x22020600) (async) unshare(0x22020600) gettid() (async) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) (async) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r1, 0x407, 0x176) (async) fcntl$setpipe(r1, 0x407, 0x176) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) (async) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(r3, &(0x7f0000000040)='./bus\x00', 0x200) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xa, 0x148, 0x8d8, 0x60, 0x970, 0x2a8, 0x2a8, 0x970, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x870, 0x8d8, 0x0, {0x200003ae, 0x7f00}, [@common=@socket0={{0x20}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x3ff, 0x1}, {0x9}, {0x1, 0x3}, {}, {0x3, 0x3}, {0x4e, 0x2}, {0x25a5}, {0x0, 0x1}, {0x7}, {0x8001, 0x1}, {0xe, 0x3}], [{0x8, 0x80}, {0x8, 0x3a16}, {0x8, 0x8}, {0x5, 0x8}, {0x100, 0x8}, {0x5, 0x9}, {0x9, 0x421d}, {0x7, 0x5}, {0x6, 0x80000001}, {0x4, 0x7f}, {0x6, 0xb52}], 0x1, 0xb}, {[{0x4, 0x3}, {0x6, 0x3}, {0x80000001, 0x2}, {0xd, 0x1}, {0x21}, {0xfffffff9, 0x2}, {0x37}, {0x6, 0x2}, {0x6e318da7}, {0xff, 0x2}, {0x700000, 0x2}], [{0x5, 0x4}, {0x4, 0x1}, {0x0, 0x81}, {0x7, 0x4}, {0x8, 0x4}, {0x0, 0x9}, {0x8, 0x2}, {0xa, 0x46f}, {0x8, 0x9}, {0x9ae, 0x400}, {0x400, 0x6}], 0x8, 0x2}, {[{0x8}, {0x3, 0x3}, {0x8, 0x2}, {0x3, 0x1}, {0x8}, {0x7, 0x1}, {0x3, 0x3}, {0x8cc, 0x1}, {0x5a, 0x2}, {0x3, 0x2}, {0x4, 0x3}], [{0x5, 0xc00}, {0x4, 0xffff785e}, {0x0, 0x1}, {0x3}, {0x2, 0x3bb2}, {0x8, 0x56}, {0xf68, 0x1}, {0x4, 0x80000001}, {0xffff, 0x2a}, {0x401, 0x2}, {0x1, 0x4a8}], 0x0, 0x4}, {[{0xb}, {0x1ff, 0x2}, {0x80000001, 0x3}, {0x81, 0x2}, {0x52, 0x2}, {0x7, 0x1}, {0x6}, {0x1, 0x2}, {0x40, 0x2}, {0x4, 0x3}, {0x400, 0x2}], [{0x7, 0x2}, {0x5b, 0x1}, {0x0, 0x84b}, {0x195c}, {0x10000000}, {0x400, 0x2}, {0x68a, 0x5}, {0x101, 0x4}, {0x2c}, {0xfff, 0x4}, {0x6, 0x4}], 0x8, 0x3}, {[{0xc}, {0x71d}, {0x428}, {0x2, 0x2}, {0x7, 0x2}, {0x9, 0x2}, {0x80000000}, {0x23b}, {0x2, 0x3}, {0xfffffff7}, {0x6, 0x1}], [{0xe8, 0x4}, {0x7, 0x5}, {0xa, 0xac}, {0x8, 0xff}, {0x2, 0x2}, {0x7e7}, {0x0, 0x800}, {0x6, 0x8}, {0x6, 0xc}, {0x3, 0xc0000000}, {0x3c, 0x64e}], 0xa, 0xa}, {[{0x6, 0x1}, {0x0, 0x2}, {0x800, 0x2}, {0x8, 0x1}, {0x0, 0x1}, {0x4}, {0x789e, 0x1}, {0x5}, {0x226, 0x3}, {0x3, 0x2}, {0x65, 0x2}], [{0x71e, 0xd}, {0x6, 0x3}, {0x7, 0x501}, {0x7f, 0x10}, {0x1, 0xffffff7f}, {0x2, 0x9}, {0x6, 0x7036}, {0xf8a, 0x106}, {0x6, 0x1a}, {0x3, 0xc}, {0x8, 0x200}], 0xb, 0x2}, {[{0x0, 0x1}, {0x4358, 0x1}, {0x5, 0x1}, {0x6}, {0x8000, 0x2}, {0xa, 0x3}, {0x3, 0x2}, {0xbda, 0x1}, {0x5, 0x3}, {0x86e0, 0x3}, {0x7fffffff}], [{0xffffffff, 0x1}, {0x9, 0xe72f}, {0x9, 0xfffffff8}, {0x33, 0x8}, {0x5, 0x8}, {0x80000000, 0x94fc}, {0x600000, 0x8}, {0x1, 0x8}, {0x4, 0xfffffcff}, {0x8, 0xb}, {0x277}], 0x0, 0x3}, {[{0xf}, {0xff, 0x1}, {0x8, 0x2}, {0x6, 0x1}, {0x7, 0x2}, {0x8, 0x3}, {0x9}, {0xffff, 0x3}, {0x9}, {0x8, 0x1}, {0xff}], [{0x0, 0x8}, {0x300, 0xad}, {0x8, 0x4}, {0x9, 0x5}, {0x3, 0x1}, {0x100, 0x94}, {0x7, 0x9}, {0x4, 0x9}, {}, {0x4}, {0x1, 0x2}], 0x5}, {[{0x3ff, 0x2}, {0x8, 0x2}, {0x9, 0x2}, {0x0, 0x2}, {0x8, 0x3}, {0x9, 0x1}, {0x8000}, {0xffffffff, 0x2}, {0x4}, {0x3}, {0xfffffe00, 0x1}], [{0xe99, 0x6}, {0x200d18e2, 0x4}, {0x8, 0x10}, {0x3, 0xd}, {0x5, 0x3}, {0x4, 0x8}, {0x80000000, 0x3}, {0x7f0f, 0x6}, {0x8, 0xf65ffacc}, {0x2, 0x6}, {0xf, 0x5}], 0x6, 0x6}, {[{0x4}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x3}, {0x3, 0x1}, {0xff, 0x2}, {0x5, 0x3}, {0x80000000, 0x3}, {0x0, 0x2}, {0xfffff800}, {0x4}], [{0x4, 0x6}, {0xe, 0x291a}, {0x401, 0xffff}, {0x3ff, 0x4}, {0xe976, 0x600}, {0x9, 0xc4e7}, {0xfffffff7, 0x1000}, {0x10, 0xfffffff9}, {0x4, 0x4}, {0x2, 0x8000}, {0x0, 0x3}], 0x5, 0x6}, {[{0x9, 0x2}, {0x1b, 0x1}, {0x4}, {0xe64a, 0x2}, {0x4, 0x3}, {0x3, 0x3}, {0x7, 0x1}, {0x1}, {0x80000001, 0x1}, {0x6, 0x1}, {0x400, 0x3}], [{0x6, 0x10000}, {0x1a002663, 0x69}, {0x8, 0x3}, {0xebb8, 0xe0}, {0x1, 0x8}, {0x1000, 0x3}, {0x5, 0x3}, {0x3, 0x3ff}, {0x7ff, 0x1ff}, {0x8, 0x2}, {0x6, 0x6642}], 0x2, 0xb}], 0x0, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x8000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0xa68) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) msgsnd(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/506], 0x1fa, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000002c0)='\x02;\xe5\b\x00\x00\x9c\x00\xe4c\xbf\x00\x00\x00\x00PbS\xf2\"j\x88\xe7\xe1\x04\xd8\x92yJ\xba\xe0\xaf(\xda}\xb6p\xcb\xbd\f&\xb3]\t\x81\xd3\x0f\x18\xc9X\xba:\x1f\x94!\x8f\xd6F\xbar\xa8\xb8\xfc\x92\xc0\xfb\xdbd*f\x9c\ap\xd6\x1c,\x99\x8fWn\x16\xb9\x1el\xf4\xc8\x16\xc3\x05\x01\x9c\xa8\xd2\xe7J\xd0\xa5\xa8\xf4\xc0DL\x85ju\xe6\xdc\t\x15b\x12\xda\x83\xc5\xafQ\xed\x11\xda\x03\x05K|~B\xfe\xb6U\xae\xb1J\xc8\xe6\"t\x11N\x7f=\x9e\xbd\xd1\x8d\x90I\xbeb\xf6\x0f\xe8\xf4\xa8\\`0\x15[W\xd6\x95\f\x84\xe94]\xa5\xad\xb3\xd0\x80[\x92_\xca^8\x80\xa8\xd1\x9d\xe0Zu\x9f\xeb\xb7\xceM ;`37+P\xbc\xcafTT\xf7\x0f\xf1\xa7c<\x87\xf6\nI\x06\xdc\xb7\xf8\x12n)\x8df\xb3\xa8l\x92\xdcz]\x1c/\xa5/\x1f') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000002c0)='\x02;\xe5\b\x00\x00\x9c\x00\xe4c\xbf\x00\x00\x00\x00PbS\xf2\"j\x88\xe7\xe1\x04\xd8\x92yJ\xba\xe0\xaf(\xda}\xb6p\xcb\xbd\f&\xb3]\t\x81\xd3\x0f\x18\xc9X\xba:\x1f\x94!\x8f\xd6F\xbar\xa8\xb8\xfc\x92\xc0\xfb\xdbd*f\x9c\ap\xd6\x1c,\x99\x8fWn\x16\xb9\x1el\xf4\xc8\x16\xc3\x05\x01\x9c\xa8\xd2\xe7J\xd0\xa5\xa8\xf4\xc0DL\x85ju\xe6\xdc\t\x15b\x12\xda\x83\xc5\xafQ\xed\x11\xda\x03\x05K|~B\xfe\xb6U\xae\xb1J\xc8\xe6\"t\x11N\x7f=\x9e\xbd\xd1\x8d\x90I\xbeb\xf6\x0f\xe8\xf4\xa8\\`0\x15[W\xd6\x95\f\x84\xe94]\xa5\xad\xb3\xd0\x80[\x92_\xca^8\x80\xa8\xd1\x9d\xe0Zu\x9f\xeb\xb7\xceM ;`37+P\xbc\xcafTT\xf7\x0f\xf1\xa7c<\x87\xf6\nI\x06\xdc\xb7\xf8\x12n)\x8df\xb3\xa8l\x92\xdcz]\x1c/\xa5/\x1f') sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty, 0xa7ff}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="180000000000faff1001000001000000dc00000000000000"], 0x18}, 0x0) 1m22.508835629s ago: executing program 37 (id=612): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) readahead(r0, 0x9, 0x10000) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) pwritev2(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="f92b99a26baca0f41fb1e8304a29998eedbc5a6fdbdbfce52201f49e5e0b0740e6e0323d10", 0x25}, {&(0x7f0000000080)="2b46c6b261e1", 0x6}], 0x2, 0x0, 0x64, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 1m17.358351484s ago: executing program 1 (id=636): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)={0x36081, 0x408}, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) fcntl$notify(0xffffffffffffffff, 0x402, 0x1a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x5, 0x8, 0x3}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x9) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) sendfile(r5, r6, 0x0, 0x7fffffffffffffff) syz_emit_ethernet(0x66, &(0x7f0000000140)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x2000000, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x7}}}}}}}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r5) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r8, 0x4, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20010}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x8, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x10, 0x4}]}, @volatile={0x6, 0x0, 0x0, 0x9, 0x4}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x39, 0x0, 0x80}, @volatile={0x6, 0x0, 0x0, 0x9, 0x4}, @typedef={0xa}]}, {0x0, [0x5f, 0x30, 0x2e, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000400)=""/113, 0x7c, 0x71, 0x0, 0xa, 0x10000, @value=r0}, 0x28) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r3, 0x322d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x2000000000000007, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@call={0x85, 0x0, 0x0, 0x70}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1m16.433641478s ago: executing program 1 (id=644): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x0, 0x9f, 0x2, 0x7, 0xb, 0x9, 0x7ff, {0x0, @in={{0x2, 0x4e23, @local}}, 0x4, 0xa18, 0x0, 0x400, 0xfff}}, &(0x7f0000000400)=0xb0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000600)={0xa, 0x4e1f, 0x1, @empty, 0x3}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x2a8, 0x2a8, 0x0, 0xf0, 0x3b8, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@ip={@remote, @multicast1, 0xff, 0xffffff00, 'syzkaller0\x00', 'batadv_slave_1\x00', {}, {}, 0x32, 0x1, 0x20}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xc7}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x81, @local, 0x4e20}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffff00, 0xffffff00, 'veth0_macvtap\x00', 'wlan0\x00', {}, {}, 0x4, 0x0, 0x40}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @remote, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {0xff}, {}, 0x33, 0x2, 0xb}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x2, @broadcast, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x1c, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000040)={0xfffffffffffffdef, r2, 0x31, {0x5, 0x10001}, 0x6}, 0x1) unshare(0x24020400) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x5, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, 0x0, 0x0, 0x18}, 0x20) 1m16.299468775s ago: executing program 1 (id=645): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2002, 0x40000002, 0x4, 0xa17433da3c5d6980, 0x2, 0x81}, 0x9c) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff8, 0x40, 0xc, 0xffffffbb, 0x40, 0x1, 0x1}, &(0x7f00000003c0)=0x9c) (rerun: 32) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xe, 0x500, &(0x7f0000003c40)="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"}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) (async) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r3, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) (async, rerun: 64) close(0x3) (rerun: 64) 1m16.146250777s ago: executing program 1 (id=647): syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") bind$inet(0xffffffffffffffff, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x4, 0x4, 0x800077, 0x8, 0x6, 0x8, 0x20000001000, 0xf64, 0xfffffffd}) stat(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file1\x00', r0, 0xffffffffffffffff) unshare(0x40200) semop(0x0, &(0x7f0000000000)=[{0x1, 0x4cb, 0x1000}], 0x1) unshare(0x40400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 1m16.037887848s ago: executing program 1 (id=648): mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x200000, 0x0, 0xc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000565000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0xdc55d000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x6a, &(0x7f0000000680)=ANY=[@ANYBLOB="a5050f0000b500000090000008004500005c0000000000019078ac1e0001ac1414aa05009078e00000e0400000020000000008020000e0000002ac1414aa070300830300442400030a01012f00000000e000000100000002ac1e000100000000ac1414bb000000000000b4ed0688c6b113e000b2dd0c25010000800000000073fad43ca77d0c13c5b85bc48f21b26cdffabd8e1c7edaa0806fd316e199e25212d4873a3e0207b107e9d4c69857a2537a1c9d1a"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r4) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r5, 0x325, 0x400, 0x25dfdbfe, {0x8}}, 0x14}}, 0x4800) 1m15.504687942s ago: executing program 1 (id=653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x24000080) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x48103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1m15.446653442s ago: executing program 38 (id=653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x24000080) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x48103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1m11.550269712s ago: executing program 8 (id=706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x24000080) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x48103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1m10.835644154s ago: executing program 8 (id=709): ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/46) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x6, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x30, 0x51, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000000500)=""/247, 0x2b, 0xf7, 0x1, 0x60000}, 0x28) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0xffffffffffffffff, 0x2, 0x10}, 0xc) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000700)={[0x200]}, 0x8, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x6, 0x36, &(0x7f0000000180)=""/54, 0x41100, 0x1, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000640)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0xf, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r3, r4, r5, 0xffffffffffffffff, 0x1], &(0x7f0000000780), 0x10, 0x6}, 0x94) io_setup(0x77, &(0x7f0000000880)=0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x4, &(0x7f00000008c0)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x58}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000900)='syzkaller\x00', 0xaf1, 0x3b, &(0x7f0000000940)=""/59, 0x40f00, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x1, 0x10, 0x3, 0x9a}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000009c0)=[r5, r3, r0], &(0x7f0000000a00)=[{0x0, 0x3, 0x10, 0xa}, {0x5, 0x2, 0xe, 0x3}, {0x3, 0x4, 0xd}, {0x5, 0x2, 0x80000001, 0xa}, {0x4, 0x3, 0xc, 0xc}, {0x4, 0x1, 0x5, 0xb}], 0x10, 0x5}, 0x94) io_submit(r6, 0x2, &(0x7f0000000d00)=[&(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x3ff, r7, &(0x7f0000000b40)="2646330f2e32999a44445407301e52a5a048c2e39c692f7152f9cf0b2ceb9fab2f8a9c98a839d33f2d9ca7c3b955d3d37583", 0x32, 0x9, 0x0, 0x1, r3}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, &(0x7f0000000bc0)="5fb4197fa6e25a02cff154ecd86e16cb58e7eac555f2fc282837fae3a0fedbfc4f7468d0ced68c923a1bf5b4095de993a8ab48b33bfb1a8d8f598d04adb413799a549063fcbe3a56590772d480aaa4c5e6315a7f40f674658c695500eace7693a22592e98990743a2b9d2cb9a78fc21a3051318a0cd3fab80db118c45b0137c47940829b7ff9f9e2bae84c69b793de61d1f1faa51ba8e9b5c6c1c3ba9654725709e9044119f8ddcc7be3b933e0cfbb4291328b53cedefe765027a8f2a0c6d9aa83da707e5e3cc9057329381b872fc676d08fe49edfd82e1a493caf48a6135f072b8e52f150b20df22c7e191a0b4f64", 0xef, 0x0, 0x0, 0x3, r3}]) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r4, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%-010d \x00'}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)={0x1b, 0x0, 0x0, 0x3, 0x0, r8, 0xff, '\x00', r1, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) fcntl$getownex(r3, 0x10, &(0x7f0000000e80)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000ec0)={r10}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000001480)={{r3, &(0x7f0000000f00)=':@\x00', 0x20000, &(0x7f0000000f40)={@_ha_fsid={[0xd3b, 0x9]}, {0x8, 0x6, 0x1, 0x127}}, 0x8, &(0x7f0000000f80), &(0x7f0000000fc0)}, 0x4, &(0x7f0000001400)=[{0x1, 0x2, &(0x7f0000001000)='\'\':*\xc9-!\x00', &(0x7f0000001040)="3e75aa2b4f1d3f44752c26a3b37126528a59b126383cba79e25ebff33a7cf3f022dac3bc037496718178d4bf6c10550c37cce1208f668b1ef65cee3e1cd7d53f6256775781ae6717f4a3199a19d4554d66e4484c5b938eb53bb8a0363337614e67f71c0bdf215b787bac14b559236cee59d45aad31195fe76b1650c451506498ae9613e0c544f16cdbbd3e88073b6eca80793c8c4694a0211f5523f3454e9e33912fea6f5f8cc8a7727a22dd66dae38cb1dd62cc2385415a3ccccb74835f882578762a67e4cb4ab8a9e48cb64dda1a4a1295ac06c0da34d0bee5fc32f1b70014d39233d04c8632b9a21d6c01c25c", 0xee, 0x10}, {0x3, 0x4, &(0x7f0000001140)='#\xc7&\x00', &(0x7f0000001180)="c95a3153f53baa8107dcb6a2ec1e42eb7c4d4ca511ed2b35dc8c96b79bf642e7d1e82b560423b799ab52a0a2546f9f9bc2116fb4b6696c3e", 0x38, 0x8}, {0x3, 0xffffffff, &(0x7f00000011c0)='\x00', &(0x7f0000001200)="4ef8434f5aa319ba0eb7ca39e99ca6039a7b60e8f03e84af0c878763e8687c62a6b093546bb59287c44c70e1594763df5ad0f85e5e54c28875251989929a9c63cb62746b59a792a70f125a6b9b60d6eaae9de9747c22e5b3a6f0e8f58c24f4ad71ec367e5972e61eec8e7724b6d618f42f82c82338371d3122e9e4d39e8a791975bc16f7131aba7100", 0x89, 0x8}, {0x3, 0x5, &(0x7f00000012c0)='%-010d \x00', &(0x7f0000001300)="605c9c35be558378117264a46a91def6200e55c01310ba213ed03ce64ae77a4333a922e5988d8a2f59eacdeca470b75f105704b366190dc4c570f25f42dfa7bbfec73f5760d6a85c5dc4aafbd3fa5b1afb52e074cfaf197c67507f0c434027e3f7193aa4bb238ba360a881c525219a4e85e584a371ff7a1fe602cbca6b446769f17226561fe5f93a54226d3274d1e74a43665cffede31e8453c17b0a9ebf902d9170bfd382d6b6bf377a362901eacb9d700b4102b3586e7b0e842efddf0ef35aa6c72eef8c25673d1fa8b484331a9e0cf3d4ad7f6d281d01ebd77dded477c1e92455d036ff6045d28d75899cb6df", 0xee, 0x2a}]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000001500)={0x0, 0x9, 0x2}) ioctl$BTRFS_IOC_GET_DEV_STATS(r12, 0xc4089434, &(0x7f0000001900)={r13, 0xa0, 0x0, [0x100000001, 0x6cd94884, 0x8, 0x9, 0x8000000000000001], [0x8, 0x3, 0x0, 0x1, 0xfffffffffffffffc, 0x19d, 0x100000001, 0xfff, 0x33c, 0x5, 0x0, 0x100000001, 0x5, 0x5, 0x7, 0xeef, 0xffffffffffffffd2, 0x5, 0x8, 0x1, 0x1, 0x1, 0xfffffffffffffffb, 0x8, 0x3, 0x1ff, 0xc, 0x1, 0x1ff, 0x4, 0x6, 0x7ff, 0x0, 0x9, 0x0, 0x3, 0x4c3, 0x9, 0xc2, 0x4, 0x5, 0x7, 0x401, 0x9, 0x7, 0x7, 0x80000000000000, 0x1f6800000, 0xe70, 0x1, 0x3fffffff8000000, 0x6, 0x1ff, 0xd, 0x7, 0x5, 0x1, 0x9, 0x41, 0x2, 0x9, 0x17, 0x9, 0xb, 0x6, 0x3, 0x3, 0x0, 0x3ff, 0x0, 0x6, 0xafe, 0x9, 0x1, 0x9, 0x2, 0x2, 0xfff, 0x3, 0x1, 0x6b79f51c, 0x9, 0xfffffffffffffff7, 0xffffffff, 0x5, 0x73, 0x7, 0xd, 0x984, 0x4, 0x1, 0x200, 0x5, 0x0, 0x53, 0x9, 0x4bd0, 0x98, 0x2, 0x2, 0xaf05, 0x0, 0xf, 0x9, 0x5, 0xffffffffffff8000, 0xfff, 0x800, 0x5, 0x81, 0xb5, 0x2, 0x6, 0x9, 0x7fffffff, 0x6, 0x2, 0x4, 0xfffffffffffffff0, 0x8, 0x8]}) bind$netlink(r5, &(0x7f0000001d40)={0x10, 0x0, 0x25dfdbfc}, 0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r11, 0x8982, &(0x7f0000001d80)={0x1, 'bond_slave_1\x00', {}, 0x8}) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000001dc0)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="423f7d3e849b"}, 0x56, {0x2, 0x4e21, @rand_addr=0x64010101}, 'veth1_to_team\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001f00)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000001e80)={0x0, 0x80, 0x9, 0x37, 0x8, 0x6, 0x0, 0xfffffffffffff5ba, 0x80, 0xb, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000001e40), 0x4}, 0x24, 0x5, 0x5, 0x5, 0xffff, 0x0, 0x7fff, 0x0, 0x7}, r14, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r15 = fspick(r12, &(0x7f0000001f40)='./file0\x00', 0x1) sendfile(r15, r9, &(0x7f0000001f80)=0x2, 0x4) syz_clone(0xc8d2000, &(0x7f0000001fc0)="35cde9dbf82a", 0x6, &(0x7f0000002000), &(0x7f0000002040), &(0x7f0000002080)="cf10e144cebce94c556accd3e21fd323e050e5ce598e26aeb135aec8c4752b6d0a8466f9391fe96e60234935657cbc9f3208e08a1b548fce4c9ccff3135401ef8a1c429a719db9d86c3f7dfffb20cdb398132aeeeccdb8df0af20462b5e5ec270cff911d5a443bc1ab0c") openat$cgroup(r5, &(0x7f0000002100)='syz0\x00', 0x200002, 0x0) 1m10.530189749s ago: executing program 8 (id=710): syz_emit_ethernet(0xe8e, &(0x7f0000001f40)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) write(r7, &(0x7f0000000280)="1ca6ff001a009b8a14e5f4070009042402000000ff02000300000000", 0x1e5) 1m9.526252929s ago: executing program 8 (id=717): syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") bind$inet(0xffffffffffffffff, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x4, 0x4, 0x800077, 0x8, 0x6, 0x8, 0x20000001000, 0xf64, 0xfffffffd}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 1m9.272614114s ago: executing program 8 (id=721): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000008406010000000000000300000d"], 0x0, 0x4a, 0x0, 0x8, 0x4}, 0x28) timer_create(0x2, 0x0, &(0x7f0000000440)) r0 = add_key(0x0, 0x0, &(0x7f0000000040)="1d", 0x1, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0xd8}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = add_key(&(0x7f00000002c0)='id_resolver\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000640)="6755c9dad2adf3fb89bcfd55c5907afde25780512289eaf8c843bd147baec8ebf608e6a14a96cb73ad655600ef4dd0bdd67a131ab11770bd4d048a90f095a1d33dcc6fd73d9bae1bc4a54bd8a6b7e96065792edc0621a92e11f0b433c267770a49c16f89578ea014266b01e5af17b49ef4ca9042438ce6ac78c42d23885c36cd70f2c42f4e3b6490aa255e7b8982f98c738dbe23f83a72678e38db3111e62da9be954470820600298ce8a98a80d772aa8d57387fb10d9b666715021df470787754c938405b17e5d1cc4e9a2a9b7e8070", 0xd0, 0x0) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r3, 0x4, r4) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x8, 0xd, 0x1, 0xd, 0x0, 0x6, 0x800, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x3ff, 0x8}, 0x10080a, 0x6, 0xe, 0x9, 0x7, 0x2, 0x0, 0x0, 0x9, 0x0, 0x5}, r5, 0xa, r6, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet6(r1, &(0x7f0000000100)="f0", 0x1, 0x40001, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 1m8.273653814s ago: executing program 8 (id=727): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000020", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 1m8.261617423s ago: executing program 39 (id=727): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000020", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 1m7.494454825s ago: executing program 3 (id=732): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e0200220035", 0x7}], 0x1}, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x1f, 0x1, 0x1}}, 0x40) 1m7.398231088s ago: executing program 3 (id=733): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x7) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8901, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x0, {0x2, 0x4e20, @multicast1=0xe000cc02}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1m7.273940145s ago: executing program 3 (id=737): r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r1, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0xfffffffffffffdff, 0x0, 0x0, 0x7, 0x0, r0, 0x0}]) 1m7.064079387s ago: executing program 3 (id=741): syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 1m6.757472222s ago: executing program 3 (id=745): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x1ff, 0x800, 0x1, 0x1ff, 0x100000000, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x1, 0x0, 0x5, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x40, 0x0, 0x0, 0x40000000000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e00000090000000000000000020001000000000000000002000000000300050000000000020000ecdf000001"], 0x50}}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000540)={{r1, &(0x7f0000000140)='\x00', 0x20000, &(0x7f0000000180)={@align=0x10001, {0x7, 0x6, 0x8001, 0x9}}, 0x2, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x9}, 0x1, &(0x7f0000000280)=[{0x2, 0x7, &(0x7f0000000240)='])}\xbf\x00', &(0x7f0000000440)="8e055f450b60d87c04030855ecebb1e456a5e8c7e93bdc61460a15de92929b7051116d17cef8b8afaeb1a8959aa41048ca892c1f086c20b137767aeb24a90a114bae34bf9c061e7a1485d5bf1094baa6e2b48d067e815e1a77bd6f67bd2b0fef820bf7f3f498392c09faaeaf3bfc5863f993682e91f06dcc6242b41cb6c6011694a54574ba98acdab69d3202e81545f944b47954e8524f1994a16d0f0f612cd57e0043dd11c9806db7e608c5f0af885bf1dba3e8b3b5bd4b47b3513cf9b64db7e5a14d1f80f9c4ffb0ad4adc", 0xcc}]}) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f00000002c0)={0x4, 0x7fffffff, 0x1ff, 0xffffffff}) ioctl$VT_ACTIVATE(r3, 0x80045440, 0x1000000000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) 1m5.179909439s ago: executing program 6 (id=776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x24000080) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x48103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1m4.634854762s ago: executing program 6 (id=777): syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, [{0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9bf0d0000000000040000"}, {0x0, 0x1, "e30000000000"}]}}}}}}, 0x0) 1m4.546460536s ago: executing program 6 (id=778): r0 = syz_io_uring_setup(0x4b3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2) (async) io_setup(0x9, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 1m4.241826521s ago: executing program 6 (id=784): syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 1m3.990489576s ago: executing program 3 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x60040084) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) setrlimit(0xc, &(0x7f00000000c0)={0x4, 0x81}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="130300000062a900000000000000"], 0x14}}, 0x0) 1m3.927382905s ago: executing program 40 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x60040084) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) setrlimit(0xc, &(0x7f00000000c0)={0x4, 0x81}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="130300000062a900000000000000"], 0x14}}, 0x0) 1m3.909158182s ago: executing program 6 (id=789): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7fff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000000000000077f7260c1e62d4e4ca33393506dcdb56d6b4"], 0x1a, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0xff, 0x9, 0xa, 0x20, 0x5}, 0x20) write(r4, &(0x7f0000004200)='t', 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x4}, 0x9805, 0x9, 0x7fd, 0x6, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) r6 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r10, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r6, 0x46f3, 0x0, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 1m3.590403034s ago: executing program 6 (id=790): accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setresuid(0xee01, 0x0, 0x0) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 1m3.555108018s ago: executing program 41 (id=790): accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setresuid(0xee01, 0x0, 0x0) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 36.327603191s ago: executing program 7 (id=1043): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x5f, 0x6, 0xdd}]}) write$ppp(r0, &(0x7f00000008c0)='\x00\x00', 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f00000004c0)=""/4096, &(0x7f0000000080)=0x1000) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00') io_uring_enter(r3, 0x2c78, 0x7281, 0x8, &(0x7f0000000140)={[0x1]}, 0x8) 36.150140069s ago: executing program 7 (id=1045): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000060000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000e161b920c8a9e2458aa2384ec8ccf9f6b7492ca833d0d5da28918a53c19cda29e618345d647d2cb5afd5fea301a70bed"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x204}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x4850) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0xd, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8040410}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x490, 0x30, 0xfdef, 0xfffffffe, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8001, 0x0, 0xc265, 0xe3dd, 0x9, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x7f, 0x2, 0x2135, 0xffff8001, 0x0, 0x3, 0x3, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x7a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x87fc, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0xfe, 0x1400, 0x7, 0x3, 0x4, 0x47fff, 0x2, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0x1, 0x4, 0x8, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x1, 0xfffffffa, 0xb7f, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x1, 0x4, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x65ad, 0x0, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x3, 0x8, 0x4, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6, 0xa0, 0x8, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x4, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x5, 0x8, 0x401, 0xffff0000, 0xed1, 0x8, 0xfffffff8, 0xfffffffb, 0xfffffffb, 0x6, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x0, 0x8, 0x7, 0x0, 0x2, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0xfffffffe, 0x0, 0x8, 0x1ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x3, 0x0, 0x9, 0x3, 0x9, 0x8001, 0xf0000000, 0xc, 0x3, 0x4, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0xfffffff5, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x5, 0x22, 0xffffffff, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0xc, 0x6, 0x9982, 0x8001, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x0, 0x7, 0x3, 0x5, 0x8, 0x2, 0x202, 0x3, 0x41, 0x3, 0x200, 0xc8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0xb, 0x0, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x100008}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x490}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$inet6(0xa, 0x1, 0x0) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) fchdir(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000018000100000000000300060000000014000700000000000000000000000000000000010800040001000000"], 0x38}}, 0x20000000) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000001440)={'bridge0\x00', 0x0}) r5 = socket(0x2a, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 35.916103927s ago: executing program 7 (id=1047): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000ab9da13d9854c6afd12a31e3118a3d07410f609b2d3a19ac2775cde0b2ba99d05d0f4a279ccc4b1db65224e6e3c08356bffbd5051985bd20bf322bb4c474b35fa755d7316112177bd83efb26b0818b24f6caf25d7ad805334e36107ae78cdbb7b3fd838922ce941beb2df26e85efb6", @ANYRES16=r1, @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80a0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48010) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7ff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x20, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@getqdisc={0x4c, 0x26, 0x805, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xf}, {0x5, 0x5}, {0x0, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}}, 0x4000080) timer_create(0x3, 0x0, &(0x7f0000000040)) sendmmsg$inet(r0, 0x0, 0x0, 0x24004091) clock_gettime(0x0, &(0x7f0000000340)) r9 = socket(0x10, 0x2, 0x0) write(r9, 0x0, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x44000) 34.900478084s ago: executing program 7 (id=1058): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000004c0)) open(0x0, 0x64842, 0x2) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000100)=ANY=[@ANYRES8=r0]) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) rt_sigpending(&(0x7f0000000500), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000400), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@ifindex, 0xffffffffffffffff, 0x2, 0x2}, 0x20) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, &(0x7f0000000540)=ANY=[], 0x18, 0x200040c0}, 0xa4ff) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 34.566308354s ago: executing program 7 (id=1060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg0\x00', 0x800}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x2, 0x4, 0x2) ioperm(0x1, 0x7f, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044800}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9d, 0x9, 0x7, 0x8, 0x4e19}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x809b}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'virt_wifi0\x00'}) 34.04221384s ago: executing program 7 (id=1068): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x37fc, &(0x7f0000000000)={0x0, 0xad40, 0x684d0257bd5d96c1, 0x2, 0x89}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 33.999811672s ago: executing program 42 (id=1068): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x37fc, &(0x7f0000000000)={0x0, 0xad40, 0x684d0257bd5d96c1, 0x2, 0x89}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 3.620643291s ago: executing program 5 (id=1329): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fdfbdf2509e4ff000000bf00000000000000000000dfaf20d51976fb70ef3531ac64f0b610b0c7d16ca52e7531d76e2fd21483c4436ed3b3797d2c412a80138d6aba74a9d7789c7805a08f2f29b49a672050d719347262cdcfab0819d12419626c908d096b3479169a835c7a60fdd5d38c0e69b7f482f9cf5f50ebe1d60344c325d3fa99e698759f549327dcb937ed8200000000000000000000d54688bb4b76bb7b3f606200"/187], 0x20}}, 0x48040) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/111, 0x6f}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000180)=""/101, 0x65}], 0x3, 0x6, 0x6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000201000010000000000000002000000000a1400000011000100000000deffffff000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x2}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='\x00', 0x210000, &(0x7f00000003c0)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@user_xattr}, {@jqfmt_vfsv0}, {}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000101000/0x1000)=nil, 0x1000, 0x80000c) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000540)=[{&(0x7f00000005c0)="00214717a7070000000003060000000000000000a8a6761d58f86d73d32f46381d8fee86dbca0e6a9c4db5a40fef5682d2c3", 0x32}], 0x1, 0xc, 0x200004) preadv2(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x86a, 0x0, 0x0) lseek(r2, 0xf5, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r6) faccessat2(0xffffffffffffffff, 0x0, 0x165, 0x1700) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448d4, &(0x7f0000000080)={0x2, 0x3, "f400", 0x4, 0x7}) 3.181407472s ago: executing program 4 (id=1336): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(0x0, 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 3.114172549s ago: executing program 4 (id=1340): r0 = socket(0x1, 0x5, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000500)={0xe000203f}) 2.960409302s ago: executing program 4 (id=1342): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xfa, 0x0, @val=0x80}}}}}}}, 0x0) 2.943607789s ago: executing program 2 (id=1343): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0x7800}, 0x0, 0x40000000, 0x7, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8000008, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0xa}, 0x11feb0, 0x1002, 0x20db, 0x3, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r2, 0x402, 0x29) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r3, &(0x7f0000000dc0)=""/4106, 0x100a) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r6}, 0x38) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x27) write(r1, &(0x7f0000000000)="156a9d3af527112a8fdffdc61c8121c6530a420537fdf6fe3ab9c4d5771c713176ae01810b05e6cdb7aa4457f458adace4f6a4d4075f906a93bc87e02e41b06acf989be98f79cf1eff18ec88a73dbafb627786fc99b9f7af4e347e5768b2295d5f37fffa3be883a276555fc47fb064b670922a9630098e6e9c5acdc8328ccd00f16f", 0x82) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2.866487515s ago: executing program 9 (id=1344): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="30feff004a00010000000000000000000a00806e0800000000000000140001"], 0x30}}, 0x0) 2.814617636s ago: executing program 9 (id=1345): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2.689042753s ago: executing program 4 (id=1346): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x802, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f00000000c0)=0x17, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaf7ebaaf9cfccaa38dd601b8b97fdfffffffffffffffb2e9fc603dd282100000002ff0200000000000000768a620000000000000104004e2090a5b5f19cfc2183fab1695c6cc93dfcd6f6b363720bccacfd7aab9ef31f80ca229b1e32377af0bdf0070e6a0527313b1d04d8efb1409d30d69e4fa12e4777ebf2dccb926777286977fdac865bd979a3952b4527537f1b33a6903010dd648ea83e09050d4d80c3e3be0c297dee77d469d6935d752eff552f3a0ad2f8c118a3"], 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioprio_set$uid(0x3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="796100000000fedbdf257e0000000c0099000700000017000000"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4381c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x2, @perf_config_ext={0x4, 0x8}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0xffff, 0x6, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r8, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r10 = socket(0x10, 0x803, 0x0) write(r10, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r10, r9, 0x0, 0x5) 2.688935923s ago: executing program 5 (id=1347): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0xe4ffffff}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0) 2.664099689s ago: executing program 5 (id=1348): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@newtaction={0x10c, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0xf8, 0x1, [@m_simple={0xf4, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_DATA={0xa, 0x3, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @TCA_DEF_DATA={0xd, 0x3, 'trans=fd,'}]}, {0x9d, 0x6, "3ac47d8f66b9ada606aa60a7fc99c95c9fbb58402dd443e92602f7994c557e40094500a136bb53cc323abe8e9a032feb3b1811b3f9149f6f05ff436ae121782b9f13ed2deb3fee8a17863c1d88b38005a4604a93ebbc213530b8e07f71d1175d1580cb57e68478f9edf7f8e766c01a7ba01dde9f5efc04e3eb55e8d86d594f207de74400f37d97ac2edd9679a28a6d5d37c8f9ba5b04948e64"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@bridge_delneigh={0x5c, 0x1d, 0x4, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x1, 0x4}, [@NDA_FLAGS_EXT={0x8}, @NDA_MASTER={0x8}, @NDA_IFINDEX={0x8}, @NDA_DST_IPV6={0x14, 0x1, @private2}, @NDA_CACHEINFO={0x14, 0x3, {0x9, 0x3, 0x6, 0x400}}]}, 0x5c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0x2006}) recvmmsg(r3, &(0x7f0000005200)=[{{&(0x7f0000000440)=@tipc=@name, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/117, 0x75}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000600)=""/197, 0xc5}, {&(0x7f0000005340)=""/82, 0x52}, {&(0x7f0000000780)=""/180, 0xb4}], 0x5, &(0x7f00000008c0)=""/111, 0x6f}, 0xfffffff7}, {{&(0x7f0000000940)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000540)=[{&(0x7f00000009c0)=""/89, 0x59}], 0x1, &(0x7f0000001100)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000000f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000ac0)=""/11, 0xb}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/235, 0xeb}], 0x2, &(0x7f0000004100)=""/4096, 0x1000}, 0xffff}, {{&(0x7f0000000c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/222, 0xde}, {&(0x7f0000000e00)=""/3, 0x3}], 0x2, &(0x7f0000005100)=""/215, 0xd7}, 0x23}], 0x5, 0x2, 0x0) perf_event_open(&(0x7f0000000ec0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f00000000c0)=0x1, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f00000002c0)=0x8, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) chroot(0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) socket$inet_sctp(0x2, 0x5, 0x84) 2.420026555s ago: executing program 9 (id=1349): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[], 0x38}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x40001b6, 0xf5) 2.350294272s ago: executing program 0 (id=1350): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.193875894s ago: executing program 0 (id=1351): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x300}, 0x8000) 2.193591484s ago: executing program 9 (id=1352): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_cache\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0xfffffffffffffd5f, &(0x7f00000003c0)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x3, {0x0, 0xff}, 0xfe}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfefffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8992, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) fchdir(0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000feffffff850000007300000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f0000002ac0)="09adda0000006dce87b100568f51", 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x24, r10, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x146}]}, 0x24}}, 0x40000) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r11, 0xfffff000) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r6, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x2d, 0x20040040) recvfrom(r6, 0x0, 0x0, 0x734, 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) lseek(r0, 0x401, 0x0) 2.052524428s ago: executing program 0 (id=1353): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_audit(0x10, 0x3, 0x9) openat(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2007ffb) sendto(r0, &(0x7f0000001340)="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", 0x1000, 0x20008001, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'bridge_slave_0\x00'}}, 0x80) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 1.922344186s ago: executing program 2 (id=1354): openat$random(0xffffffffffffff9c, 0x0, 0x270682, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000000022, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x10}}, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100003040000800000000000000074a1", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 593.849237ms ago: executing program 4 (id=1355): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) socket$l2tp(0x2, 0x2, 0x73) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$rds(r1, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0xfd83}], 0x16, 0x0, 0x0, 0x8000}, 0x48004) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x2, &(0x7f00000001c0)=[{0x1ff, 0x7f, 0x7, 0x81}, {0x50f, 0xc, 0xa2, 0xffff}]}) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x80000000) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f00000007c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x1, 0x40088d4) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0xb000000d}) r7 = socket$inet(0x2, 0x802, 0x1) connect$inet(r7, &(0x7f0000002780)={0x2, 0x4e25, @loopback}, 0x10) write(r7, &(0x7f0000000000)="08001800000020a3", 0x8) read(r7, &(0x7f0000000180)=""/14, 0xe) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {@data_ordered}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {@init_itable}, {@auto_da_alloc}]}, 0x1, 0x606, &(0x7f0000000600)="$eJzs3c1vVFUbAPDnTD9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFoIUaGiNFk0oCW5MjBtjTFy5EP8LJbJlpW5cuHFlSIgaliaOudM7pdPeaenH9Fbm90uGnnvu3J5zpzxzzj1zzp0A2tZg9k8lYn9ETKeI/jS/uK8z8p2DC8978OeHZ7NHimr1td9TpDyv/vyU/+zLD+6JiB++T7GvY2W5M3PXLo5PTU1ezbeHZy9ND8/MXTt84dL4+cnzk5dHXxg9cfzY8RMjRzZ0XtcL8k7ffOe9/o/H3vz6y7/SyDe/jKU4GS/nT1x6HltlMAZrr0lauavvxFYXVqLOZdtpeQY7Vkf+9+uKiCeiPzqW/DX746NXSq0c0FLVFFEF2lRaR/xnvYVW1gXYTvV+QP3afvl1cKWUXgmwHe6fWhgAWBn/nQtjg9FTGxvY/SA1jPOkiNjYyFyjPRFx987YzXN3xm5Gi8bhgGLzNyLiyaL4T7X4H4ieGKjFf6Uh/rN+wZn8Z5b/6gZ7CsuHisU/bJ+F+O9ZNf6jSfy/tST+395EHfJLkeu9DfHf6+oDAAAAAAAA1un2qYh4vujz/8ri/J8omP/TFxEnt6D8wWXbKz//r9zbgmKAAvdPRbxUOP+3Uv/8faAjT/2nNh+gK527MDV5JCL+GxGHomtXtj2yShmHP9n3RbN9g/n8v/ojK/9uPhcwr8e9zl2Nx0yMD45v9ryBiPs3Ip4qnP+bFtv/VND+Z+8H049Yxr5nb51ptm/t+AdapfpVxMHC9v/hXSvS6vfnGK71B4brvYKVnv7g02+blb/R+HeLCdi8rP3fvXr8D6Sl9+uZWfXXzRdlHp3rrDY7YGP9/9nx7vR67a5C3Xne++Ozs1dHIrrT6Y4styF/dK1XAR4zPxVn1+OhHi9Z/B96ZvXxv6L+f29BsKc/GtcU1/3/775fm1VT/x/Kk8X/xLra//UnRm8NfNes/Edr/4/V2vpDeU7W/rfuFYF/j8/rYdrdmF8Qjp1Fu7a7vgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOKhExJ5IlaHFdKUyNBTRFxH/i92VqSszs8+du/Lu5YlsX+37/yv1b/rtX9hOte//r2Tph9uj0bh9NCL2RsRnHb217aGzV6Ymyj55AAAAAAAAAAAAAAAAAAAA2CH6mqz/z/zWUXbtgJbrLLsCQGkK4v/HMuoBbD/tP7SvDcV/mt/6igDbTvsP7Uv8Q/sS/9C+xD+0L/EP7WrZOH4qqx4AAAAAAMAW2Xvg9s8pIuZf7K09Mt35vq5Sawa0WqXsCgClcYsfaF+m/kH7co0PrDXrt6fpQZuZLzx9dhMHAwAAAAAAAAAAAEDbObjf+n9oV9b/Q/uy/h/aV339/4GS6wFsP9f4QKyxkr9w/f+aRwEAAAAAAAAAAAAAW2mmuitiamry6szctYvjLUt0R0SLi9h04o2dUY2iRG+LfnO1Wr2e/S8o/QQfj0R9KvxOqc+yRH2t36MdVd57EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0OifAAAA//8sxicA") r8 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r8, 0x801c581f, &(0x7f0000000000)={0x64e, 0x2, 0x10000, 0x8, 0x2}) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x7, 0x6, 0x7, 0x4, 0x0, 0x6, 0x2042, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb7, 0x1, @perf_config_ext={0x1, 0x9}, 0x200020, 0xfffffffffffffffe, 0xb787, 0xe, 0xc, 0x9, 0xcb, 0x0, 0x80, 0x0, 0x1}, r2, 0x8, 0xffffffffffffffff, 0x5) 586.509595ms ago: executing program 2 (id=1356): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0c0100001600010000000000010000000a01010000000000000000000200000000000000000000000000ffff000000004e240000000000000000802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1414aa0000000033000000ffffffff000000"], 0x10c}}, 0x0) 493.000159ms ago: executing program 5 (id=1357): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xfa, 0x0, @val=0x80}}}}}}}, 0x0) 492.680888ms ago: executing program 0 (id=1358): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0x4}, {0x0, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) unshare(0x28000600) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) fadvise64(r3, 0x5, 0xfffffffffffffffe, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="a1", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x110, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}, @common=@unspec=@connbytes={{0x38}, {[], 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0xa}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r7 = syz_io_uring_setup(0x78ae, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x306}, &(0x7f0000000080), &(0x7f0000002800)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/170, 0xaa}, {&(0x7f0000000380)=""/153, 0x99}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000c, 0x50, r7, 0x8000000) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x22, 0x2, 0x22, &(0x7f00000006c0)) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 492.554879ms ago: executing program 9 (id=1359): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x4, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 413.307764ms ago: executing program 2 (id=1360): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = memfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000100)={[{@debug}, {@init_itable}]}, 0x1, 0x5a2, &(0x7f0000000180)="$eJzs3U9sG1UaAPBvxnbTP9lNVtqVdlc9VLtIRarqJP0DhVN7RVSq1AMSF4gcN6rixFWcQBNFIr1XiB4QoF7KDQ4cQRw4IC4cuXIBcUaqaARS0wMYOR6naeoUJ8RxiX8/yfF788b+3pvx9+IZzcgB9K1jjT9pxH8i4lISMbShLR9Z47HmeqsrS6UHK0ulJOr1yz8lkUTE/ZWlUmv9JHs+EhHLEfHviPiqEHEiXX/LA61CbWFxarxSKc9m9ZG56WsjtYXFk1enxyfLk+WZ08+/cPbcmbNjp8Y2dvdBfWOtsL2x3vz+1ts3v3npzq2PPzm6XHp3PInzMZi1bRzHbmpuk0Kc37T8TDeC9VDS6w6wI7kszxup9K8YilyW9e3UN04OA3vSPaCL6gMR9XUbikAfSCQ99KnW94DG8W/rsZffP+5eaB6ANOKuriyV3oql4WZLvnluIg6uHZsc/jl55Mikcbw5vJcdZV9avhERo/n845//JPv87dzobnSQrvryQnNHPb7/0/X5J9rMP4Otc6d/Umv+W83mv9U28XNbzH+XOozx66s/fLBl/BsD8d+28ZP1+Emb+GlEvN5h/NuvfH5uq7b6hxHHo338luTJ54dHrlytlEebf9vG+OL40Re3Hn/E4S3iN8/ZHlzryMbxH8j6lHY4/s++/vR/y0+I/+z/n7z/223/QxHxTofx/3H/o5e3art7I7nX+Baw3f2fRCHudBj/ufPHvsuKzhoCAAAAAAAAAMAuSteuZUvS4no5TYvF5j28/4zDaaVamztxpTo/M9G85m04CmnrSquhZj1p1Mey63Fb9VOb6qdzWcDcobV6sVStTPR47AAAAAAAAAAAAAAAAAAAAPC0OLLp/v9fcmv3/2/+uWpgv9r6J7+B/U7+Q/96NP+TnvUD2Hv+/0Pfqst/6F/yH/qX/If+Jf+hf8l/6F/yH/qX/AcAAAAAAAAAAAAAAAAAAAAAAAAAgK64dPFi41F/sLJUatQn8gvzU9U3Tk6Ua1PF6flSsVSdvVacrFYnK+ViqTr9R++XVKvXRmNm/vrIXLk2N1JbWHxtujo/0/pN0XKh6yMCAAAAAAAAAAAAAAAAAACAv57BtUeSFiMKzXqaFosRf4uI4SSSK1cr5dGI+HtEfJsrDDTqY73uNAAAAAAAAAAAAAAAAAAAAOwztYXFqfFKpTzbvUI+C9XFEJ0X8ttZOSKWd7cbjXfc9qsK2Qbs8abbH4Xc0/E5fPoLPZyUAAAAAAAAAAAAAAAAAACgTz286bfTV/zW3Q4BAAAAAAAAAAAAAAAAAABAX0p/TCKi8Tg+9Mzg5tYDyWpu7Tki3rx9+b3r43Nzs2ON5ffWl8+9ny0/tf6y/N6OAehEK0/TiGjkMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBQbWFxarxSKc/usDDQwTq9HiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADATvweAAD//7M9zgI=") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) (async) truncate(&(0x7f0000000000)='./file1\x00', 0xd1) 412.950974ms ago: executing program 0 (id=1361): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 366.504796ms ago: executing program 5 (id=1362): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) ioctl$TIOCCBRK(r0, 0x5428) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000000c0)={{0x6, 0x8001}, 0x100, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{r0, 0x100}], 0x1, &(0x7f0000000280)={r2, r3+10000000}, &(0x7f00000002c0)={[0xffffffffffffff8b]}, 0x8) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x1000, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000340)) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f00000003c0)={'\x00', 0xfffffff7, 0x3, 0x73}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000000480)={0x0, 0x0, "a6bdac15a795c57ba25cc537654cf11c"}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x6a}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048814) modify_ldt$write2(0x11, &(0x7f0000000600)={0x2, 0xffffffffffffffff, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000007c0)=0x0) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) statx(r4, &(0x7f0000000ac0)='./file0/file0\x00', 0x2000, 0x20, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r15 = getgid() r16 = getegid() r17 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setxattr$system_posix_acl(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='system.posix_acl_default\x00', &(0x7f0000000d80)={{}, {0x1, 0x2}, [{0x2, 0x9, r7}, {0x2, 0x0, r8}, {0x2, 0x2, r9}, {0x2, 0x0, 0xee00}, {0x2, 0x0, r10}, {0x2, 0x3, r11}, {0x2, 0x1, r12}], {0x4, 0x4}, [{0x8, 0x2, r13}, {0x8, 0x4, r14}, {0x8, 0x6, r15}, {0x8, 0x7, 0xee00}, {0x8, 0x0, r16}, {0x8, 0x7, 0xee01}, {0x8, 0x7}, {0x8, 0x1, r17}, {0x8, 0x2, r18}], {}, {0x20, 0x7}}, 0xa4, 0x2) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) 294.356423ms ago: executing program 9 (id=1363): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x9, 0x14}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700110005234538ba55"], 0xfe33) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000004, 0x511, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x2, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x1000000}, 0x0) 222.64488ms ago: executing program 0 (id=1364): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r3, &(0x7f000000cac0)=[{&(0x7f0000000040)="419591c78b30640ee91c8fc7c6079c0213a13dce386a64f8a51e9b3931", 0xfe8e}], 0x1) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) eventfd2(0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xef, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x78, 0x2, {{0x8, 0x1, 0x7fff, 0x2, 0xf, 0xfff}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xa, 0xffff7fff, 0x8ff4, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x58, 0x2}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x6, 0x0, 0x1, 0x6, 0x8ef}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0xa8}}, 0x4000010) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14b70008", @ANYRES16=r0, @ANYBLOB="010026bd7000fcdbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rpc\x00') 151.249867ms ago: executing program 4 (id=1365): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() sync() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000e40)={{{@in=@loopback, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000140)=0xffffffffffffff74) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000200)={[], [{@euid_eq={'euid', 0x3d, r1}}, {@dont_hash}, {@seclabel}, {@dont_hash}, {@fowner_gt={'fowner>', r1}}]}, 0x1, 0x5a8, &(0x7f0000000680)="$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") r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) getpgrp(0x0) sendmsg$AUDIT_SET(r3, 0x0, 0x20040090) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) write$tun(r2, &(0x7f0000000740)=ANY=[], 0x2e) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x2000000, @b}}) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000180)) 90.436396ms ago: executing program 2 (id=1366): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x73}, 0x8) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffb}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xfe80}, 0x40000) 90.162306ms ago: executing program 5 (id=1367): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0xe, 0x0, 0x2, 0x2, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x5a82f793c6d6b800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d1) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x20000000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000fc00000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x20050890}, 0x10) 0s ago: executing program 2 (id=1368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000000100010000000000000000000300000a84010000080a010200000000000000000a00000828010480780001800a00010072616e676500000068000280100001800c0001006e6f747261636b00100001800a00010071756f74610000000c000180080001006f7366000c00018008000100647570003c0001800b00010065787468647200002c00028008000340000000e90800054000000000080001400000000b05"], 0x8c8}, 0x1, 0x30070000, 0x0, 0x40880}, 0x8840) kernel console output (not intermixed with test programs): ce: batadv_slave_1 [ 122.909990][ T2291] veth1_macvtap: left promiscuous mode [ 122.918801][ T28] audit: type=1400 audit(1771951759.232:1302): avc: denied { create } for pid=7196 comm="syz.0.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 122.943234][ T2291] veth0_macvtap: left promiscuous mode [ 122.943697][ T7201] netlink: 24 bytes leftover after parsing attributes in process `syz.6.743'. [ 122.948966][ T2291] veth1_vlan: left promiscuous mode [ 122.972531][ T6650] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 122.977404][ T2291] veth0_vlan: left promiscuous mode [ 123.004180][ T28] audit: type=1400 audit(1771951759.272:1303): avc: denied { write } for pid=7196 comm="syz.0.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 123.027433][ T28] audit: type=1400 audit(1771951759.272:1304): avc: denied { bind } for pid=7199 comm="syz.6.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 123.048565][ T6650] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 123.178890][ T2291] team0 (unregistering): Port device team_slave_1 removed [ 123.192075][ T2291] team0 (unregistering): Port device team_slave_0 removed [ 123.316547][ T7236] xt_hashlimit: size too large, truncated to 1048576 [ 123.375474][ T7105] chnl_net:caif_netlink_parms(): no params data found [ 123.414304][ T28] audit: type=1400 audit(1771951759.732:1305): avc: denied { unmount } for pid=4684 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 123.479983][ T7105] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.498331][ T7105] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.506524][ T7105] bridge_slave_0: entered allmulticast mode [ 123.515196][ T7105] bridge_slave_0: entered promiscuous mode [ 123.522918][ T7105] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.533543][ T7105] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.541472][ T7105] bridge_slave_1: entered allmulticast mode [ 123.548688][ T7105] bridge_slave_1: entered promiscuous mode [ 123.555988][ T7261] SET target dimension over the limit! [ 123.572904][ T7105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.590756][ T7105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.614112][ T7105] team0: Port device team_slave_0 added [ 123.625108][ T7105] team0: Port device team_slave_1 added [ 123.664899][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.9.758'. [ 123.679381][ T7105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.686743][ T7105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.714671][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.9.758'. [ 123.724545][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.9.758'. [ 123.734497][ T7105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.751605][ T7277] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 123.762742][ T7105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.784639][ T7105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.812755][ T7105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.895339][ T7105] hsr_slave_0: entered promiscuous mode [ 123.901775][ T7105] hsr_slave_1: entered promiscuous mode [ 123.907920][ T7105] debugfs: 'hsr0' already exists in 'hsr' [ 123.916158][ T7105] Cannot create hsr debugfs directory [ 124.001187][ T7304] netlink: 104 bytes leftover after parsing attributes in process `syz.6.764'. [ 124.128866][ T7316] batadv_slave_1: entered promiscuous mode [ 124.301067][ T28] audit: type=1400 audit(1771951760.622:1306): avc: denied { mounton } for pid=7319 comm="syz.0.768" path="/proc/99/cgroup" dev="proc" ino=19733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 124.362415][ T7322] batadv_slave_1: left promiscuous mode [ 124.373385][ T7342] netlink: 'syz.0.771': attribute type 1 has an invalid length. [ 124.476960][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.775'. [ 124.531218][ T7357] 9p: Bad value for 'wfdno' [ 124.908168][ T7105] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.962947][ T7105] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.018479][ T7105] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 125.062397][ T7105] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 125.132798][ T7105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.156281][ T7105] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.182670][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.189899][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.215739][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.222962][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.243826][ T7105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.301593][ T7105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.366141][ T7105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.477163][ T7105] veth0_vlan: entered promiscuous mode [ 125.501694][ T7105] veth1_vlan: entered promiscuous mode [ 125.527559][ T7437] loop6: detected capacity change from 0 to 512 [ 125.544406][ T7105] veth0_macvtap: entered promiscuous mode [ 125.552258][ T7105] veth1_macvtap: entered promiscuous mode [ 125.563369][ T7105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.572741][ T7105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.619397][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.631981][ T6650] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.639560][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.709733][ T7437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.722711][ T7437] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.733017][ T70] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.762776][ T4684] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 125.783378][ T4684] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 125.807377][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.829390][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.853433][ T70] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.864165][ T7447] random: crng reseeded on system resumption [ 125.915646][ T70] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.022276][ T70] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.070748][ T4684] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.184721][ T7449] chnl_net:caif_netlink_parms(): no params data found [ 126.442322][ T70] bond1: left allmulticast mode [ 126.447351][ T70] bond1: left promiscuous mode [ 126.469804][ T70] bridge0: port 3(bond1) entered disabled state [ 126.483284][ T70] bridge_slave_1: left allmulticast mode [ 126.497671][ T70] bridge_slave_1: left promiscuous mode [ 126.503701][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.518820][ T70] bridge_slave_0: left allmulticast mode [ 126.534399][ T70] bridge_slave_0: left promiscuous mode [ 126.541459][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.565596][ T7477] loop2: detected capacity change from 0 to 512 [ 126.576055][ T7477] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 126.591509][ T7477] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e028, mo2=0002] [ 126.600602][ T7477] System zones: 1-12 [ 126.604818][ T7477] EXT4-fs (loop2): orphan cleanup on readonly fs [ 126.611547][ T7477] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.795: invalid indirect mapped block 3 (level 1) [ 126.626455][ T7477] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 126.626636][ T7477] EXT4-fs (loop2): Remounting filesystem read-only [ 126.636158][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 126.636183][ C0] EXT4-fs (loop2): initial error at time 1771951762: ext4_free_branches:1023: inode 11 [ 126.636236][ C0] EXT4-fs (loop2): last error at time 1771951762: ext4_free_branches:1023: inode 11 [ 126.670038][ T7477] EXT4-fs (loop2): 1 truncate cleaned up [ 126.676296][ T7477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 126.692225][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.707057][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.717258][ T70] bond0 (unregistering): Released all slaves [ 126.725718][ T70] bond1 (unregistering): Released all slaves [ 126.758096][ T7483] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.795: error -117 reading directory block [ 126.808887][ T70] hsr_slave_0: left promiscuous mode [ 126.829437][ T70] hsr_slave_1: left promiscuous mode [ 126.835354][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.845608][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.862249][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.870748][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.895327][ T70] veth1_macvtap: left promiscuous mode [ 126.896272][ T7496] loop9: detected capacity change from 0 to 1024 [ 126.901424][ T70] veth0_macvtap: left promiscuous mode [ 126.901541][ T70] veth1_vlan: left promiscuous mode [ 126.939519][ T70] veth0_vlan: left promiscuous mode [ 126.940723][ T7105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 126.976528][ T7496] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 127.022370][ T7496] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.039488][ T7496] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.798: bg 0: block 112: padding at end of block bitmap is not set [ 127.067306][ T7496] EXT4-fs (loop9): Remounting filesystem read-only [ 127.120119][ T70] team0 (unregistering): Port device team_slave_1 removed [ 127.159859][ T5611] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 127.170120][ T70] team0 (unregistering): Port device team_slave_0 removed [ 127.227291][ T7522] 9pnet_virtio: no channels available for device ./file0/../file0/../file0 [ 127.327008][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.349334][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 127.349354][ T28] audit: type=1400 audit(1771951763.662:1327): avc: denied { load_policy } for pid=7512 comm="syz.0.801" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 127.387839][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.409542][ T7449] bridge_slave_0: entered allmulticast mode [ 127.418170][ T7449] bridge_slave_0: entered promiscuous mode [ 127.431175][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.438276][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.459476][ T7449] bridge_slave_1: entered allmulticast mode [ 127.460956][ T7533] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.802'. [ 127.466400][ T7449] bridge_slave_1: entered promiscuous mode [ 127.514791][ T7449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.529272][ T7538] SELinux: failed to load policy [ 127.536389][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.9.805'. [ 127.545952][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.9.805'. [ 127.555108][ T7551] netlink: 'syz.9.805': attribute type 6 has an invalid length. [ 127.564565][ T7449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.589492][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.9.805'. [ 127.601821][ T7449] team0: Port device team_slave_0 added [ 127.608208][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.9.805'. [ 127.642010][ T7449] team0: Port device team_slave_1 added [ 127.650057][ T7551] netlink: 'syz.9.805': attribute type 6 has an invalid length. [ 127.678524][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.692297][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.729529][ T7449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.741227][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.758455][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.785659][ T7449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.846380][ T7449] hsr_slave_0: entered promiscuous mode [ 127.857917][ T7449] hsr_slave_1: entered promiscuous mode [ 127.869752][ T7449] debugfs: 'hsr0' already exists in 'hsr' [ 127.875731][ T7449] Cannot create hsr debugfs directory [ 127.938823][ T7463] chnl_net:caif_netlink_parms(): no params data found [ 128.039183][ T70] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.084995][ T7576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7576 comm=syz.2.806 [ 128.112203][ T7576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.806'. [ 128.133330][ T70] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.228358][ T70] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.250805][ T7463] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.258009][ T7463] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.283325][ T7463] bridge_slave_0: entered allmulticast mode [ 128.301730][ T7463] bridge_slave_0: entered promiscuous mode [ 128.844110][ T70] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.868542][ T7463] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.876048][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.884369][ T7463] bridge_slave_1: entered allmulticast mode [ 128.891349][ T7463] bridge_slave_1: entered promiscuous mode [ 128.933748][ T7463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.946434][ T7463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.038932][ T7463] team0: Port device team_slave_0 added [ 129.047386][ T7463] team0: Port device team_slave_1 added [ 129.067872][ T7626] loop2: detected capacity change from 0 to 512 [ 129.096603][ T7626] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.116139][ T7626] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.811: invalid indirect mapped block 1536 (level 2) [ 129.123377][ T7463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.130314][ T7626] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 129.137650][ T7626] EXT4-fs (loop2): Remounting filesystem read-only [ 129.147109][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 129.147138][ C1] EXT4-fs (loop2): initial error at time 1771951765: ext4_free_branches:1023: inode 11 [ 129.147174][ C1] EXT4-fs (loop2): last error at time 1771951765: ext4_free_branches:1023: inode 11 [ 129.162287][ T7463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.171967][ T7626] EXT4-fs (loop2): 1 truncate cleaned up [ 129.214153][ T7626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.219321][ T7463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.268889][ T7105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.288523][ T7463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.304826][ T7463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.332747][ T7463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.384549][ T70] bridge_slave_1: left allmulticast mode [ 129.390582][ T70] bridge_slave_1: left promiscuous mode [ 129.396419][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.419555][ T70] bridge_slave_0: left allmulticast mode [ 129.427642][ T70] bridge_slave_0: left promiscuous mode [ 129.437137][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.514843][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.817'. [ 129.652164][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.664075][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.675126][ T70] bond0 (unregistering): Released all slaves [ 129.691789][ T28] audit: type=1400 audit(1771951766.012:1328): avc: denied { setattr } for pid=7659 comm="syz.0.817" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.737629][ T70] IPVS: stopping master sync thread 7277 ... [ 129.745172][ T7463] hsr_slave_0: entered promiscuous mode [ 129.757224][ T7463] hsr_slave_1: entered promiscuous mode [ 129.770586][ T7463] debugfs: 'hsr0' already exists in 'hsr' [ 129.773828][ T7660] netlink: 15 bytes leftover after parsing attributes in process `syz.0.817'. [ 129.781045][ T7463] Cannot create hsr debugfs directory [ 129.818739][ T70] hsr_slave_0: left promiscuous mode [ 129.831360][ T70] hsr_slave_1: left promiscuous mode [ 129.840957][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.848678][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.856768][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.864965][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.888326][ T70] veth1_macvtap: left promiscuous mode [ 129.895712][ T70] veth0_macvtap: left promiscuous mode [ 129.919404][ T70] veth1_vlan: left promiscuous mode [ 129.920448][ T7691] net_ratelimit: 73 callbacks suppressed [ 129.920463][ T7691] IPv4: Oversized IP packet from 127.202.26.0 [ 129.924740][ T70] veth0_vlan: left promiscuous mode [ 129.931187][ T7692] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 130.002823][ T7696] loop9: detected capacity change from 0 to 1024 [ 130.022190][ T7696] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.037673][ T7696] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.050702][ T7696] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.821: bg 0: block 112: padding at end of block bitmap is not set [ 130.066363][ T7696] EXT4-fs (loop9): Remounting filesystem read-only [ 130.085996][ T5611] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 130.132617][ T70] team0 (unregistering): Port device team_slave_1 removed [ 130.140808][ T7700] loop9: detected capacity change from 0 to 1024 [ 130.150417][ T70] team0 (unregistering): Port device team_slave_0 removed [ 130.182562][ T7700] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.209409][ T7700] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.248014][ T7700] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.822: bg 0: block 112: padding at end of block bitmap is not set [ 130.275412][ T7700] EXT4-fs (loop9): Remounting filesystem read-only [ 130.303464][ T5611] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 130.345672][ T7704] loop9: detected capacity change from 0 to 512 [ 130.399735][ T7704] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.413923][ T7687] syzkaller1: entered promiscuous mode [ 130.420100][ T7704] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.429722][ T7687] syzkaller1: entered allmulticast mode [ 130.450684][ T28] audit: type=1400 audit(1771951766.762:1329): avc: denied { read write } for pid=7703 comm="syz.9.823" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 130.461041][ T7449] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.481332][ T28] audit: type=1400 audit(1771951766.762:1330): avc: denied { open } for pid=7703 comm="syz.9.823" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 130.514469][ T7449] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.557062][ T7449] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.582058][ T7449] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.660337][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'. [ 130.670238][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'. [ 130.696351][ T7731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.748386][ T7449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.757496][ T7734] loop2: detected capacity change from 0 to 764 [ 130.776967][ T7734] Symlink component flag not implemented [ 130.784731][ T7734] Symlink component flag not implemented [ 130.817596][ T7734] Symlink component flag not implemented (128) [ 130.826549][ T7449] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.830489][ T28] audit: type=1400 audit(1771951767.152:1331): avc: denied { watch watch_reads } for pid=7733 comm="syz.2.827" path="/11/file0/file0" dev="loop2" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 130.834215][ T7734] Symlink component flag not implemented (122) [ 130.880841][ T7449] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.905243][ T7449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.941937][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.949144][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.957215][ T12] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 130.980907][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.988417][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.001701][ T12] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 131.028364][ T12] EXT4-fs (loop9): This should not happen!! Data will be lost [ 131.028364][ T12] [ 131.045954][ T12] EXT4-fs (loop9): Total free blocks count 0 [ 131.053411][ T12] EXT4-fs (loop9): Free/Dirty block details [ 131.059861][ T12] EXT4-fs (loop9): free_blocks=65280 [ 131.065513][ T12] EXT4-fs (loop9): dirty_blocks=33 [ 131.094475][ T12] EXT4-fs (loop9): Block reservation details [ 131.103556][ T12] EXT4-fs (loop9): i_reserved_data_blocks=33 [ 131.164532][ T7449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.190024][ T7463] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 131.237422][ T7463] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 131.264262][ T7463] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 131.277039][ T7463] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 131.369872][ T7463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.386599][ T7463] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.406246][ T1851] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.413676][ T1851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.461541][ T1851] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.468731][ T1851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.513928][ T7791] loop9: detected capacity change from 0 to 1024 [ 131.541592][ T7791] EXT4-fs: inline encryption not supported [ 131.574400][ T7449] veth0_vlan: entered promiscuous mode [ 131.598337][ T7449] veth1_vlan: entered promiscuous mode [ 131.615991][ T7449] veth0_macvtap: entered promiscuous mode [ 131.624831][ T7449] veth1_macvtap: entered promiscuous mode [ 131.661869][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.675926][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.696453][ T7787] random: crng reseeded on system resumption [ 131.698716][ T28] audit: type=1400 audit(1771951768.012:1332): avc: denied { watch } for pid=7790 comm="syz.9.832" path="/76/file1" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.746878][ T2291] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.757317][ T2291] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.772804][ T7463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.804318][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.822383][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.967652][ T7818] loop4: detected capacity change from 0 to 2048 [ 131.991047][ T7818] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c128, mo2=0003] [ 132.011780][ T7818] System zones: 0-7 [ 132.048466][ T7818] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.788: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 132.067156][ T28] audit: type=1400 audit(1771951768.362:1333): avc: denied { create } for pid=7817 comm="syz.4.788" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 132.136476][ T7818] EXT4-fs (loop4): Remounting filesystem read-only [ 132.149367][ T28] audit: type=1326 audit(1771951768.452:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.0.835" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7d54ec629 code=0x0 [ 132.207267][ T7833] 8021q: adding VLAN 0 to HW filter on device team1 [ 132.425206][ T5611] EXT4-fs unmount: 3 callbacks suppressed [ 132.425226][ T5611] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.474916][ T7463] veth0_vlan: entered promiscuous mode [ 132.498137][ T7463] veth1_vlan: entered promiscuous mode [ 132.752551][ T7449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.776792][ T7463] veth0_macvtap: entered promiscuous mode [ 132.853380][ T7851] loop9: detected capacity change from 0 to 128 [ 132.874587][ T7851] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 132.897403][ T7851] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.242840][ T28] audit: type=1400 audit(1771951769.542:1335): avc: denied { ioctl } for pid=7852 comm="syz.4.839" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 133.327008][ T7860] FAULT_INJECTION: forcing a failure. [ 133.327008][ T7860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.350914][ T7861] __nla_validate_parse: 18 callbacks suppressed [ 133.350934][ T7861] netlink: 128 bytes leftover after parsing attributes in process `syz.0.841'. [ 133.366819][ T7860] CPU: 1 UID: 0 PID: 7860 Comm: syz.2.842 Tainted: G W syzkaller #0 PREEMPT(full) [ 133.366856][ T7860] Tainted: [W]=WARN [ 133.366864][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.366904][ T7860] Call Trace: [ 133.366910][ T7860] [ 133.366919][ T7860] __dump_stack+0x1d/0x30 [ 133.366967][ T7860] dump_stack_lvl+0x95/0xd0 [ 133.366988][ T7860] dump_stack+0x15/0x1b [ 133.367009][ T7860] should_fail_ex+0x263/0x280 [ 133.367029][ T7860] should_fail+0xb/0x20 [ 133.367119][ T7860] should_fail_usercopy+0x1a/0x20 [ 133.367225][ T7860] _copy_from_user+0x1c/0xb0 [ 133.367309][ T7860] kstrtouint_from_user+0x69/0xf0 [ 133.367335][ T7860] proc_fail_nth_write+0x50/0x160 [ 133.367368][ T7860] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 133.367401][ T7860] vfs_write+0x269/0x9f0 [ 133.367461][ T7860] ? __rcu_read_unlock+0x4e/0x70 [ 133.367498][ T7860] ? __fget_files+0x184/0x1c0 [ 133.367545][ T7860] ? mutex_lock+0x57/0x90 [ 133.367649][ T7860] ksys_write+0xdc/0x1a0 [ 133.367681][ T7860] __x64_sys_write+0x40/0x50 [ 133.367710][ T7860] x64_sys_call+0x27e1/0x3020 [ 133.367781][ T7860] do_syscall_64+0x12c/0x370 [ 133.367893][ T7860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.367919][ T7860] RIP: 0033:0x7fe56a0bcece [ 133.367938][ T7860] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 133.367958][ T7860] RSP: 002b:00007fe568b56fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.367979][ T7860] RAX: ffffffffffffffda RBX: 00007fe568b576c0 RCX: 00007fe56a0bcece [ 133.368046][ T7860] RDX: 0000000000000001 RSI: 00007fe568b570a0 RDI: 0000000000000003 [ 133.368061][ T7860] RBP: 00007fe568b57090 R08: 0000000000000000 R09: 0000000000000000 [ 133.368074][ T7860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.368161][ T7860] R13: 00007fe56a376038 R14: 00007fe56a375fa0 R15: 00007ffda42ae268 [ 133.368184][ T7860] [ 133.654561][ T7463] veth1_macvtap: entered promiscuous mode [ 133.667342][ T7463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.680814][ T7463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.697641][ T1851] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.708529][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.9.844'. [ 133.744881][ T1851] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.764733][ T7867] netlink: 44 bytes leftover after parsing attributes in process `syz.9.844'. [ 133.807749][ T1851] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.835501][ T7864] netlink: 164 bytes leftover after parsing attributes in process `syz.2.843'. [ 133.843423][ T7871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7871 comm=syz.4.845 [ 133.846414][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'. [ 133.859403][ T7872] netlink: 'syz.4.845': attribute type 1 has an invalid length. [ 133.880993][ T7877] loop9: detected capacity change from 0 to 128 [ 133.899474][ T1851] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.909364][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'. [ 133.940749][ T7864] netlink: 'syz.2.843': attribute type 14 has an invalid length. [ 133.948892][ T7864] netlink: 'syz.2.843': attribute type 12 has an invalid length. [ 134.043250][ T7886] netlink: 20 bytes leftover after parsing attributes in process `syz.7.848'. [ 134.278316][ T7890] bio_check_eod: 6 callbacks suppressed [ 134.278375][ T7890] syz.9.846: attempt to access beyond end of device [ 134.278375][ T7890] loop9: rw=2049, sector=138, nr_sectors = 64 limit=128 [ 134.574895][ T7885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.841'. [ 134.596152][ T7892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7892 comm=syz.7.849 [ 135.005164][ T7920] loop9: detected capacity change from 0 to 1024 [ 135.066999][ T7920] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 135.167273][ T7920] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.197629][ T7937] loop7: detected capacity change from 0 to 2048 [ 135.210369][ T7920] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.855: bg 0: block 112: padding at end of block bitmap is not set [ 135.239669][ T7920] EXT4-fs (loop9): Remounting filesystem read-only [ 135.289765][ T3838] loop7: p1 < > p3 < > p4 < > [ 135.294879][ T3838] loop7: partition table partially beyond EOD, truncated [ 135.310822][ T5611] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 135.329414][ T3838] loop7: p1 start 3405774849 is beyond EOD, truncated [ 135.349420][ T3838] loop7: p3 start 2304 is beyond EOD, truncated [ 135.382086][ T7937] loop7: p1 < > p3 < > p4 < > [ 135.387411][ T7937] loop7: partition table partially beyond EOD, truncated [ 135.399209][ T7937] loop7: p1 start 3405774849 is beyond EOD, truncated [ 135.416071][ T7937] loop7: p3 start 2304 is beyond EOD, truncated [ 135.524774][ T28] audit: type=1400 audit(1771951771.832:1336): avc: denied { create } for pid=7964 comm="syz.2.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 135.567812][ T7969] netlink: 'syz.2.860': attribute type 3 has an invalid length. [ 135.583037][ T28] audit: type=1400 audit(1771951771.872:1337): avc: denied { create } for pid=7964 comm="syz.2.860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_xfrm_socket permissive=1 [ 135.608370][ T7965] lo speed is unknown, defaulting to 1000 [ 135.616207][ T7965] lo speed is unknown, defaulting to 1000 [ 135.639352][ T28] audit: type=1400 audit(1771951771.872:1338): avc: denied { open } for pid=7964 comm="syz.2.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 135.645269][ T7965] lo speed is unknown, defaulting to 1000 [ 135.669423][ T28] audit: type=1400 audit(1771951771.872:1339): avc: denied { kernel } for pid=7964 comm="syz.2.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 135.692994][ T28] audit: type=1400 audit(1771951771.872:1340): avc: denied { tracepoint } for pid=7964 comm="syz.2.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 135.715000][ T28] audit: type=1400 audit(1771951771.882:1341): avc: denied { create } for pid=7964 comm="syz.2.860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 135.746485][ T7965] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.756662][ T7983] xt_cluster: node mask cannot exceed total number of nodes [ 135.775367][ T7965] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 135.783764][ T28] audit: type=1400 audit(1771951771.882:1342): avc: denied { write } for pid=7964 comm="syz.2.860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 135.862145][ T28] audit: type=1400 audit(1771951771.932:1343): avc: denied { write } for pid=7964 comm="syz.2.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 135.903723][ T7965] lo speed is unknown, defaulting to 1000 [ 135.924147][ T28] audit: type=1400 audit(1771951772.042:1344): avc: denied { create } for pid=7964 comm="syz.2.860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 135.945172][ T7965] lo speed is unknown, defaulting to 1000 [ 135.957744][ T7965] lo speed is unknown, defaulting to 1000 [ 135.970695][ T7996] loop9: detected capacity change from 0 to 256 [ 135.977943][ T7965] lo speed is unknown, defaulting to 1000 [ 136.028610][ T7965] lo speed is unknown, defaulting to 1000 [ 136.075888][ T7965] lo speed is unknown, defaulting to 1000 [ 136.299398][ T8020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.406386][ T8028] loop2: detected capacity change from 0 to 1024 [ 136.454450][ T8028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.497653][ T7862] syz.0.841 (7862) used greatest stack depth: 6448 bytes left [ 136.506031][ T8028] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.545621][ T8028] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.868: bg 0: block 112: padding at end of block bitmap is not set [ 136.579812][ T7857] syz.0.841 (7857) used greatest stack depth: 5704 bytes left [ 136.638539][ T8028] EXT4-fs (loop2): Remounting filesystem read-only [ 136.680824][ T8040] loop7: detected capacity change from 0 to 1024 [ 136.704498][ T8040] EXT4-fs (loop7): inodes count not valid: 32 vs 1 [ 136.790663][ T7105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 136.859748][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.7.872'. [ 137.075625][ T8071] SELinux: policydb string does not match my string SE Linux [ 137.089405][ T8071] SELinux: failed to load policy [ 137.104408][ T8048] macvlan2: entered promiscuous mode [ 137.136060][ T8048] macvlan2: entered allmulticast mode [ 137.145421][ T8048] veth0_virt_wifi: entered allmulticast mode [ 137.195943][ T8052] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.871'. [ 137.207446][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.227363][ T8056] bridge_slave_1: left allmulticast mode [ 137.233248][ T8056] bridge_slave_1: left promiscuous mode [ 137.239596][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.249981][ T8056] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 137.282983][ T8081] IPVS: Unknown mcast interface: netpci0 [ 137.450295][ T8096] FAULT_INJECTION: forcing a failure. [ 137.450295][ T8096] name failslab, interval 1, probability 0, space 0, times 0 [ 137.491470][ T8096] CPU: 1 UID: 0 PID: 8096 Comm: syz.4.883 Tainted: G W syzkaller #0 PREEMPT(full) [ 137.491505][ T8096] Tainted: [W]=WARN [ 137.491512][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.491523][ T8096] Call Trace: [ 137.491561][ T8096] [ 137.491568][ T8096] __dump_stack+0x1d/0x30 [ 137.491606][ T8096] dump_stack_lvl+0x95/0xd0 [ 137.491709][ T8096] dump_stack+0x15/0x1b [ 137.491734][ T8096] should_fail_ex+0x263/0x280 [ 137.491792][ T8096] should_failslab+0x8c/0xb0 [ 137.491873][ T8096] kmem_cache_alloc_noprof+0x66/0x400 [ 137.491896][ T8096] ? ep_insert+0x2cf/0xe00 [ 137.491927][ T8096] ep_insert+0x2cf/0xe00 [ 137.492033][ T8096] ? security_capable+0x7b/0x90 [ 137.492056][ T8096] do_epoll_ctl+0x686/0x8a0 [ 137.492139][ T8096] __x64_sys_epoll_ctl+0xcb/0x100 [ 137.492170][ T8096] x64_sys_call+0x2a8b/0x3020 [ 137.492277][ T8096] do_syscall_64+0x12c/0x370 [ 137.492387][ T8096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.492432][ T8096] RIP: 0033:0x7f7de43ec629 [ 137.492453][ T8096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.492474][ T8096] RSP: 002b:00007f7de2e47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 137.492496][ T8096] RAX: ffffffffffffffda RBX: 00007f7de4665fa0 RCX: 00007f7de43ec629 [ 137.492572][ T8096] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000005 [ 137.492588][ T8096] RBP: 00007f7de2e47090 R08: 0000000000000000 R09: 0000000000000000 [ 137.492602][ T8096] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 137.492682][ T8096] R13: 00007f7de4666038 R14: 00007f7de4665fa0 R15: 00007ffdbd23eac8 [ 137.492706][ T8096] [ 137.500807][ T8108] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 137.643479][ T8112] batman_adv: batadv0: Adding interface: dummy0 [ 137.707900][ T8112] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.737359][ T8112] batman_adv: batadv0: Interface activated: dummy0 [ 137.768801][ T8118] loop2: detected capacity change from 0 to 512 [ 137.783594][ T8110] batadv0: mtu less than device minimum [ 137.789833][ T8110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 137.800942][ T8110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 137.812296][ T8110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 137.823428][ T8110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 137.834680][ T8110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 137.846041][ T8110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 137.850367][ T8118] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 137.857100][ T8110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 137.876038][ T8110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 137.901743][ T8118] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.887: bg 0: block 288: padding at end of block bitmap is not set [ 137.939748][ T8118] loop2: lost filesystem error report for type 5 error -117 [ 137.939939][ T8118] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 137.957155][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 137.957180][ C1] EXT4-fs (loop2): initial error at time 1771951774: ext4_validate_block_bitmap:441 [ 137.957208][ C1] EXT4-fs (loop2): last error at time 1771951774: ext4_validate_block_bitmap:441 [ 137.991056][ T8124] loop7: detected capacity change from 0 to 256 [ 138.119928][ T8118] loop2: lost filesystem error report for type 5 error -117 [ 138.130166][ T8118] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.887: attempt to clear invalid blocks 1024 len 1 [ 138.176720][ T8118] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 138.199613][ T8118] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.887: invalid indirect mapped block 1819239214 (level 0) [ 138.267534][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 138.267551][ T28] audit: type=1400 audit(1771951774.582:1358): avc: denied { create } for pid=8129 comm="syz.0.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 138.297911][ T8118] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 138.299985][ T8118] EXT4-fs (loop2): 1 truncate cleaned up [ 138.322918][ T8118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.590644][ T7105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.718141][ T8161] loop4: detected capacity change from 0 to 2048 [ 138.970576][ T8188] batadv_slave_1: entered promiscuous mode [ 138.989039][ T8182] batadv_slave_1: left promiscuous mode [ 139.055231][ T8192] __nla_validate_parse: 1 callbacks suppressed [ 139.055251][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.905'. [ 139.133792][ T8197] batman_adv: batadv0: Interface deactivated: dummy0 [ 139.140970][ T8197] batman_adv: batadv0: Removing interface: dummy0 [ 139.154567][ T8197] bridge_slave_0: left allmulticast mode [ 139.161091][ T8197] bridge_slave_0: left promiscuous mode [ 139.166920][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.189055][ T8197] bridge_slave_1: left allmulticast mode [ 139.223420][ T8197] bridge_slave_1: left promiscuous mode [ 139.245869][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.280793][ T8197] bond0: (slave bond_slave_0): Releasing backup interface [ 139.291991][ T28] audit: type=1400 audit(1771951775.612:1359): avc: denied { mount } for pid=8191 comm="syz.2.905" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 139.318307][ T8213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8213 comm=syz.2.905 [ 139.331274][ T28] audit: type=1400 audit(1771951775.612:1360): avc: denied { unmount } for pid=8191 comm="syz.2.905" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 139.359745][ T8197] bond0: (slave bond_slave_1): Releasing backup interface [ 139.378299][ T8197] team0: Port device team_slave_0 removed [ 139.391933][ T8197] team0: Port device team_slave_1 removed [ 139.401201][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.424648][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.451956][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.479722][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.089570][ T8296] loop4: detected capacity change from 0 to 1024 [ 140.128188][ T8296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 140.140866][ T8296] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.154122][ T8296] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.911: bg 0: block 112: padding at end of block bitmap is not set [ 140.169510][ T8296] EXT4-fs (loop4): Remounting filesystem read-only [ 140.200309][ T7449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 140.471882][ T28] audit: type=1400 audit(1771951776.792:1361): avc: denied { append } for pid=8302 comm="syz.7.913" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 140.495635][ T8303] loop7: detected capacity change from 0 to 128 [ 140.506562][ T28] audit: type=1400 audit(1771951776.832:1362): avc: denied { mounton } for pid=8302 comm="syz.7.913" path="/12/file0/bus" dev="loop7" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 140.530711][ T28] audit: type=1400 audit(1771951776.832:1363): avc: denied { append } for pid=8302 comm="syz.7.913" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 140.594818][ T8311] loop7: detected capacity change from 0 to 512 [ 140.605426][ T8311] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 140.615852][ T8311] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.915: bg 0: block 393: padding at end of block bitmap is not set [ 140.630561][ T8311] loop7: lost filesystem error report for type 5 error -117 [ 140.630781][ T8311] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 140.646867][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 140.646886][ C0] EXT4-fs (loop7): initial error at time 1771951776: ext4_validate_block_bitmap:441 [ 140.646931][ C0] EXT4-fs (loop7): last error at time 1771951776: ext4_validate_block_bitmap:441 [ 140.672547][ T8311] loop7: lost filesystem error report for type 5 error -117 [ 140.672904][ T8311] EXT4-fs (loop7): 2 truncates cleaned up [ 140.686364][ T8311] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.702233][ T8311] lo speed is unknown, defaulting to 1000 [ 140.708904][ T8311] lo speed is unknown, defaulting to 1000 [ 140.715162][ T8311] lo speed is unknown, defaulting to 1000 [ 140.755730][ T8311] infiniband syz0: set active [ 140.760745][ T3529] lo speed is unknown, defaulting to 1000 [ 140.766603][ T8311] infiniband syz0: added lo [ 140.785686][ T8311] RDS/IB: syz0: added [ 140.791104][ T8311] smc: adding ib device syz0 with port count 1 [ 140.797600][ T8311] smc: ib device syz0 port 1 has no pnetid [ 140.804440][ T3400] lo speed is unknown, defaulting to 1000 [ 140.811139][ T8311] lo speed is unknown, defaulting to 1000 [ 140.831864][ T8324] program syz.4.916 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.877413][ T8311] lo speed is unknown, defaulting to 1000 [ 140.939031][ T8311] lo speed is unknown, defaulting to 1000 [ 141.002394][ T8311] lo speed is unknown, defaulting to 1000 [ 141.066329][ T8311] lo speed is unknown, defaulting to 1000 [ 141.176901][ T7463] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.491778][ T8365] loop7: detected capacity change from 0 to 128 [ 141.513866][ T8365] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.597845][ T8365] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.081200][ T8192] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.333282][ T8468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.389539][ T8468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.430293][ T28] audit: type=1400 audit(1771951778.742:1364): avc: denied { map } for pid=8460 comm="syz.9.923" path="socket:[22255]" dev="sockfs" ino=22255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.472860][ T8488] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 142.483035][ T28] audit: type=1400 audit(1771951778.742:1365): avc: denied { read } for pid=8460 comm="syz.9.923" path="socket:[22255]" dev="sockfs" ino=22255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.529932][ T28] audit: type=1326 audit(1771951778.782:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8486 comm="syz.2.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56a0fc629 code=0x7ffc0000 [ 142.594369][ T8504] netlink: 'syz.2.925': attribute type 10 has an invalid length. [ 142.615722][ T8510] net_ratelimit: 13 callbacks suppressed [ 142.615744][ T8510] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 142.659401][ T28] audit: type=1326 audit(1771951778.782:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8486 comm="syz.2.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe56a0fc629 code=0x7ffc0000 [ 142.660835][ T8504] netlink: 2 bytes leftover after parsing attributes in process `syz.2.925'. [ 142.778474][ T8504] bond0: entered promiscuous mode [ 142.793199][ T8504] bond_slave_0: entered promiscuous mode [ 142.868280][ T8504] bond_slave_1: entered promiscuous mode [ 142.909610][ T8504] bridge0: port 3(bond0) entered blocking state [ 142.939322][ T8504] bridge0: port 3(bond0) entered disabled state [ 142.959180][ T8504] bond0: entered allmulticast mode [ 142.966698][ T8504] bond_slave_0: entered allmulticast mode [ 142.984252][ T8504] bond_slave_1: entered allmulticast mode [ 143.045095][ T8504] bridge0: port 3(bond0) entered blocking state [ 143.053184][ T8504] bridge0: port 3(bond0) entered forwarding state [ 143.307899][ T8566] Driver unsupported XDP return value 0 on prog (id 173) dev N/A, expect packet loss! [ 143.349036][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 143.349054][ T28] audit: type=1400 audit(1771951779.662:1380): avc: denied { create } for pid=8572 comm="syz.0.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 143.395458][ T8573] netlink: 'syz.0.940': attribute type 1 has an invalid length. [ 143.611690][ T8571] geneve2: entered promiscuous mode [ 143.664134][ T8573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.728156][ T8590] netlink: 'syz.4.945': attribute type 22 has an invalid length. [ 143.752805][ T8588] loop7: detected capacity change from 0 to 512 [ 143.777785][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 143.797683][ T8588] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.821973][ T8385] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.822200][ T8590] netlink: 'syz.4.945': attribute type 22 has an invalid length. [ 143.842955][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 143.857038][ T28] audit: type=1400 audit(1771951780.162:1381): avc: denied { setattr } for pid=8587 comm="syz.7.944" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.897384][ T28] audit: type=1400 audit(1771951780.162:1382): avc: denied { append } for pid=8587 comm="syz.7.944" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.904614][ T8385] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.967541][ T8385] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.990219][ T8385] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.014959][ T7463] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.034479][ T8622] loop2: detected capacity change from 0 to 512 [ 144.077641][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.953'. [ 144.092492][ T8629] loop9: detected capacity change from 0 to 128 [ 144.121713][ T28] audit: type=1400 audit(1771951780.442:1383): avc: denied { connect } for pid=8632 comm="syz.7.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.197839][ T8622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.214156][ T28] audit: type=1400 audit(1771951780.492:1384): avc: denied { ioctl } for pid=8632 comm="syz.7.950" path="socket:[22369]" dev="sockfs" ino=22369 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.245646][ T8640] netlink: 'syz.4.954': attribute type 4 has an invalid length. [ 144.264764][ T8629] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.277523][ T8622] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.293275][ T8640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.301264][ T8640] IPv6: NLM_F_CREATE should be set when creating new route [ 144.309676][ T8629] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.468560][ T8655] loop7: detected capacity change from 0 to 2048 [ 144.830029][ T5611] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.903648][ T8655] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.944327][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.7.956'. [ 145.001902][ T7105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.034902][ T8652] 8021q: adding VLAN 0 to HW filter on device team1 [ 145.126970][ T8684] batman_adv: batadv0: Adding interface: dummy0 [ 145.134044][ T28] audit: type=1326 audit(1771951781.442:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8683 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de43ec629 code=0x7ffc0000 [ 145.154190][ T8684] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.180384][ T28] audit: type=1326 audit(1771951781.442:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8683 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de43ec629 code=0x7ffc0000 [ 145.211258][ T8690] loop9: detected capacity change from 0 to 256 [ 145.219617][ T8684] batman_adv: batadv0: Interface activated: dummy0 [ 145.226878][ T8690] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.227404][ T7463] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.239576][ T28] audit: type=1326 audit(1771951781.442:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8683 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de43ec629 code=0x7ffc0000 [ 145.273975][ T28] audit: type=1326 audit(1771951781.442:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8683 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7de43acece code=0x7ffc0000 [ 145.300282][ T8689] batadv0: mtu less than device minimum [ 145.306610][ T8689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.317646][ T8689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.328835][ T8689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.330059][ T8690] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.339965][ T8689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.362429][ T8689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.373928][ T8689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.385698][ T8689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.397563][ T8689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.437123][ T28] audit: type=1326 audit(1771951781.442:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8683 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de43ec629 code=0x7ffc0000 [ 145.507519][ T8703] netlink: 76 bytes leftover after parsing attributes in process `syz.0.969'. [ 146.321297][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 146.372102][ T8781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.974'. [ 146.477653][ T8794] loop2: detected capacity change from 0 to 1024 [ 146.507662][ T8796] netlink: 44 bytes leftover after parsing attributes in process `syz.0.978'. [ 146.570465][ T8794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 146.599383][ T8796] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.604278][ T8794] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.606777][ T8796] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.674200][ T8794] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.977: bg 0: block 112: padding at end of block bitmap is not set [ 146.699534][ T8794] EXT4-fs (loop2): Remounting filesystem read-only [ 146.719082][ T8823] netlink: 48 bytes leftover after parsing attributes in process `syz.4.984'. [ 146.790160][ T7105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 146.839228][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.9.986'. [ 146.862957][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 147.023947][ T8385] Bluetooth: hci0: Frame reassembly failed (-84) [ 147.040695][ T8385] Bluetooth: hci0: Frame reassembly failed (-84) [ 147.157344][ T8879] batman_adv: batadv0: Adding interface: dummy0 [ 147.181911][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.9.990'. [ 147.201879][ T8879] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.249130][ T8879] batman_adv: batadv0: Interface activated: dummy0 [ 147.308777][ T8861] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 147.317415][ T8880] loop2: detected capacity change from 0 to 512 [ 147.379774][ T8892] loop4: detected capacity change from 0 to 256 [ 147.490648][ T8892] FAT-fs (loop4): Directory bread(block 64) failed [ 147.497424][ T8892] FAT-fs (loop4): Directory bread(block 65) failed [ 147.504497][ T8892] FAT-fs (loop4): Directory bread(block 66) failed [ 147.511462][ T8892] FAT-fs (loop4): Directory bread(block 67) failed [ 147.518713][ T8892] FAT-fs (loop4): Directory bread(block 68) failed [ 147.525724][ T8892] FAT-fs (loop4): Directory bread(block 69) failed [ 147.532653][ T8892] FAT-fs (loop4): Directory bread(block 70) failed [ 147.540398][ T8892] FAT-fs (loop4): Directory bread(block 71) failed [ 147.547451][ T8892] FAT-fs (loop4): Directory bread(block 72) failed [ 147.555005][ T8892] FAT-fs (loop4): Directory bread(block 73) failed [ 147.727303][ T8894] loop7: detected capacity change from 0 to 512 [ 148.178265][ T8894] EXT4-fs: Ignoring removed i_version option [ 148.207577][ T8894] EXT4-fs: Ignoring removed bh option [ 148.272044][ T8894] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.450229][ T8894] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.512373][ T8891] 9p: Bad value for 'wfdno' [ 148.529397][ T28] kauditd_printk_skb: 266 callbacks suppressed [ 148.529416][ T28] audit: type=1400 audit(1771951784.832:1656): avc: denied { mounton } for pid=8889 comm="syz.7.1002" path="/29/bus/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.643813][ T7463] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.677224][ T8923] loop9: detected capacity change from 0 to 1024 [ 148.710328][ T8923] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 148.766253][ T8923] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 148.799614][ T8923] JBD2: no valid journal superblock found [ 148.805433][ T8923] EXT4-fs (loop9): Could not load journal inode [ 148.840118][ T8925] netlink: 'syz.0.1010': attribute type 1 has an invalid length. [ 148.922934][ T8925] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.961877][ T8925] bond2: (slave bond3): making interface the new active one [ 148.999711][ T8925] bond2: (slave bond3): Enslaving as an active interface with an up link [ 149.039127][ T8928] bond2: entered promiscuous mode [ 149.054563][ T8928] bond3: entered promiscuous mode [ 149.076475][ T8928] bond2: entered allmulticast mode [ 149.083578][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 149.092470][ T3594] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 149.168531][ T8932] loop2: detected capacity change from 0 to 1024 [ 149.176143][ T8932] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 149.229387][ T8932] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 149.239270][ T8932] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.250267][ T8932] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 149.258256][ T8932] EXT4-fs (loop2): orphan cleanup on readonly fs [ 149.269575][ T8932] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.1004: Inode bitmap for bg 0 marked uninitialized [ 149.282404][ T8932] loop2: lost filesystem error report for type 5 error -117 [ 149.289322][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 149.303618][ C1] EXT4-fs (loop2): initial error at time 1771951785: ext4_read_inode_bitmap:167 [ 149.303703][ T8928] bond3: entered allmulticast mode [ 149.312896][ C1] EXT4-fs (loop2): last error at time 1771951785: ext4_read_inode_bitmap:167 [ 149.351850][ T8932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.389259][ T8931] loop4: detected capacity change from 0 to 1024 [ 149.427782][ T8936] loop7: detected capacity change from 0 to 1024 [ 149.451053][ T28] audit: type=1400 audit(1771951785.722:1657): avc: denied { create } for pid=8922 comm="syz.9.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.583915][ T28] audit: type=1400 audit(1771951785.722:1658): avc: denied { bind } for pid=8922 comm="syz.9.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.605130][ T8936] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.635392][ T8936] EXT4-fs: dax option not supported [ 149.666555][ T8931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 149.701334][ T7105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.709587][ T8931] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.730923][ T28] audit: type=1400 audit(1771951785.752:1659): avc: denied { sys_module } for pid=8922 comm="syz.9.1009" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 149.806144][ T8931] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1011: bg 0: block 112: padding at end of block bitmap is not set [ 149.872172][ T8928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.885424][ T8931] EXT4-fs (loop4): Remounting filesystem read-only [ 149.904261][ T8929] bridge0: entered promiscuous mode [ 149.935889][ T8937] __nla_validate_parse: 4 callbacks suppressed [ 149.935917][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1009'. [ 150.074201][ T7449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 150.797898][ T28] audit: type=1400 audit(1771951787.112:1660): avc: denied { cpu } for pid=8973 comm="syz.7.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 151.212116][ T8983] loop9: detected capacity change from 0 to 512 [ 151.218908][ T8983] msdos: Unknown parameter 'dots\ots' [ 151.234711][ T8980] lo speed is unknown, defaulting to 1000 [ 151.253267][ T8980] lo speed is unknown, defaulting to 1000 [ 151.304896][ T8990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1023'. [ 151.458066][ T9006] random: crng reseeded on system resumption [ 151.470645][ T9001] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1024'. [ 151.488031][ T8988] loop7: detected capacity change from 0 to 8192 [ 151.499412][ T8996] lo speed is unknown, defaulting to 1000 [ 151.534895][ T9001] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1024'. [ 151.930710][ T8996] lo speed is unknown, defaulting to 1000 [ 152.128414][ T9025] SET target dimension over the limit! [ 152.328163][ T9035] team0: Port device gtp0 added [ 152.382317][ T9043] FAULT_INJECTION: forcing a failure. [ 152.382317][ T9043] name failslab, interval 1, probability 0, space 0, times 0 [ 152.402448][ T9039] lo speed is unknown, defaulting to 1000 [ 152.430775][ T9043] CPU: 0 UID: 0 PID: 9043 Comm: syz.2.1032 Tainted: G W syzkaller #0 PREEMPT(full) [ 152.430811][ T9043] Tainted: [W]=WARN [ 152.430819][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 152.430833][ T9043] Call Trace: [ 152.430840][ T9043] [ 152.430849][ T9043] __dump_stack+0x1d/0x30 [ 152.430878][ T9043] dump_stack_lvl+0x95/0xd0 [ 152.430899][ T9043] dump_stack+0x15/0x1b [ 152.430922][ T9043] should_fail_ex+0x263/0x280 [ 152.430947][ T9043] should_failslab+0x8c/0xb0 [ 152.430970][ T9043] kmem_cache_alloc_noprof+0x66/0x400 [ 152.430995][ T9043] ? vm_area_alloc+0x2c/0xb0 [ 152.431022][ T9043] vm_area_alloc+0x2c/0xb0 [ 152.431046][ T9043] mmap_region+0x11ce/0x2050 [ 152.431108][ T9043] do_mmap+0x9b2/0xbd0 [ 152.431139][ T9043] vm_mmap_pgoff+0x183/0x2d0 [ 152.431167][ T9043] ksys_mmap_pgoff+0xc1/0x310 [ 152.431195][ T9043] ? __x64_sys_mmap+0x49/0x70 [ 152.431231][ T9043] x64_sys_call+0x14df/0x3020 [ 152.431261][ T9043] do_syscall_64+0x12c/0x370 [ 152.431300][ T9043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.431325][ T9043] RIP: 0033:0x7fe56a0fc629 [ 152.431344][ T9043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.431364][ T9043] RSP: 002b:00007fe568b57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 152.431385][ T9043] RAX: ffffffffffffffda RBX: 00007fe56a375fa0 RCX: 00007fe56a0fc629 [ 152.431397][ T9043] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 152.431409][ T9043] RBP: 00007fe568b57090 R08: ffffffffffffffff R09: 0000000000000000 [ 152.431421][ T9043] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 152.431432][ T9043] R13: 00007fe56a376038 R14: 00007fe56a375fa0 R15: 00007ffda42ae268 [ 152.431449][ T9043] [ 152.433454][ T9039] lo speed is unknown, defaulting to 1000 [ 152.627617][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'. [ 152.636940][ T9053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1034'. [ 152.689744][ T9053] geneve2: entered promiscuous mode [ 152.695153][ T9053] geneve2: entered allmulticast mode [ 152.904110][ T9068] loop4: detected capacity change from 0 to 8192 [ 153.073709][ T28] audit: type=1326 audit(1771951789.392:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9026 comm="syz.7.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9f39c629 code=0x7fc00000 [ 153.139432][ T28] audit: type=1326 audit(1771951789.392:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9026 comm="syz.7.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc9f39c629 code=0x7fc00000 [ 153.201427][ T28] audit: type=1326 audit(1771951789.392:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9026 comm="syz.7.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9f39c629 code=0x7fc00000 [ 153.262783][ T28] audit: type=1326 audit(1771951789.392:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9026 comm="syz.7.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9f39c629 code=0x7fc00000 [ 153.324989][ T28] audit: type=1326 audit(1771951789.392:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9026 comm="syz.7.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9f39c629 code=0x7fc00000 [ 153.610904][ T9123] net_ratelimit: 31 callbacks suppressed [ 153.610921][ T9123] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 153.729638][ T9129] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1046'. [ 153.751279][ T9129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 153.769403][ T9129] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1046'. [ 153.891068][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1047'. [ 154.295150][ T9179] bridge1: entered allmulticast mode [ 154.585071][ T9199] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 154.610268][ T9200] random: crng reseeded on system resumption [ 154.953172][ T9217] loop7: detected capacity change from 0 to 2048 [ 154.964323][ T9219] TCP: TCP_TX_DELAY enabled [ 154.994414][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 154.994432][ T28] audit: type=1400 audit(1771951791.312:1728): avc: denied { getopt } for pid=9218 comm="syz.2.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.028403][ T9219] loop2: detected capacity change from 0 to 2048 [ 155.046655][ T9217] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.061559][ T9219] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 155.100541][ T3838] udevd[3838]: incorrect ext4 checksum on /dev/loop2 [ 155.117718][ T7463] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 155.176152][ T28] audit: type=1400 audit(1771951791.492:1729): avc: denied { setopt } for pid=9230 comm="syz.2.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.184203][ T9233] loop2: detected capacity change from 0 to 1024 [ 155.238901][ T28] audit: type=1400 audit(1771951791.492:1730): avc: denied { accept } for pid=9230 comm="syz.2.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.353912][ T28] audit: type=1400 audit(1771951791.522:1731): avc: denied { unlink } for pid=7463 comm="syz-executor" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.470040][ T28] audit: type=1400 audit(1771951791.522:1732): avc: denied { unlink } for pid=7463 comm="syz-executor" name="file1" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 155.581040][ T8395] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.592708][ T9229] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.703205][ T8395] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.734312][ T9260] loop2: detected capacity change from 0 to 1024 [ 155.757092][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 155.772485][ T9260] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.803314][ T8395] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.842954][ T9260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.895533][ T8395] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.928994][ T7105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.080236][ T8395] bridge_slave_0: left allmulticast mode [ 156.106243][ T8395] bridge_slave_0: left promiscuous mode [ 156.132345][ T9282] loop2: detected capacity change from 0 to 2048 [ 156.139055][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.276169][ T9282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.383848][ T9322] random: crng reseeded on system resumption [ 157.555383][ T8395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.600824][ T8395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.638920][ T8395] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 157.666811][ T8395] bond0 (unregistering): Released all slaves [ 157.727764][ T9270] lo speed is unknown, defaulting to 1000 [ 157.778799][ T7105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.798540][ T9270] lo speed is unknown, defaulting to 1000 [ 158.083128][ T8395] hsr_slave_0: left promiscuous mode [ 158.105958][ T8395] hsr_slave_1: left promiscuous mode [ 158.132186][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.173471][ T8395] batadv0: mtu less than device minimum [ 158.193999][ T8395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.204934][ T8395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.216286][ T8395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.227504][ T8395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.238635][ T8395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.250056][ T8395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.261250][ T8395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.352442][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.401082][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.435383][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.456546][ T8395] batman_adv: batadv0: Interface deactivated: dummy0 [ 158.479329][ T8395] batman_adv: batadv0: Removing interface: dummy0 [ 158.512907][ T8395] veth1_macvtap: left promiscuous mode [ 158.519020][ T8395] veth0_macvtap: left promiscuous mode [ 158.527882][ T8395] veth1_vlan: left promiscuous mode [ 158.591548][ T8395] veth0_vlan: left promiscuous mode [ 158.849531][ T8395] team0 (unregistering): Port device team_slave_1 removed [ 158.909727][ T8395] team0 (unregistering): Port device team_slave_0 removed [ 158.965280][ T50] smc: removing ib device syz0 [ 159.045337][ T9371] bridge0: port 3(bond0) entered disabled state [ 159.051901][ T9371] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.059403][ T9371] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.102225][ T9371] batman_adv: batadv0: Interface deactivated: dummy0 [ 159.163245][ T9371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.190436][ T9371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.252406][ T10] lo speed is unknown, defaulting to 1000 [ 159.258182][ T10] syz0: Port: 1 Link DOWN [ 159.261904][ T9382] lo speed is unknown, defaulting to 1000 [ 159.285792][ T1032] lo speed is unknown, defaulting to 1000 [ 159.287273][ T8385] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.291817][ T1032] syz2: Port: 1 Link DOWN [ 159.304930][ T8385] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.319693][ T9413] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 159.353646][ T8385] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.383987][ T9401] lo speed is unknown, defaulting to 1000 [ 159.399353][ T8385] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.410423][ T28] audit: type=1400 audit(1771951795.732:1733): avc: denied { write } for pid=9409 comm="syz.0.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 159.552227][ T9270] chnl_net:caif_netlink_parms(): no params data found [ 159.758945][ T9270] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.801249][ T9270] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.839565][ T9270] bridge_slave_0: entered allmulticast mode [ 159.861952][ T9270] bridge_slave_0: entered promiscuous mode [ 159.905400][ T9270] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.910329][ T9438] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1085'. [ 159.924814][ T9270] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.940845][ T9438] SELinux: Context ›Y7 is not valid (left unmapped). [ 159.944310][ T9270] bridge_slave_1: entered allmulticast mode [ 159.960029][ T9270] bridge_slave_1: entered promiscuous mode [ 159.966472][ T28] audit: type=1400 audit(1771951796.282:1734): avc: denied { setopt } for pid=9437 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.017767][ T28] audit: type=1400 audit(1771951796.292:1735): avc: denied { create } for pid=9437 comm="syz.2.1085" name=02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=9B5937 [ 160.066571][ T9441] program syz.2.1086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.080738][ T9270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.091692][ T9270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.111384][ T28] audit: type=1400 audit(1771951796.292:1736): avc: denied { associate } for pid=9437 comm="syz.2.1085" name=02 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=9B5937 [ 160.175979][ T28] audit: type=1400 audit(1771951796.322:1737): avc: denied { rmdir } for pid=7105 comm="syz-executor" name=02 dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=9B5937 [ 160.224708][ T9443] loop4: detected capacity change from 0 to 1024 [ 160.242107][ T9270] team0: Port device team_slave_0 added [ 160.286327][ T9443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 160.286425][ T9443] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.307994][ T9443] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 3: comm syz.4.1088: lblock 3 mapped to illegal pblock 3 (length 1) [ 160.321755][ T9270] team0: Port device team_slave_1 added [ 160.328100][ T9443] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 160.328134][ T9443] EXT4-fs (loop4): This should not happen!! Data will be lost [ 160.328134][ T9443] [ 160.374527][ T9270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.406348][ T7449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 160.413342][ T9454] loop2: detected capacity change from 0 to 512 [ 160.420361][ T28] audit: type=1400 audit(1771951796.722:1738): avc: denied { read } for pid=9448 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 160.427435][ T9270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.469009][ T9456] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1092'. [ 160.469783][ T9270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.470500][ T9270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.498099][ T9456] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1092'. [ 160.498386][ T9454] EXT4-fs (loop2): Unsupported encryption level 252 [ 160.498416][ T9270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.498447][ T9270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.515907][ T9270] hsr_slave_0: entered promiscuous mode [ 160.586785][ T9270] hsr_slave_1: entered promiscuous mode [ 160.596314][ T9270] debugfs: 'hsr0' already exists in 'hsr' [ 160.620456][ T9270] Cannot create hsr debugfs directory [ 161.018218][ T9270] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 161.028022][ T9270] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 161.037164][ T9270] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 161.046527][ T9270] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 161.086807][ T9503] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1098'. [ 161.121170][ T9270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.133746][ T9507] SET target dimension over the limit! [ 161.160678][ T9270] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.205418][ T9514] netlink: 128 bytes leftover after parsing attributes in process `syz.9.1099'. [ 161.220038][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.227361][ T8387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.245651][ T8387] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.252949][ T8387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.647649][ T9514] loop9: detected capacity change from 0 to 512 [ 161.660082][ T9531] loop4: detected capacity change from 0 to 128 [ 161.882776][ T9270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.935461][ T9514] EXT4-fs: Ignoring removed nobh option [ 161.964625][ T9514] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 162.151990][ T9560] lo speed is unknown, defaulting to 1000 [ 162.283641][ T9514] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 162.298610][ T8395] kworker/u8:16: attempt to access beyond end of device [ 162.298610][ T8395] loop4: rw=1, sector=129, nr_sectors = 8 limit=128 [ 162.335039][ T9270] veth0_vlan: entered promiscuous mode [ 162.341926][ T28] audit: type=1400 audit(2000000001.700:1739): avc: denied { mount } for pid=9576 comm="syz.0.1109" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 162.361861][ T8395] kworker/u8:16: attempt to access beyond end of device [ 162.361861][ T8395] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 162.391257][ T9270] veth1_vlan: entered promiscuous mode [ 162.406663][ T9270] veth0_macvtap: entered promiscuous mode [ 162.419561][ T28] audit: type=1400 audit(2000000001.750:1740): avc: denied { remount } for pid=9576 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 162.419677][ T8395] kworker/u8:16: attempt to access beyond end of device [ 162.419677][ T8395] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 162.462356][ T9514] EXT4-fs (loop9): 1 truncate cleaned up [ 162.468687][ T9514] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.492935][ T8395] kworker/u8:16: attempt to access beyond end of device [ 162.492935][ T8395] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 162.524242][ T9585] FAULT_INJECTION: forcing a failure. [ 162.524242][ T9585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.540209][ T9270] veth1_macvtap: entered promiscuous mode [ 162.547616][ T28] audit: type=1400 audit(2000000001.830:1741): avc: denied { unmount } for pid=6277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 162.564338][ T9270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.578187][ T8395] kworker/u8:16: attempt to access beyond end of device [ 162.578187][ T8395] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 162.599875][ T9585] CPU: 0 UID: 0 PID: 9585 Comm: syz.0.1110 Tainted: G W syzkaller #0 PREEMPT(full) [ 162.599908][ T9585] Tainted: [W]=WARN [ 162.599915][ T9585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 162.599928][ T9585] Call Trace: [ 162.600006][ T9585] [ 162.600073][ T9585] __dump_stack+0x1d/0x30 [ 162.600121][ T9585] dump_stack_lvl+0x95/0xd0 [ 162.600177][ T9585] dump_stack+0x15/0x1b [ 162.600204][ T9585] should_fail_ex+0x263/0x280 [ 162.600236][ T9585] should_fail+0xb/0x20 [ 162.600258][ T9585] should_fail_usercopy+0x1a/0x20 [ 162.600313][ T9585] _copy_from_user+0x1c/0xb0 [ 162.600399][ T9585] ucma_write+0xd8/0x260 [ 162.600434][ T9585] ? __pfx_ucma_write+0x10/0x10 [ 162.600497][ T9585] vfs_write+0x269/0x9f0 [ 162.600530][ T9585] ? __rcu_read_unlock+0x4e/0x70 [ 162.600554][ T9585] ? __fget_files+0x184/0x1c0 [ 162.600582][ T9585] ksys_write+0xdc/0x1a0 [ 162.600733][ T9585] __x64_sys_write+0x40/0x50 [ 162.600771][ T9585] x64_sys_call+0x27e1/0x3020 [ 162.600801][ T9585] do_syscall_64+0x12c/0x370 [ 162.600880][ T9585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.600904][ T9585] RIP: 0033:0x7ff7d54ec629 [ 162.600924][ T9585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.600945][ T9585] RSP: 002b:00007ff7d3f3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.601020][ T9585] RAX: ffffffffffffffda RBX: 00007ff7d5765fa0 RCX: 00007ff7d54ec629 [ 162.601037][ T9585] RDX: 0000000000000090 RSI: 00002000000007c0 RDI: 0000000000000003 [ 162.601054][ T9585] RBP: 00007ff7d3f3f090 R08: 0000000000000000 R09: 0000000000000000 [ 162.601069][ T9585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.601084][ T9585] R13: 00007ff7d5766038 R14: 00007ff7d5765fa0 R15: 00007ffea85d9178 [ 162.601175][ T9585] [ 162.626902][ T9270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.770881][ T28] audit: type=1400 audit(2000000002.130:1742): avc: denied { setopt } for pid=9583 comm="syz.2.1112" lport=37307 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 162.775971][ T8395] kworker/u8:16: attempt to access beyond end of device [ 162.775971][ T8395] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 162.798277][ T28] audit: type=1400 audit(2000000002.130:1743): avc: denied { getopt } for pid=9583 comm="syz.2.1112" lport=37307 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 162.801568][ T8395] kworker/u8:16: attempt to access beyond end of device [ 162.801568][ T8395] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 162.920444][ T8395] kworker/u8:16: attempt to access beyond end of device [ 162.920444][ T8395] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 162.935587][ T8395] kworker/u8:16: attempt to access beyond end of device [ 162.935587][ T8395] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 162.959481][ T8395] kworker/u8:16: attempt to access beyond end of device [ 162.959481][ T8395] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 163.002768][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.023524][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.079445][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.176430][ T28] audit: type=1400 audit(2000000002.540:1744): avc: denied { ioctl } for pid=9591 comm="syz.0.1113" path="socket:[25779]" dev="sockfs" ino=25779 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 163.202190][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.326386][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1111'. [ 164.326346][ T9516] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1099'. [ 164.481598][ T9643] batman_adv: batadv0: Adding interface: dummy0 [ 164.489532][ T9643] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.584537][ T9643] batman_adv: batadv0: Interface activated: dummy0 [ 164.615879][ T9644] net_ratelimit: 32 callbacks suppressed [ 164.615897][ T9644] batadv0: mtu less than device minimum [ 164.648693][ T9644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.660136][ T9644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.671307][ T9644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.682362][ T9644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.693599][ T9644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.704609][ T9644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.716030][ T9644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.727366][ T9644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.738919][ T9644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.869035][ T9653] loop5: detected capacity change from 0 to 512 [ 164.893069][ T9653] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 164.901236][ T9653] EXT4-fs (loop5): mount failed [ 165.101475][ T28] audit: type=1400 audit(2000000004.460:1745): avc: denied { watch watch_reads } for pid=9673 comm="syz.2.1115" path="/75/file0" dev="tmpfs" ino=418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 165.157150][ T5611] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.275689][ T28] audit: type=1400 audit(2000000004.640:1746): avc: denied { checkpoint_restore } for pid=9682 comm="syz.0.1117" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 165.318235][ T9695] netlink: 'syz.4.1120': attribute type 1 has an invalid length. [ 165.346905][ T9695] netlink: 'syz.4.1120': attribute type 3 has an invalid length. [ 165.362847][ T28] audit: type=1400 audit(2000000004.720:1747): avc: denied { name_connect } for pid=9690 comm="syz.5.1119" dest=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 165.407615][ T9698] netlink: 'syz.0.1121': attribute type 2 has an invalid length. [ 165.416887][ T9695] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1120'. [ 165.469835][ T28] audit: type=1400 audit(2000000004.830:1748): avc: granted { setsecparam } for pid=9697 comm="syz.0.1121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 165.514091][ T28] audit: type=1400 audit(2000000004.830:1749): avc: granted { setsecparam } for pid=9697 comm="syz.0.1121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 165.535539][ T9675] loop2: detected capacity change from 0 to 32768 [ 165.544217][ T9710] FAULT_INJECTION: forcing a failure. [ 165.544217][ T9710] name failslab, interval 1, probability 0, space 0, times 0 [ 165.558125][ T9710] CPU: 1 UID: 0 PID: 9710 Comm: syz.0.1123 Tainted: G W syzkaller #0 PREEMPT(full) [ 165.558157][ T9710] Tainted: [W]=WARN [ 165.558164][ T9710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.558264][ T9710] Call Trace: [ 165.558272][ T9710] [ 165.558281][ T9710] __dump_stack+0x1d/0x30 [ 165.558309][ T9710] dump_stack_lvl+0x95/0xd0 [ 165.558337][ T9710] dump_stack+0x15/0x1b [ 165.558383][ T9710] should_fail_ex+0x263/0x280 [ 165.558409][ T9710] ? wakeup_source_register+0x39/0x240 [ 165.558437][ T9710] should_failslab+0x8c/0xb0 [ 165.558457][ T9710] __kmalloc_cache_noprof+0x5f/0x410 [ 165.558534][ T9710] wakeup_source_register+0x39/0x240 [ 165.558566][ T9710] ep_insert+0x82f/0xe00 [ 165.558612][ T9710] do_epoll_ctl+0x686/0x8a0 [ 165.558709][ T9710] __x64_sys_epoll_ctl+0xcb/0x100 [ 165.558746][ T9710] x64_sys_call+0x2a8b/0x3020 [ 165.558773][ T9710] do_syscall_64+0x12c/0x370 [ 165.558823][ T9710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.558849][ T9710] RIP: 0033:0x7ff7d54ec629 [ 165.558870][ T9710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.558891][ T9710] RSP: 002b:00007ff7d3f3f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 165.558992][ T9710] RAX: ffffffffffffffda RBX: 00007ff7d5765fa0 RCX: 00007ff7d54ec629 [ 165.559007][ T9710] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 165.559088][ T9710] RBP: 00007ff7d3f3f090 R08: 0000000000000000 R09: 0000000000000000 [ 165.559100][ T9710] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 165.559113][ T9710] R13: 00007ff7d5766038 R14: 00007ff7d5765fa0 R15: 00007ffea85d9178 [ 165.559191][ T9710] [ 165.740176][ T9711] netlink: 'syz.9.1116': attribute type 2 has an invalid length. [ 165.748208][ T9711] netlink: 'syz.9.1116': attribute type 3 has an invalid length. [ 165.756066][ T28] audit: type=1400 audit(2000000005.100:1750): avc: denied { create } for pid=9700 comm="syz.9.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 165.759675][ T9711] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1116'. [ 165.829910][ T3838] loop2: p1 p3 < p5 p6 > [ 165.834346][ T3838] loop2: partition table partially beyond EOD, truncated [ 165.847437][ T9675] loop2: p1 p3 < p5 p6 > [ 165.851997][ T9675] loop2: partition table partially beyond EOD, truncated [ 165.869061][ T28] audit: type=1400 audit(2000000005.230:1751): avc: denied { unlink } for pid=5611 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 165.987783][ T28] audit: type=1400 audit(2000000005.270:1752): avc: denied { map_create } for pid=9717 comm="syz.0.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 166.012136][ T28] audit: type=1400 audit(2000000005.270:1753): avc: denied { map_read map_write } for pid=9717 comm="syz.0.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 166.077764][ T28] audit: type=1400 audit(2000000005.280:1754): avc: denied { prog_load } for pid=9717 comm="syz.0.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 166.205712][ T9738] syzkaller0: entered promiscuous mode [ 166.222363][ T9738] syzkaller0: entered allmulticast mode [ 166.352982][ T3849] udevd[3849]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 166.361941][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 166.375657][ T3851] udevd[3851]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 166.383144][ T3838] udevd[3838]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 166.633917][ T9761] loop4: detected capacity change from 0 to 1024 [ 166.675295][ T9761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.709898][ T3838] udevd[3838]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 166.772126][ T9772] loop5: detected capacity change from 0 to 1024 [ 166.796721][ T3849] udevd[3849]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 166.828263][ T3851] udevd[3851]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 166.828418][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 167.026709][ T9780] loop2: detected capacity change from 0 to 128 [ 167.070790][ T9780] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.134800][ T9780] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.367802][ T7449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.592741][ T9791] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1138'. [ 167.662778][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 167.769225][ T9799] loop2: detected capacity change from 0 to 512 [ 167.822874][ T9799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.909520][ T9799] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.101328][ T9822] 9pnet_virtio: no channels available for device ./file0/../file0/../file0 [ 168.325981][ T9831] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1147'. [ 168.336414][ T7105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.492327][ T9847] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1152'. [ 169.111058][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1160'. [ 169.490455][ T9898] loop4: detected capacity change from 0 to 8192 [ 169.602664][ T3838] loop4: p1 < > p2 p4 < p5 > [ 169.639327][ T3838] loop4: partition table partially beyond EOD, truncated [ 169.658716][ T3838] loop4: p1 start 134217728 is beyond EOD, truncated [ 169.702715][ T3838] loop4: p2 size 591360 extends beyond EOD, truncated [ 169.759907][ T3838] loop4: p5 size 591360 extends beyond EOD, truncated [ 169.853029][ T9898] loop4: p1 < > p2 p4 < p5 > [ 169.861668][ T9898] loop4: partition table partially beyond EOD, truncated [ 169.889346][ T9898] loop4: p1 start 134217728 is beyond EOD, truncated [ 169.920162][ T9898] loop4: p2 size 591360 extends beyond EOD, truncated [ 170.001364][ T9898] loop4: p5 size 591360 extends beyond EOD, truncated [ 170.092915][ T9892] delete_channel: no stack [ 170.110340][ T28] kauditd_printk_skb: 1898 callbacks suppressed [ 170.110358][ T28] audit: type=1400 audit(2000000000.080:3554): avc: denied { search } for pid=9907 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.148052][ T9938] loop9: detected capacity change from 0 to 512 [ 170.185712][ T28] audit: type=1400 audit(2000000000.110:3555): avc: denied { read write } for pid=9932 comm="syz.9.1170" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 170.229737][ T9938] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 170.256041][ T9937] lo speed is unknown, defaulting to 1000 [ 170.343773][ T9951] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.349929][ T9949] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.359819][ T9951] audit: audit_lost=34 audit_rate_limit=0 audit_backlog_limit=64 [ 170.373202][ T28] audit: type=1400 audit(2000000000.110:3556): avc: denied { open } for pid=9932 comm="syz.9.1170" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 170.376649][ T9951] audit: backlog limit exceeded [ 170.459261][ T7105] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.463020][ T9952] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.486663][ T9953] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.624208][ T9959] loop2: detected capacity change from 0 to 512 [ 170.682191][ T9959] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 0 [ 170.965224][ T9949] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1171'. [ 171.134740][ T3838] udevd[3838]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 171.142525][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 171.600241][T10005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1181'. [ 171.626309][T10005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1181'. [ 172.272391][T10025] loop4: detected capacity change from 0 to 512 [ 172.323097][T10025] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 172.370065][T10025] EXT4-fs (loop4): 1 truncate cleaned up [ 172.378601][T10025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.677880][T10039] macsec0: entered promiscuous mode [ 172.709148][T10039] macsec0: entered allmulticast mode [ 172.730234][ T7449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.754045][T10039] veth1_macvtap: entered allmulticast mode [ 172.860559][T10009] netlink: 'syz.9.1182': attribute type 4 has an invalid length. [ 172.884631][T10045] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10045 comm=syz.5.1189 [ 172.935647][T10009] netlink: 17 bytes leftover after parsing attributes in process `syz.9.1182'. [ 173.076936][T10055] FAULT_INJECTION: forcing a failure. [ 173.076936][T10055] name failslab, interval 1, probability 0, space 0, times 0 [ 173.120387][T10053] debugfs: Bad value for 'uid' [ 173.125589][T10053] debugfs: Bad value for 'uid' [ 173.125734][T10054] debugfs: Bad value for 'uid' [ 173.146708][T10055] CPU: 0 UID: 0 PID: 10055 Comm: syz.5.1191 Tainted: G W syzkaller #0 PREEMPT(full) [ 173.146794][T10055] Tainted: [W]=WARN [ 173.146802][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.146818][T10055] Call Trace: [ 173.146826][T10055] [ 173.146834][T10055] __dump_stack+0x1d/0x30 [ 173.146885][T10055] dump_stack_lvl+0x95/0xd0 [ 173.146913][T10055] dump_stack+0x15/0x1b [ 173.146939][T10055] should_fail_ex+0x263/0x280 [ 173.146975][T10055] should_failslab+0x8c/0xb0 [ 173.146994][T10055] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 173.147019][T10055] ? sidtab_sid2str_get+0xa0/0x130 [ 173.147045][T10055] kmemdup_noprof+0x2b/0x70 [ 173.147181][T10055] sidtab_sid2str_get+0xa0/0x130 [ 173.147275][T10055] security_sid_to_context_core+0x1eb/0x2e0 [ 173.147309][T10055] security_sid_to_context+0x27/0x40 [ 173.147351][T10055] avc_audit_post_callback+0x9d/0x540 [ 173.147393][T10055] ? audit_log_lsm_data+0x756/0xbb0 [ 173.147420][T10055] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 173.147449][T10055] common_lsm_audit+0x1ba/0x230 [ 173.147484][T10055] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 173.147546][T10055] slow_avc_audit+0x14c/0x190 [ 173.147576][T10055] avc_has_perm+0x144/0x190 [ 173.147620][T10055] file_map_prot_check+0x446/0x580 [ 173.147646][T10055] ? __rcu_read_unlock+0x4e/0x70 [ 173.147668][T10055] selinux_mmap_file+0x197/0x1e0 [ 173.147689][T10055] security_mmap_file+0x167/0x1b0 [ 173.147798][T10055] vm_mmap_pgoff+0x99/0x2d0 [ 173.147819][T10055] ? mutex_lock+0x57/0x90 [ 173.147842][T10055] ? mutex_unlock+0x4e/0x90 [ 173.147884][T10055] ksys_mmap_pgoff+0xc1/0x310 [ 173.147914][T10055] ? __x64_sys_mmap+0x49/0x70 [ 173.147949][T10055] x64_sys_call+0x14df/0x3020 [ 173.148004][T10055] do_syscall_64+0x12c/0x370 [ 173.148036][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.148111][T10055] RIP: 0033:0x7fa93a11c629 [ 173.148128][T10055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.148147][T10055] RSP: 002b:00007fa938b4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 173.148172][T10055] RAX: ffffffffffffffda RBX: 00007fa93a396090 RCX: 00007fa93a11c629 [ 173.148189][T10055] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 173.148258][T10055] RBP: 00007fa938b4e090 R08: ffffffffffffffff R09: 0000000000000000 [ 173.148275][T10055] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 173.148290][T10055] R13: 00007fa93a396128 R14: 00007fa93a396090 R15: 00007ffdc804fe58 [ 173.148331][T10055] [ 173.425108][T10054] debugfs: Bad value for 'uid' [ 173.616237][T10060] loop2: detected capacity change from 0 to 1024 [ 173.699377][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1194'. [ 173.759783][T10060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 173.823447][T10060] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.083830][T10085] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.1200'. [ 174.119407][ T7105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 174.260661][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1203'. [ 174.357609][T10091] loop2: detected capacity change from 0 to 512 [ 174.616890][T10109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1210'. [ 174.682510][T10107] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1211'. [ 174.775506][T10107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1211'. [ 175.113425][T10107] bond1: entered promiscuous mode [ 175.211938][ T28] kauditd_printk_skb: 1115 callbacks suppressed [ 175.211954][ T28] audit: type=1400 audit(2000000005.180:4623): avc: denied { open } for pid=10122 comm="syz.5.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 175.258257][T10114] audit: audit_backlog=65 > audit_backlog_limit=64 [ 175.268709][T10114] audit: audit_lost=53 audit_rate_limit=0 audit_backlog_limit=64 [ 175.276796][T10114] audit: backlog limit exceeded [ 175.281934][T10114] audit: audit_backlog=65 > audit_backlog_limit=64 [ 175.288454][T10114] audit: audit_lost=54 audit_rate_limit=0 audit_backlog_limit=64 [ 175.290214][T10125] audit: audit_backlog=65 > audit_backlog_limit=64 [ 175.296370][T10114] audit: backlog limit exceeded [ 175.296734][T10114] audit: audit_backlog=65 > audit_backlog_limit=64 [ 175.315718][T10124] audit: audit_backlog=65 > audit_backlog_limit=64 [ 175.420546][T10125] loop5: detected capacity change from 0 to 1024 [ 175.467957][T10125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 175.496111][T10125] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.583268][ T9270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 175.784767][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1221'. [ 175.850890][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1221'. [ 175.911057][T10163] sctp: [Deprecated]: syz.4.1221 (pid 10163) Use of int in max_burst socket option. [ 175.911057][T10163] Use struct sctp_assoc_value instead [ 175.968396][T10162] loop2: detected capacity change from 0 to 2048 [ 175.995443][T10167] loop5: detected capacity change from 0 to 2048 [ 176.043319][T10162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.098743][ T3838] loop5: p1 < > p3 < > p4 < > [ 176.106126][ T3838] loop5: partition table partially beyond EOD, truncated [ 176.113560][ T3838] loop5: p1 start 3405774849 is beyond EOD, truncated [ 176.122381][ T3838] loop5: p3 start 2304 is beyond EOD, truncated [ 176.132323][T10167] loop5: p1 < > p3 < > p4 < > [ 176.146096][T10167] loop5: partition table partially beyond EOD, truncated [ 176.190097][ T7105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.328083][T10167] loop5: p1 start 3405774849 is beyond EOD, truncated [ 176.344484][T10167] loop5: p3 start 2304 is beyond EOD, truncated [ 176.615359][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'. [ 176.716198][ T3838] udevd[3838]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 176.956195][ T3838] udevd[3838]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 177.172392][T10212] vlan0: entered allmulticast mode [ 177.177806][T10212] bridge_slave_0: entered allmulticast mode [ 177.239564][T10212] bridge0: port 1(vlan0) entered blocking state [ 177.276804][T10212] bridge0: port 1(vlan0) entered disabled state [ 177.315287][T10212] vlan0: entered promiscuous mode [ 177.350126][T10212] bridge_slave_0: entered promiscuous mode [ 177.433462][T10233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.233179][ T28] kauditd_printk_skb: 2328 callbacks suppressed [ 180.233198][ T28] audit: type=1400 audit(2000000001.300:6945): avc: denied { open } for pid=10414 comm="syz.4.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 180.519130][ T28] audit: type=1400 audit(2000000001.330:6946): avc: denied { prog_load } for pid=10377 comm="syz.5.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.564027][T10465] loop9: detected capacity change from 0 to 512 [ 180.721747][ T28] audit: type=1400 audit(2000000001.330:6947): avc: denied { bpf } for pid=10377 comm="syz.5.1264" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.783836][T10465] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.844292][T10465] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.879167][ T28] audit: type=1400 audit(2000000001.330:6948): avc: denied { perfmon } for pid=10377 comm="syz.5.1264" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.960389][T10465] audit: audit_backlog=65 > audit_backlog_limit=64 [ 180.979456][T10472] audit: audit_backlog=65 > audit_backlog_limit=64 [ 180.985989][T10472] audit: audit_lost=58 audit_rate_limit=0 audit_backlog_limit=64 [ 181.015316][T10465] audit: audit_lost=59 audit_rate_limit=0 audit_backlog_limit=64 [ 181.030927][ T28] audit: type=1400 audit(2000000001.330:6949): avc: denied { prog_run } for pid=10377 comm="syz.5.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 181.069327][T10472] audit: backlog limit exceeded [ 181.142533][ T5611] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.685895][T10479] gtp0: entered promiscuous mode [ 181.706248][T10479] gtp0: entered allmulticast mode [ 181.980927][T10494] __nla_validate_parse: 4 callbacks suppressed [ 181.980945][T10494] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1274'. [ 182.008479][T10492] loop2: detected capacity change from 0 to 1024 [ 182.061535][T10492] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 182.109117][T10492] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 182.123446][T10496] loop5: detected capacity change from 0 to 512 [ 182.131607][T10492] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 182.155988][T10496] EXT4-fs (loop5): orphan cleanup on readonly fs [ 182.164192][T10496] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.1274: ea_inode file size=4 entry size=6 [ 182.179834][T10496] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 182.197328][T10492] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 182.205533][T10492] EXT4-fs (loop2): orphan cleanup on readonly fs [ 182.213352][T10496] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.1274: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 182.229287][T10492] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.1275: Inode bitmap for bg 0 marked uninitialized [ 182.242274][T10492] loop2: lost filesystem error report for type 5 error -117 [ 182.242358][T10496] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 182.249749][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 182.249771][ C0] EXT4-fs (loop2): initial error at time 2000000003: ext4_read_inode_bitmap:167 [ 182.249806][ C0] EXT4-fs (loop2): last error at time 2000000003: ext4_read_inode_bitmap:167 [ 182.280579][T10492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.299026][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 182.305483][ C0] EXT4-fs (loop5): initial error at time 2000000003: ext4_xattr_inode_update_ref:1037: inode 11 [ 182.316237][ C0] EXT4-fs (loop5): last error at time 2000000003: ext4_xattr_inode_update_ref:1037: inode 11 [ 182.317172][T10496] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.5.1274: ea_inode dec ref err=-117 [ 182.442574][T10496] EXT4-fs (loop5): 1 orphan inode deleted [ 182.473082][T10496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 182.491967][ T7105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.594422][T10521] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 182.636006][ T9270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.675840][T10524] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 182.757123][T10518] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1279'. [ 182.799176][T10529] loop2: detected capacity change from 0 to 512 [ 182.869806][T10529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.897743][T10529] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.021259][T10548] IPVS: stopping master sync thread 10524 ... [ 183.071791][ T7105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.572723][T10573] geneve2: entered promiscuous mode [ 183.954277][T10603] Cannot find add_set index 0 as target [ 183.994136][T10597] SELinux: failed to load policy [ 184.079494][T10607] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1299'. [ 184.162704][T10579] loop9: detected capacity change from 0 to 128 [ 184.579989][T10611] lo speed is unknown, defaulting to 1000 [ 184.859797][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1308'. [ 184.911077][T10631] loop5: detected capacity change from 0 to 2048 [ 184.969194][T10631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.207198][ T9270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.228903][T10645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10645 comm=syz.2.1313 [ 185.241906][ T28] kauditd_printk_skb: 1049 callbacks suppressed [ 185.241925][ T28] audit: type=1400 audit(2000000006.270:7944): avc: denied { map_create } for pid=10646 comm="syz.4.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 185.313361][ T28] audit: type=1400 audit(2000000006.270:7945): avc: denied { bpf } for pid=10646 comm="syz.4.1314" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 185.362463][ T28] audit: type=1400 audit(2000000006.310:7946): avc: denied { map_create } for pid=10646 comm="syz.4.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 185.407459][ T28] audit: type=1400 audit(2000000006.310:7947): avc: denied { map_read map_write } for pid=10646 comm="syz.4.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 185.499849][ T28] audit: type=1400 audit(2000000006.340:7948): avc: denied { create } for pid=10646 comm="syz.4.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.588816][ T28] audit: type=1400 audit(2000000006.350:7949): avc: denied { write } for pid=10646 comm="syz.4.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.696290][ T9270] audit: audit_backlog=65 > audit_backlog_limit=64 [ 185.703164][ T28] audit: type=1400 audit(2000000006.350:7950): avc: denied { allowed } for pid=10646 comm="syz.4.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 185.742042][T10670] audit: audit_backlog=65 > audit_backlog_limit=64 [ 185.759066][ T9270] audit: audit_lost=78 audit_rate_limit=0 audit_backlog_limit=64 [ 185.940999][ T8414] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.956085][ T8414] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.975855][ T8414] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.005543][ T8414] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.118656][T10687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1329'. [ 186.218597][T10687] loop5: detected capacity change from 0 to 1024 [ 186.324542][T10693] 9p: Bad value for 'trans' [ 186.501597][T10698] netlink: 'syz.9.1334': attribute type 10 has an invalid length. [ 186.516790][T10698] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1334'. [ 186.592731][T10702] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1337'. [ 186.696151][T10711] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1339'. [ 186.739999][T10707] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1338'. [ 186.773354][T10707] net_ratelimit: 12 callbacks suppressed [ 186.773370][T10707] netlink: zone id is out of range [ 186.828892][T10707] netlink: zone id is out of range [ 186.834271][T10707] netlink: zone id is out of range [ 186.864978][T10707] netlink: zone id is out of range [ 186.895821][T10718] lo speed is unknown, defaulting to 1000 [ 186.903065][T10707] netlink: zone id is out of range [ 187.052870][T10707] netlink: set zone limit has 8 unknown bytes [ 187.384485][ T9] IPVS: starting estimator thread 0... [ 187.488886][T10738] IPVS: using max 2352 ests per chain, 117600 per kthread [ 187.604121][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1352'. [ 187.615884][T10742] 8021q: VLANs not supported on vcan0 [ 187.842379][T10748] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1354'. [ 188.000746][T10753] lo speed is unknown, defaulting to 1000 [ 189.195272][T10795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1356'. [ 189.330428][T10802] IPv4: Oversized IP packet from 127.202.26.0 [ 189.462130][T10813] netlink: 16098 bytes leftover after parsing attributes in process `syz.9.1363'. [ 189.465367][T10808] loop2: detected capacity change from 0 to 1021 [ 189.687198][T10822] lo speed is unknown, defaulting to 1000 [ 189.882459][ T3001] ================================================================== [ 189.890862][ T3001] BUG: KCSAN: data-race in __d_drop / fast_dput [ 189.897137][ T3001] [ 189.899565][ T3001] write to 0xffff8881006729d0 of 8 bytes by task 3301 on cpu 0: [ 189.907393][ T3001] __d_drop+0x14d/0x240 [ 189.911586][ T3001] __dentry_kill+0x122/0x460 [ 189.916290][ T3001] finish_dput+0x2b/0x200 [ 189.920739][ T3001] dput+0x52/0x60 [ 189.924484][ T3001] lookup_one_qstr_excl+0x15a/0x250 [ 189.929983][ T3001] filename_unlinkat+0x149/0x410 [ 189.935045][ T3001] __se_sys_unlink+0x2b/0xe0 [ 189.939842][ T3001] __x64_sys_unlink+0x1f/0x30 [ 189.944736][ T3001] x64_sys_call+0x2eb6/0x3020 [ 189.950032][ T3001] do_syscall_64+0x12c/0x370 [ 189.954670][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.960769][ T3001] [ 189.963371][ T3001] read to 0xffff8881006729d0 of 8 bytes by task 3001 on cpu 1: [ 189.971229][ T3001] fast_dput+0x5f/0x2c0 [ 189.975818][ T3001] dput+0x24/0x60 [ 189.979572][ T3001] filename_unlinkat+0x217/0x410 [ 189.984908][ T3001] __se_sys_unlink+0x2b/0xe0 [ 189.989693][ T3001] __x64_sys_unlink+0x1f/0x30 [ 189.994479][ T3001] x64_sys_call+0x2eb6/0x3020 [ 189.999526][ T3001] do_syscall_64+0x12c/0x370 [ 190.004170][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.010104][ T3001] [ 190.012642][ T3001] value changed: 0xffff888237b2dd00 -> 0x0000000000000000 [ 190.020116][ T3001] [ 190.022557][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 190.028907][ T3001] CPU: 1 UID: 0 PID: 3001 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 190.039791][ T3001] Tainted: [W]=WARN [ 190.043760][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 190.054088][ T3001] ================================================================== [ 190.654425][ T28] kauditd_printk_skb: 879 callbacks suppressed [ 190.654442][ T28] audit: type=1400 audit(2000000011.720:8812): avc: denied { read write } for pid=9270 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.687201][ T28] audit: type=1400 audit(2000000011.740:8813): avc: denied { read write open } for pid=9270 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.715703][ T28] audit: type=1400 audit(2000000011.740:8814): avc: denied { ioctl } for pid=9270 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.753080][ T28] audit: type=1400 audit(2000000011.820:8815): avc: denied { read write } for pid=5611 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.778121][ T28] audit: type=1400 audit(2000000011.820:8816): avc: denied { read write open } for pid=5611 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.816995][ T28] audit: type=1400 audit(2000000011.820:8817): avc: denied { ioctl } for pid=5611 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1