last executing test programs: 25.804788139s ago: executing program 3 (id=4): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, @perf_config_ext={0x9, 0x30}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x200a1, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x200}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x2, 0x100, 0xb152, 0x3, 0x1fb, 0x3, 0x5}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xe}]}, 0x24}}, 0x0) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="466f002000660000401190780a010102ac141416940401004e244e2000089078000069ec99e04932f7c300000000"], 0x2e) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff"], 0x48) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 25.38577926s ago: executing program 4 (id=5): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) io_setup(0x9, &(0x7f0000000340)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='notify_on_release\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$xdp(0x2c, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_clone(0x80141000, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)="9f8e7da84a3fec2a051ecb6afc3ce6f62b781c3ea0d47883") r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) iopl(0x3) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x4000}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r5, &(0x7f0000000340)=""/200, 0xc8, 0xfff, 0x0) io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r3, 0x0}]) 25.380607509s ago: executing program 3 (id=8): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@nombcache}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nobh}]}, 0xfc, 0x57d, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x6}, 0x10ecc8, 0x1224, 0x99c5, 0x8, 0x8, 0x20005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'devgroup\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x18, 0x3, "0400"/20}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xfc}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000500)='\x00', 0x1, 0x0, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) fallocate(r0, 0x0, 0x0, 0x2) r5 = open(&(0x7f00000000c0)='./file1\x00', 0x94242, 0x157) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 24.861757832s ago: executing program 4 (id=12): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x24d, &(0x7f0000001180)="$eJzs3cFqE1EUBuDTNG1DN3YtLgbcuArqym3QCmJAiMxCVwaqm1aE6WZ0lcfwGXwkH6Or7kbs1CbqKIid3mTm+yDMgZ8L5xLI3ZybeXPn/fHRh9N31dfPMRplMYxYVFXEQQxiO2pbl8/BRb0bqxYBAGya2Ww+Sd0D7SqKyXwnIvZ+S/IvSRoCAAAAAAAAAADgvzXN/8e5+X8A6LIf8/+D1I3QmqKYzPcbv2Pz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA651V1q/rLJ3V/AMD1c/4DQP84/wGgf5z/ANA/L1+9fj6ZTg9nWTaKOFuUeZnXzzp/+mx6eD+7cLBcdVaW+fZV/qDOs5/zndi/zB825rtx726df88ev5j+ku/FUfvbBwAAAAAAAAAAAAAAAAAAgLUwzq403u8fj/+U19XK/wOs3N/fKst8GLeHN7YNAAAAAAAAAAAAAAAAAAAA2GinHz8dz09O3haKzhTx6J9WPRmtQc/XUESsRRtdKVL/MgEAAAAAAAAAAAAAAAAAQP8sL/2m7gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0lm+/7+9IiIWVS31dgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAO+xYAAP//OTyZRg==") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000100)=""/4117, 0x1a, 0x1015, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000009c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3e56b40046545a9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000010100)={@fallback=r9, 0x2e, 0x0, 0x8, &(0x7f0000010000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0x0, &(0x7f00000100c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000101c0)={r7, r6, 0x0, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000010140)=ANY=[@ANYRES32=r8, @ANYRES32=r11, @ANYRES64=r10], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r12 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12) r13 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f00000001c0), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 24.714209785s ago: executing program 3 (id=13): syz_open_procfs(0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0xfe, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="a8", 0x1}], 0x1}, 0x4040001) close(0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000180)=0xb4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2000000002) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="120000000900000004c1b1e14bcaf602000000002a95eedc31a72dff61606871bb4fe8237ea7eab71e513f7934fa0f54dbcc086153581d4f2d1cd07ca64df2e063d9cd6847d26b818512fcab9f16ad37e16bc47bfb6bd5b93f5c18cc7def729bff8b7da04dffffffff00000000bd9105", @ANYRES32, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r7}, &(0x7f00000004c0), &(0x7f0000000400)}, 0x20) recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9e, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) 24.665841937s ago: executing program 4 (id=14): pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1200050, &(0x7f0000000840)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRESOCT], 0xfe, 0x281, &(0x7f00000002c0)="$eJzs2s9r03AYx/EnXedmx5aKPyeID3pQL2Ht2cOGbCAWBF2FKcgyl2ppbEYTBh3idlLwtLOnncWjN0F29LKLf4EHPQ1kN3cQI13arZ1Dt9klHt6vS56SfJpv+nwJ34asX19+WimlpWQHkjIMSY3KkmwakpWUtCzJtStTHy/cnbp/a6xQGL+jOjE2mcur6tDFDw+evb20Ggzcezf0vk/Wsg/XN/Jf1s6sDa//nHxS9rXsa9UL1NYZzwvsGdfR2bJfsVSXXcf2HS1XfafWsb/kenNzdbWrs4OZuZrj+2pX61px6hp4GtTqaj+2y1W1LEsHM4LDMJrb4pvNMJSNMN3aMbAqg5/FFOOEGidHjdPTxtklY3gjDM3t7LEkBowjEvW/d1rCMDy+sp/+t+mJf7zorraber+I+3K+OF+MttH+sZKUxRVHRsSUH9KYJk1RPXGzMD6iW7Lywl1s5hfni9HkeNXK58SU7N75XJTXznyfZNrPnxdTTm3nR6WZ/9pTGM+rivyW75erl9vylpjy6ZF44sqsNLI753+eU71xu9CZ70+2LwAAAEfF0m2NjyvfDOlYv1k7B+xa30X5A6wPd63P0nI+neilQ0T8+kLFdl2nFkvRmFPd/EJDDh1vPQL5+8HnUrH9PltF429PnE1ZeB3DuTJd7ftBitZDir2O+R7GP54/Fb37mpDxFAnelBCbnaYnPRIAAAAAAAAAAAAAAAAAwEHseunP3PM1yX8skr5GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf/sVAAD//8ndwBU=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fremovexattr(r4, &(0x7f0000000240)=@known='com.apple.FinderInfo\x00') r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8800) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac0000000060a0b040000000000000000020000004000048018000180080001006f7366000c0002800800014000000004240001800a0001007265646972000000140002800800024000000013080003400000000060000480100001800b00010072656a6563740000100001800b0001007470726f787900002c0001800900010068617368000000001c00028008000640000000f90800014000000011080003400000006f100001800c000100636f759a93d67c018e80000000140000001100010000000000000000000100000a00000000000000"], 0xe8}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b40)=ANY=[@ANYBLOB="540000001000390400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01980400499e05000c00128008000100736974000c000280000011004e220000080029000fb40100140003736c6176655f3100000000100000000000"], 0x54}}, 0x60004000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r7, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 'vcan0\x00'}}, 0x1e) r8 = perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, @perf_config_ext={0x4, 0xc5d7}, 0x204, 0x3, 0x43a1bd76, 0x1, 0x4, 0x8, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xf, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r3) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a3000000000090001e173797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x74}}, 0x0) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write(r11, &(0x7f0000000280)="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", 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r12, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) 22.951899589s ago: executing program 4 (id=24): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@nombcache}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nobh}]}, 0xfc, 0x57d, &(0x7f0000000bc0)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+2tE2atkuXbPl84G7n5N6bc7+593t6Tm5CAhhYJ9J/chGvRsS3ScSRpnXDka08sbbd6qOb0+mSRK322V9JJNljje2T7P9DWeWViPjt64jTuc3tVpaW5wqlUnEhq49X56+NV5aWz1yZL8wWZ4tXJ6emzr09Nfneu+90LdY3Lv7zw6f3Pjr3zcnV7395cPROEufjcLauOY6ncKu5cqLwX1YaifMbNpzoQmP9JOn1AbArQ1mej0TaBxyJoSzrgRffVxFRAwZUIv9hQDXGAY25fZfmwc+Nhx+uTYDqsY82xz+89t5I7K/PjQ6uJutmRul8d6wL7adt/Prn3TvpElu/D3GgQx1gR26tRMTZ4eHN/X+S9X+7d7b+5vHWNrYxaH9/oJfupeOfN1uN/3KPxz/RYvxzqEXu7kbn/M896EIzbaXjv/dbjn8fd11jQ1ntpfqYbyS5fKVUPBsRL0fEqah1vPVxbvV+rd265vFfuqTtN8aC2XE8GN63fp+ZQrUQEaO7DHmdhyv14W2qTf+/vz7W3Xj+09fj4jbbOF68+1q7dZ3j31u1nyNeb3n+n5zWZOv7k+P162G8cVVs9vft47+3a7/X8T9ciTi4dfxjSfP92srO2/hp/7/Fdut2e/2PJp/Xy40kuFGoVhcmIkaTTzY/Pvlk30a9sX0a/6mTW/d/ra7/dPL1xTbjv33sdttN++H8z+zo/O+8cP/jL39s1/72zv9b9dKp7JGs/2stu1a2e4BP+/oBAAAAAABAP8lFxOFIcvnH5Vwun1/7fMexOJgrlSvV05fLi1dnov5d2bEYyTXudB9p+jzERPZ52EZ9ckN9KiKORsR3Qwfq9fx0uTTT6+ABAAAAAAAAAAAAAAAAAACgTxxq8/3/1B9DvT46YM/Vf9hgX6+PAuiFjj/5341fegL6Usf8B15Y8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsuXriQLrXVRzen0/rM9aXFufL1MzPFylx+fnE6P11euJafLZdnS8X8dHm+0/OVyuVrE5OxeGO8WqxUxytLy5fmy4tXq5euzBdmi5eKI88kKgAAAAAAAAAAAAAAAAAAAHi+VJaW5wqlUnGhC4UkIrrxPP1W+CD64jD2MsA1u9p9uF+i2OvCyB6kzDMprGQHvrO9etQhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAL/wcAAP//eBcqGw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x6}, 0x10ecc8, 0x1224, 0x99c5, 0x8, 0x8, 0x20005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'devgroup\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x18, 0x3, "0400"/20}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xfc}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000500)='\x00', 0x1, 0x0, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) fallocate(r0, 0x0, 0x0, 0x2) r5 = open(&(0x7f00000000c0)='./file1\x00', 0x94242, 0x157) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 22.951660169s ago: executing program 32 (id=24): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@nombcache}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nobh}]}, 0xfc, 0x57d, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x6}, 0x10ecc8, 0x1224, 0x99c5, 0x8, 0x8, 0x20005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'devgroup\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x18, 0x3, "0400"/20}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xfc}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000500)='\x00', 0x1, 0x0, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) fallocate(r0, 0x0, 0x0, 0x2) r5 = open(&(0x7f00000000c0)='./file1\x00', 0x94242, 0x157) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 22.872215991s ago: executing program 3 (id=26): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x2000, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4e26, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x80, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x6, 0x2, 0xffffffffffbffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x2}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 22.737491574s ago: executing program 33 (id=26): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x2000, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4e26, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x80, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x6, 0x2, 0xffffffffffbffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x2}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 13.534642359s ago: executing program 5 (id=106): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x4) pwritev(r1, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000340)="a622626480f56f629553ab27d7ebae9f7f7c06f6c7b184b4f3194aef342ef011896aacd9990d8278f8f6ef7cb42cf94959e86748caa9d933c0a5f5a7eedd3eeb207f5d83f334526e057ddfdfcc63061b113a71225477fdea65bb701358ce2c00bc847089f2a1fa5da48a78e05b415bf6", 0x70}, {&(0x7f00000003c0)="8bdb401ffa873310d1debcc10857d963ddda5fb0795b73b7c8b4fdbe7abd3ba6be9c813ffbb4ee39b65ae5f5e7288da44710a31dc200fac7d5f16d4b664b78ade0ae6aaa612a26031681f1389321dd8c415304c226984e5bc3c15cde4b07f3945d519f976ff2580910a5d2b82fb0c27a578d838a9e4877e0e502a45e3ef5334bcb020952b78716b5020a23238572b80c5319d06ef86348544dab4b", 0x9b}, {&(0x7f0000000480)="01256de1323a41030f26541d2a0ad5a0fcb1ceae", 0x14}, {&(0x7f00000004c0)="d412d78ee1ff31b7cccfd826606290fadccd4d8799b16c0e9acded07ae5e0c6a7a33fb86deee75d4106d098543a57a2f01b9f59f160f10c0f293a51cdd48a90b205558f0ba95d76650761258fd35cb5ef26bf47dbe4cc15ec43b90fa2b3e2b54982a70a931be25d747cd0510a3d42050f69df9e836de2659d6730068bb362a4efdff61a76a3fc739bdd47c2300e576a3886562f224808b9d2d2b569279ba28d5e031c3af248e7b524c06f873bb3cb88da86fe582998fcba03613e2ae8f6ab6b924a10a17fc98824700ee1a41dea8348dbcdd166e31255297ba96aace0a4d73", 0xdf}], 0x5, 0x5, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0x8021, 0x1}) writev(r0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x4, @perf_bp={&(0x7f0000000200), 0x1}, 0x1000, 0x2, 0xffffff7e, 0x2, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9899}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200", @ANYRES32, @ANYRES32], 0x254}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, 0x0, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x3c}, 0x1, 0x620b}, 0x0) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x1e, &(0x7f0000000000)={0x40000b, 0x1, 0x100}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)='./file1\x00') socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, 0x0) 13.344075804s ago: executing program 5 (id=110): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 12.484432555s ago: executing program 5 (id=116): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c050}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000002090001006d61726b000000000900020073797a32000000000900010073797a31"], 0xa4}, 0x1, 0x0, 0x0, 0x855}, 0x24000840) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000140)) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) close(r2) 12.343157748s ago: executing program 5 (id=121): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$igmp6(0xa, 0x3, 0x2) socket(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000100)={0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) tkill(r1, 0x13) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r3, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) waitid(0x1, r1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0xe, 0x3, 0x0, 0x9, 0x1, 0x9, 0xfa11, 0xfeffffff}, 0x0) waitid(0x0, r1, 0x0, 0x2, 0x0) 9.786425411s ago: executing program 5 (id=138): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x28242, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) truncate(&(0x7f0000000300)='./file1\x00', 0x591) 9.234682554s ago: executing program 5 (id=147): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) r1 = open(&(0x7f0000000140)='./file2\x00', 0x105480, 0x100) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000640)={'tunl0\x00', 0x0, 0x7800, 0x8000, 0x0, 0x1, {{0x1a, 0x4, 0x1, 0x6, 0x68, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1f, 0x33, [@rand_addr=0x64010101, @empty, @local, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2, @private=0xa010101, @rand_addr=0x64010101]}, @generic={0x88, 0x9, "34daeda8851d49"}, @generic={0x83, 0x8, "8393ce4e4cd3"}, @timestamp={0x44, 0xc, 0x19, 0x0, 0x9, [0x1, 0x5]}, @lsrr={0x83, 0x17, 0x11, [@empty, @private=0xa010101, @private=0xa010102, @loopback, @broadcast]}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000018"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) eventfd2(0x1, 0x1000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x48080) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0xffffffff, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r6 = socket$kcm(0x2d, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000200)={r6}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x633b, 0x4) 9.127124967s ago: executing program 34 (id=147): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) r1 = open(&(0x7f0000000140)='./file2\x00', 0x105480, 0x100) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000640)={'tunl0\x00', 0x0, 0x7800, 0x8000, 0x0, 0x1, {{0x1a, 0x4, 0x1, 0x6, 0x68, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1f, 0x33, [@rand_addr=0x64010101, @empty, @local, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2, @private=0xa010101, @rand_addr=0x64010101]}, @generic={0x88, 0x9, "34daeda8851d49"}, @generic={0x83, 0x8, "8393ce4e4cd3"}, @timestamp={0x44, 0xc, 0x19, 0x0, 0x9, [0x1, 0x5]}, @lsrr={0x83, 0x17, 0x11, [@empty, @private=0xa010101, @private=0xa010102, @loopback, @broadcast]}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000018"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) eventfd2(0x1, 0x1000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x48080) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0xffffffff, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r6 = socket$kcm(0x2d, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000200)={r6}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x633b, 0x4) 7.259557312s ago: executing program 6 (id=182): ioprio_set$pid(0x2, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@loopback, @initdev, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@delqdisc={0x94, 0x25, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0xc, 0x5}, {0xfff1, 0xffff}, {0x9, 0x3}}, [@qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x12e8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_TARGET={0x8, 0x1, 0x400}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xf}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3}, @TCA_CODEL_TARGET={0x8, 0x1, 0x8000}]}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x10, r2}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.193600194s ago: executing program 6 (id=185): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x802, 0xfffffffe, 0x3, 0x10001}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=@newtfilter={0xfc, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0xb, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xcc, 0x2, [@TCA_BASIC_ACT={0xc8, 0x3, [@m_nat={0xc4, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003, 0x0, 0x4}, @empty, @remote}}]}, {0x71, 0x6, "fa50551b9f1b36ab630530773312507b8b0431b251a39fe4d631932ed5bdb982af031b27a2ad1d2d48ecbbf6667e2707592629528102c583a7a0ad53178c98439b60cd5427e67c01dc902083e5b7875ab690c05d19b2a695b7c7d7f8fd69a10a06a616cec4116cd19198b88678"}, {0xc}, {0xc}}}]}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$tun(r1, &(0x7f0000000140)=ANY=[], 0x20) 7.039949718s ago: executing program 6 (id=188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x3d38, &(0x7f00000001c0)=0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) sendmmsg$inet6(r2, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x400, @loopback={0xff00000000000000}, 0x105}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000380)="a0002e7577d401", 0x7}], 0x1, &(0x7f0000000e80)=ANY=[], 0xd}}], 0x1, 0x4000880) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000140)=0x1, 0x4) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) pread64(r1, &(0x7f00000024c0)=""/209, 0xd1, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xffffff31, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a00000438000480340001806b000100516f636b657400002f000280080002400000000f004d0bba5c4b9219787f42d6b298000240000000020800014000000003080002400000797a3200000000090002090000003200000000140000001100010000000000000000000000000a899d5a82158aed967aea316f70ebd56c0f0a90e9bd0a4fee36d80f2af4f40efb1ef066f79649a33e7bc49a499db18e6df361daa7c73feaa67b51cd45d34e1dc7879ec114619dbf6b0083cb4742bc5bad38449cca4b"], 0x8c}, 0x1, 0x0, 0x0, 0x4008810}, 0x24044010) 3.474321955s ago: executing program 6 (id=206): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x80003, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r2], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x14, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @generic={0xfb, 0x6, 0x3, 0x1, 0x7}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x20006}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x17, r1, 0x8, &(0x7f0000000680)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0xe, 0x0, 0x8}, 0x10, 0x1faaa, r1, 0xa, &(0x7f0000000780)=[r1, r1, 0xffffffffffffffff, r1, r0, r1, r1, 0xffffffffffffffff, r1], &(0x7f00000007c0)=[{0x2, 0x1, 0x5, 0x1}, {0x5, 0x2, 0x6, 0x6}, {0x4, 0x3, 0xa, 0x8}, {0x4, 0x1, 0x4, 0x1}, {0x4, 0x2, 0x2, 0x8}, {0x3, 0x1, 0xf, 0x7}, {0x2, 0x1, 0x3, 0x8}, {0x2, 0x4, 0x1, 0x8}, {0x4, 0x4, 0x3, 0x3}, {0x4, 0x2, 0x2, 0x8}], 0x10, 0x43}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2d, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x3, 0x0, 0x100000000, 0x40008, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x3, 0x5}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x4, 0x2, 0x0, 0xffffffff, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x400008) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x400) 2.891753469s ago: executing program 0 (id=213): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x851c}, 0x201, 0xe7e, 0x0, 0x3, 0x800001, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@grpid}]}, 0xff, 0x548, &(0x7f0000001300)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7G5v1rL0xa2+8/nykybw3v77f5/iNZ3aeZgM4t56PiDci4sM0TV+KiNl8eSmfotWZsu3ef/jucjYlkaZv/S2JJF+WbZamado95uV8t+mI+NpXIr6Z7As4nc93dm8v1eu1zbxaba7fqW7t7F5fW19ara3WNhYW5l9dfG3xlcUbQ2nnlYh4/Ut/+v53fvrl13/52Xf+ePMv176VpTWTr++24xgmD1vZaXr5wnTPDpvHDPYkytpT/iCvXBxsn3snmRAAAH1l1/gfiYhPRcRLMRsTh1/OAgAAAGdQ+oWZ+CDpPL8rMNVnOQAAAHCGlNpjYJNSJR8LMBOlUqXSGcP7sbhUqje2mp+51djeWOmMlZ2LcunWWr12Ix8rPBflJKvPt8t79Zd76gsR8XREfG/2YrteWW7UV0b94QcAAACcE5d77v//Odu5/z9ccjrJAQAAAMMzN+oEAAAAgBPn/h8AAADGWnnUCQAAAAAn7qtvvplNaff7r1fe3tm+3Xj7+kpt63ZlfXu5stzYvFNZbTRW2+/sWz/qePVG487nYmP7brVZ22pWr+zs3lxvbG80b67F9Kk0CAAAADjg6U/e/30SEa3PX2xPmalRJwWcislHpe47PQt6/x+e6szfO6WkgFMxMcA2710oXu46Ac62yd4Fffo6MH6M/weO+kaPvoN3ftOZlYacDwAAMHxXP1H8/P/o6/mWS34443RiOL96nv+ns6NKBDh17ef/gw7kcbEAY6U80AhAYJz9v8//j5amj5UQAAAwdDPtKSlV8o/3ZqJUqlQirrS/FrCc3Fqr125ExFMR8bvZ8oWsPt/eMznyngEAAAAAAAAAAAAAAAAAAAAAAAAA6EjTJFIAAABgrEWU/pz8qvMu/6uzL870fj4wlfy7/ZXAUxHxzo/e+sHdpWZzcz5b/vdHy5s/zJe/PIpPMAAAAIBe3fv09vxfo84GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHHz/sN3l7vTAJtfHFbcv34xIuaK4k/GdHs+HeWIuPSPJCb37ZdExMQQ4rfuRcTHi+InWVqPQhbFH8YPoXUvaaVthfFjLv8pFMW/PIT4cJ7dz84/bxT1/1I8354X97/JiP+pH1f/8188Ov9N9On/VwaM8cyDn1f7xr8X8cxk8fmvGz/pE/+FgaKX4xtf393ttzb9ccTV7t+f9hlvf4S9UrW5fqe6tbN7fW19abW2WttYWJh/dfG1xVcWb1RvrdVr+b+FMb777C8+PKz9lwr//iV5Nv3b/2LB8SYK8v/Pg7sPP9qttA7Gv/ZCQfxf/yTf4mD8Uh7n03k5W3+1W251yvs997PfPndY+1f22l9+nP//a/0O2utAR3l2sF8dAOBEbO3s3l6q12ubY1vI7tKfgDSOU5iKJyKN8S18Oys8GNYB0zRNsz5VsOp+RAxynCSG3NJScT57hb5ngFGfmQAAgGHbu+gfdSYAAAAAAAAAAAAAAAAAAABwfp3GW9Z6Y+69AjkZxiu0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACG4r8BAAD//7gG3Ac=") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) keyctl$clear(0x3, 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0x7f, 0x44b, &(0x7f0000000dc0)="$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") openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) fsmount(0xffffffffffffffff, 0x1, 0x7c) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xbc}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 2.762187922s ago: executing program 6 (id=215): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000f2ba1000010400008000000000000000", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c0002800500110001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.388179932s ago: executing program 1 (id=220): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010001fff000052742e1bc78ff5d950007a1796a1654f75b22c0c24c3ab202ca65a58825f0dffa27b047d186e675fcaf57ea8a24500a0cfa60b6c5e73428db59f72b8eeeba20d3724ddbe6f3894aa997a32f87904d82acb657847", @ANYRES32=0x0, @ANYBLOB='\n@\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="140012800b000100627269646765000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x20004001}, 0x40000) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f00000000c0)={0x2, 0x2f, 0x3}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x7c, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8088}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xfffffffffffff800}) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001b40)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000b40)="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", 0x1000, r8}, 0x68) 2.275175984s ago: executing program 1 (id=223): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) unshare(0x400) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x80002003}) (rerun: 64) r1 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt(r1, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}}) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000040)) 2.215928456s ago: executing program 2 (id=224): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_config_ext={0x1000, 0x8}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="188848001c0059"], 0xfe33) 2.215699606s ago: executing program 1 (id=225): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x168) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x1c2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000000980)='syzkaller\x00', 0x1}, 0x94) 2.070223269s ago: executing program 2 (id=227): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e21, 0x8, @mcast2}, 0x1c) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES64=r0], 0x10b8}, 0x8000) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb4ac, 0x7}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0xd, 0x0, 0x0, @time={0x3, 0x40082}, {0x0, 0xc}, {0x20}, @raw32={[0x0, 0x5, 0x7ff]}}], 0x1c) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001206d95f228673cb6bbd8a3506c41fc17e7ce9cabca3f96d7fe31c5093e6df20475b425525f8770d5505ecbd7612609f962ca97499d3a2a1d68131b9af69b4b1d31331d459370480ba6934ef", 0x78}], 0x1}, 0x0) 2.020064491s ago: executing program 1 (id=228): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r4, 0x300}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) 1.851047315s ago: executing program 0 (id=229): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x10000d, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x9, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44810}, 0x4c801) fstat(r1, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x2, 0x5124e2975ff5188e, 0x97eb, 0x6}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000780)={0x0, 0x6, [0x1, 0xfffffffffffffffc, 0xb8b, 0x6eb, 0x9, 0x5d86]}) getgroups(0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r4, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x7, 0x8, 0x20, @private2, @empty, 0x20, 0x700, 0x3, 0x5}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x12, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x8, '\x00', r5, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffc37, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) r7 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000680)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYRESOCT, @ANYRESOCT=r4, @ANYRESOCT, @ANYRES16], &(0x7f00000001c0)='syzkaller\x00', 0xffff0207, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r8, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.829087215s ago: executing program 2 (id=230): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2a060400) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000040)=0x56) r1 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x4a}, 0x94) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000540)={0x2, 0x3, 0x9}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4008054) lseek(r1, 0xfffffffffffffffd, 0x1) read$msr(r1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000500)={'wg1\x00', 0x0}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', r4, 0xffffffffffffffff, 0x4, 0x4}, 0x50) sched_setscheduler(0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x101, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000003400f1ff34000000e1ffffffffffffff0200000400000000000000000200000000000000000000000211400000000000000000000000000000010000000000000000fcaff3ae41ed1f122586"], 0x0, 0x4e}, 0x20) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYRESHEX=r6, @ANYBLOB="f320674bbc1173faac7c4d906c2dccc6d4aeb5798c4da4e2d07835f7fddeccca9417c126ad06ec4e1595c97fbe9ca74b51944cc27d85eac66721109f259fafe66929a5b60b22e26be533af3d9073c160804261fcf7ef59a310c4a74a558d8734978eb33832d2199c122571d7177ae80ffd303199f44f86229995a050030b13b45d14623d64d5796fbd73669e212d019b4a5263951da12d2bad2276c407f487259d2585b052aa73e507469e760f876f2ace1b89f918b3edc6513b5b05899fbc53a97d7b4771445dff08e9d9d86b5b524789e478fe2f361fae2a4063a9232c25fb8c7246da6578723266a39494e66c45026e", @ANYRESOCT=r7, @ANYRESOCT=r7, @ANYBLOB="efbc31a98250485eb540b55103535dcf97fa1d67d204389526849e6f9f18c7de4bd5", @ANYRES32=r3, @ANYRES16=r7, @ANYRESHEX, @ANYRES32=r7, @ANYRES16=r5], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(r1, &(0x7f0000000380)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0/console\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x128, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x260, 0x20a, 0x278, 0x260, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [], [0x0, 0x0, 0x0, 0xffffff00], 'pimreg1\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@local, @local, [], [0x0, 0x0, 0x0, 0xff], 'syzkaller1\x00', 'caif0\x00', {0xff}, {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) ioctl$XFS_IOC_COMMIT_RANGE(r8, 0x40585883, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x3, 0x40, 0x72, 0x8, [0x9, 0x4, 0x7, 0x8, 0x4, 0xf02]}) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000600)={[{@errors_continue}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x1a0) 1.363871397s ago: executing program 7 (id=233): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x5c, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000000000000000000b512000a20000000000a01040000000000000000020000000900010073797a300000000064000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c0002"], 0xac}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x2, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) 1.155187302s ago: executing program 1 (id=234): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x20, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4004004) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xb, 0x300}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x5, 0x54fc9de6e68699f6, 0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc1}, 0x8840) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000240)={r5, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000700)=0xfdad) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4000006f, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) setuid(0xee01) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r5, 0xf732}, &(0x7f00000000c0)=0x8) 1.109286233s ago: executing program 2 (id=235): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x66a00, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4bfb, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0x42795000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a26000000000a01040000000000000000050000000900010073797a3000000000080002400000000154000000030a03000000000000000000050000000900010073797a30000000000900030073797a3000000000280004800800024000000012080001400000000014000300776c616e30000000000000000000000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000100)='./file0\x00') ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r0, @ANYBLOB="000000000000000014011a80100102803c000180080021000000000008001800000000000800030000000000080009000000000008000c0064000000080012000000000008001f"], 0x134}}, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) 1.020077085s ago: executing program 7 (id=236): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) truncate(&(0x7f0000000300)='./file1\x00', 0x591) 923.419827ms ago: executing program 7 (id=237): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ffc094010ebc000000000000008000f0fffeff0300000000fff5dd000000100001000c0810000c00000000040000", 0x58}], 0x1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) (async) r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 891.425028ms ago: executing program 7 (id=238): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') preadv(r0, &(0x7f0000000480)=[{0x0}], 0x1, 0x1, 0x5) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x2001, 0x2) 851.627089ms ago: executing program 0 (id=239): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) io_setup(0x9, &(0x7f0000000340)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='notify_on_release\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="0240330007000000186a0000090000000000000003000000aa748944cffd41837be4c0c9cec25dba731d3a35e4509a06898111e09fed55d463c7ebf31dfe5d1bc7b13941479c918e81555fb97153ecfcfaf2720e00a890fc999093c50b58417ca2acdf18b48bef5c7a67ce4391e54125b1099da0da3bbf3aff47404eeac08b09069d624b2710fd019d63a2892c0fe4ef9116015fcdb331dda784d167aab54ec5263036c040130bde64ffd9b083ef76e8649ae2d33bafabbd784001961a1ab1cb3e3d8e439c4b9a6401d4b810785e88353ea8acf219e8390000000000000055cd5049c9bcae737c161956499373a1a03664747a961b3c669a95fe7d87d016486d473fd495346063d0d7bfa1aa18dc45f31f9251bbcea7b5036b7daff81bd033308995fc7707ae2a450d77a3c8470ab6524ca8ca10e198cf38ec65d909f47d2fb27956d225121876fba7280e1aae2e843f90ba0d7b3268b51f804ec0dfb1374d96cacaec86e36b97b243a1e231e0abd1caafd20e4ae822ff944f643cd8fec15c8600eccc566b64ae2b514cb1bb16e62507e00c91fc56e36ebb0aafea1afdf2bfc4ec53cfb5195b1b05de7a1338ea0f3b6f01c0e0f5ff3dd7e8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$xdp(0x2c, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_clone(0x80141000, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)="9f8e7da84a3fec2a051ecb6afc3ce6f62b781c3ea0d47883") r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x4000}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r5, &(0x7f0000000340)=""/200, 0xc8, 0xfff, 0x0) io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r3, 0x0}]) 850.766199ms ago: executing program 7 (id=240): syz_open_procfs(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18cd6, &(0x7f0000000100)={[{@shortname_win95}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@uni_xlate}, {@rodir}, {@uni_xlate}, {@shortname_mixed}, {@numtail}, {@shortname_mixed}, {@rodir}, {@uni_xlate}, {@shortname_lower}, {@shortname_mixed}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}]}, 0x1, 0x2ba, &(0x7f0000001240)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0xfe, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x4040001) close(0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000180)=0xb4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2000000002) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="120000000900000004c1b1e14bcaf602000000002a95eedc31a72dff61606871bb4fe8237ea7eab71e513f7934fa0f54dbcc086153581d4f2d1cd07ca64df2e063d9cd6847d26b818512fcab9f16ad37e16bc47bfb6bd5b93f5c18cc7def729bff8b7da04dffffffff00000000bd9105", @ANYRES32, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r7}, &(0x7f00000004c0), &(0x7f0000000400)}, 0x20) recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9e, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) 745.637752ms ago: executing program 6 (id=241): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x80003, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r2], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x14, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @generic={0xfb, 0x6, 0x3, 0x1, 0x7}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x20006}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x17, r1, 0x8, &(0x7f0000000680)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0xe, 0x0, 0x8}, 0x10, 0x1faaa, r1, 0xa, &(0x7f0000000780)=[r1, r1, 0xffffffffffffffff, r1, r0, r1, r1, 0xffffffffffffffff, r1], &(0x7f00000007c0)=[{0x2, 0x1, 0x5, 0x1}, {0x5, 0x2, 0x6, 0x6}, {0x4, 0x3, 0xa, 0x8}, {0x4, 0x1, 0x4, 0x1}, {0x4, 0x2, 0x2, 0x8}, {0x3, 0x1, 0xf, 0x7}, {0x2, 0x1, 0x3, 0x8}, {0x2, 0x4, 0x1, 0x8}, {0x4, 0x4, 0x3, 0x3}, {0x4, 0x2, 0x2, 0x8}], 0x10, 0x43}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2d, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x3, 0x0, 0x100000000, 0x40008, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x3, 0x5}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x4, 0x2, 0x0, 0xffffffff, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x400) 635.796874ms ago: executing program 0 (id=242): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xffffff98) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='b '], 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@gettaction={0xd4, 0x32, 0xe72c5f922f23ccf3, 0x70bd27, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x35b}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffff9}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x28, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40008c4}, 0x4000000) 577.403746ms ago: executing program 0 (id=243): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) 212.633815ms ago: executing program 0 (id=244): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x11, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0xfffffffd, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) r0 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10092, &(0x7f0000000080), 0xff, 0x249, &(0x7f0000000880)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0xf8d}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet(0x2, 0x2, 0x1) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x88}, {0x0, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 139.872017ms ago: executing program 1 (id=245): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setns(0xc9, 0x0) r2 = socket(0x8, 0x2, 0x0) setsockopt(r2, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) bind(r2, &(0x7f0000000100)=@generic={0x8, "0000ffff01002000"}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'}) r3 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1219, &(0x7f0000003880)="$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") bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB='\n\x00\x00\x00-\x00\x00\x00', @ANYRES32=r0, @ANYRES8=r3, @ANYRES32=0x0, @ANYRES64=0x0], 0x20) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='nfs4\x00', 0xc083, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x4000, 0xa00}]) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev2(r6, &(0x7f0000000400)=[{&(0x7f0000000040)='U', 0x1}], 0x1, 0x3, 0xe89a, 0x12) r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vga_arbiter(r7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r8 = open(&(0x7f0000000280)='./file1\x00', 0x8a201, 0x0) eventfd2(0x1, 0x801) ftruncate(r8, 0x2007ffc) open(&(0x7f0000000180)='./bus\x00', 0x2f77e, 0x42) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRESOCT, @ANYBLOB="000cfa080002ca42dfff0008220400ac1e000114"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x8000) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r9, &(0x7f0000000200)=@abs={0x27, 0x0, 0x4e24}, 0x6e) 113.970827ms ago: executing program 2 (id=246): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xffd4, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000000980)='syzkaller\x00', 0x1}, 0x94) 94.489378ms ago: executing program 7 (id=247): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x28242, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) truncate(&(0x7f0000000300)='./file1\x00', 0x591) 0s ago: executing program 2 (id=248): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe8c9a6083cf03b92}, 0x806, 0x3ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r2}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x7602, 0x5, 0x0, 0x0, 0x100000000000000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x5, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000f1449f3de444530f558a503142ebd7000fddbdf250717c7acac78f0392efdfdaa42e18e4fcf3f964d5597193b84caf333080c049303a43aeba7cf71da745aac6e1c5d48380213172106569a0b8aa5d7e0c061386c957f4b702d1c788e9efbc1bb593e9c2a985028e66c691ce6b5daeb5dacdf14ad2f8a5a2bee8497a99971d6221ccc41b4ac7efe2ee919bfe6d2ea33477917a0d636232b6d1dc4a37004de775356433aed8c9294dc7202a5b0c19e03c099f4d5382bb45700cb72de83467f708e996e32a863bf36c07fec"], 0x20}}, 0x4000000) kernel console output (not intermixed with test programs): ="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.723047][ T3182] sshd-session (3182) used greatest stack depth: 11224 bytes left [ 23.190093][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 23.190109][ T28] audit: type=1400 audit(1786274829.321:118): avc: denied { write } for pid=3220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.221920][ T28] audit: type=1400 audit(1786274829.351:119): avc: denied { write } for pid=3231 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.289499][ T28] audit: type=1400 audit(1786274829.421:120): avc: denied { write } for pid=3234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.317127][ T28] audit: type=1400 audit(1786274829.441:121): avc: denied { write } for pid=3245 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.816280][ T28] audit: type=1400 audit(1786274829.941:122): avc: denied { write } for pid=3249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.844230][ T28] audit: type=1400 audit(1786274829.981:123): avc: denied { write } for pid=3260 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.912746][ T28] audit: type=1400 audit(1786274830.041:124): avc: denied { write } for pid=3263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.940811][ T28] audit: type=1400 audit(1786274830.071:125): avc: denied { write } for pid=3274 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. [ 30.501539][ T28] audit: type=1400 audit(1786274836.631:126): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.524658][ T28] audit: type=1400 audit(1786274836.651:127): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.526757][ T3285] cgroup: Unknown subsys name 'net' [ 30.552457][ T28] audit: type=1400 audit(1786274836.681:128): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.688482][ T3285] cgroup: Unknown subsys name 'cpuset' [ 30.694616][ T3285] cgroup: Unknown subsys name 'rlimit' [ 30.805961][ T28] audit: type=1400 audit(1786274836.931:129): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.837436][ T28] audit: type=1400 audit(1786274836.941:130): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.858247][ T28] audit: type=1400 audit(1786274836.941:131): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.865795][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.879124][ T28] audit: type=1400 audit(1786274836.941:132): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.907685][ T28] audit: type=1400 audit(1786274836.951:133): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.911661][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.932861][ T28] audit: type=1400 audit(1786274836.951:134): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.965016][ T28] audit: type=1400 audit(1786274836.961:135): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.309472][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.316688][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.323835][ T3296] bridge_slave_0: entered allmulticast mode [ 32.330271][ T3296] bridge_slave_0: entered promiscuous mode [ 32.341369][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.348536][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.355622][ T3300] bridge_slave_0: entered allmulticast mode [ 32.362132][ T3300] bridge_slave_0: entered promiscuous mode [ 32.377117][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.384195][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.391326][ T3296] bridge_slave_1: entered allmulticast mode [ 32.397783][ T3296] bridge_slave_1: entered promiscuous mode [ 32.409365][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.416415][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.423530][ T3300] bridge_slave_1: entered allmulticast mode [ 32.430032][ T3300] bridge_slave_1: entered promiscuous mode [ 32.468159][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.492235][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.505421][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.512653][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.519785][ T3295] bridge_slave_0: entered allmulticast mode [ 32.526154][ T3295] bridge_slave_0: entered promiscuous mode [ 32.533822][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.553527][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.560670][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.567795][ T3295] bridge_slave_1: entered allmulticast mode [ 32.574296][ T3295] bridge_slave_1: entered promiscuous mode [ 32.581499][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.597544][ T3296] team0: Port device team_slave_0 added [ 32.608224][ T3296] team0: Port device team_slave_1 added [ 32.618527][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.625710][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.632869][ T3302] bridge_slave_0: entered allmulticast mode [ 32.639409][ T3302] bridge_slave_0: entered promiscuous mode [ 32.664651][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.671854][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.678969][ T3302] bridge_slave_1: entered allmulticast mode [ 32.685514][ T3302] bridge_slave_1: entered promiscuous mode [ 32.697445][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.712019][ T3300] team0: Port device team_slave_0 added [ 32.722392][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.729479][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.736633][ T3301] bridge_slave_0: entered allmulticast mode [ 32.743249][ T3301] bridge_slave_0: entered promiscuous mode [ 32.750993][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.760406][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.767356][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.793303][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.804704][ T3300] team0: Port device team_slave_1 added [ 32.818514][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.825623][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.832817][ T3301] bridge_slave_1: entered allmulticast mode [ 32.839276][ T3301] bridge_slave_1: entered promiscuous mode [ 32.849489][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.856506][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.882484][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.899107][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.920578][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.927619][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.953541][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.965151][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.979157][ T3295] team0: Port device team_slave_0 added [ 32.986068][ T3295] team0: Port device team_slave_1 added [ 32.992054][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.999057][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.025002][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.041555][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.052248][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.091480][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.098451][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.124381][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.135792][ T3302] team0: Port device team_slave_0 added [ 33.149033][ T3296] hsr_slave_0: entered promiscuous mode [ 33.155100][ T3296] hsr_slave_1: entered promiscuous mode [ 33.161785][ T3301] team0: Port device team_slave_0 added [ 33.167544][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.174515][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.200486][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.211876][ T3302] team0: Port device team_slave_1 added [ 33.227334][ T3301] team0: Port device team_slave_1 added [ 33.258888][ T3300] hsr_slave_0: entered promiscuous mode [ 33.265044][ T3300] hsr_slave_1: entered promiscuous mode [ 33.270915][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 33.276673][ T3300] Cannot create hsr debugfs directory [ 33.293021][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.300150][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.326193][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.337924][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.344913][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.370829][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.386911][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.394007][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.420024][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.443631][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.450626][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.476556][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.497189][ T3295] hsr_slave_0: entered promiscuous mode [ 33.503464][ T3295] hsr_slave_1: entered promiscuous mode [ 33.509324][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 33.515054][ T3295] Cannot create hsr debugfs directory [ 33.544676][ T3302] hsr_slave_0: entered promiscuous mode [ 33.550721][ T3302] hsr_slave_1: entered promiscuous mode [ 33.556581][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 33.562385][ T3302] Cannot create hsr debugfs directory [ 33.619435][ T3301] hsr_slave_0: entered promiscuous mode [ 33.625467][ T3301] hsr_slave_1: entered promiscuous mode [ 33.631336][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 33.637063][ T3301] Cannot create hsr debugfs directory [ 33.775674][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.784952][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.792624][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.801275][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.815735][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.824302][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.834244][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.842646][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.864618][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.873311][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.880966][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.889833][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.897475][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.906187][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.913909][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.922524][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.949249][ T3295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.957706][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.966109][ T3295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.974872][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.988141][ T3295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.996752][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.004549][ T3295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.013127][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.046651][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.055261][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.063212][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.072049][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.079949][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.088791][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.096221][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.104934][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.137904][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.147307][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.156237][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.169786][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.178419][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.186010][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.194804][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.203360][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.211951][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.234950][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.249253][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.256412][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.270040][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.277141][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.297304][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.340085][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.349152][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.366165][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.374665][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.381763][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.399020][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.406182][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.414939][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.422052][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.446651][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.453723][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.467486][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.493314][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.504850][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.522695][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.529787][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.552770][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.568207][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.575361][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.607249][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.614344][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.632116][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.639222][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.651993][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.821095][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.829110][ T3296] veth0_vlan: entered promiscuous mode [ 34.843835][ T3296] veth1_vlan: entered promiscuous mode [ 34.871147][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.884236][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.916148][ T3296] veth0_macvtap: entered promiscuous mode [ 34.940729][ T3296] veth1_macvtap: entered promiscuous mode [ 34.968230][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.987462][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.003523][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.028248][ T54] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.044831][ T3300] veth0_vlan: entered promiscuous mode [ 35.071720][ T3301] veth0_vlan: entered promiscuous mode [ 35.080722][ T3300] veth1_vlan: entered promiscuous mode [ 35.095878][ T3301] veth1_vlan: entered promiscuous mode [ 35.117782][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.133923][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.147664][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.170746][ T3300] veth0_macvtap: entered promiscuous mode [ 35.185489][ T3300] veth1_macvtap: entered promiscuous mode [ 35.223856][ T3295] veth0_vlan: entered promiscuous mode [ 35.237666][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.256903][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.264192][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.291351][ T3502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.300577][ T3502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.328166][ T3301] veth0_macvtap: entered promiscuous mode [ 35.341156][ T3295] veth1_vlan: entered promiscuous mode [ 35.351164][ T3301] veth1_macvtap: entered promiscuous mode [ 35.359382][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.373690][ T3302] veth0_vlan: entered promiscuous mode [ 35.387078][ T3295] veth0_macvtap: entered promiscuous mode [ 35.398129][ T54] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.418178][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.425910][ T3295] veth1_macvtap: entered promiscuous mode [ 35.434641][ T3302] veth1_vlan: entered promiscuous mode [ 35.449487][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.497003][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.507974][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.518885][ T3302] veth0_macvtap: entered promiscuous mode [ 35.528720][ T181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.560743][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.570550][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.584249][ T3302] veth1_macvtap: entered promiscuous mode [ 35.598783][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 35.598796][ T28] audit: type=1400 audit(1786274841.731:164): avc: denied { create } for pid=3506 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.651886][ T28] audit: type=1400 audit(1786274841.761:165): avc: denied { setopt } for pid=3506 comm="syz.3.4" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.672852][ T28] audit: type=1400 audit(1786274841.761:166): avc: denied { open } for pid=3506 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.695182][ T28] audit: type=1400 audit(1786274841.761:167): avc: denied { kernel } for pid=3506 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.696494][ T3509] Zero length message leads to an empty skb [ 35.720335][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.724793][ T28] audit: type=1400 audit(1786274841.801:168): avc: denied { create } for pid=3506 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.766448][ T28] audit: type=1400 audit(1786274841.891:169): avc: denied { write } for pid=3506 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.787032][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.795482][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.804517][ T28] audit: type=1400 audit(1786274841.891:170): avc: denied { nlmsg_write } for pid=3506 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.839083][ T28] audit: type=1400 audit(1786274841.941:171): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 35.872359][ T28] audit: type=1400 audit(1786274841.941:172): avc: denied { create } for pid=3508 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.892305][ T28] audit: type=1400 audit(1786274841.941:173): avc: denied { ioctl } for pid=3508 comm="syz.1.7" path="socket:[4640]" dev="sockfs" ino=4640 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.955535][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.968873][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.974340][ T3507] syz.3.4 (3507) used greatest stack depth: 10432 bytes left [ 35.982781][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.008474][ T54] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.023412][ T3519] loop3: detected capacity change from 0 to 1024 [ 36.035379][ T3519] EXT4-fs: Ignoring removed nobh option [ 36.098147][ T181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.113294][ T3519] EXT4-fs: Ignoring removed bh option [ 36.117421][ T181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.154967][ T3519] EXT4-fs: Ignoring removed nobh option [ 36.168255][ T54] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.181525][ T54] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.207891][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.215791][ T3519] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 36.244869][ T3526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 36.257806][ T54] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.270572][ T54] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.303504][ T3526] netlink: 'syz.1.9': attribute type 18 has an invalid length. [ 36.316248][ T3519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.332876][ T3526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 36.363720][ T3526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 36.372487][ T3526] netlink: 'syz.1.9': attribute type 18 has an invalid length. [ 36.380227][ T3526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 36.396371][ T3531] ip6gretap0: entered promiscuous mode [ 36.409224][ T30] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.438509][ T181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.450902][ T3519] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.466550][ T181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.498052][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.538802][ T181] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.568717][ T3540] loop4: detected capacity change from 0 to 512 [ 36.575249][ T3540] ======================================================= [ 36.575249][ T3540] WARNING: The mand mount option has been deprecated and [ 36.575249][ T3540] and is ignored by this kernel. Remove the mand [ 36.575249][ T3540] option from the mount to silence this warning. [ 36.575249][ T3540] ======================================================= [ 36.627847][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.638614][ T3300] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 36.678852][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.696213][ T3300] EXT4-fs (loop3): Remounting filesystem read-only [ 36.760916][ T3541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.039568][ T3543] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 37.188341][ T3545] loop2: detected capacity change from 0 to 128 [ 37.198885][ T3545] vfat: Unknown parameter 'm¾Ì(ð2§Esª£B"”/ïÀQ¥þ V\êÄ)Ú|Â\þ ´ [ 37.198885][ T3545] QG#â9*j624>ÛyýƒÍ [ 37.198885][ T3545] 5H75Býa³kTÅfnI2Pã!G8ãÊÌ$¥]ýÕ' [ 37.217999][ T3531] syz.0.10 (3531) used greatest stack depth: 9672 bytes left [ 37.245281][ T3548] loop0: detected capacity change from 0 to 256 [ 37.271295][ T3548] FAT-fs (loop0): codepage cp855 not found [ 37.577773][ T3557] loop0: detected capacity change from 0 to 512 [ 37.584753][ T3557] EXT4-fs: Ignoring removed orlov option [ 37.590579][ T3557] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.601518][ T3557] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 37.618278][ T3557] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.16: attempt to clear invalid blocks 2 len 1 [ 37.630971][ T3557] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 37.637781][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 37.653391][ C1] EXT4-fs (loop0): initial error at time 1786274843: ext4_clear_blocks:876: inode 13 [ 37.662918][ C1] EXT4-fs (loop0): last error at time 1786274843: ext4_clear_blocks:876: inode 13 [ 37.722067][ T3557] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 37.737065][ T3557] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.16: invalid indirect mapped block 1819239214 (level 0) [ 37.750919][ T3557] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 37.751560][ T3557] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.16: invalid indirect mapped block 1819239214 (level 1) [ 37.774569][ T3557] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 37.780012][ T3557] EXT4-fs (loop0): 1 truncate cleaned up [ 37.795975][ T3557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.046970][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.131006][ T23] IPVS: starting estimator thread 0... [ 38.247999][ T3568] IPVS: using max 2400 ests per chain, 120000 per kthread [ 38.259826][ T3573] vhci_hcd vhci_hcd.2: invalid port number 96 [ 38.266238][ T3573] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 38.274744][ T3573] futex_wake_op: syz.2.23 tries to shift op by -1; fix this program [ 38.395662][ T30] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.917965][ T3599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30'. [ 38.963090][ T30] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.032225][ T3608] loop2: detected capacity change from 0 to 256 [ 39.053039][ T3599] vhci_hcd vhci_hcd.3: invalid port number 12 [ 39.062773][ T30] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.085518][ T3599] vhci_hcd vhci_hcd.3: default hub control req: 0017 v0007 i000c l0 [ 39.100773][ T3608] FAT-fs (loop2): codepage cp855 not found [ 39.105779][ T3609] netlink: 80 bytes leftover after parsing attributes in process `syz.1.30'. [ 39.188985][ T30] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.342445][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.349774][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.469621][ T3620] loop2: detected capacity change from 0 to 512 [ 39.476655][ T3620] EXT4-fs: Ignoring removed orlov option [ 39.482649][ T3620] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.494775][ T3620] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 39.503757][ T3620] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.31: attempt to clear invalid blocks 2 len 1 [ 39.516446][ T3620] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 39.517272][ T3620] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, [ 39.526412][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 39.526430][ C1] EXT4-fs (loop2): initial error at time 1786274845: ext4_clear_blocks:876: inode 13 [ 39.526461][ C1] EXT4-fs (loop2): last error at time 1786274845: ext4_clear_blocks:876: inode 13 [ 39.560049][ T3620] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 39.571185][ T3620] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.31: invalid indirect mapped block 1819239214 (level 0) [ 39.585092][ T3620] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 39.585753][ T3620] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.31: invalid indirect mapped block 1819239214 (level 1) [ 39.608728][ T3620] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 39.610764][ T3620] EXT4-fs (loop2): 1 truncate cleaned up [ 39.626279][ T3620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.843252][ T3578] bridge_slave_0: entered allmulticast mode [ 39.850454][ T3578] bridge_slave_0: entered promiscuous mode [ 39.859811][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.866928][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.874066][ T3578] bridge_slave_1: entered allmulticast mode [ 39.880470][ T3578] bridge_slave_1: entered promiscuous mode [ 39.898506][ T3578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.975456][ T3578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.989734][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.007274][ T3630] FAULT_INJECTION: forcing a failure. [ 40.007274][ T3630] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.040745][ T3630] CPU: 1 UID: 0 PID: 3630 Comm: syz.0.34 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.040776][ T3630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.040800][ T3630] Call Trace: [ 40.040806][ T3630] [ 40.040813][ T3630] __dump_stack+0x1d/0x30 [ 40.040844][ T3630] dump_stack_lvl+0x95/0xd0 [ 40.040872][ T3630] dump_stack+0x15/0x1b [ 40.040933][ T3630] should_fail_ex+0x25e/0x270 [ 40.041040][ T3630] should_fail+0xb/0x20 [ 40.041078][ T3630] should_fail_usercopy+0x1a/0x20 [ 40.041121][ T3630] _copy_from_user+0x1c/0xb0 [ 40.041142][ T3630] copy_from_sockptr_offset+0x66/0xa0 [ 40.041251][ T3630] do_ip6t_set_ctl+0x67e/0x990 [ 40.041282][ T3630] ? kstrtoull+0x111/0x140 [ 40.041400][ T3630] ? __rcu_read_unlock+0x4e/0x70 [ 40.041458][ T3630] nf_setsockopt+0x199/0x1b0 [ 40.041479][ T3630] ipv6_setsockopt+0x11a/0x130 [ 40.041583][ T3630] tcp_setsockopt+0x98/0xb0 [ 40.041603][ T3630] sock_common_setsockopt+0x69/0x80 [ 40.041695][ T3630] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 40.041726][ T3630] __sys_setsockopt+0x184/0x200 [ 40.041764][ T3630] __x64_sys_setsockopt+0x64/0x80 [ 40.041821][ T3630] x64_sys_call+0x2327/0x3020 [ 40.041848][ T3630] do_syscall_64+0x136/0x3c0 [ 40.041881][ T3630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.041952][ T3630] RIP: 0033:0x7f731fa1e0d9 [ 40.042067][ T3630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.042132][ T3630] RSP: 002b:00007f731e477028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 40.042153][ T3630] RAX: ffffffffffffffda RBX: 00007f731fca5fa0 RCX: 00007f731fa1e0d9 [ 40.042170][ T3630] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 40.042186][ T3630] RBP: 00007f731e477090 R08: 00000000000003d8 R09: 0000000000000000 [ 40.042200][ T3630] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.042213][ T3630] R13: 00007f731fca6038 R14: 00007f731fca5fa0 R15: 00007fff233ce9b8 [ 40.042279][ T3630] [ 40.267842][ T3636] loop2: detected capacity change from 0 to 512 [ 40.268766][ T3636] EXT4-fs: Ignoring removed orlov option [ 40.268985][ T3636] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size [ 40.343234][ T3578] team0: Port device team_slave_0 added [ 40.385833][ T3578] team0: Port device team_slave_1 added [ 40.400737][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.411995][ T3593] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.420655][ T3593] bridge_slave_0: entered allmulticast mode [ 40.427156][ T3593] bridge_slave_0: entered promiscuous mode [ 40.443183][ T30] bridge_slave_1: left allmulticast mode [ 40.451496][ T30] bridge_slave_1: left promiscuous mode [ 40.457321][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.465270][ T30] bridge_slave_0: left allmulticast mode [ 40.471096][ T30] bridge_slave_0: left promiscuous mode [ 40.476801][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.557483][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.570602][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.580224][ T30] bond0 (unregistering): Released all slaves [ 40.597980][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.617931][ T3593] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.630221][ T3593] bridge_slave_1: entered allmulticast mode [ 40.636633][ T3593] bridge_slave_1: entered promiscuous mode [ 40.684369][ T3578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.706272][ T3578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.726556][ T28] kauditd_printk_skb: 140 callbacks suppressed [ 40.726591][ T28] audit: type=1400 audit(1786274846.851:314): avc: denied { write } for pid=3651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.737724][ T3661] loop1: detected capacity change from 0 to 512 [ 40.770735][ T3578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.792774][ T28] audit: type=1400 audit(1786274846.921:315): avc: denied { write } for pid=3664 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.818591][ T3661] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.39: iget: bad i_size value: 38620345925642 [ 40.834549][ T30] hsr_slave_0: left promiscuous mode [ 40.851310][ T3661] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.851545][ T3661] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.39: couldn't read orphan inode 15 (err -117) [ 40.860730][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 40.860750][ C0] EXT4-fs (loop1): initial error at time 1786274846: ext4_orphan_get:1399: inode 15 [ 40.860782][ C0] EXT4-fs (loop1): last error at time 1786274846: ext4_orphan_get:1399: inode 15 [ 40.900467][ T30] hsr_slave_1: left promiscuous mode [ 40.912391][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.922487][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.937302][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.948921][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.965159][ T30] veth1_macvtap: left promiscuous mode [ 40.969855][ T3661] loop1: lost filesystem error report for type 5 error -117 [ 40.972668][ T3661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.975083][ T30] veth0_macvtap: left promiscuous mode [ 40.989596][ T28] audit: type=1400 audit(1786274847.121:316): avc: denied { write } for pid=3660 comm="syz.1.39" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.005148][ T30] veth1_vlan: left promiscuous mode [ 41.025932][ T30] veth0_vlan: left promiscuous mode [ 41.039175][ T28] audit: type=1400 audit(1786274847.121:317): avc: denied { read append open } for pid=3660 comm="syz.1.39" path="/10/file0/cpu.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.070630][ T28] audit: type=1400 audit(1786274847.161:318): avc: denied { write } for pid=3660 comm="syz.1.39" name="cpu.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.120582][ T28] audit: type=1400 audit(1786274847.161:319): avc: denied { map } for pid=3660 comm="syz.1.39" path="/10/file0/cpu.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.148189][ T3673] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.39: bg 0: block 5: invalid block bitmap [ 41.162149][ T28] audit: type=1400 audit(1786274847.231:320): avc: denied { write } for pid=3660 comm="syz.1.39" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.170135][ T3673] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1020 with error 28 [ 41.213593][ T28] audit: type=1400 audit(1786274847.341:321): avc: denied { mmap_zero } for pid=3660 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 41.227807][ T3673] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.227807][ T3673] [ 41.244678][ T28] audit: type=1400 audit(1786274847.371:322): avc: denied { getopt } for pid=3660 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 41.270627][ T3673] EXT4-fs (loop1): Total free blocks count 0 [ 41.276903][ T30] team0 (unregistering): Port device team_slave_1 removed [ 41.287307][ T3673] EXT4-fs (loop1): Free/Dirty block details [ 41.293938][ T3673] EXT4-fs (loop1): free_blocks=0 [ 41.298274][ T30] team0 (unregistering): Port device team_slave_0 removed [ 41.299064][ T3673] EXT4-fs (loop1): dirty_blocks=1036 [ 41.311512][ T3673] EXT4-fs (loop1): Block reservation details [ 41.317599][ T3673] EXT4-fs (loop1): i_reserved_data_blocks=1036 [ 41.365598][ T3593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.377212][ T3578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.384939][ T3578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.411255][ T3578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.422428][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 41.434952][ T3593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.463444][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 1020 with max blocks 16 with error 28 [ 41.469154][ T3593] team0: Port device team_slave_0 added [ 41.482056][ T3296] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #19: comm syz-executor: data will be lost [ 41.499242][ T3593] team0: Port device team_slave_1 added [ 41.527334][ T3578] hsr_slave_0: entered promiscuous mode [ 41.538068][ T3578] hsr_slave_1: entered promiscuous mode [ 41.543935][ T3578] debugfs: 'hsr0' already exists in 'hsr' [ 41.550211][ T3578] Cannot create hsr debugfs directory [ 41.569545][ T3593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.576945][ T3593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.611761][ T3593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.624442][ T3593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.631691][ T3593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.665457][ T3681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42'. [ 41.674439][ T28] audit: type=1400 audit(1786274847.791:323): avc: denied { nlmsg_read } for pid=3680 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.689425][ T3593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.695952][ T3682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42'. [ 41.726993][ T3685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 41.781437][ T3593] hsr_slave_0: entered promiscuous mode [ 41.795945][ T3593] hsr_slave_1: entered promiscuous mode [ 41.807870][ T3593] debugfs: 'hsr0' already exists in 'hsr' [ 41.816735][ T3593] Cannot create hsr debugfs directory [ 41.941139][ T30] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.986086][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 42.010507][ T30] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.022310][ T3691] loop1: detected capacity change from 0 to 512 [ 42.025571][ T3705] netlink: 52 bytes leftover after parsing attributes in process `syz.2.45'. [ 42.037554][ T3705] tipc: Invalid UDP bearer configuration [ 42.037564][ T3705] tipc: Enabling of bearer rejected, failed to enable media [ 42.052233][ T3578] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.062266][ T3578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.074400][ T3705] loop2: detected capacity change from 0 to 512 [ 42.095976][ T3705] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 42.112976][ T3578] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.129403][ T3705] EXT4-fs (loop2): mount failed [ 42.146714][ T3705] loop2: detected capacity change from 0 to 512 [ 42.150049][ T3578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.160871][ T3578] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.170837][ T3578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.199359][ T30] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.216424][ T3578] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.240831][ T3578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.268920][ T30] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.310884][ T3593] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 42.325342][ T3593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.329429][ T3537] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.332963][ T3639] Bluetooth: hci0: command 0x1003 tx timeout [ 42.350048][ T3593] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 42.358508][ T3593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.372788][ T3593] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 42.393033][ T3593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.411648][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 42.423520][ T3593] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 42.437308][ T3593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.446606][ T3738] mmap: syz.2.47 (3738) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.518004][ T30] bridge_slave_1: left allmulticast mode [ 42.523708][ T30] bridge_slave_1: left promiscuous mode [ 42.529538][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.541003][ T30] bridge_slave_0: left allmulticast mode [ 42.548413][ T30] bridge_slave_0: left promiscuous mode [ 42.554166][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.622846][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.633688][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.643980][ T30] bond0 (unregistering): Released all slaves [ 42.666935][ T23] bridge0: entered promiscuous mode [ 42.693410][ T3578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.716009][ T30] hsr_slave_0: left promiscuous mode [ 42.723767][ T30] hsr_slave_1: left promiscuous mode [ 42.730593][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.738146][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.747109][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.756860][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.768261][ T30] veth1_macvtap: left promiscuous mode [ 42.773909][ T30] veth0_macvtap: left promiscuous mode [ 42.779604][ T30] veth1_vlan: left promiscuous mode [ 42.784941][ T30] veth0_vlan: left promiscuous mode [ 42.879104][ T3771] FAULT_INJECTION: forcing a failure. [ 42.879104][ T3771] name failslab, interval 1, probability 0, space 0, times 1 [ 42.891775][ T3771] CPU: 0 UID: 0 PID: 3771 Comm: syz.0.53 Not tainted syzkaller #0 PREEMPT(lazy) [ 42.891798][ T3771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.891840][ T3771] Call Trace: [ 42.891922][ T3771] [ 42.891929][ T3771] __dump_stack+0x1d/0x30 [ 42.891952][ T3771] dump_stack_lvl+0x95/0xd0 [ 42.891990][ T3771] dump_stack+0x15/0x1b [ 42.892018][ T3771] should_fail_ex+0x25e/0x270 [ 42.892054][ T3771] should_failslab+0x8c/0xb0 [ 42.892136][ T3771] __kmalloc_flags_noprof+0x10c/0x540 [ 42.892219][ T3771] ? alloc_slab_obj_exts+0x48/0xb0 [ 42.892246][ T3771] ? alloc_slab_obj_exts+0x48/0xb0 [ 42.892275][ T3771] alloc_slab_obj_exts+0x48/0xb0 [ 42.892303][ T3771] __memcg_slab_post_alloc_hook+0x436/0x860 [ 42.892367][ T3771] ? should_fail_ex+0xd9/0x270 [ 42.892400][ T3771] kmem_cache_alloc_noprof+0x1f1/0x3c0 [ 42.892423][ T3771] ? dst_alloc+0xbd/0x100 [ 42.892445][ T3771] ? dst_alloc+0xbd/0x100 [ 42.892515][ T3771] ? __pfx_ip6_dst_gc+0x10/0x10 [ 42.892540][ T3771] dst_alloc+0xbd/0x100 [ 42.892608][ T3771] ip6_pol_route+0xa40/0xef0 [ 42.892638][ T3771] ? ip6_pol_route+0x692/0xef0 [ 42.892676][ T3771] ip6_pol_route_output+0x40/0x50 [ 42.892711][ T3771] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 42.892824][ T3771] fib6_rule_lookup+0x14b/0x4c0 [ 42.892864][ T3771] ? ktime_get+0x212/0x240 [ 42.892890][ T3771] ? lapic_next_event+0x11/0x20 [ 42.892960][ T3771] ? clockevents_program_event+0x2fd/0x340 [ 42.892995][ T3771] ? unwind_next_frame+0xbad/0xd40 [ 42.893085][ T3771] ip6_route_output_flags+0x1e0/0x2c0 [ 42.893121][ T3771] ip6_dst_lookup_tail+0x49a/0xa90 [ 42.893165][ T3771] ? count_memcg_events+0x123/0x210 [ 42.893192][ T3771] ? handle_mm_fault+0x293c/0x2da0 [ 42.893294][ T3771] ? __rcu_read_unlock+0x4e/0x70 [ 42.893323][ T3771] ip6_sk_dst_lookup_flow+0x4e1/0x5e0 [ 42.893510][ T3771] ? __rcu_read_unlock+0x4e/0x70 [ 42.893546][ T3771] udpv6_sendmsg+0x1355/0x1700 [ 42.893593][ T3771] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 42.893625][ T3771] inet6_sendmsg+0xac/0xd0 [ 42.893716][ T3771] ? __pfx_inet6_sendmsg+0x10/0x10 [ 42.893750][ T3771] ____sys_sendmsg+0x390/0x580 [ 42.893779][ T3771] ___sys_sendmsg+0x195/0x1e0 [ 42.893811][ T3771] ? terminate_walk+0x1d5/0x200 [ 42.893854][ T3771] __sys_sendmmsg+0x185/0x320 [ 42.893915][ T3771] __x64_sys_sendmmsg+0x57/0x70 [ 42.893936][ T3771] x64_sys_call+0x27aa/0x3020 [ 42.894021][ T3771] do_syscall_64+0x136/0x3c0 [ 42.894127][ T3771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.894157][ T3771] RIP: 0033:0x7f731fa1e0d9 [ 42.894229][ T3771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.894254][ T3771] RSP: 002b:00007f731e477028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 42.894281][ T3771] RAX: ffffffffffffffda RBX: 00007f731fca5fa0 RCX: 00007f731fa1e0d9 [ 42.894317][ T3771] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 42.894331][ T3771] RBP: 00007f731e477090 R08: 0000000000000000 R09: 0000000000000000 [ 42.894377][ T3771] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 42.894394][ T3771] R13: 00007f731fca6038 R14: 00007f731fca5fa0 R15: 00007fff233ce9b8 [ 42.894419][ T3771] [ 43.304201][ T30] team0 (unregistering): Port device team_slave_1 removed [ 43.322455][ T30] team0 (unregistering): Port device team_slave_0 removed [ 43.360486][ T3784] netlink: 44 bytes leftover after parsing attributes in process `syz.2.58'. [ 43.384603][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 43.405017][ T3593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.429210][ T3787] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.59'. [ 43.443286][ T3578] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.454916][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.462122][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.482228][ T3787] netlink: 300 bytes leftover after parsing attributes in process `syz.2.59'. [ 43.490816][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.498660][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.527931][ T3593] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.559873][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.566962][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.581232][ T3799] netlink: 121 bytes leftover after parsing attributes in process `syz.0.62'. [ 43.611799][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.619048][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.771778][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 44.015884][ T3578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.028522][ T3593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.053054][ T3861] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.71'. [ 44.082824][ T3861] netlink: 300 bytes leftover after parsing attributes in process `syz.1.71'. [ 44.172962][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 44.314535][ T3593] veth0_vlan: entered promiscuous mode [ 44.327410][ T3593] veth1_vlan: entered promiscuous mode [ 44.351528][ T3578] veth0_vlan: entered promiscuous mode [ 44.364626][ T3593] veth0_macvtap: entered promiscuous mode [ 44.374898][ T3578] veth1_vlan: entered promiscuous mode [ 44.382415][ T3593] veth1_macvtap: entered promiscuous mode [ 44.400632][ T3593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.434181][ T3578] veth0_macvtap: entered promiscuous mode [ 44.443685][ T3593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.462221][ T3578] veth1_macvtap: entered promiscuous mode [ 44.483747][ T3578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.508179][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.521268][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.533692][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 44.542065][ T3578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.568390][ T361] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.577985][ T361] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.595921][ T3924] capability: warning: `syz.6.28' uses deprecated v2 capabilities in a way that may be insecure [ 44.608439][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.619013][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.648227][ T181] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.670366][ T181] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.755177][ T3945] loop2: detected capacity change from 0 to 256 [ 44.764212][ T3934] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in; [ 44.764212][ T3934] program syz.0.77 not setting count and/or reply_len properly [ 44.813962][ T3945] FAT-fs (loop2): codepage cp855 not found [ 44.942295][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 44.998146][ T3964] loop5: detected capacity change from 0 to 256 [ 45.026446][ T3964] FAT-fs (loop5): codepage cp855 not found [ 45.098642][ T3966] loop2: detected capacity change from 0 to 512 [ 45.105452][ T3966] EXT4-fs: Ignoring removed orlov option [ 45.111234][ T3966] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.121875][ T3966] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 45.131254][ T3966] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.78: attempt to clear invalid blocks 2 len 1 [ 45.143907][ T3966] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 45.147896][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 45.163473][ C1] EXT4-fs (loop2): initial error at time 1786274851: ext4_clear_blocks:876: inode 13 [ 45.172992][ C1] EXT4-fs (loop2): last error at time 1786274851: ext4_clear_blocks:876: inode 13 [ 45.321530][ T3966] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 45.336619][ T3966] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.78: invalid indirect mapped block 1819239214 (level 0) [ 45.350601][ T3966] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 45.354969][ T3966] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.78: invalid indirect mapped block 1819239214 (level 1) [ 45.378033][ T3966] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 45.440355][ T3966] EXT4-fs (loop2): 1 truncate cleaned up [ 45.456376][ T3966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.516149][ T3971] loop5: detected capacity change from 0 to 512 [ 45.523394][ T3971] EXT4-fs: Ignoring removed orlov option [ 45.529204][ T3971] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.654362][ T3971] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 45.663336][ T3971] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.82: attempt to clear invalid blocks 2 len 1 [ 45.676013][ T3971] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 45.677445][ T3971] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, [ 45.686617][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 45.686633][ C1] EXT4-fs (loop5): initial error at time 1786274851: ext4_clear_blocks:876: inode 13 [ 45.686657][ C1] EXT4-fs (loop5): last error at time 1786274851: ext4_clear_blocks:876: inode 13 [ 45.720193][ T3971] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 45.729193][ T3971] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.82: invalid indirect mapped block 1819239214 (level 0) [ 45.742986][ T3971] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 45.743507][ T3971] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.82: invalid indirect mapped block 1819239214 (level 1) [ 45.766457][ T3971] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 45.774117][ T3971] EXT4-fs (loop5): 1 truncate cleaned up [ 45.789801][ T3971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.819494][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 45.819505][ T28] audit: type=1400 audit(1786274851.951:367): avc: denied { create } for pid=3973 comm="syz.6.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 45.989389][ T3578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.004911][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.140204][ T3999] loop2: detected capacity change from 0 to 164 [ 46.165986][ T28] audit: type=1400 audit(1786274852.291:368): avc: denied { mount } for pid=3998 comm="syz.2.91" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 46.591853][ T4018] loop1: detected capacity change from 0 to 256 [ 46.612409][ T28] audit: type=1400 audit(1786274852.741:369): avc: denied { module_request } for pid=4017 comm="syz.1.97" kmod="nls_cp855" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.646125][ T4018] FAT-fs (loop1): codepage cp855 not found [ 46.796334][ T28] audit: type=1400 audit(1786274852.921:370): avc: denied { write } for pid=4023 comm="syz.5.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.927577][ T4031] loop1: detected capacity change from 0 to 512 [ 46.934531][ T4031] EXT4-fs: Ignoring removed orlov option [ 46.940338][ T4031] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.981908][ T4031] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 46.998678][ T4031] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.97: attempt to clear invalid blocks 2 len 1 [ 47.011410][ T4031] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 47.015279][ T4031] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, [ 47.024493][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 47.024508][ C1] EXT4-fs (loop1): initial error at time 1786274853: ext4_clear_blocks:876: inode 13 [ 47.024545][ C1] EXT4-fs (loop1): last error at time 1786274853: ext4_clear_blocks:876: inode 13 [ 47.058154][ T4031] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 47.069447][ T4031] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.97: invalid indirect mapped block 1819239214 (level 0) [ 47.083279][ T4031] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 47.103034][ T4031] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.97: invalid indirect mapped block 1819239214 (level 1) [ 47.125982][ T4031] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 47.135256][ T4031] EXT4-fs (loop1): 1 truncate cleaned up [ 47.150837][ T4031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.232226][ T4029] loop5: detected capacity change from 0 to 512 [ 47.327570][ T28] audit: type=1400 audit(1786274853.391:371): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 47.347851][ T28] audit: type=1400 audit(1786274853.471:372): avc: denied { mounton } for pid=4023 comm="syz.5.98" path="/6/file2" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.383349][ T4029] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.429084][ T4029] ext4 filesystem being mounted at /6/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.463934][ T4029] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.495008][ T28] audit: type=1400 audit(1786274853.621:373): avc: denied { mount } for pid=4047 comm="syz.0.101" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 47.498090][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.529484][ T28] audit: type=1400 audit(1786274853.661:374): avc: denied { read write } for pid=4047 comm="syz.0.101" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 47.571201][ T28] audit: type=1400 audit(1786274853.661:375): avc: denied { open } for pid=4047 comm="syz.0.101" path="/20/dev/mapper/control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 47.716147][ T28] audit: type=1400 audit(1786274853.661:376): avc: denied { bind } for pid=4047 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.883043][ T4060] __nla_validate_parse: 5 callbacks suppressed [ 47.883060][ T4060] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.106'. [ 47.911872][ T4060] netlink: 300 bytes leftover after parsing attributes in process `syz.5.106'. [ 47.947285][ T4063] can: request_module (can-proto-4) failed. [ 47.964333][ T4063] can: request_module (can-proto-4) failed. [ 48.003940][ T4063] can: request_module (can-proto-4) failed. [ 48.033461][ T4063] can: request_module (can-proto-4) failed. [ 48.054168][ T4063] can: request_module (can-proto-4) failed. [ 48.081491][ T4063] can: request_module (can-proto-4) failed. [ 48.104287][ T4081] loop0: detected capacity change from 0 to 256 [ 48.107887][ T4063] can: request_module (can-proto-4) failed. [ 48.133123][ T4063] can: request_module (can-proto-4) failed. [ 48.159643][ T4081] FAT-fs (loop0): codepage cp855 not found [ 48.167584][ T4063] can: request_module (can-proto-4) failed. [ 48.293978][ T4063] can: request_module (can-proto-4) failed. [ 48.449326][ T4099] loop0: detected capacity change from 0 to 512 [ 48.456286][ T4099] EXT4-fs: Ignoring removed orlov option [ 48.462058][ T4099] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.481232][ T4099] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 48.490206][ T4099] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.112: attempt to clear invalid blocks 2 len 1 [ 48.503040][ T4099] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 48.507743][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 48.523336][ C1] EXT4-fs (loop0): initial error at time 1786274854: ext4_clear_blocks:876: inode 13 [ 48.532891][ C1] EXT4-fs (loop0): last error at time 1786274854: ext4_clear_blocks:876: inode 13 [ 48.561749][ T4099] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 48.577214][ T4099] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.112: invalid indirect mapped block 1819239214 (level 0) [ 48.595031][ T4099] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.112: invalid indirect mapped block 1819239214 (level 1) [ 48.610137][ T4099] EXT4-fs (loop0): 1 truncate cleaned up [ 48.616914][ T4099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.708795][ T4103] loop1: detected capacity change from 0 to 128 [ 48.811184][ T4103] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 48.839021][ T4103] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.892090][ T4107] netlink: 20 bytes leftover after parsing attributes in process `syz.5.116'. [ 48.997216][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.070275][ T4119] loop5: detected capacity change from 0 to 512 [ 49.078598][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.079995][ T4119] EXT4-fs (loop5): 1 truncate cleaned up [ 49.106232][ T4119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.119401][ T4123] netlink: 132 bytes leftover after parsing attributes in process `syz.1.120'. [ 49.159726][ T4125] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.122'. [ 49.226858][ T4125] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 49.233301][ T4132] loop2: detected capacity change from 0 to 2048 [ 49.291444][ T4132] loop2: p1 < > p3 < > p4 [ 49.297496][ T4132] loop2: partition table partially beyond EOD, truncated [ 49.320506][ T4132] loop2: p3 start 458752 is beyond EOD, truncated [ 49.332471][ T4132] loop2: p4 size 722688 extends beyond EOD, truncated [ 49.388538][ T4141] loop1: detected capacity change from 0 to 512 [ 49.405260][ T4141] EXT4-fs: Ignoring removed i_version option [ 49.425616][ T4141] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.447658][ T4141] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 49.477809][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 49.484351][ C0] EXT4-fs (loop1): initial error at time 1786274855: ext4_mb_generate_buddy:1317 [ 49.493508][ C0] EXT4-fs (loop1): last error at time 1786274855: ext4_mb_generate_buddy:1317 [ 49.493508][ T4141] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.127: Failed to acquire dquot type 1 [ 49.493534][ T4141] loop1: lost filesystem error report for type 5 error -28 [ 49.502474][ C0] [ 49.533718][ T4141] EXT4-fs (loop1): 1 truncate cleaned up [ 49.540088][ T4144] netlink: 24 bytes leftover after parsing attributes in process `syz.6.128'. [ 49.553542][ T4147] loop0: detected capacity change from 0 to 256 [ 49.560574][ T4141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.613759][ T4147] FAT-fs (loop0): codepage cp855 not found [ 49.761856][ T4150] syz.2.125 uses obsolete (PF_INET,SOCK_PACKET) [ 49.924093][ T4154] loop0: detected capacity change from 0 to 512 [ 49.931104][ T4154] EXT4-fs: Ignoring removed orlov option [ 49.936931][ T4154] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.292740][ T4150] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 50.299457][ T4150] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 50.307234][ T4150] vhci_hcd vhci_hcd.0: Device attached [ 50.363429][ T4154] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 50.373307][ T4154] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.129: attempt to clear invalid blocks 2 len 1 [ 50.386433][ T4154] fserror_report: 2 callbacks suppressed [ 50.386450][ T4154] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 50.397748][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 50.413326][ C0] EXT4-fs (loop0): initial error at time 1786274856: ext4_clear_blocks:876: inode 13 [ 50.422834][ C0] EXT4-fs (loop0): last error at time 1786274856: ext4_clear_blocks:876: inode 13 [ 50.481601][ T4156] vhci_hcd: connection closed [ 50.494660][ T361] vhci_hcd vhci_hcd.2: stop threads [ 50.499550][ T4154] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 50.519605][ T4154] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.129: invalid indirect mapped block 1819239214 (level 0) [ 50.533454][ T4154] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 50.536276][ T4154] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.129: invalid indirect mapped block 1819239214 (level 1) [ 50.559247][ T4154] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 50.560630][ T4154] EXT4-fs (loop0): 1 truncate cleaned up [ 50.579543][ T4154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.626093][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.649441][ T361] vhci_hcd vhci_hcd.2: release socket [ 50.654957][ T361] vhci_hcd vhci_hcd.2: disconnect device [ 50.661014][ T23] usb 6-1: SetAddress Request (2) to port 0 [ 50.667605][ T23] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 50.687860][ T23] usb 6-1: enqueue for inactive port 0 [ 50.700507][ T23] usb 6-1: enqueue for inactive port 0 [ 50.762472][ T23] usb 6-1: enqueue for inactive port 0 [ 50.839808][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.895865][ T23] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 51.001620][ T4161] loop6: detected capacity change from 0 to 512 [ 51.020775][ T23] usb 6-1: enqueue for inactive port 0 [ 51.076840][ T23] usb 6-1: enqueue for inactive port 0 [ 51.115176][ T4165] netlink: 132 bytes leftover after parsing attributes in process `syz.0.132'. [ 51.160815][ T23] usb 6-1: enqueue for inactive port 0 [ 51.188867][ T806] IPVS: starting estimator thread 0... [ 51.201058][ T4161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.276453][ T4161] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.298491][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 51.298505][ T28] audit: type=1400 audit(1786274857.431:409): avc: denied { setopt } for pid=4173 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.332682][ T4170] IPVS: using max 2592 ests per chain, 129600 per kthread [ 51.388463][ T4176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 51.435886][ T28] audit: type=1400 audit(1786274857.461:410): avc: denied { connect } for pid=4173 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.461036][ T4176] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.505192][ T4176] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.135: Freeing blocks not in datazone - block = 0, count = 16 [ 51.538882][ T28] audit: type=1400 audit(1786274857.491:411): avc: denied { write } for pid=4159 comm="syz.6.131" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.578539][ T4184] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.137'. [ 51.601692][ T3578] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 51.617350][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.627313][ T4184] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 51.635785][ T28] audit: type=1400 audit(1786274857.631:412): avc: denied { write } for pid=4175 comm="syz.0.135" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.663074][ T3578] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 51.734661][ T3593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.747192][ T4189] xt_hashlimit: max too large, truncated to 1048576 [ 51.755987][ T28] audit: type=1400 audit(1786274857.731:413): avc: denied { write } for pid=3578 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.807376][ T4189] No such timeout policy "syz1" [ 51.834600][ T4133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.877834][ T28] audit: type=1400 audit(1786274858.001:414): avc: denied { create } for pid=4193 comm="syz.6.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.908555][ T4194] ip6gretap0: entered promiscuous mode [ 52.053937][ T28] audit: type=1400 audit(1786274858.181:415): avc: denied { name_connect } for pid=4199 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 52.103306][ T28] audit: type=1400 audit(1786274858.231:416): avc: denied { listen } for pid=4199 comm="syz.1.145" lport=45809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.172414][ T4204] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.191338][ T361] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.206269][ T4204] EXT4-fs warning (device loop0): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 52.237680][ T28] audit: type=1400 audit(1786274858.351:417): avc: denied { accept } for pid=4199 comm="syz.1.145" lport=45809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.259545][ T23] usb usb6-port1: attempt power cycle [ 52.296579][ T4214] set_capacity_and_notify: 3 callbacks suppressed [ 52.296596][ T4214] loop6: detected capacity change from 0 to 1024 [ 52.315017][ T28] audit: type=1400 audit(1786274858.361:418): avc: denied { create } for pid=4199 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 52.346319][ T4216] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.150'. [ 52.358323][ T4214] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.370676][ T4214] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.383284][ T4214] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.149: Freeing blocks not in datazone - block = 0, count = 16 [ 52.396991][ T4216] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 52.438216][ T361] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.472529][ T3593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.512371][ T361] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.566381][ T4231] netlink: 132 bytes leftover after parsing attributes in process `syz.6.153'. [ 52.610247][ T361] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.641434][ T4237] loop6: detected capacity change from 0 to 128 [ 52.682633][ T4241] loop1: detected capacity change from 0 to 512 [ 52.721608][ T4241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.752757][ T4241] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.795697][ T361] bridge_slave_1: left allmulticast mode [ 52.802266][ T361] bridge_slave_1: left promiscuous mode [ 52.808324][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.818316][ T361] bridge_slave_0: left allmulticast mode [ 52.824812][ T361] bridge_slave_0: left promiscuous mode [ 52.840497][ T4257] loop2: detected capacity change from 0 to 128 [ 52.857590][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.877144][ T4257] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.894030][ T4241] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.158: iget: bad i_size value: 2533274857506816 [ 52.899035][ T4257] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.927450][ T4257] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.942273][ T4263] loop0: detected capacity change from 0 to 1024 [ 52.969112][ T4263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.987129][ T4263] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.000022][ T4263] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.162: Freeing blocks not in datazone - block = 0, count = 16 [ 53.034153][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.049355][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.059340][ T361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.090299][ T361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.105688][ T361] bond0 (unregistering): Released all slaves [ 53.112044][ T4279] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 53.127866][ T4275] loop1: detected capacity change from 0 to 1764 [ 53.141523][ T4275] ISOFS: Bad logical zone size 1280 [ 53.148677][ T4258] netlink: 1010 bytes leftover after parsing attributes in process `syz.6.161'. [ 53.160142][ T4258] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 53.200443][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 53.219043][ T361] hsr_slave_0: left promiscuous mode [ 53.228734][ T4285] netlink: 132 bytes leftover after parsing attributes in process `syz.1.166'. [ 53.257577][ T361] hsr_slave_1: left promiscuous mode [ 53.264296][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.273548][ T361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.290150][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.297720][ T361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.308852][ T361] veth1_macvtap: left promiscuous mode [ 53.314375][ T361] veth0_macvtap: left promiscuous mode [ 53.320404][ T361] veth1_vlan: left promiscuous mode [ 53.325769][ T361] veth0_vlan: left promiscuous mode [ 53.353589][ T4296] loop0: detected capacity change from 0 to 1024 [ 53.379148][ T4296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.409028][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.422743][ T361] team0 (unregistering): Port device team_slave_1 removed [ 53.443575][ T361] team0 (unregistering): Port device team_slave_0 removed [ 53.535755][ T4307] loop6: detected capacity change from 0 to 1024 [ 53.579591][ T4307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.595516][ T4313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.174'. [ 53.608672][ T4307] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.633111][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.645913][ T4307] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.173: Freeing blocks not in datazone - block = 0, count = 16 [ 53.688174][ T3593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.711031][ T4324] loop2: detected capacity change from 0 to 512 [ 53.722290][ T4324] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 53.732583][ T4324] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 53.765599][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.788588][ T4337] FAULT_INJECTION: forcing a failure. [ 53.788588][ T4337] name failslab, interval 1, probability 0, space 0, times 0 [ 53.807401][ T4225] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.832100][ T4225] bridge_slave_0: entered allmulticast mode [ 53.844499][ T4337] CPU: 1 UID: 0 PID: 4337 Comm: syz.6.177 Not tainted syzkaller #0 PREEMPT(lazy) [ 53.844586][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.844597][ T4337] Call Trace: [ 53.844603][ T4337] [ 53.844609][ T4337] __dump_stack+0x1d/0x30 [ 53.844636][ T4337] dump_stack_lvl+0x95/0xd0 [ 53.844670][ T4337] dump_stack+0x15/0x1b [ 53.844693][ T4337] should_fail_ex+0x25e/0x270 [ 53.844729][ T4337] ? alloc_fs_context+0x41/0x570 [ 53.844754][ T4337] should_failslab+0x8c/0xb0 [ 53.844819][ T4337] __kmalloc_cache_noprof+0x7b/0x3d0 [ 53.844844][ T4337] ? alloc_fs_context+0x41/0x570 [ 53.844871][ T4337] alloc_fs_context+0x41/0x570 [ 53.844975][ T4337] ? fs_context_for_mount+0x11/0x30 [ 53.845004][ T4337] fs_context_for_mount+0x22/0x30 [ 53.845028][ T4337] do_new_mount+0xe7/0x8d0 [ 53.845050][ T4337] ? security_capable+0x7b/0x90 [ 53.845080][ T4337] path_mount+0x4ad/0xb90 [ 53.845109][ T4337] __se_sys_mount+0x28c/0x2e0 [ 53.845137][ T4337] ? fput+0x8f/0xc0 [ 53.845171][ T4337] __x64_sys_mount+0x67/0x80 [ 53.845252][ T4337] x64_sys_call+0x2d61/0x3020 [ 53.845281][ T4337] do_syscall_64+0x136/0x3c0 [ 53.845319][ T4337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.845347][ T4337] RIP: 0033:0x7f165f14e0d9 [ 53.845368][ T4337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.845430][ T4337] RSP: 002b:00007f165dba7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 53.845475][ T4337] RAX: ffffffffffffffda RBX: 00007f165f3d5fa0 RCX: 00007f165f14e0d9 [ 53.845536][ T4337] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 53.845550][ T4337] RBP: 00007f165dba7090 R08: 0000200000000600 R09: 0000000000000000 [ 53.845563][ T4337] R10: 0000000000800004 R11: 0000000000000246 R12: 0000000000000001 [ 53.845588][ T4337] R13: 00007f165f3d6038 R14: 00007f165f3d5fa0 R15: 00007ffd6b69fd88 [ 53.845607][ T4337] [ 53.952677][ T4225] bridge_slave_0: entered promiscuous mode [ 54.052167][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.059658][ T4225] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.066948][ T4225] bridge_slave_1: entered allmulticast mode [ 54.073704][ T4225] bridge_slave_1: entered promiscuous mode [ 54.082313][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 54.149819][ T4225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.161758][ T4225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.171799][ T23] usb usb6-port1: unable to enumerate USB device [ 54.241167][ T4225] team0: Port device team_slave_0 added [ 54.250396][ T4376] loop2: detected capacity change from 0 to 1024 [ 54.258273][ T4225] team0: Port device team_slave_1 added [ 54.277370][ T4376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.292389][ T4376] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.322126][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.187'. [ 54.328595][ T4225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.338135][ T4225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.363909][ T4376] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.186: Freeing blocks not in datazone - block = 0, count = 16 [ 54.377523][ T4225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.389104][ T4225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.396065][ T4225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.422374][ T4225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.455691][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.479057][ T4225] hsr_slave_0: entered promiscuous mode [ 54.485146][ T4225] hsr_slave_1: entered promiscuous mode [ 54.491616][ T4225] debugfs: 'hsr0' already exists in 'hsr' [ 54.497645][ T4225] Cannot create hsr debugfs directory [ 54.602238][ T4396] FAT-fs (loop2): codepage cp855 not found [ 54.775785][ T4225] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 54.786010][ T4225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.794112][ T4225] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 54.840004][ T4414] EXT4-fs: Ignoring removed orlov option [ 54.845803][ T4414] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.862535][ T4414] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 54.873360][ T4414] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.190: attempt to clear invalid blocks 2 len 1 [ 54.886099][ T4414] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 54.887742][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 54.903339][ C1] EXT4-fs (loop2): initial error at time 1786274861: ext4_clear_blocks:876: inode 13 [ 54.912889][ C1] EXT4-fs (loop2): last error at time 1786274861: ext4_clear_blocks:876: inode 13 [ 54.933548][ T4414] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 54.948208][ T4414] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.190: invalid indirect mapped block 1819239214 (level 0) [ 54.962115][ T4414] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 54.962979][ T4414] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.190: invalid indirect mapped block 1819239214 (level 1) [ 54.986109][ T4414] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 54.987632][ T4414] EXT4-fs (loop2): 1 truncate cleaned up [ 55.003618][ T4414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.067618][ T4225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.123563][ T4225] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 55.178477][ T4225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.219837][ T4225] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 55.266497][ T4225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.367482][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.437658][ T4429] netlink: 132 bytes leftover after parsing attributes in process `syz.2.193'. [ 55.468559][ T4225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.482770][ T4434] EXT4-fs: test_dummy_encryption option not supported [ 55.512670][ T4225] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.528512][ T4434] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #11: block 992: comm syz.0.195: lblock 6 mapped to illegal pblock 992 (length 1) [ 55.549676][ T4434] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.551181][ T4434] ------------[ cut here ]------------ [ 55.560356][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 55.560378][ C0] EXT4-fs (loop0): initial error at time 1786274861: ext4_map_blocks:791: inode 11: block 992 [ 55.560422][ C0] EXT4-fs (loop0): last error at time 1786274861: ext4_map_blocks:791: inode 11: block 992 [ 55.592784][ T4434] EA inode 11 i_nlink=2 [ 55.592816][ T4434] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.0.195/4434 [ 55.607748][ T4434] Modules linked in: [ 55.611418][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.611681][ T4434] CPU: 0 UID: 0 PID: 4434 Comm: syz.0.195 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.618791][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.635288][ T4434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.639054][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.645406][ T4434] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 55.652515][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.665879][ T4438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 55.666461][ T4434] Code: 06 b5 96 ff 49 8d 7e 40 4c 8d 2d bb 94 5a 05 e8 16 9a b5 ff 49 8b 6e 40 4c 89 e7 e8 4a 95 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 11 8c da 03 90 90 90 90 90 90 90 [ 55.666489][ T4434] RSP: 0018:ffffc900013c37f8 EFLAGS: 00010246 [ 55.666513][ T4434] RAX: ffff8881040072b0 RBX: ffff888106eb8180 RCX: ffffffff81c2a396 [ 55.666533][ T4434] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3840 [ 55.666584][ T4434] RBP: 000000000000000b R08: 0001888106eb8133 R09: 0000000000000000 [ 55.666602][ T4434] R10: ffffc900013c3728 R11: 0001c900013c3728 R12: ffff888106eb8130 [ 55.666623][ T4434] R13: ffffffff871d3840 R14: ffff888106eb80e8 R15: 0000000000000001 [ 55.666640][ T4434] FS: 00007f731e4776c0(0000) GS:ffff8882ae8c7000(0000) knlGS:0000000000000000 [ 55.666665][ T4434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.666685][ T4434] CR2: 00007f4f54a18000 CR3: 0000000113ca2000 CR4: 00000000003506f0 [ 55.666714][ T4434] Call Trace: [ 55.666723][ T4434] [ 55.666737][ T4434] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 55.666786][ T4434] ext4_xattr_delete_inode+0x6b5/0x790 [ 55.691788][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 55.695398][ T4434] ext4_evict_inode+0xb18/0xdf0 [ 55.794226][ T4434] ? __pfx_ext4_evict_inode+0x10/0x10 [ 55.799663][ T4434] evict+0x2a5/0x510 [ 55.803620][ T4434] iput+0x430/0x5a0 [ 55.807489][ T4434] ext4_process_orphan+0x1a4/0x1c0 [ 55.812682][ T4434] ext4_orphan_cleanup+0x6a6/0xa10 [ 55.817950][ T4434] ? ext4_register_li_request+0x14c/0x440 [ 55.823727][ T4434] ext4_fill_super+0x33ab/0x3760 [ 55.828732][ T4434] ? set_blocksize+0x14c/0x270 [ 55.833594][ T4434] ? __pfx_ext4_fill_super+0x10/0x10 [ 55.838981][ T4434] get_tree_bdev_flags+0x291/0x300 [ 55.844170][ T4434] ? __pfx_ext4_fill_super+0x10/0x10 [ 55.849519][ T4434] get_tree_bdev+0x1f/0x30 [ 55.853966][ T4434] ext4_get_tree+0x1c/0x30 [ 55.858554][ T4434] vfs_get_tree+0x57/0x1d0 [ 55.863045][ T4434] do_new_mount+0x288/0x8d0 [ 55.867641][ T4434] path_mount+0x4ad/0xb90 [ 55.872065][ T4434] __se_sys_mount+0x28c/0x2e0 [ 55.876922][ T4434] ? __se_sys_mkdirat+0xa2/0xf0 [ 55.881814][ T4434] ? kmem_cache_free+0xca/0x380 [ 55.886814][ T4434] __x64_sys_mount+0x67/0x80 [ 55.891621][ T4434] x64_sys_call+0x2d61/0x3020 [ 55.896352][ T4434] do_syscall_64+0x136/0x3c0 [ 55.901052][ T4434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.906990][ T4434] RIP: 0033:0x7f731fa1f34a [ 55.911537][ T4434] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.931220][ T4434] RSP: 002b:00007f731e476e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 55.939858][ T4434] RAX: ffffffffffffffda RBX: 00007f731e476ee0 RCX: 00007f731fa1f34a [ 55.947891][ T4434] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f731e476ea0 [ 55.955970][ T4434] RBP: 00002000000009c0 R08: 00007f731e476ee0 R09: 0000000000800718 [ 55.963990][ T4434] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 55.972035][ T4434] R13: 00007f731e476ea0 R14: 000000000000048d R15: 0000200000000200 [ 55.980121][ T4434] [ 55.983226][ T4434] ---[ end trace 0000000000000000 ]--- [ 55.992585][ T4434] EXT4-fs (loop0): 1 orphan inode deleted [ 55.998919][ T4434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.019532][ T4438] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.047718][ T4434] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.101689][ T4438] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 56.134544][ T4450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.153850][ T4438] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 56.190463][ T4438] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 56.228444][ T4438] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 56.297935][ T4225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.301368][ T4438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 56.326115][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.342465][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 56.372777][ T4438] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.196: dx entry: limit 65535 != root limit 120 [ 56.411492][ T4478] tipc: Started in network mode [ 56.416009][ T4438] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.196: Corrupt directory, running e2fsck is recommended [ 56.426853][ T4478] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 56.464372][ T4478] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 56.485626][ T4478] tipc: Enabled bearer , priority 10 [ 56.538160][ T28] kauditd_printk_skb: 150 callbacks suppressed [ 56.538174][ T28] audit: type=1400 audit(1786274862.671:569): avc: denied { write } for pid=4472 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.546278][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.628421][ T28] audit: type=1400 audit(1786274862.751:570): avc: denied { write } for pid=4493 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.731861][ T4497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 56.757828][ T4497] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.779172][ T4497] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.200: Freeing blocks not in datazone - block = 0, count = 16 [ 56.779177][ T28] audit: type=1400 audit(1786274862.911:571): avc: denied { write } for pid=4496 comm="syz.2.200" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.834288][ T4225] veth0_vlan: entered promiscuous mode [ 56.860396][ T4225] veth1_vlan: entered promiscuous mode [ 56.868086][ T28] audit: type=1400 audit(1786274863.001:572): avc: denied { write } for pid=4501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.873596][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 56.929503][ T4225] veth0_macvtap: entered promiscuous mode [ 56.940181][ T28] audit: type=1400 audit(1786274863.071:573): avc: denied { write } for pid=4516 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.950410][ T4225] veth1_macvtap: entered promiscuous mode [ 57.003465][ T4225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.016260][ T4477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.018128][ T4225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.057802][ T361] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.099253][ T28] audit: type=1400 audit(1786274863.221:574): avc: denied { write } for pid=4475 comm="syz.0.199" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.148798][ T4419] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.169381][ T4419] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.184103][ T4527] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 57.203155][ T28] audit: type=1400 audit(1786274863.337:575): avc: denied { map } for pid=4475 comm="syz.0.199" path="/newroot/49/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.207253][ T4527] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0102] [ 57.235100][ T4475] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 57.261734][ T4419] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.281047][ T4527] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.299277][ T4527] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.202: attempt to clear invalid blocks 1024 len 1 [ 57.329291][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.346539][ T4527] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 57.346703][ T4527] EXT4-fs (loop2): Remounting filesystem read-only [ 57.355949][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 57.355975][ C0] EXT4-fs (loop2): initial error at time 1786274863: ext4_clear_blocks:876: inode 11 [ 57.355999][ C0] EXT4-fs (loop2): last error at time 1786274863: ext4_clear_blocks:876: inode 11 [ 57.408560][ T4527] EXT4-fs (loop2): 1 truncate cleaned up [ 57.414774][ T4527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 57.463542][ T4527] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.202: dx entry: limit 0 != root limit 125 [ 57.475321][ T4527] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.202: Corrupt directory, running e2fsck is recommended [ 57.617900][ T28] audit: type=1400 audit(1786274863.737:576): avc: denied { write } for pid=4526 comm="syz.2.202" path="socket:[8712]" dev="sockfs" ino=8712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.733567][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 57.896600][ T35] tipc: Node number set to 1 [ 58.001734][ T4556] netlink: 132 bytes leftover after parsing attributes in process `syz.2.205'. [ 58.021239][ T28] audit: type=1400 audit(1786274864.147:577): avc: denied { write } for pid=4544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.093228][ T28] audit: type=1400 audit(1786274864.217:578): avc: denied { write } for pid=4564 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.238542][ T4582] set_capacity_and_notify: 9 callbacks suppressed [ 58.238559][ T4582] loop2: detected capacity change from 0 to 1024 [ 58.312235][ T4582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.324884][ T4582] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.346433][ T4582] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.210: Freeing blocks not in datazone - block = 0, count = 16 [ 58.405401][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.505142][ T4612] loop1: detected capacity change from 0 to 128 [ 58.520954][ T4612] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.559757][ T4612] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.605330][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.650162][ T4615] loop0: detected capacity change from 0 to 512 [ 58.706032][ T4634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.214'. [ 58.709841][ T4615] EXT4-fs: Ignoring removed bh option [ 58.739212][ T4634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.214'. [ 58.740973][ T4615] EXT4-fs: inline encryption not supported [ 58.771302][ T4634] netlink: 'syz.1.214': attribute type 4 has an invalid length. [ 58.792143][ T4634] loop1: detected capacity change from 0 to 512 [ 58.814901][ T4615] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.841854][ T4634] EXT4-fs (loop1): unsupported inode size: 0 [ 58.856152][ T4634] EXT4-fs (loop1): blocksize: 1024 [ 58.921054][ T4615] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 58.936929][ T4651] netlink: 132 bytes leftover after parsing attributes in process `syz.7.219'. [ 58.965202][ T4615] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.213: bg 0: block 248: padding at end of block bitmap is not set [ 58.983876][ T4656] netlink: 'syz.1.220': attribute type 1 has an invalid length. [ 58.994760][ T4615] loop0: lost filesystem error report for type 5 error -117 [ 59.003254][ T4615] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.213: Failed to acquire dquot type 1 [ 59.011007][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 59.011032][ C0] EXT4-fs (loop0): last error at time 1786274865: ext4_validate_block_bitmap:441 [ 59.041625][ T4615] loop0: lost filesystem error report for type 5 error -28 [ 59.045364][ T4615] EXT4-fs (loop0): 1 truncate cleaned up [ 59.066520][ T4658] loop7: detected capacity change from 0 to 1024 [ 59.067054][ T4615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 59.076650][ T4656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.220'. [ 59.146868][ T4658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 59.159056][ T4658] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.172588][ T4658] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.221: Freeing blocks not in datazone - block = 0, count = 16 [ 59.232994][ T4225] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 59.327612][ T4674] loop7: detected capacity change from 0 to 512 [ 59.452590][ T4674] FAT-fs (loop7): bogus number of FAT sectors [ 59.471180][ T4674] FAT-fs (loop7): Can't find a valid FAT filesystem [ 59.493611][ T4615] syz.0.213 (4615) used greatest stack depth: 8704 bytes left [ 59.536075][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 59.634889][ T4694] lo speed is unknown, defaulting to 1000 [ 59.646745][ T4694] lo speed is unknown, defaulting to 1000 [ 59.668097][ T4694] lo speed is unknown, defaulting to 1000 [ 59.777905][ T4691] loop2: detected capacity change from 0 to 512 [ 59.793374][ T4694] infiniband sz1: set active [ 59.798119][ T11] lo speed is unknown, defaulting to 1000 [ 59.812619][ T4694] infiniband sz1: added lo [ 59.828173][ T4708] FAULT_INJECTION: forcing a failure. [ 59.828173][ T4708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.857548][ T4694] RDS/IB: sz1: added [ 59.876051][ T4694] smc: adding ib device sz1 with port count 1 [ 59.883405][ T4708] CPU: 1 UID: 0 PID: 4708 Comm: syz.7.232 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 59.883443][ T4708] Tainted: [W]=WARN [ 59.883453][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.883468][ T4708] Call Trace: [ 59.883551][ T4708] [ 59.883561][ T4708] __dump_stack+0x1d/0x30 [ 59.883649][ T4708] dump_stack_lvl+0x95/0xd0 [ 59.883677][ T4708] dump_stack+0x15/0x1b [ 59.883740][ T4708] should_fail_ex+0x25e/0x270 [ 59.883781][ T4708] should_fail+0xb/0x20 [ 59.883883][ T4708] should_fail_usercopy+0x1a/0x20 [ 59.884039][ T4708] _copy_from_user+0x1c/0xb0 [ 59.884062][ T4708] ___sys_sendmsg+0xc1/0x1e0 [ 59.884106][ T4708] __x64_sys_sendmsg+0xd4/0x160 [ 59.884130][ T4708] x64_sys_call+0x194c/0x3020 [ 59.884161][ T4708] do_syscall_64+0x136/0x3c0 [ 59.884249][ T4708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.884275][ T4708] RIP: 0033:0x7f8fe1f5e0d9 [ 59.884303][ T4708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.884327][ T4708] RSP: 002b:00007f8fe09b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.884352][ T4708] RAX: ffffffffffffffda RBX: 00007f8fe21e5fa0 RCX: 00007f8fe1f5e0d9 [ 59.884413][ T4708] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000004 [ 59.884428][ T4708] RBP: 00007f8fe09b7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.884445][ T4708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.884461][ T4708] R13: 00007f8fe21e6038 R14: 00007f8fe21e5fa0 R15: 00007ffc4b715cb8 [ 59.884487][ T4708] [ 59.887353][ T4694] smc: ib device sz1 port 1 has no pnetid [ 59.900532][ T4691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.934092][ T4694] lo speed is unknown, defaulting to 1000 [ 59.934982][ T3416] lo speed is unknown, defaulting to 1000 [ 59.940122][ T4691] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.065192][ T4713] netlink: 12 bytes leftover after parsing attributes in process `syz.7.233'. [ 60.115001][ T4713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.233'. [ 60.126997][ T4713] netlink: 12 bytes leftover after parsing attributes in process `syz.7.233'. [ 60.143904][ T4694] lo speed is unknown, defaulting to 1000 [ 60.147852][ T4713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.233'. [ 60.171337][ T4713] netlink: 12 bytes leftover after parsing attributes in process `syz.7.233'. [ 60.191183][ T4713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.233'. [ 60.231365][ T4691] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.247517][ T4716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4716 comm=syz.1.234 [ 60.290880][ T4694] lo speed is unknown, defaulting to 1000 [ 60.335157][ T4720] loop7: detected capacity change from 0 to 1024 [ 60.374305][ T4720] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.387361][ T4694] lo speed is unknown, defaulting to 1000 [ 60.399899][ T4720] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.236: Freeing blocks not in datazone - block = 0, count = 16 [ 60.434935][ T4694] lo speed is unknown, defaulting to 1000 [ 60.545900][ T4736] loop7: detected capacity change from 0 to 256 [ 60.562639][ T4736] FAT-fs (loop7): codepage cp855 not found [ 60.842226][ T4746] loop7: detected capacity change from 0 to 512 [ 60.849147][ T4746] EXT4-fs: Ignoring removed orlov option [ 60.854925][ T4746] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.924563][ T4746] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 60.934080][ T4746] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.240: attempt to clear invalid blocks 2 len 1 [ 60.946889][ T4746] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 60.947737][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 60.963389][ C1] EXT4-fs (loop7): initial error at time 1786274867: ext4_clear_blocks:876: inode 13 [ 60.972894][ C1] EXT4-fs (loop7): last error at time 1786274867: ext4_clear_blocks:876: inode 13 [ 60.986721][ T4746] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 61.004012][ T4746] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.240: invalid indirect mapped block 1819239214 (level 0) [ 61.017961][ T4746] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 61.026013][ T4746] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.240: invalid indirect mapped block 1819239214 (level 1) [ 61.049126][ T4746] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 61.050675][ T4746] EXT4-fs (loop7): 1 truncate cleaned up [ 61.270993][ T4752] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.316294][ T4754] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.505067][ T4764] ================================================================== [ 61.513223][ T4764] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 61.520361][ T4764] [ 61.522695][ T4764] write to 0xffff8881278b030c of 2 bytes by task 4754 on cpu 0: [ 61.530335][ T4764] fat16_ent_put+0x28/0x60 [ 61.534769][ T4764] fat_alloc_clusters+0x55e/0xc40 [ 61.539824][ T4764] fat_get_block+0x252/0x5e0 [ 61.544437][ T4764] __block_write_begin_int+0x400/0xf90 [ 61.549916][ T4764] cont_write_begin+0x5bf/0x920 [ 61.554792][ T4764] fat_write_begin+0x52/0xe0 [ 61.559407][ T4764] cont_write_begin+0x18d/0x920 [ 61.564296][ T4764] fat_write_begin+0x52/0xe0 [ 61.568921][ T4764] generic_cont_expand_simple+0xb0/0x150 [ 61.574580][ T4764] fat_cont_expand+0x3e/0x170 [ 61.579279][ T4764] fat_setattr+0x2a4/0x850 [ 61.583721][ T4764] notify_change+0x842/0x8c0 [ 61.588324][ T4764] do_ftruncate+0x344/0x410 [ 61.592842][ T4764] __x64_sys_ftruncate+0x65/0xc0 [ 61.597812][ T4764] x64_sys_call+0x2beb/0x3020 [ 61.602514][ T4764] do_syscall_64+0x136/0x3c0 [ 61.607136][ T4764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.613045][ T4764] [ 61.615380][ T4764] read to 0xffff8881278b0200 of 512 bytes by task 4764 on cpu 1: [ 61.623100][ T4764] fat_mirror_bhs+0x1df/0x330 [ 61.627811][ T4764] fat_alloc_clusters+0xb25/0xc40 [ 61.632852][ T4764] fat_get_block+0x252/0x5e0 [ 61.637472][ T4764] __block_write_begin_int+0x400/0xf90 [ 61.642954][ T4764] cont_write_begin+0x5bf/0x920 [ 61.647833][ T4764] fat_write_begin+0x52/0xe0 [ 61.652436][ T4764] generic_perform_write+0x186/0x490 [ 61.657742][ T4764] __generic_file_write_iter+0x9e/0x120 [ 61.663315][ T4764] generic_file_write_iter+0x77/0x1f0 [ 61.668696][ T4764] __kernel_write_iter+0x30f/0x590 [ 61.673813][ T4764] dump_user_range+0xa73/0xd00 [ 61.678593][ T4764] elf_core_dump+0x21c0/0x2340 [ 61.683379][ T4764] coredump_write+0xaf9/0xdd0 [ 61.688090][ T4764] vfs_coredump+0x2770/0x3290 [ 61.692786][ T4764] get_signal+0xd33/0xf10 [ 61.697145][ T4764] arch_do_signal_or_restart+0x96/0x480 [ 61.702709][ T4764] irqentry_exit+0x14d/0x610 [ 61.707318][ T4764] asm_exc_page_fault+0x26/0x30 [ 61.712175][ T4764] [ 61.714513][ T4764] Reported by Kernel Concurrency Sanitizer on: [ 61.720668][ T4764] CPU: 1 UID: 0 PID: 4764 Comm: syz.1.245 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 61.731440][ T4764] Tainted: [W]=WARN [ 61.735243][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.745303][ T4764] ================================================================== [ 61.987518][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 61.987532][ T28] audit: type=1400 audit(1786274868.117:614): avc: denied { connect } for pid=4753 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.648599][ T28] audit: type=1400 audit(1786274871.787:615): avc: denied { write } for pid=4770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.681172][ T28] audit: type=1400 audit(1786274871.817:616): avc: denied { write } for pid=4781 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.900343][ T28] audit: type=1400 audit(1786274873.037:617): avc: denied { write } for pid=4784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.931863][ T28] audit: type=1400 audit(1786274873.067:618): avc: denied { write } for pid=4795 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.177448][ T28] audit: type=1400 audit(1786274873.307:619): avc: denied { write } for pid=4798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.211430][ T28] audit: type=1400 audit(1786274873.347:620): avc: denied { write } for pid=4809 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.631071][ T28] audit: type=1400 audit(1786274873.767:621): avc: denied { write } for pid=4812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.664264][ T28] audit: type=1400 audit(1786274873.797:622): avc: denied { write } for pid=4823 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1