last executing test programs: 2m3.918622519s ago: executing program 0 (id=192): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x0, 0x6a}) r2 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r2, 0x7000000) r3 = dup(r2) preadv2(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x2000, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffffed, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x800000, 0x4, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20008020) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000020000000000000c02000000000008000000000d000000000084e100"], 0x0, 0x34}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)={0x34, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0x20, 0x19, 0x0, 0x1, [@nested={0x1c, 0xf3, 0x0, 0x1, [@nested={0x18, 0x28, 0x0, 0x1, [@typed={0x14, 0x29, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}]}]}]}, 0x34}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) close(r5) 2m2.30630208s ago: executing program 0 (id=205): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000440)={0xa, 0x7, 0x5, 0x7f, 0x2, 0x0, [{0x849, 0x401, 0xfffffffffffffffd, '\x00', 0xc08}, {0x100, 0x8, 0xaf, '\x00', 0x1200}]}) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x300000f, 0x6011, 0xffffffffffffffff, 0xffffc000) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0xa) 2m1.886987103s ago: executing program 0 (id=211): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000c011) ioperm(0x0, 0x6, 0x7) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x40000c0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4000001) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000500)={0x4009, 0x400008, 0x3, 0x797a, 0x3, "00a6400d00000000000000f8ffffff00"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000003c0)=0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setuid(0xee01) fcntl$setflags(r4, 0x2, 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 2m1.582565393s ago: executing program 0 (id=216): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r2, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f00000010"], 0x20) (async) r5 = syz_clone(0x4008400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) (async) waitid(0x0, 0x0, 0x0, 0xe, 0x0) r6 = socket(0x10, 0x3, 0x9) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendfile(r6, r1, 0x0, 0x7fffffffffffffff) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) sendfile(r8, r8, 0x0, 0xe3aa6ea) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r8, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800275e0aca1f5194a1eef454f58f0000", @ANYRES16=r9, @ANYBLOB="000828bd7000fcdbdf256300000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000300000072000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4800) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r2, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "55d248141cd61cc0"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1eb3fa88fbb3b0fc3d64af4e81"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "740d64a960"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0xc044}, 0x40000) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) listen(0xffffffffffffffff, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) read$char_usb(r7, &(0x7f0000000380)=""/75, 0x4b) (async) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40ffffff78080008400003000108000c40000000050800034000000010"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) socket(0x3, 0x3, 0x80000000) 2m1.314642921s ago: executing program 0 (id=221): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000019080)=@assoc_value={r1, 0x7f}, &(0x7f00000190c0)=0x8) 2m0.982802242s ago: executing program 0 (id=222): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x9, @remote, 0x6}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000001080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f57a1400403a68fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 2m0.982561302s ago: executing program 32 (id=222): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x9, @remote, 0x6}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000001080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f57a1400403a68fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 2m0.936176414s ago: executing program 1 (id=224): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 64) r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}}, 0x24000080) (async, rerun: 32) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) (async, rerun: 32) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 2m0.836598906s ago: executing program 1 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x0, 0x6a}) r3 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r3, 0x7000000) r4 = dup(r3) preadv2(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x2000, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffffed, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x800000, 0x4, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20008020) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)={0x34, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0x20, 0x19, 0x0, 0x1, [@nested={0x1c, 0xf3, 0x0, 0x1, [@nested={0x18, 0x28, 0x0, 0x1, [@typed={0x14, 0x29, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}]}]}]}, 0x34}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) close(r6) 1m59.100730171s ago: executing program 1 (id=231): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010100000000000000000a00000005000400000000000900020073797a32000000001400078008001340ffffffff08000640202000000500050002000000050001000600000013000300686173683a6e65742c6966616365"], 0x60}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffe95) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6(0xa, 0xa, 0xfffffffc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) 1m57.994539987s ago: executing program 1 (id=234): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140), 0x20042, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xcc, 0x3, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3c8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x97}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xa}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x14}, 0x4000800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x3) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8, &(0x7f00000001c0)={[{@errors_remount}, {@orlov}]}, 0x4, 0x50a, &(0x7f00000018c0)="$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") lgetxattr(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) writev(r4, &(0x7f00000002c0)=[{0x0}], 0x1) setxattr$security_selinux(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), &(0x7f0000000140)='/usr/sbin/ntpd\x00', 0xf, 0x3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB="ea88f4dd1f9abf62c3b6dfd400002f514dacd86a4c5802b0632d0b83060a67ce2e92"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) syz_clone3(&(0x7f0000004480)={0x100, 0x0, 0x0, 0x0, {0xa}, &(0x7f0000004300), 0x0, 0x0, 0x0}, 0x58) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x4804, &(0x7f0000001400)=ANY=[@ANYRES8=r5], 0x1, 0x531, &(0x7f0000000540)="$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") 1m57.358608666s ago: executing program 1 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x0, 0x6a}) r2 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r2, 0x7000000) r3 = dup(r2) preadv2(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x2000, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffffed, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x800000, 0x4, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20008020) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000020000000000000c02000000000008000000000d000000000084e100"], 0x0, 0x34}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)={0x34, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0x20, 0x19, 0x0, 0x1, [@nested={0x1c, 0xf3, 0x0, 0x1, [@nested={0x18, 0x28, 0x0, 0x1, [@typed={0x14, 0x29, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}]}]}]}, 0x34}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) close(r5) 1m56.357700188s ago: executing program 1 (id=244): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x9, @remote, 0x6}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000001080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f57a1400403a00fe8000030000000000000000000000bbff020000000000000000000000000001"], 0x0) 1m56.280619981s ago: executing program 33 (id=244): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x9, @remote, 0x6}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000001080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f57a1400403a00fe8000030000000000000000000000bbff020000000000000000000000000001"], 0x0) 50.939102492s ago: executing program 5 (id=786): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x12, 0x4) 50.707249889s ago: executing program 5 (id=789): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff0000000000000000100000000000000005000000000000000000000000200000000000000500000000000000000000000100020200000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 50.610722772s ago: executing program 5 (id=790): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000102000000000000000000008500000020"], &(0x7f0000000080)='GPL\x00'}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0xf, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r2], 0x50) syz_open_procfs$namespace(0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x2, 0x7, 0xc7, 0x0, 0x0, 0x10100, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x80}, 0x800, 0xfffffffffffff000, 0x80000001, 0x4, 0x6c2, 0x10000, 0x80, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r0, 0xbe1d3127a16933c4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 50.572703144s ago: executing program 5 (id=791): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0xc000, 0xa0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8202, &(0x7f0000000080)={[{@lazytime}, {@nodioread_nolock}, {@grpjquota}, {@errors_remount}, {}, {@nogrpid}, {@minixdf}, {@data_err_ignore}]}, 0x0, 0x628, &(0x7f0000000600)="$eJzs3U1oXFsdAPD/vZOkSRtNK1JsUQy4aEGaj1qsumq7sULBgl2IuGhokho6aUOTgq0FU3ChoCDiVqQb9+Jeilt3Iqg710J979HHW7yPzuPeubcZJjPJvEkmk/T+fjCTc869c8/5z5kz99yZubkBVNZ0dpdGnImI20nEVMuyyWgunC7We/Xe0zvZLYlG4wfvJJEUZeX6r4u/J7K7JGI8Iv5xLeILte31rj9+cm+h3mj6ecTsxura7PrjJxdWVhfuLt1duj9/8VuXLs99e/7S/L7EWcZ1/cb3v/ybX/zkm8v/rF9I4krcGv3ZYrTFsV+mYzpeFyG2lo9ExOUs0eF5OWrKEJIht4P+1IrX42hEnI6pqOW5pqlY+fVQGwcMVKMW0QAqKjH+oaLKeUB5bD+I4+DD7OXV5gHQ9vhHmp+NxHh+bHT8VdJyZNQ83j25D/VndXz89Owfslt0+RxiZB/q6WbzWUR8qVP8Sd62k/mnOFn8aaQtj8vScxExVjwXaZ/1T7flD/r191nib+2HLN4rxd+s/Fqf9e8W/7uNPjcMADt4cbXYkW9mua39XzYzLOc/0WH+M9lh39WPYe//u8//yv39eP4Zedo2D8vmPDc7b3K0veC/v7r+u271t87/sltWfzkXPAgvn0WcbYv/l/lkLnnT/0mH/s9Wub2V3fHrn+/+6//Xuy3rPf4/9xPerhrPI851PP7ZCilLzW6srpVlbd9Pzi6v1JfmmvfRaSr817//+E8dqs5fJ/32//f2EnSLrP+jS/xt/b/Z+risbK3HOv5y8/lqt2WTu8af/m8suZWnxoqSny5sbDycjxhLbhSrtJRf3Lkt5TrlNrL4z3+t8/jf4fWfd/Rmj/Gv/fDeq27Leu7/be8qudd7PTzI4l/srf+3vf/9tsc6PvjRo6+0FU2UiZ3in9hjbAAAAAAAAFA1af4dbJLOvEmn6cxM8xzeL8bxtP5gfePryw8e3V+MOJ//HnI0Lb/pnmrmkyw/X/wetsxfbMt/IyJORcTvaxN5fubOg/risIMHAAAAAAAAAAAAAAAAAACAQ+JEcf5/eZ3q92vN8/97snF6wK0DBm6QF5gDDjfjH6prJOJY31dwBY40+3+oLuMfqsv4h+oy/qG6jH+oLuMfqsv4h+oqxv8nLUUTw2oLAAAAALBvTn31xX+SiNj8zkR+y4wVy0aH2jJg0IxxqK7asBsADM2bn/44/R8qp6f5/4fFPwccfHOAIUg6FeaTg8bOg/9Fx0cCAAAAAAAAAAAAAANw7ozz/6Gq0vjbsJsADMkezv/3rwPgiHPpD6iuvo7xvWnAW2W3s/jHuy1w/j8AAAAAAAAAAAAAHJjJ/JakM8UlQCcjTWdmIj4XESdjNFleqS/NRcTnI+LftdFjWX5+2I0GAAAAAAAAAAAAAAAAAACAt8z64yf3Fur1pYetiY+2lbzdifKChoelPa2JSA6+0omIOAyxDyYx0lKSRGxmPb8/W0732sI4DM/PwzRvxpDfmAAAAAAAAAAAAAAAAAAAoIJazj3u7OwfD7hFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDwtq7/338i2WU7w44RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiaPg0AAP//jtg8kQ==") setuid(0xee01) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x23, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9c}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ldst={0x2, 0x2, 0x6, 0x8, 0x8, 0x100, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e00)='syzkaller\x00', 0x400, 0xe1, &(0x7f0000000e40)=""/225, 0x40f00, 0x6e, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000f40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000f80)={0x3, 0xb, 0x8, 0xce}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000fc0)=[r1], &(0x7f0000001000)=[{0x2, 0x3, 0xe, 0xc}, {0x0, 0x1, 0x8, 0x5}, {0x4, 0x2, 0x8, 0x1}, {0x3, 0x5, 0x5, 0x3}, {0x3, 0x3, 0xd, 0x7}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1e, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000080)='./file4\x00', 0xa08c54, &(0x7f00000000c0)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@uni_xlate}, {@shortname_winnt}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@uni_xlate}, {@shortname_lower}, {@shortname_lower}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@uni_xlate}, {@shortname_win95}]}, 0x89, 0x2c4, &(0x7f0000000b00)="$eJzs3c2qG1UcAPD/5Ca5iQrJwpUIDtSFq9D2CRrkCsWslCx0oxd7C5KEwg0E/MDYlXvBle/gO/gAIvgGLlwK7uxCHJlkJt9pDNVUrr/fonPmzP8/5yOnmRDIuR++Oho8eDR++Pjzn6PRSKJyL+7FkyTaUYnSlwEA3CRPsix+y+YOxVajHhFZqzirnKB7AMC/YPb8T/LH+uHnPwBwM7z73vtvd3u9i3fStBEx+mrSzz8M5Mf59e7D+DiGcRW3oxV/zD4mLL4tyP996X7vIqppWn4ZMGlGP2L0wQ/FeffXiFn+nWhFezO/XkSlM/H6aDrp5y3nx1q8kER0s2Qecjda8XJEVoviJvPDW/d7F3fT7fzo1+ONW98W/f/zKjrRip8+ikcxjAezWyzzv7iTpm9m3/z+2XwE/YhkOumfz+KWsrOTvCAAAAAAAAAAAAAAAAAAAAAAAPwvdNKF9ur+OeVugJ3O7ut79wcqdviZruyvcztN03Ibn0m/FvP8arxSjerzGzkAAAAAAAAAAAAAAAAAAAD8d4w/+XRwORxeXa8Vvs/yQvOpMZuF6kpN+bP+w1m7C4PvIg4HJ38jJi9Uit7kNXFWnAyTrSaS8tJ6ep5x9CjOjwlubjc6uIzKvjmsDmPe+a+Pn97Xdgzw+EK5MvbFlKtrcJkcmrrG7kWysurKxq7HyRELMtsxdWd7s+rPMhur93lx0FzU/HjriP8FzZ0TlY+4tpjM9axG/kqu1NSetfPrhc13iuSfecMBAAAAAAAAAAAAAAAAAAD2Wv7oN37Zuvj4uXQJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE5u+ff/F4Vob9ZsFqZF8qym8vTg8+vxjmbbJx4mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN9xfAQAA//8n3kVH") creat(0x0, 0x40) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) write(r4, &(0x7f0000000200)="c7", 0x1) sendfile(r4, r3, 0x0, 0x7ffff000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x1e, 0x0, 0xfc, 0x0, @tick, {0x0, 0xfd}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r7, 0x402c5342, &(0x7f00000000c0)={0x0, 0x20007, 0x62, {0x1}, 0xfffffffe, 0x400006}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in=@private, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000540)=0xe8) 50.230804775s ago: executing program 5 (id=796): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xffeff00c}, {0x6, 0x1, 0x2, 0xffff}]}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x8a, [0x1, 0x5, 0x6c, 0x3, 0x5, 0xfff]}) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x840) 49.909795465s ago: executing program 5 (id=804): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x1000000, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6, 0x4}, 0x102260, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="78010000100008002cbc700000000000ff0200000000000000000000000000010a0100fe0000000000000000000000000000ecdf000000000a00001000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x178}}, 0x44050) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x8c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xf}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe755}]}, @CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x71}]}]}, 0x8c}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x6, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040) r6 = socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, 0x0, 0xc4) r8 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = fcntl$dupfd(r8, 0x406, r9) setsockopt$inet_mtu(r10, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f, 0x4, @perf_config_ext={0x3, 0x8}, 0x11c0ad, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="fb0925e5d0ec174bbb8959d73ffde20e9d8d93eb05308768e97042ff39039394589ea85f8ce583d006fa03e4d832e7c4504f2d243420ba03f96d03a20ff15a1b764435dba4fc462ad54abd458909a0aefe5e33248659c1e6a584a0669e6f60cfca9ce88aecac43617c7e3aa6b16995639aba7371e7fed6d4794bacef21523be284162b790b9cbd64efbb6a08b28f1123ddb561c5adeb24f1abc7e40553942078fc6ea6e174b0ef062afa4cd708b0e961dc24fdbb0baecb4b0f653e0e291ec2d5d9dba06f41a706a8d41f10"], 0x50) recvmsg$can_raw(r6, &(0x7f0000001880)={&(0x7f0000000240)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/244, 0xf4}, {&(0x7f0000000500)=""/110, 0x6e}], 0x2, &(0x7f00000007c0)=""/4096, 0x1000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006) 49.850426006s ago: executing program 34 (id=804): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x1000000, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6, 0x4}, 0x102260, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="78010000100008002cbc700000000000ff0200000000000000000000000000010a0100fe0000000000000000000000000000ecdf000000000a00001000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000e0000002000000000000000000000000feffffffffffffff0100000000000000030000000000000001000000000000000000000000000000fcffffffffffffff04000000000000000900000000000000010000000000006df0084000000000000900000000000000920200000000000000100000000000000000000000000000000000000a0004002c00000000000000600002006362632863616d656c6c69612900000000000000000000000000000042af00000000000000000000000000000000000000000000000000000000000000000000c00000006e000b000000002000000000190000000000feffff7f000028001a007f0000010000000000000000000000000a0101020000000000000000000000000200030b"], 0x178}}, 0x44050) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x8c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xf}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe755}]}, @CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x71}]}]}, 0x8c}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x6, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040) r6 = socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, 0x0, 0xc4) r8 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = fcntl$dupfd(r8, 0x406, r9) setsockopt$inet_mtu(r10, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f, 0x4, @perf_config_ext={0x3, 0x8}, 0x11c0ad, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="fb0925e5d0ec174bbb8959d73ffde20e9d8d93eb05308768e97042ff39039394589ea85f8ce583d006fa03e4d832e7c4504f2d243420ba03f96d03a20ff15a1b764435dba4fc462ad54abd458909a0aefe5e33248659c1e6a584a0669e6f60cfca9ce88aecac43617c7e3aa6b16995639aba7371e7fed6d4794bacef21523be284162b790b9cbd64efbb6a08b28f1123ddb561c5adeb24f1abc7e40553942078fc6ea6e174b0ef062afa4cd708b0e961dc24fdbb0baecb4b0f653e0e291ec2d5d9dba06f41a706a8d41f10"], 0x50) recvmsg$can_raw(r6, &(0x7f0000001880)={&(0x7f0000000240)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/244, 0xf4}, {&(0x7f0000000500)=""/110, 0x6e}], 0x2, &(0x7f00000007c0)=""/4096, 0x1000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006) 28.154849691s ago: executing program 3 (id=995): getegid() unshare(0x20000400) open_tree(0xffffffffffffffff, &(0x7f0000002380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0xd, {0x2, 0x4e21, @remote}}, 0x24) 28.090702673s ago: executing program 3 (id=996): timer_create(0x3, 0x0, &(0x7f00000001c0)) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000005"], 0x0) close(r1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c1c0a98533ebffcb043f72e876d30dc59b400", 0x83, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='/\x00', 0x0, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 27.938724428s ago: executing program 3 (id=1000): socket$nl_generic(0x10, 0x3, 0x10) mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b80)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(&(0x7f0000000240), 0x71, 0x109301) getrlimit(0x6, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 27.753274153s ago: executing program 3 (id=1002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x609, 0x0, 0x0, {0x5, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x14}}, 0x4000050) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@init_itable}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000180)='net/arp\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x48042, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) 27.560893729s ago: executing program 3 (id=1004): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000004006608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702b0ff08000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) 27.237866419s ago: executing program 3 (id=1007): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffff1f}, 0x90) r2 = fsmount(r0, 0x0, 0x88) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) preadv2(r3, &(0x7f0000000440), 0x0, 0x0, 0x7, 0xe) chown(0x0, 0x0, 0x0) renameat2(r2, &(0x7f0000000080)='./bus\x00', r2, 0x0, 0x6) 27.162643061s ago: executing program 35 (id=1007): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffff1f}, 0x90) r2 = fsmount(r0, 0x0, 0x88) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) preadv2(r3, &(0x7f0000000440), 0x0, 0x0, 0x7, 0xe) chown(0x0, 0x0, 0x0) renameat2(r2, &(0x7f0000000080)='./bus\x00', r2, 0x0, 0x6) 6.728733897s ago: executing program 6 (id=1183): socket$unix(0x1, 0x1, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[], 0x0}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0xfffffffffffffed6, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r4 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x6a4fbca0687807bb, &(0x7f00000000c0), 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x7, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x8000, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 6.442819596s ago: executing program 6 (id=1186): syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000"], 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000019080)=@assoc_value={r2, 0x7f}, &(0x7f00000190c0)=0x8) 6.193206073s ago: executing program 7 (id=1193): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x809, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x2}, 0x100e10, 0x200, 0x10000006, 0x1, 0xffff, 0x9, 0xfffd, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noinit_itable}, {@noload}, {@data_err_ignore}, {@usrjquota}, {@quota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") chdir(&(0x7f0000004340)='./file0\x00') r0 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='/dev/ttyS3\x00') sendmsg$nl_route_sched(r0, 0x0, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x7, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) creat(0x0, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x809, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x2}, 0x100e10, 0x200, 0x10000006, 0x1, 0xffff, 0x9, 0xfffd, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noinit_itable}, {@noload}, {@data_err_ignore}, {@usrjquota}, {@quota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") (async) chdir(&(0x7f0000004340)='./file0\x00') (async) socket(0x400000000010, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='/dev/ttyS3\x00') (async) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x7, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) creat(0x0, 0x18) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) (async) 6.159650245s ago: executing program 6 (id=1194): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x82) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) setpriority(0x0, r0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="2000000014016e96507c73f2d11ed6cc84495e100001074781609d00000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000018140000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e140200000000002604fdffffff000061140400000000001d430000000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767912d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce0900000000000000499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc682928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348de20f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97b4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b4f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb1bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb36e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e8a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) socket$inet(0x2, 0x2, 0x1) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") r6 = open(&(0x7f0000000140)='./file1\x00', 0x66802, 0x1fb) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1038014, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x2000}) fcntl$lock(r7, 0x7, &(0x7f0000001340)={0x0, 0x0, 0xe, 0x20000006}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46800c040001000000010000000200060001000000dd0000003800000045030000080000000500200001000500090000000000000003000000040000000500000006000000800000000600000002000000a25b00004b67de06a501fefbdbe1a44da35a3a4ff0d72d6ef1e3b3059eea508281af370b8f79fbd5fbf71a8a3b583e543797159b0221f5235a8ab9d1e0785b9c830471b5104cfe69ab2d26075198aab2c73d1ade808aac8d5d1f244e"], 0x58) close(r2) 6.102523907s ago: executing program 4 (id=1195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f00000080c0)=0x6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x11) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$ARCH_SHSTK_DISABLE(0x1e, r5, 0x1, 0x5002) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x0) r6 = socket(0xa, 0x2400000001, 0x0) syz_read_part_table(0x5c6, &(0x7f0000000000)="$eJzs08FLbFUYAPBvRsc7pjYSUos2Qi2twBa1cBYS4zCbFLFoE7QLF7YwWriQEXXRIiz/gcSyjRuJFlEYbUKFKJhW4qKFuA4SF8/VPGbuffqUt3igPp/y+y3Od875zjffudw7wZ2Wj9+zWTOJiCT6smVydqQ3YmHvYlWhPXbHB5uVsdrgxOjkVEQu/vu375NcdLdzudbQcV7xYxbHs9+tJcON9daheraRnd3ORyxExMzhRqm98enqNT8x98lWeaf0oJnar84fvR0vRFeWq3/4yshH+XS+ncZfbqL/0vJsdWWuPN3q38xlif5Hf4JU82LZ8XXfg9tx+f2vDSweLJ6+X4gv3hp66eCP+jfZN3DSij/33PZ1AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAe6wjIpaWZ6src+Xpz7+M+Pj7Nyqvfl35bPWd70bq0RuRT88Vo/Ck8s6r9t8q75Ra/aOYrl9vvPvD383x/7/Nv1nYbZwO77V755Oh3FU78TzqymLr+9uvzh+tDRTPcs3H3vlJLuLly8U9z+SKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAdUxmrDU6MTk5F5CIK5/vN1joiG7NUd8R4kq5ryXBj/c/3jjf7/3rtn91ff5pIYjB+O6+fOdwoRTGdf9V5oWVHGl68wafiaT0MAAD//9q+aQM=") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50148, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYBLOB='-pids'], 0x6) write$cgroup_subtree(r9, &(0x7f0000000600)=ANY=[@ANYBLOB="95287e091827f8e27673f36900bcc8688dd4fe7043bc274dcc40cbf70b795c6e7cf14df00b0f98c5b85819e44c90792553237648afaf71c4ac61acb1f1a10210bba9b6542e438cdef9a2df70d7a88b8334cb80cc03de0f7e6e894b872a1cc964003c71eb1b4696d42a239d"], 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) socket(0x400000000010, 0x80000, 0x0) 5.934427102s ago: executing program 7 (id=1198): prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./file2\x00', 0x2000080, &(0x7f0000000100)=ANY=[], 0xfb, 0x1206, &(0x7f0000003680)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x16c142, 0x0) sendfile(r5, r5, 0x0, 0xe3aa6ea) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x28) 3.961188484s ago: executing program 4 (id=1200): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x6a57, &(0x7f00000001c0)={0x0, 0xfe9, 0x20, 0xd, 0x2a}) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x0, 0x3938700}, 0xfffffffffffffffe) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @remote}], 0x1c) io_uring_enter(r0, 0x7ad3, 0x1007ecd, 0x1f, 0x0, 0x0) 3.670453714s ago: executing program 7 (id=1202): socket$kcm(0x21, 0x2, 0x2) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="6986b2aaaf2821cd202f03a35f962fc7e425b514dc0ef9b4f020554e30f7aadb6f4f42297e366536a8379ab9642448bed29ebda1432d4e5b45b557295a8342fe800c0aaf3ca7915b891f268998fd51e990908964c52cde13c74e9d4c8a8a075544362219969222c968a2b0c09a4ebac676924da7cb43cc112e35961948cf9147189d427258", 0x85}, {0x0}, {&(0x7f0000000340)="00d21cb8ca78a3192c766f6fab1a369385a01464ff415305ef9bc4d376f966cf31a4ac52a47a3fa57887a962b74d4414d952741b1aae2b973c856f02a71368fe2b01623dbf8b3895e4dfd9a9a8daaa6a380eddd65daa4f990b1e", 0x5a}], 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @remote}, 0x0, 0x2, 0x3}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) 3.577481337s ago: executing program 4 (id=1204): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2000090, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' P\xccs|\xe2', 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x50080) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) 2.674056615s ago: executing program 4 (id=1209): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)=""/31, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="ffffffff0000000001000000fedbdfd81f164bcfa2eca75ad453b489467f7225008020000403000702559b272c3a8a4a371fd4adaf64c628f3a082e1122a9bd33b5eb36e197760e4a02e35bede7b9c250cf03492ff0950b3382d25c52c8312ffc0121fbe4cbf73bc8290d20b683eda1c0a3da7de1de3a1358c9adbbddf810cbf8a59fd9c3e24c6527b50ed9c29a4169696cf2114e343d77f8891586734d2dcbfedbfcce3b2ba4ba27ace342d8f4e"], 0x1c}}, 0xc894) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xc0000200}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x6da7, 0x400000002}, 0x6d82, 0x0, 0x800000, 0x0, 0x3, 0x2, 0x39, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x1000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r7) socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 2.656199786s ago: executing program 8 (id=1210): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, @perf_config_ext={0x7a1b, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0x1, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fef3ff0000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) 2.600832908s ago: executing program 8 (id=1211): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4) 2.383976124s ago: executing program 8 (id=1213): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.226530769s ago: executing program 8 (id=1214): syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000e3000000000000851000000500000085000000a0000000be0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 2.21093859s ago: executing program 8 (id=1216): r0 = eventfd(0xa) lseek(r0, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xed9fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001505000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getdents64(0xffffffffffffffff, &(0x7f0000001f80)=""/4110, 0x100e) 1.770607864s ago: executing program 4 (id=1218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004180)={&(0x7f00000013c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x4c}}, 0x0) 1.733339635s ago: executing program 4 (id=1219): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x90a3b4a3e4f91378) syz_usb_disconnect(0xffffffffffffffff) llistxattr(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)=""/37, 0x25) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x4008, &(0x7f00000000c0)=ANY=[]) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r1, 0x0, 0x37e9, 0x2f92) open(&(0x7f0000000300)='./file1\x00', 0xcd37e, 0xc1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x801, 0x84) timer_create(0x6, &(0x7f0000000280)={0x0, 0x34}, &(0x7f00000002c0)) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000045) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu\t&0&&\t') r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r4, 0x2000, 0x0) 1.26501373s ago: executing program 2 (id=1223): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, @perf_config_ext={0x7a1b, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0x1, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fef7ff0000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) 1.211950062s ago: executing program 2 (id=1224): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x7, 0x36e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000003000000000000000000008018010000646c6c2500000000002020207b1af8fd00000000bfa1ffffff0f000007010000f8ffffffb702000008000000b70300000101000085000000060000001801000020696c2500000000002020207b07000000000000bfa100000000000007010000f8ffffffb702000008000000b703000087000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0xe, 0xff3, &(0x7f0000000cc0)=""/4083, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcbb}, 0x94) 1.118093305s ago: executing program 2 (id=1225): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000001040)=[{&(0x7f0000000680)=""/256, 0x100}, {&(0x7f0000000780)=""/69, 0x45}, {&(0x7f0000000800)=""/191, 0xbf}, {&(0x7f0000000900)=""/7, 0x7}, {&(0x7f0000000940)=""/200, 0xc8}, {&(0x7f0000000a40)=""/129, 0x81}, {&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000c40)=""/108, 0x6c}, {&(0x7f0000000ec0)=""/133, 0x85}, {&(0x7f0000000f80)=""/63, 0x3f}], 0xa, &(0x7f0000000b80)=""/87, 0x57}, 0xd4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c00)=""/47, 0x2f}, {&(0x7f00000003c0)=""/104, 0x68}, {&(0x7f0000000cc0)=""/168, 0xa8}, {&(0x7f0000000b00)=""/94, 0x5e}], 0x4}, 0xa}], 0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = getpid() syz_pidfd_open(r7, 0x0) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x5, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, r7, 0x9, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r6) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ipv6_route\x00') read$msr(r9, 0x0, 0x0) preadv(r9, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/7, 0x7}], 0x1, 0xffffffbf, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) tgkill(0x0, 0x0, 0x4) 621.77906ms ago: executing program 6 (id=1226): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}, 0x2160) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xc5ec3, 0x0) flock(r3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000240)=""/226, 0x0, 0xe2, 0x1}, 0x28) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x50) socketpair$unix(0x2f, 0x5, 0x0, &(0x7f00000029c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x8000000000000003}, 0x18) sendmmsg$inet(r6, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000014c0)="84cf", 0x2}], 0x1}}], 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="3fabf82df2c3"}) write$tun(r2, 0x0, 0x0) 555.129562ms ago: executing program 7 (id=1227): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6(0xa, 0x4, 0x8) r7 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r7, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000040)={'bridge_slave_1\x00', 0xfff}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/161) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x40022100) socket$xdp(0x2c, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x7, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x0, 0x1}, 0x48) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, 0x0, 0x40) 401.342357ms ago: executing program 8 (id=1228): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet6(0xa, 0x802, 0x0) fchdir(0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0xe4ff, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x2, 0xb, 0x2, 0x1, 0xfffffffffffffd78, 0x4, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') socket$packet(0x11, 0x3, 0x300) pread64(r3, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x80842) write$evdev(r6, &(0x7f0000000000)=[{{0x0, 0xea60}, 0x0, 0x1, 0x2}], 0xfe72) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000380)={0x1d, r8, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r7) read(r6, &(0x7f0000000140)=""/38, 0x26) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x937e, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x0, 0x0, 0x84, 0x2, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r7) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 323.82147ms ago: executing program 7 (id=1229): r0 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x20004f) r1 = socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000080), 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) getsockname(r1, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x0, 0x4, 0x1, 0xd, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000fff000/0x1000)=nil) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'macvlan1\x00'}}, 0x1e) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@md0, r7, &(0x7f00000001c0)='./file0\x00') fstat(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdcc0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000080)}, 0x8, 0x0, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r10 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0) stat(&(0x7f0000000500)='./file1\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r9, 0xffffffff80000600, r11, &(0x7f0000000680)={0xf7b, 0x7, 0x0, 0x3}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r5, 0x1, &(0x7f00000001c0)={{0x2, r7, r8, r11, r12, 0x107, 0x1ff}, 0x7ff, 0x2, 0x2, 0x2, r0, r0, 0x4}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 323.194159ms ago: executing program 6 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004180)={&(0x7f00000013c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x4c}}, 0x0) 257.029642ms ago: executing program 2 (id=1231): syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000"], 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x5c}}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000019080)=@assoc_value={r2, 0x7f}, &(0x7f00000190c0)=0x8) 249.538202ms ago: executing program 6 (id=1232): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) write(r2, &(0x7f0000000a00)="c7", 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfea7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 70.461127ms ago: executing program 7 (id=1233): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x800) chdir(0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002110000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r1 = socket$kcm(0xa, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x1) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4c21, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000003400000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 56.359798ms ago: executing program 2 (id=1234): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000042000102"], 0x14}}, 0x0) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) 0s ago: executing program 2 (id=1235): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) syz_clone(0x80804000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 4.789181][ T6353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.723'. [ 134.977514][ T6365] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.720: dx entry: limit 0 != root limit 125 [ 134.989322][ T6365] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.720: Corrupt directory, running e2fsck is recommended [ 135.285345][ T937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.368221][ T4516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.398128][ T4516] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.406421][ T6367] 9p: Bad value for 'rfdno' [ 135.447258][ T6369] set_capacity_and_notify: 2 callbacks suppressed [ 135.447280][ T6369] loop6: detected capacity change from 0 to 128 [ 135.481054][ T6369] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.496308][ T6369] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.566122][ T4411] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.608084][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 135.648634][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.6.727'. [ 135.676246][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.6.727'. [ 135.679739][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.728'. [ 135.844730][ T6399] loop3: detected capacity change from 0 to 512 [ 135.962458][ T6391] loop6: detected capacity change from 0 to 1024 [ 135.981707][ T6391] ext4: Unknown parameter 'dont_appraise' [ 135.989896][ T6408] loop3: detected capacity change from 0 to 128 [ 136.037728][ T6408] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.082032][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.739'. [ 136.091143][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.739'. [ 136.134370][ T6408] ext4 filesystem being mounted at /163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.173911][ T6419] netlink: 'syz.6.741': attribute type 1 has an invalid length. [ 136.193192][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 136.193208][ T28] audit: type=1400 audit(1781817025.151:735): avc: denied { write } for pid=6407 comm="syz.3.738" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.231112][ T6419] bond3: entered promiscuous mode [ 136.236372][ T6419] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.257503][ T3347] net_ratelimit: 1 callbacks suppressed [ 136.257519][ T3347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.271574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.296411][ T6419] netlink: 44 bytes leftover after parsing attributes in process `syz.6.741'. [ 136.312249][ T3294] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.335053][ T937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.347575][ T28] audit: type=1400 audit(1781817025.311:736): avc: denied { mount } for pid=6426 comm="syz.4.745" name="/" dev="ramfs" ino=14921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 136.387857][ T6432] loop3: detected capacity change from 0 to 512 [ 136.423316][ T6432] ext4: block size(32768) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 136.577505][ T28] audit: type=1400 audit(1781817025.321:737): avc: denied { read } for pid=6426 comm="syz.4.745" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 136.600162][ T28] audit: type=1400 audit(1781817025.321:738): avc: denied { open } for pid=6426 comm="syz.4.745" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 136.602471][ T6432] EXT4-fs (loop3): bad block size 32768 [ 136.635013][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 136.648347][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 136.659313][ T6448] loop5: detected capacity change from 0 to 512 [ 136.666696][ T6448] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 136.703900][ T6448] EXT4-fs (loop5): orphan cleanup on readonly fs [ 136.712290][ T6448] EXT4-fs warning (device loop5): ext4_enable_quotas:7267: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 136.727721][ T6448] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 136.734681][ T6448] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.751: bad orphan inode 768 [ 136.745883][ T6448] loop5: lost filesystem error report for type 5 error -117 [ 136.764634][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 136.778467][ C1] EXT4-fs (loop5): initial error at time 1781817025: ext4_orphan_get:1425 [ 136.787026][ C1] EXT4-fs (loop5): last error at time 1781817025: ext4_orphan_get:1425 [ 136.825369][ T6448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.840084][ T6432] loop3: detected capacity change from 0 to 256 [ 136.848272][ T6432] vfat: Unknown parameter '' [ 136.921535][ T28] audit: type=1400 audit(1781817025.881:739): avc: denied { connect } for pid=6447 comm="syz.5.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.996307][ T28] audit: type=1400 audit(1781817025.951:740): avc: denied { bind } for pid=6447 comm="syz.5.751" lport=8018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.030554][ T6464] loop4: detected capacity change from 0 to 128 [ 137.038732][ T6476] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 137.056262][ T28] audit: type=1400 audit(1781817025.981:741): avc: denied { getopt } for pid=6473 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 137.076643][ T28] audit: type=1400 audit(1781817025.981:742): avc: denied { name_bind } for pid=6447 comm="syz.5.751" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 137.077740][ T6478] netlink: 'syz.2.759': attribute type 17 has an invalid length. [ 137.110116][ T6476] EXT4-fs warning (device loop5): ext4_enable_quotas:7267: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 137.126783][ T28] audit: type=1400 audit(1781817025.991:743): avc: denied { node_bind } for pid=6447 comm="syz.5.751" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 137.158241][ T6464] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.173807][ T6464] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.226615][ T28] audit: type=1400 audit(1781817026.181:744): avc: denied { write } for pid=6463 comm="syz.4.754" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.275617][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.366491][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.625636][ T6484] FAULT_INJECTION: forcing a failure. [ 137.625636][ T6484] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 137.638877][ T6484] CPU: 0 UID: 0 PID: 6484 Comm: syz.2.761 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 137.638950][ T6484] Tainted: [W]=WARN [ 137.638989][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 137.639002][ T6484] Call Trace: [ 137.639010][ T6484] [ 137.639019][ T6484] __dump_stack+0x1d/0x30 [ 137.639042][ T6484] dump_stack_lvl+0x95/0xd0 [ 137.639058][ T6484] dump_stack+0x15/0x1b [ 137.639073][ T6484] should_fail_ex+0x25e/0x270 [ 137.639118][ T6484] should_fail_alloc_page+0xf2/0x100 [ 137.639208][ T6484] __alloc_frozen_pages_noprof+0x108/0x350 [ 137.639230][ T6484] alloc_pages_mpol+0xa9/0x1d0 [ 137.639253][ T6484] folio_alloc_mpol_noprof+0x39/0x80 [ 137.639272][ T6484] shmem_get_folio_gfp+0x405/0xdc0 [ 137.639302][ T6484] shmem_write_begin+0xfc/0x1f0 [ 137.639378][ T6484] generic_perform_write+0x186/0x490 [ 137.639400][ T6484] shmem_file_write_iter+0xc5/0xf0 [ 137.639422][ T6484] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 137.639451][ T6484] vfs_write+0x57d/0x990 [ 137.639482][ T6484] ksys_write+0xdc/0x1a0 [ 137.639587][ T6484] __x64_sys_write+0x40/0x50 [ 137.639631][ T6484] x64_sys_call+0x27e1/0x3020 [ 137.639650][ T6484] do_syscall_64+0x136/0x3c0 [ 137.639725][ T6484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.639742][ T6484] RIP: 0033:0x7f996bccd68e [ 137.639758][ T6484] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 137.639776][ T6484] RSP: 002b:00007f996a766da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.639852][ T6484] RAX: ffffffffffffffda RBX: 00007f996a7676c0 RCX: 00007f996bccd68e [ 137.639864][ T6484] RDX: 0000000000080000 RSI: 00007f9962347000 RDI: 0000000000000006 [ 137.639939][ T6484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.639951][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 137.639964][ T6484] R13: 00007f996a766ee0 R14: 00007f996a766ea0 R15: 00007f9962347000 [ 137.639986][ T6484] [ 138.089335][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 138.110073][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 138.332217][ T4284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.417298][ T937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.530788][ T6509] pimreg: entered allmulticast mode [ 138.549315][ T6516] pimreg: left allmulticast mode [ 138.604284][ T6515] loop5: detected capacity change from 0 to 128 [ 138.662969][ T6515] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.679564][ T6515] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.865226][ T4284] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.217089][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 139.258312][ T6536] loop5: detected capacity change from 0 to 512 [ 139.291597][ T6528] FAULT_INJECTION: forcing a failure. [ 139.291597][ T6528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.313167][ T361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.321363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.363632][ T6528] CPU: 0 UID: 0 PID: 6528 Comm: syz.4.776 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 139.363674][ T6528] Tainted: [W]=WARN [ 139.363682][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.363693][ T6528] Call Trace: [ 139.363700][ T6528] [ 139.363708][ T6528] __dump_stack+0x1d/0x30 [ 139.363811][ T6528] dump_stack_lvl+0x95/0xd0 [ 139.363831][ T6528] dump_stack+0x15/0x1b [ 139.363846][ T6528] should_fail_ex+0x25e/0x270 [ 139.363864][ T6528] should_fail+0xb/0x20 [ 139.363933][ T6528] should_fail_usercopy+0x1a/0x20 [ 139.363954][ T6528] copy_folio_from_iter_atomic+0x24b/0x10a0 [ 139.364038][ T6528] ? folio_mark_dirty+0x11/0xd0 [ 139.364066][ T6528] ? shmem_write_begin+0xfc/0x1f0 [ 139.364104][ T6528] ? shmem_write_begin+0x135/0x1f0 [ 139.364146][ T6528] generic_perform_write+0x2c4/0x490 [ 139.364171][ T6528] shmem_file_write_iter+0xc5/0xf0 [ 139.364257][ T6528] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 139.364282][ T6528] vfs_write+0x57d/0x990 [ 139.364309][ T6528] ksys_write+0xdc/0x1a0 [ 139.364336][ T6528] __x64_sys_write+0x40/0x50 [ 139.364364][ T6528] x64_sys_call+0x27e1/0x3020 [ 139.364384][ T6528] do_syscall_64+0x136/0x3c0 [ 139.364455][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.364477][ T6528] RIP: 0033:0x7f288d2dd68e [ 139.364494][ T6528] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 139.364511][ T6528] RSP: 002b:00007f288bd76da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.364560][ T6528] RAX: ffffffffffffffda RBX: 00007f288bd776c0 RCX: 00007f288d2dd68e [ 139.364574][ T6528] RDX: 0000000000080000 RSI: 00007f2883957000 RDI: 0000000000000006 [ 139.364587][ T6528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.364619][ T6528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 139.364690][ T6528] R13: 00007f288bd76ee0 R14: 00007f288bd76ea0 R15: 00007f2883957000 [ 139.364711][ T6528] [ 139.837091][ T6534] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 139.899606][ T6534] bond5 (unregistering): Released all slaves [ 140.032131][ T937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.439625][ T6528] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 140.603173][ T6554] set_capacity_and_notify: 1 callbacks suppressed [ 140.603187][ T6554] loop5: detected capacity change from 0 to 512 [ 140.636149][ T6554] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.666177][ T6554] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 140.692143][ T6556] capability: warning: `syz.4.784' uses deprecated v2 capabilities in a way that may be insecure [ 140.734686][ T6554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 140.752252][ T6554] EXT4-fs (loop5): orphan cleanup on readonly fs [ 140.763045][ T6554] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.782: bg 0: block 361: padding at end of block bitmap is not set [ 140.777377][ T6554] loop5: lost filesystem error report for type 5 error -117 [ 140.778772][ T6554] EXT4-fs (loop5): Remounting filesystem read-only [ 140.786212][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 140.786235][ C1] EXT4-fs (loop5): initial error at time 1781817029: ext4_validate_block_bitmap:441 [ 140.786262][ C1] EXT4-fs (loop5): last error at time 1781817029: ext4_validate_block_bitmap:441 [ 140.820334][ T6550] netlink: 'syz.2.781': attribute type 41 has an invalid length. [ 140.829243][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'. [ 140.857958][ T6554] EXT4-fs (loop5): 1 truncate cleaned up [ 140.864116][ T6554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 141.001197][ T6560] loop4: detected capacity change from 0 to 1024 [ 141.011612][ T6560] EXT4-fs: Ignoring removed orlov option [ 141.036856][ T6560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.049413][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.131706][ T6564] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.782: dx entry: limit 0 != root limit 125 [ 141.143449][ T6564] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.782: Corrupt directory, running e2fsck is recommended [ 141.219677][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.612299][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 141.612314][ T28] audit: type=1400 audit(1781817030.571:749): avc: denied { ioctl } for pid=6559 comm="syz.4.785" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 141.649624][ T6565] net_ratelimit: 1 callbacks suppressed [ 141.649649][ T6565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.664689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.771739][ T28] audit: type=1400 audit(1781817030.731:750): avc: denied { sqpoll } for pid=6567 comm="syz.6.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 141.792798][ T4284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 141.803820][ T28] audit: type=1400 audit(1781817030.761:751): avc: denied { setopt } for pid=6567 comm="syz.6.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 141.965447][ T28] audit: type=1400 audit(1781817030.881:752): avc: denied { setattr } for pid=6559 comm="syz.4.785" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.094867][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.122809][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.140550][ T6580] loop5: detected capacity change from 0 to 1024 [ 142.163202][ T6580] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.185991][ T6580] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 142.218434][ T6580] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 142.245415][ T6580] EXT4-fs (loop5): orphan cleanup on readonly fs [ 142.268278][ T6580] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #15: comm syz.5.791: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 32769, max 0(0), depth 0(0) [ 142.296988][ T6580] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.297146][ T6580] EXT4-fs (loop5): Remounting filesystem read-only [ 142.306321][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 142.306354][ C1] EXT4-fs (loop5): initial error at time 1781817031: ext4_ext_check_inode:521: inode 15 [ 142.306388][ C1] EXT4-fs (loop5): last error at time 1781817031: ext4_ext_check_inode:521: inode 15 [ 142.341228][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.349757][ T6580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.349789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.407077][ T6591] netlink: 'syz.4.795': attribute type 1 has an invalid length. [ 142.432444][ T6591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.493349][ T6591] bond1: (slave gretap1): making interface the new active one [ 142.496491][ T6599] loop3: detected capacity change from 0 to 1024 [ 142.502587][ T6591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.516259][ T6591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.522568][ T6599] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 142.533433][ T6599] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 142.543018][ T6599] EXT4-fs error (device loop3): ext4_acquire_dquot:7032: comm syz.3.798: Failed to acquire dquot type 0 [ 142.554319][ T6599] loop3: lost filesystem error report for type 5 error -117 [ 142.554438][ T6591] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 142.559599][ T6599] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 142.591310][ T6599] EXT4-fs (loop3): 1 truncate cleaned up [ 142.592131][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 142.603673][ C0] EXT4-fs (loop3): initial error at time 1781817031: ext4_acquire_dquot:7032 [ 142.603915][ T937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.612503][ C0] EXT4-fs (loop3): last error at time 1781817031: mb_free_blocks:2049: inode 13: block 160 [ 142.616454][ T6591] syz.4.795 (6591) used greatest stack depth: 8528 bytes left [ 142.644595][ T6599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.660926][ T4516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.702470][ T6589] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.738891][ T361] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.778136][ T6614] program syz.6.805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.843968][ T6626] loop6: detected capacity change from 0 to 128 [ 142.867119][ T6626] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.883966][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.940123][ T6626] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.960659][ T28] audit: type=1400 audit(1781817031.921:753): avc: denied { watch } for pid=6624 comm="syz.6.808" path="/" dev="autofs" ino=15801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 143.005696][ T361] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.034829][ T937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.062036][ T6643] loop3: detected capacity change from 0 to 512 [ 143.075229][ T361] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.087638][ T6643] EXT4-fs: Ignoring removed bh option [ 143.098269][ T6643] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 143.112883][ T28] audit: type=1400 audit(1781817032.071:754): avc: denied { setopt } for pid=6646 comm="syz.4.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 143.141024][ T6643] EXT4-fs (loop3): 1 truncate cleaned up [ 143.142057][ T28] audit: type=1400 audit(1781817032.101:755): avc: denied { read } for pid=6646 comm="syz.4.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 143.152902][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.814'. [ 143.176230][ T6643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.181870][ T6647] netlink: 2 bytes leftover after parsing attributes in process `syz.4.814'. [ 143.201197][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.814'. [ 143.210161][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.814'. [ 143.219055][ T6647] netlink: 2 bytes leftover after parsing attributes in process `syz.4.814'. [ 143.228137][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.814'. [ 143.237256][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.814'. [ 143.250987][ T6647] netlink: 2 bytes leftover after parsing attributes in process `syz.4.814'. [ 143.263850][ T28] audit: type=1400 audit(1781817032.231:756): avc: denied { write } for pid=6646 comm="syz.4.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 143.286930][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.814'. [ 143.306326][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.814'. [ 143.317682][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.359792][ T361] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.377172][ T6647] loop4: detected capacity change from 0 to 128 [ 143.443158][ T6657] loop3: detected capacity change from 0 to 256 [ 143.488220][ T6660] netlink: 'syz.6.815': attribute type 41 has an invalid length. [ 143.546926][ T6657] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.797452][ T361] bridge_slave_1: left allmulticast mode [ 143.846857][ T361] bridge_slave_1: left promiscuous mode [ 143.861980][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.875348][ T361] bridge_slave_0: left allmulticast mode [ 143.881194][ T361] bridge_slave_0: left promiscuous mode [ 143.887598][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.979608][ T6684] loop3: detected capacity change from 0 to 256 [ 144.022377][ T361] bond1 (unregistering): (slave gretap1): Releasing active interface [ 144.041341][ T6693] loop3: detected capacity change from 0 to 128 [ 144.061926][ T361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.074468][ T6693] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 144.080551][ T6697] debugfs: Bad value for 'uid' [ 144.082616][ T6693] FAT-fs (loop3): Filesystem has been set read-only [ 144.087494][ T6697] debugfs: Bad value for 'uid' [ 144.094550][ T6693] bio_check_eod: 819 callbacks suppressed [ 144.094563][ T6693] syz.3.820: attempt to access beyond end of device [ 144.094563][ T6693] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 144.120646][ T361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.121243][ T6693] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 144.137622][ T6693] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 144.146761][ T361] bond0 (unregistering): Released all slaves [ 144.159116][ T361] bond1 (unregistering): Released all slaves [ 144.175739][ T6693] syz.3.820: attempt to access beyond end of device [ 144.175739][ T6693] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.208182][ T3018] 8021q: adding VLAN 0 to HW filter on device eth9 [ 144.222497][ T6693] syz.3.820: attempt to access beyond end of device [ 144.222497][ T6693] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.253748][ T6693] syz.3.820: attempt to access beyond end of device [ 144.253748][ T6693] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.267322][ T6693] syz.3.820: attempt to access beyond end of device [ 144.267322][ T6693] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.281090][ T6693] syz.3.820: attempt to access beyond end of device [ 144.281090][ T6693] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.294593][ T6693] syz.3.820: attempt to access beyond end of device [ 144.294593][ T6693] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.313878][ T6698] syz.3.820: attempt to access beyond end of device [ 144.313878][ T6698] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.331117][ T6698] syz.3.820: attempt to access beyond end of device [ 144.331117][ T6698] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.378441][ T6698] syz.3.820: attempt to access beyond end of device [ 144.378441][ T6698] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.393158][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.400668][ T361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.444248][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.452631][ T361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.633058][ T361] veth1_macvtap: left promiscuous mode [ 144.645383][ T361] veth0_macvtap: left promiscuous mode [ 144.788446][ T6721] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 144.798280][ T6721] isofs_fill_super: get root inode failed [ 145.692887][ T361] team0 (unregistering): Port device team_slave_1 removed [ 145.712215][ T361] team0 (unregistering): Port device team_slave_0 removed [ 145.738807][ T6737] set_capacity_and_notify: 1 callbacks suppressed [ 145.738827][ T6737] loop3: detected capacity change from 0 to 1024 [ 145.796258][ T6737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.945395][ T6630] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.960448][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.978089][ T6630] bridge_slave_0: entered allmulticast mode [ 145.991372][ T6630] bridge_slave_0: entered promiscuous mode [ 146.006903][ T6630] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.022713][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.038425][ T6630] bridge_slave_1: entered allmulticast mode [ 146.051591][ T6630] bridge_slave_1: entered promiscuous mode [ 146.090421][ T6630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.107488][ T6745] batadv_slave_1: entered promiscuous mode [ 146.115180][ T6630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.130423][ T6745] batadv_slave_1 (unregistering): left promiscuous mode [ 146.158125][ T6630] team0: Port device team_slave_0 added [ 146.176938][ T6630] team0: Port device team_slave_1 added [ 146.249793][ T6630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.264202][ T6630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.290572][ T6630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.307168][ T3018] 8021q: adding VLAN 0 to HW filter on device eth10 [ 146.321014][ T6630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.328323][ T6630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.353135][ T6762] loop6: detected capacity change from 0 to 2048 [ 146.354838][ T6630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.409618][ T6762] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.417520][ T6630] hsr_slave_0: entered promiscuous mode [ 146.430997][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.445795][ T6630] hsr_slave_1: entered promiscuous mode [ 146.488428][ T4411] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.688917][ T3376] net_ratelimit: 13 callbacks suppressed [ 146.688931][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.704213][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.740719][ T3018] 8021q: adding VLAN 0 to HW filter on device eth11 [ 146.752493][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 146.752565][ T28] audit: type=1400 audit(1781817035.681:778): avc: denied { relabelfrom } for pid=6791 comm="syz.6.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 146.783115][ T6793] tipc: Started in network mode [ 146.788291][ T6793] tipc: Node identity , cluster identity 4711 [ 146.794478][ T6793] tipc: Failed to obtain node identity [ 146.800041][ T6793] tipc: Enabling of bearer rejected, failed to enable media [ 146.809079][ T28] audit: type=1400 audit(1781817035.681:779): avc: denied { relabelto } for pid=6791 comm="syz.6.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 146.858260][ T6630] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 146.878289][ T6630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 146.919649][ T361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.928371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.956023][ T6630] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 146.964588][ T6630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 146.983093][ T6630] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 147.021306][ T6630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.032614][ T6630] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 147.041595][ T6630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.054732][ T28] audit: type=1400 audit(1781817036.011:780): avc: denied { write } for pid=6800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.108705][ T28] audit: type=1400 audit(1781817036.071:781): avc: denied { write } for pid=6818 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.150824][ T3018] 8021q: adding VLAN 0 to HW filter on device eth12 [ 147.178372][ T6630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.191909][ T6630] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.207142][ T2169] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.214523][ T2169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.224326][ T2169] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.231459][ T2169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.258525][ T6830] loop4: detected capacity change from 0 to 8192 [ 147.400762][ T6630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.439406][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.565281][ T6630] veth0_vlan: entered promiscuous mode [ 147.573590][ T6630] veth1_vlan: entered promiscuous mode [ 147.593050][ T6630] veth0_macvtap: entered promiscuous mode [ 147.602387][ T6630] veth1_macvtap: entered promiscuous mode [ 147.614058][ T6630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.626898][ T6630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.652725][ T40] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.663914][ T361] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.674963][ T361] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.683953][ T361] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.697375][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.738879][ T28] audit: type=1400 audit(1781817036.701:782): avc: denied { mounton } for pid=6630 comm="syz-executor" path="/root/syzkaller.3mDb0f/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=16570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 147.755499][ T6877] loop3: detected capacity change from 0 to 164 [ 147.775345][ T28] audit: type=1400 audit(1781817036.731:783): avc: denied { mount } for pid=6630 comm="syz-executor" name="/" dev="gadgetfs" ino=4731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 147.813791][ T6877] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 148.042106][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.050507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.432773][ T28] audit: type=1400 audit(1781817037.391:784): avc: denied { setopt } for pid=6887 comm="syz.4.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 148.452584][ T28] audit: type=1400 audit(1781817037.391:785): avc: denied { read } for pid=6887 comm="syz.4.853" path="socket:[17609]" dev="sockfs" ino=17609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 148.534755][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.564085][ T6895] __nla_validate_parse: 24 callbacks suppressed [ 148.564098][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.854'. [ 148.571206][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.705406][ T6904] veth0_to_team: entered promiscuous mode [ 148.761278][ T6904] pimreg: entered allmulticast mode [ 148.771727][ T6904] pimreg: left allmulticast mode [ 148.783318][ T6906] loop3: detected capacity change from 0 to 128 [ 148.811255][ T6906] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.823721][ T6906] ext4 filesystem being mounted at /181/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.879285][ T28] audit: type=1400 audit(1781817037.841:786): avc: denied { write } for pid=6905 comm="syz.3.857" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.922379][ T3294] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.951187][ T6913] netlink: 'syz.7.859': attribute type 1 has an invalid length. [ 149.020372][ T6919] netlink: 32 bytes leftover after parsing attributes in process `syz.7.859'. [ 149.105443][ T28] audit: type=1400 audit(1781817038.071:787): avc: denied { bind } for pid=6922 comm="syz.7.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 149.136299][ T6924] loop7: detected capacity change from 0 to 1024 [ 149.173121][ T6930] netlink: 'syz.4.862': attribute type 1 has an invalid length. [ 149.194842][ T6930] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.287553][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.865'. [ 149.353903][ T6946] loop4: detected capacity change from 0 to 128 [ 149.410082][ T6946] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.431093][ T6946] ext4 filesystem being mounted at /189/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.474975][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.537838][ T6970] loop4: detected capacity change from 0 to 2048 [ 149.566464][ T6970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.684072][ T6976] netlink: 'syz.7.876': attribute type 1 has an invalid length. [ 149.786247][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.7.878'. [ 149.795262][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.7.878'. [ 149.833877][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.7.879'. [ 149.842808][ T6984] hsr_slave_0: left promiscuous mode [ 149.849353][ T6984] hsr_slave_1: left promiscuous mode [ 150.037097][ T6810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.074464][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.095137][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.880'. [ 150.105895][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.880'. [ 150.115406][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.880'. [ 150.124842][ T6993] loop3: detected capacity change from 0 to 2048 [ 150.153503][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.880'. [ 150.170387][ T6993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.183109][ T6997] loop4: detected capacity change from 0 to 2048 [ 150.206809][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.244194][ T7008] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.251149][ T7008] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 150.261149][ T7008] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 150.270634][ T7008] EXT4-fs (loop3): orphan cleanup on readonly fs [ 150.272076][ T6997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.289919][ T7008] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.887: bg 0: block 361: padding at end of block bitmap is not set [ 150.304406][ T7008] loop3: lost filesystem error report for type 5 error -117 [ 150.304622][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 150.318586][ C0] EXT4-fs (loop3): initial error at time 1781817039: ext4_validate_block_bitmap:441 [ 150.328023][ C0] EXT4-fs (loop3): last error at time 1781817039: ext4_validate_block_bitmap:441 [ 150.333804][ T7014] netlink: 'syz.6.888': attribute type 1 has an invalid length. [ 150.345443][ T7008] EXT4-fs (loop3): Remounting filesystem read-only [ 150.352517][ T7008] EXT4-fs (loop3): 1 truncate cleaned up [ 150.358921][ T7008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 150.365297][ T7014] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.381488][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.506213][ T7025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.518443][ T7024] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 150.531504][ T7024] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 150.542279][ T7024] EXT4-fs error (device loop6): ext4_get_journal_inode:5896: inode #32: comm syz.6.892: iget: special inode unallocated [ 150.560337][ T7024] loop6: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 150.560773][ T7024] EXT4-fs (loop6): Remounting filesystem read-only [ 150.569966][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 150.570015][ C0] EXT4-fs (loop6): initial error at time 1781817039: ext4_get_journal_inode:5896: inode 32 [ 150.570049][ C0] EXT4-fs (loop6): last error at time 1781817039: ext4_get_journal_inode:5896: inode 32 [ 150.604586][ T7024] EXT4-fs (loop6): no journal found [ 150.608017][ T7025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.610348][ T7024] EXT4-fs (loop6): can't get journal size [ 150.705496][ T7030] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.887: dx entry: limit 0 != root limit 125 [ 150.718187][ T7030] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.887: Corrupt directory, running e2fsck is recommended [ 150.786065][ T7024] EXT4-fs (loop6): filesystem is read-only [ 150.807069][ T7024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 151.038190][ T7033] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 151.211266][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 151.218723][ T7046] sctp: [Deprecated]: syz.2.896 (pid 7046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.218723][ T7046] Use struct sctp_sack_info instead [ 151.242234][ T7047] set_capacity_and_notify: 2 callbacks suppressed [ 151.242268][ T7047] loop4: detected capacity change from 0 to 512 [ 151.256523][ T7047] EXT4-fs: Ignoring removed i_version option [ 151.262710][ T7047] EXT4-fs: Ignoring removed nobh option [ 151.269211][ T7047] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 151.284200][ T7047] EXT4-fs (loop4): 1 truncate cleaned up [ 151.304393][ T7047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.331075][ T7045] EXT4-fs warning (device loop4): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 151.336875][ T7055] netlink: 'syz.2.901': attribute type 1 has an invalid length. [ 151.352377][ T4411] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.373750][ T7055] 8021q: adding VLAN 0 to HW filter on device bond5 [ 151.432467][ T7068] loop6: detected capacity change from 0 to 512 [ 151.440971][ T7068] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.441533][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.465888][ T7068] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 151.476691][ T7068] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 151.485300][ T7068] EXT4-fs (loop6): orphan cleanup on readonly fs [ 151.492860][ T7068] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.904: bg 0: block 361: padding at end of block bitmap is not set [ 151.507239][ T7068] loop6: lost filesystem error report for type 5 error -117 [ 151.509428][ T7068] EXT4-fs (loop6): Remounting filesystem read-only [ 151.516890][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 151.516917][ C1] EXT4-fs (loop6): initial error at time 1781817040: ext4_validate_block_bitmap:441 [ 151.516941][ C1] EXT4-fs (loop6): last error at time 1781817040: ext4_validate_block_bitmap:441 [ 151.554269][ T7068] EXT4-fs (loop6): 1 truncate cleaned up [ 151.560974][ T7068] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 151.609513][ T7074] loop4: detected capacity change from 0 to 128 [ 151.639308][ T7079] pimreg: entered allmulticast mode [ 151.645464][ T7079] pimreg: left allmulticast mode [ 151.721247][ T7084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7084 comm=syz.2.910 [ 151.728766][ T7074] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.751832][ T7074] ext4 filesystem being mounted at /198/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.892474][ T7090] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.904: dx entry: limit 0 != root limit 125 [ 151.904370][ T7090] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.904: Corrupt directory, running e2fsck is recommended [ 151.988492][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 151.988555][ T28] audit: type=1400 audit(1781817040.941:894): avc: denied { write } for pid=7073 comm="syz.4.905" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.099903][ T7089] bridge0: port 1(gretap0) entered disabled state [ 152.164980][ T3397] net_ratelimit: 9 callbacks suppressed [ 152.165041][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.203726][ T28] audit: type=1400 audit(1781817041.161:895): avc: denied { setattr } for pid=7093 comm="syz.3.912" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 152.207565][ T3347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.235571][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.290162][ T7095] Driver unsupported XDP return value 0 on prog (id 156) dev N/A, expect packet loss! [ 152.321600][ T28] audit: type=1400 audit(1781817041.281:896): avc: denied { tracepoint } for pid=7101 comm="syz.7.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 152.348630][ T7102] loop7: detected capacity change from 0 to 512 [ 152.365167][ T7102] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 152.397226][ T7102] Quota error (device loop7): do_check_range: Getting block 196613 out of range 1-5 [ 152.407000][ T7102] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 152.416566][ T7102] EXT4-fs error (device loop7): ext4_acquire_dquot:7032: comm syz.7.914: Failed to acquire dquot type 1 [ 152.427993][ T7102] loop7: lost filesystem error report for type 5 error -117 [ 152.428511][ T7102] EXT4-fs (loop7): 1 truncate cleaned up [ 152.435828][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 152.435850][ C0] EXT4-fs (loop7): last error at time 1781817041: ext4_acquire_dquot:7032 [ 152.457140][ T7102] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 152.476597][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.561343][ T4411] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 152.574546][ T6630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 152.588586][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.655279][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.663573][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.697471][ T7120] usb usb8: check_ctrlrecip: process 7120 (syz.4.917) requesting ep 01 but needs 81 [ 152.707542][ T7120] usb usb8: usbfs: process 7120 (syz.4.917) did not claim interface 0 before use [ 152.797674][ T4344] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.811483][ T4344] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.820869][ T4344] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.829935][ T4344] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.857946][ T7132] loop4: detected capacity change from 0 to 128 [ 152.869561][ T7130] loop3: detected capacity change from 0 to 2048 [ 152.887391][ T28] audit: type=1400 audit(1781817041.851:897): avc: denied { watch watch_reads } for pid=7131 comm="syz.4.923" path="/201/file0/file0" dev="loop4" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 153.031721][ T7130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.033647][ T7140] bridge0: port 3(gretap0) entered blocking state [ 153.054565][ T7140] bridge0: port 3(gretap0) entered disabled state [ 153.065728][ T7140] gretap0: entered allmulticast mode [ 153.846011][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.854244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.011646][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.213016][ T7140] gretap0: entered promiscuous mode [ 154.220288][ T7140] bridge0: port 3(gretap0) entered blocking state [ 154.220589][ T7140] bridge0: port 3(gretap0) entered forwarding state [ 154.324762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.882757][ T7154] netlink: 'syz.6.928': attribute type 11 has an invalid length. [ 154.935506][ T7158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7158 comm=syz.6.928 [ 154.955010][ T7154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7154 comm=syz.6.928 [ 155.047347][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.118772][ T3375] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 155.131295][ T3375] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 155.342903][ T7172] usb usb8: check_ctrlrecip: process 7172 (syz.6.933) requesting ep 01 but needs 81 [ 155.352892][ T7172] usb usb8: usbfs: process 7172 (syz.6.933) did not claim interface 0 before use [ 155.884919][ T28] audit: type=1400 audit(1781817044.841:898): avc: denied { read } for pid=7189 comm="syz.7.938" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 155.910643][ T7190] futex_wake_op: syz.7.938 tries to shift op by -1; fix this program [ 155.932173][ T7190] tmpfs: Unknown parameter '‚üÞ' [ 155.969441][ T28] audit: type=1400 audit(1781817044.851:899): avc: denied { open } for pid=7189 comm="syz.7.938" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 156.024994][ T28] audit: type=1400 audit(1781817044.911:900): avc: denied { ioctl } for pid=7189 comm="syz.7.938" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 156.111476][ T7198] syzkaller1: entered promiscuous mode [ 156.142139][ T7198] syzkaller1: entered allmulticast mode [ 156.251068][ T7196] pimreg: entered allmulticast mode [ 156.330344][ T7196] pimreg: left allmulticast mode [ 156.350773][ T28] audit: type=1400 audit(1781817045.311:901): avc: denied { cpu } for pid=7197 comm="syz.6.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 156.767438][ T7205] 9p: Bad value for 'wfdno' [ 156.948101][ T7210] SET target dimension over the limit! [ 156.955303][ T7210] __nla_validate_parse: 4 callbacks suppressed [ 156.955333][ T7210] netlink: 14 bytes leftover after parsing attributes in process `syz.3.943'. [ 156.995208][ T7210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.007195][ T7210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.023720][ T7210] bond0 (unregistering): Released all slaves [ 157.116105][ T7211] loop3: detected capacity change from 0 to 8192 [ 157.138057][ T7213] netlink: 'syz.6.944': attribute type 1 has an invalid length. [ 157.153518][ T7213] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.263942][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 157.263956][ T28] audit: type=1400 audit(1781817046.221:906): avc: denied { unlink } for pid=6630 comm="syz-executor" name="file0" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.359153][ T7221] loop6: detected capacity change from 0 to 256 [ 157.378382][ T7221] msdos: Unknown parameter 'ÿÿ0x000000000000ee00ÿÿ18446744073709551615ÿ' [ 157.389408][ T7222] usb usb8: check_ctrlrecip: process 7222 (syz.7.945) requesting ep 01 but needs 81 [ 157.399064][ T7222] usb usb8: usbfs: process 7222 (syz.7.945) did not claim interface 0 before use [ 157.527039][ T2169] net_ratelimit: 7 callbacks suppressed [ 157.527063][ T2169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.542616][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.7.948'. [ 157.543247][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.6.949'. [ 157.560428][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.7.948'. [ 157.735213][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.7.951'. [ 157.764751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.812329][ T7245] loop7: detected capacity change from 0 to 1024 [ 157.836539][ T28] audit: type=1400 audit(1781817046.801:907): avc: denied { write } for pid=7244 comm="syz.7.954" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.841604][ T7252] loop6: detected capacity change from 0 to 512 [ 158.100063][ T7252] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.175247][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.219735][ T7252] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 158.448475][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.456696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.487974][ T7252] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 158.839151][ T7252] EXT4-fs (loop6): orphan cleanup on readonly fs [ 158.847615][ T28] audit: type=1400 audit(1781817047.121:908): avc: denied { write } for pid=7244 comm="syz.7.954" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.458222][ T7252] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.956: bg 0: block 361: padding at end of block bitmap is not set [ 159.819759][ T3347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.827990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.836545][ T28] audit: type=1400 audit(1781817047.441:909): avc: denied { create } for pid=7244 comm="syz.7.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 159.861955][ T7252] loop6: lost filesystem error report for type 5 error -117 [ 159.862144][ T7252] EXT4-fs (loop6): Remounting filesystem read-only [ 159.869514][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 159.869548][ C0] EXT4-fs (loop6): initial error at time 1781817048: ext4_validate_block_bitmap:441 [ 159.869568][ C0] EXT4-fs (loop6): last error at time 1781817048: ext4_validate_block_bitmap:441 [ 160.211835][ T7266] loop3: detected capacity change from 0 to 512 [ 160.244982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.368989][ T7266] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.438520][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.461630][ T7252] EXT4-fs (loop6): 1 truncate cleaned up [ 160.464719][ T7266] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 160.473954][ T7252] EXT4-fs mount: 1 callbacks suppressed [ 160.473972][ T7252] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 160.477736][ T7266] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 160.477782][ T7266] EXT4-fs error (device loop3): ext4_acquire_dquot:7032: comm syz.3.957: Failed to acquire dquot type 1 [ 160.515823][ T7266] loop3: lost filesystem error report for type 5 error -5 [ 160.518646][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.535950][ T7266] EXT4-fs (loop3): 1 truncate cleaned up [ 160.542739][ T7266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 160.628509][ T28] audit: type=1400 audit(1781817047.781:910): avc: denied { connect } for pid=7244 comm="syz.7.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 160.681621][ T28] audit: type=1400 audit(1781817049.621:911): avc: denied { write } for pid=7253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.915996][ T28] audit: type=1400 audit(1781817049.881:912): avc: denied { write } for pid=7282 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.021844][ T6630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.090232][ T7290] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.956: dx entry: limit 0 != root limit 125 [ 161.101943][ T7290] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.956: Corrupt directory, running e2fsck is recommended [ 161.162231][ T28] audit: type=1400 audit(1781817050.011:913): avc: denied { setopt } for pid=7283 comm="syz.2.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 161.190445][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 161.416789][ T7294] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 161.494976][ T7302] loop7: detected capacity change from 0 to 256 [ 161.506100][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.961'. [ 161.533866][ T7302] vfat: Unknown parameter 'check.relaxed' [ 161.569846][ T4411] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 161.718056][ T7322] loop7: detected capacity change from 0 to 512 [ 161.725742][ T7322] ext4: Bad value for 'data_err' [ 162.013984][ T7329] loop6: detected capacity change from 0 to 512 [ 162.041531][ T7333] netlink: 'syz.7.971': attribute type 1 has an invalid length. [ 162.108861][ T7329] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.965: corrupted inode contents [ 162.120834][ T7329] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 162.121227][ T7329] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #16: comm syz.6.965: mark_inode_dirty error [ 162.141697][ T7329] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 162.142186][ T7329] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.965: corrupted inode contents [ 162.163374][ T7329] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 162.163750][ T7329] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.965: mark_inode_dirty error [ 162.184192][ T7329] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 162.184807][ T7329] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.965: corrupted inode contents [ 162.205682][ C0] EXT4-fs (loop6): error count since last fsck: 4 [ 162.205724][ C0] EXT4-fs (loop6): initial error at time 1781817051: ext4_do_update_inode:5690: inode 16 [ 162.205756][ C0] EXT4-fs (loop6): last error at time 1781817051: __ext4_ext_dirty:207: inode 16 [ 162.231587][ T7329] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 162.234713][ T7329] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 162.252403][ T7329] loop6: lost filesystem error report for type 5 error -117 [ 162.252797][ T7329] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.965: corrupted inode contents [ 162.271983][ T7329] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 162.272686][ T7329] EXT4-fs error (device loop6): ext4_truncate:4690: inode #16: comm syz.6.965: mark_inode_dirty error [ 162.292759][ T7329] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 162.293421][ T7329] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 162.313779][ T7329] loop6: lost filesystem error report for type 5 error -117 [ 162.316928][ T7329] EXT4-fs (loop6): 1 truncate cleaned up [ 162.331265][ T7329] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.344157][ T7329] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.366859][ T28] kauditd_printk_skb: 160 callbacks suppressed [ 162.366881][ T28] audit: type=1326 audit(1781817051.321:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.4.970" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288d31ce59 code=0x7ffc0000 [ 162.398937][ T28] audit: type=1326 audit(1781817051.321:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.4.970" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f288d31cbc2 code=0x7ffc0000 [ 162.451172][ T40] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 162.461118][ T40] EXT4-fs error (device loop6): ext4_release_dquot:7068: comm kworker/u8:2: Failed to release dquot type 1 [ 162.480265][ T7333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.631355][ T28] audit: type=1326 audit(1781817051.391:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.4.970" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f288d31ce59 code=0x7ffc0000 [ 162.656783][ T28] audit: type=1326 audit(1781817051.391:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.4.970" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288d31ce59 code=0x7ffc0000 [ 162.682136][ T28] audit: type=1326 audit(1781817051.391:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.4.970" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f288d31cc57 code=0x7ffc0000 [ 162.715791][ T3389] net_ratelimit: 4 callbacks suppressed [ 162.715805][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.719204][ T28] audit: type=1326 audit(1781817051.391:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.4.970" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288d31ce59 code=0x7ffc0000 [ 162.779375][ T28] audit: type=1326 audit(1781817051.391:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.4.970" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f288d2d9b51 code=0x7ffc0000 [ 162.898289][ T7344] bond1: (slave gretap1): making interface the new active one [ 162.931812][ T7344] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 163.033826][ T7346] audit: audit_backlog=65 > audit_backlog_limit=64 [ 163.040543][ T7346] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 163.319348][ T7380] bond6: option all_slaves_active: invalid value (5) [ 163.343560][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.970'. [ 163.353972][ T4411] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.364399][ T7380] bond6 (unregistering): Released all slaves [ 163.389363][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.970'. [ 163.555175][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.615111][ T7421] loop4: detected capacity change from 0 to 512 [ 163.636174][ T7421] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.653055][ T7421] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 163.675993][ T7421] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 163.684239][ T7421] EXT4-fs (loop4): orphan cleanup on readonly fs [ 163.692272][ T7421] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.987: bg 0: block 361: padding at end of block bitmap is not set [ 163.706882][ T7421] loop4: lost filesystem error report for type 5 error -117 [ 163.707546][ T7421] EXT4-fs (loop4): Remounting filesystem read-only [ 163.714907][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 163.714930][ C0] EXT4-fs (loop4): initial error at time 1781817052: ext4_validate_block_bitmap:441 [ 163.714979][ C0] EXT4-fs (loop4): last error at time 1781817052: ext4_validate_block_bitmap:441 [ 163.750088][ T7421] EXT4-fs (loop4): 1 truncate cleaned up [ 163.761450][ T7421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 163.775316][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.786590][ T7426] pimreg: entered allmulticast mode [ 163.794376][ T7426] pimreg: left allmulticast mode [ 163.937387][ T7430] netlink: 76 bytes leftover after parsing attributes in process `syz.2.990'. [ 164.025610][ T7431] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.987: dx entry: limit 0 != root limit 125 [ 164.037362][ T7431] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.987: Corrupt directory, running e2fsck is recommended [ 164.353188][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 164.430702][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 164.572335][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 164.594973][ T7449] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 164.645647][ T7454] loop7: detected capacity change from 0 to 1024 [ 164.647725][ T3347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.660275][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.660459][ T7454] EXT4-fs: test_dummy_encryption option not supported [ 164.709882][ T7457] loop4: detected capacity change from 0 to 512 [ 164.748947][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.772526][ T7457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.789262][ T7463] loop7: detected capacity change from 0 to 512 [ 164.806098][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.814328][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.823047][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.833854][ T7463] journal_path: Non-blockdev passed as './file2' [ 164.840801][ T7463] EXT4-fs: error: could not find journal device path [ 164.896172][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.937509][ T7465] loop3: detected capacity change from 0 to 2048 [ 164.950543][ T7467] loop4: detected capacity change from 0 to 2048 [ 164.984069][ T7465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.028572][ T3294] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 165.048999][ T3294] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 165.395648][ T7470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.444517][ T2169] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.462657][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1008'. [ 165.486985][ T2169] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.496203][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1008'. [ 165.559323][ T2169] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.609511][ T2169] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.718133][ T2169] gretap0: left allmulticast mode [ 165.724936][ T2169] gretap0: left promiscuous mode [ 165.740284][ T2169] bridge0: port 3(gretap0) entered disabled state [ 165.754867][ T2169] bridge_slave_1: left allmulticast mode [ 165.760759][ T2169] bridge_slave_1: left promiscuous mode [ 165.767729][ T2169] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.787715][ T2169] bridge_slave_0: left allmulticast mode [ 165.793554][ T2169] bridge_slave_0: left promiscuous mode [ 165.799945][ T2169] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.858663][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.918576][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 165.931979][ T2169] bond1 (unregistering): (slave gretap1): Releasing active interface [ 165.972264][ T2169] bond1 (unregistering): Released all slaves [ 165.990722][ T2169] bond2 (unregistering): Released all slaves [ 166.055567][ T2169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.067420][ T2169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.089230][ T2169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.105428][ T2169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.131707][ T2169] veth1_macvtap: left promiscuous mode [ 166.143977][ T2169] veth0_macvtap: left promiscuous mode [ 166.153931][ T2169] veth1_vlan: left promiscuous mode [ 166.167062][ T2169] veth0_vlan: left promiscuous mode [ 166.222404][ T7523] netlink: 'syz.2.1015': attribute type 1 has an invalid length. [ 166.323968][ T2169] team0 (unregistering): Port device team_slave_1 removed [ 166.345110][ T2169] team0 (unregistering): Port device team_slave_0 removed [ 166.421940][ T7523] 8021q: adding VLAN 0 to HW filter on device bond6 [ 166.433268][ T3018] 8021q: adding VLAN 0 to HW filter on device eth13 [ 166.720126][ T7485] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.764888][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.772418][ T7485] bridge_slave_0: entered allmulticast mode [ 166.779316][ T7485] bridge_slave_0: entered promiscuous mode [ 166.786841][ T7485] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.793920][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.801602][ T7485] bridge_slave_1: entered allmulticast mode [ 166.808200][ T7485] bridge_slave_1: entered promiscuous mode [ 166.819595][ T3018] 8021q: adding VLAN 0 to HW filter on device eth14 [ 166.873267][ T7485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.917391][ T7485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.952727][ T7559] netdevsim netdevsim7 netdevsim0: IPsec offload requires 128 bit authentication [ 166.970963][ T7485] team0: Port device team_slave_0 added [ 166.989605][ T7485] team0: Port device team_slave_1 added [ 167.036236][ T7485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.070009][ T7485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.130768][ T7485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.161580][ T7485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.184503][ T7485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.257484][ T7578] loop7: detected capacity change from 0 to 512 [ 167.263132][ T7485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.299705][ T7578] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1021: inode has both inline data and extents flags [ 167.313255][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1022'. [ 167.347413][ T7485] hsr_slave_0: entered promiscuous mode [ 167.347439][ T7578] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 167.355063][ T7485] hsr_slave_1: entered promiscuous mode [ 167.368556][ T28] kauditd_printk_skb: 268 callbacks suppressed [ 167.368571][ T28] audit: type=1400 audit(1781817056.321:1345): avc: denied { write } for pid=7585 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.415626][ T7578] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1021: couldn't read orphan inode 15 (err -117) [ 167.427563][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 167.427588][ C1] EXT4-fs (loop7): initial error at time 1781817056: ext4_orphan_get:1399: inode 15 [ 167.427637][ C1] EXT4-fs (loop7): last error at time 1781817056: ext4_orphan_get:1399: inode 15 [ 167.452988][ T7578] loop7: lost filesystem error report for type 5 error -117 [ 167.453582][ T7578] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.535752][ T3018] 8021q: adding VLAN 0 to HW filter on device eth15 [ 167.554946][ T28] audit: type=1400 audit(1781817056.511:1346): avc: denied { write } for pid=7574 comm="syz.7.1021" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.587270][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1023'. [ 167.613084][ T6630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.627686][ T28] audit: type=1400 audit(1781817056.561:1347): avc: denied { write } for pid=7574 comm="syz.7.1021" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.730528][ T7485] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 167.756534][ T7485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.780395][ T28] audit: type=1400 audit(1781817056.741:1348): avc: denied { write } for pid=7598 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.864044][ T28] audit: type=1400 audit(1781817056.811:1349): avc: denied { write } for pid=7623 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.902889][ T7485] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 167.911813][ T7485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.919707][ T7485] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 167.926655][ T3397] net_ratelimit: 6 callbacks suppressed [ 167.926669][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.943322][ T7485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.964853][ T3018] 8021q: adding VLAN 0 to HW filter on device eth16 [ 168.015508][ T7622] pimreg: entered allmulticast mode [ 168.029382][ T7485] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 168.039881][ T7485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 168.082281][ T7622] pimreg: left allmulticast mode [ 168.169897][ T7485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.204418][ T7485] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.246136][ T7485] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.290290][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.294165][ T7485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.316700][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.323906][ T4344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.343190][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.350313][ T4344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.619126][ T7485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.790224][ T7680] loop4: detected capacity change from 0 to 2048 [ 168.858809][ T7680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.904297][ T28] audit: type=1400 audit(1781817057.861:1350): avc: denied { write } for pid=7678 comm="syz.4.1037" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.938070][ T28] audit: type=1400 audit(1781817057.901:1351): avc: denied { write } for pid=7678 comm="syz.4.1037" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.967043][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.975476][ T28] audit: type=1400 audit(1781817057.901:1352): avc: denied { write } for pid=7678 comm="syz.4.1037" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.017287][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.032542][ T7485] veth0_vlan: entered promiscuous mode [ 169.047708][ T7485] veth1_vlan: entered promiscuous mode [ 169.143075][ T7485] veth0_macvtap: entered promiscuous mode [ 169.152904][ T7485] veth1_macvtap: entered promiscuous mode [ 169.189190][ T7710] loop4: detected capacity change from 0 to 1024 [ 169.206950][ T7485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.225439][ T7710] EXT4-fs: Ignoring removed bh option [ 169.236125][ T7485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.259780][ T2169] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.277364][ T7710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.296335][ T68] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.316200][ T68] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.424178][ T361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.568163][ T68] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.936115][ T6259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.944338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.452546][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'. [ 170.480531][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.488791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.499712][ T937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.562095][ T7732] usb usb8: check_ctrlrecip: process 7732 (syz.8.1047) requesting ep 01 but needs 81 [ 170.595909][ T2169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.719853][ T7732] usb usb8: usbfs: process 7732 (syz.8.1047) did not claim interface 0 before use [ 171.213605][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.478321][ T7735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.876927][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1051'. [ 171.897894][ T7756] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.905127][ T7756] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.009803][ T7756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.029171][ T7756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.246047][ T361] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.264719][ T361] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.287520][ T361] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.305508][ T361] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.555386][ T7771] usb usb8: check_ctrlrecip: process 7771 (syz.4.1057) requesting ep 01 but needs 81 [ 172.575044][ T7771] usb usb8: usbfs: process 7771 (syz.4.1057) did not claim interface 0 before use [ 172.685573][ T7774] loop4: detected capacity change from 0 to 256 [ 172.707525][ T7774] vfat: Unknown parameter 'check.relaxed' [ 172.708993][ T7776] tc_dump_action: action bad kind [ 172.734093][ T7777] tc_dump_action: action bad kind [ 172.834177][ T7785] netlink: 'syz.2.1062': attribute type 10 has an invalid length. [ 172.877484][ T7785] team0: Port device vxcan0 added [ 172.920629][ T5631] Bluetooth: hci0: Frame reassembly failed (-84) [ 172.929956][ T7785] Bluetooth: hci0: Frame reassembly failed (-84) [ 172.967000][ T7783] netlink: 'syz.4.1061': attribute type 16 has an invalid length. [ 172.988519][ T7783] netlink: 'syz.4.1061': attribute type 17 has an invalid length. [ 173.003215][ T7783] net_ratelimit: 7 callbacks suppressed [ 173.003228][ T7783] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 173.064707][ T7800] loop7: detected capacity change from 0 to 256 [ 173.092606][ T7802] loop4: detected capacity change from 0 to 2048 [ 173.109390][ T7800] vfat: Unknown parameter 'check.relaxed' [ 173.124817][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.138267][ T7802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.158117][ T28] audit: type=1400 audit(1781817062.121:1353): avc: denied { write } for pid=7801 comm="syz.4.1068" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.205257][ T28] audit: type=1400 audit(1781817062.151:1354): avc: denied { write } for pid=7801 comm="syz.4.1068" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.205751][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.227536][ T28] audit: type=1400 audit(1781817062.151:1355): avc: denied { write } for pid=7801 comm="syz.4.1068" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.297575][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.329045][ T7809] usb usb8: usbfs: process 7809 (syz.6.1070) did not claim interface 0 before use [ 173.374791][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1071'. [ 173.385012][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1071'. [ 173.423459][ T7814] loop7: detected capacity change from 0 to 256 [ 173.451259][ T7818] loop6: detected capacity change from 0 to 512 [ 173.469835][ T7814] vfat: Unknown parameter 'check.relaxed' [ 173.470797][ T7818] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.513615][ T7818] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.538398][ T7818] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.553790][ T28] audit: type=1400 audit(1781817062.521:1356): avc: denied { setopt } for pid=7819 comm="syz.7.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 173.610161][ T28] audit: type=1400 audit(1781817062.561:1357): avc: denied { write } for pid=7817 comm="syz.6.1074" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.649272][ T28] audit: type=1326 audit(1781817062.561:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.6.1074" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e45e8ce59 code=0x0 [ 173.684774][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.787761][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.114759][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.291026][ T4411] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.309850][ T28] audit: type=1400 audit(1781817063.271:1359): avc: denied { mount } for pid=7845 comm="syz.6.1081" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 174.440412][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1082'. [ 174.458705][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1082'. [ 174.475605][ T361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.625238][ T7863] loop7: detected capacity change from 0 to 128 [ 174.641655][ T7865] loop6: detected capacity change from 0 to 512 [ 174.679379][ T7865] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 174.695181][ T7863] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.709939][ T7863] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 174.746389][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.848971][ T28] audit: type=1400 audit(1781817063.811:1360): avc: denied { write } for pid=7862 comm="syz.7.1085" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.949066][ T6630] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.964710][ T7793] Bluetooth: hci0: command 0x1003 tx timeout [ 175.018517][ T7873] program syz.6.1086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.041325][ T3748] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 175.413258][ T7884] loop7: detected capacity change from 0 to 128 [ 175.507387][ T7884] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 175.515525][ T7884] FAT-fs (loop7): Filesystem has been set read-only [ 175.522226][ T7884] bio_check_eod: 3411 callbacks suppressed [ 175.522249][ T7884] syz.7.1091: attempt to access beyond end of device [ 175.522249][ T7884] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 175.591734][ T7884] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 175.616845][ T7884] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 175.655145][ T3347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.659989][ T7884] syz.7.1091: attempt to access beyond end of device [ 175.659989][ T7884] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 175.663428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.695019][ T5631] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 175.736508][ T7884] syz.7.1091: attempt to access beyond end of device [ 175.736508][ T7884] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 175.815232][ T7884] syz.7.1091: attempt to access beyond end of device [ 175.815232][ T7884] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 175.834745][ T7884] syz.7.1091: attempt to access beyond end of device [ 175.834745][ T7884] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 175.917616][ T7884] syz.7.1091: attempt to access beyond end of device [ 175.917616][ T7884] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 175.956845][ T7884] syz.7.1091: attempt to access beyond end of device [ 175.956845][ T7884] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 176.057811][ T7884] syz.7.1091: attempt to access beyond end of device [ 176.057811][ T7884] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 176.196460][ T7884] syz.7.1091: attempt to access beyond end of device [ 176.196460][ T7884] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 176.232324][ T7884] syz.7.1091: attempt to access beyond end of device [ 176.232324][ T7884] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 176.353379][ T7904] loop7: detected capacity change from 0 to 256 [ 176.386553][ T7904] vfat: Unknown parameter 'check.relaxed' [ 176.481328][ T7905] FAULT_INJECTION: forcing a failure. [ 176.481328][ T7905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.494705][ T7905] CPU: 1 UID: 0 PID: 7905 Comm: syz.6.1096 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 176.494736][ T7905] Tainted: [W]=WARN [ 176.494756][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 176.494769][ T7905] Call Trace: [ 176.494777][ T7905] [ 176.494786][ T7905] __dump_stack+0x1d/0x30 [ 176.494806][ T7905] dump_stack_lvl+0x95/0xd0 [ 176.494823][ T7905] dump_stack+0x15/0x1b [ 176.494838][ T7905] should_fail_ex+0x25e/0x270 [ 176.494920][ T7905] should_fail+0xb/0x20 [ 176.494938][ T7905] should_fail_usercopy+0x1a/0x20 [ 176.495039][ T7905] _copy_to_user+0x20/0xa0 [ 176.495100][ T7905] simple_read_from_buffer+0xb5/0x130 [ 176.495127][ T7905] proc_fail_nth_read+0x10e/0x150 [ 176.495152][ T7905] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.495210][ T7905] vfs_read+0x18e/0x7c0 [ 176.495229][ T7905] ? __rcu_read_unlock+0x4e/0x70 [ 176.495265][ T7905] ? __fget_files+0x184/0x1c0 [ 176.495362][ T7905] ? mutex_lock+0x57/0x90 [ 176.495383][ T7905] ksys_read+0xdc/0x1a0 [ 176.495539][ T7905] __x64_sys_read+0x40/0x50 [ 176.495560][ T7905] x64_sys_call+0x2886/0x3020 [ 176.495586][ T7905] do_syscall_64+0x136/0x3c0 [ 176.495611][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.495651][ T7905] RIP: 0033:0x7f9e45e4d68e [ 176.495664][ T7905] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 176.495679][ T7905] RSP: 002b:00007f9e448bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.495696][ T7905] RAX: ffffffffffffffda RBX: 00007f9e448be6c0 RCX: 00007f9e45e4d68e [ 176.495776][ T7905] RDX: 000000000000000f RSI: 00007f9e448be0a0 RDI: 0000000000000007 [ 176.495854][ T7905] RBP: 00007f9e448be090 R08: 0000000000000000 R09: 0000000000000000 [ 176.495864][ T7905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.495882][ T7905] R13: 00007f9e46106128 R14: 00007f9e46106090 R15: 00007ffdf3d923c8 [ 176.495898][ T7905] [ 176.712452][ T7917] sctp: [Deprecated]: syz.6.1100 (pid 7917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.712452][ T7917] Use struct sctp_sack_info instead [ 176.748313][ T7914] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 176.768916][ T28] audit: type=1400 audit(1781817065.731:1361): avc: denied { create } for pid=7920 comm="syz.7.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.802479][ T7924] usb usb8: check_ctrlrecip: process 7924 (syz.8.1103) requesting ep 01 but needs 81 [ 176.812153][ T7924] usb usb8: usbfs: process 7924 (syz.8.1103) did not claim interface 0 before use [ 176.836123][ T28] audit: type=1400 audit(1781817065.731:1362): avc: denied { ioctl } for pid=7920 comm="syz.7.1104" path="socket:[20488]" dev="sockfs" ino=20488 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.957684][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1107'. [ 177.008682][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1107'. [ 177.061309][ T7921] loop7: detected capacity change from 0 to 512 [ 177.070264][ T7921] EXT4-fs: Ignoring removed bh option [ 177.179219][ T7921] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.208022][ T7921] ext4 filesystem being mounted at /62 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.436304][ T7948] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 177.625001][ T6630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.770554][ T7957] batadv_slave_1: entered promiscuous mode [ 177.783397][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1114'. [ 177.805690][ T7957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.840078][ T7957] batadv_slave_1 (unregistering): left promiscuous mode [ 177.869438][ T7957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.894406][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'. [ 177.947396][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.969196][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.166941][ T7973] loop7: detected capacity change from 0 to 164 [ 178.168303][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1119'. [ 178.199371][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1119'. [ 178.211780][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 178.211794][ T28] audit: type=1400 audit(1781817067.181:1375): avc: denied { unlink } for pid=4411 comm="syz-executor" name="bus" dev="tmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 178.246067][ T68] net_ratelimit: 8 callbacks suppressed [ 178.246084][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.260386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.436586][ T7741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.676315][ T7982] pimreg: entered allmulticast mode [ 178.738830][ T7995] pimreg: left allmulticast mode [ 178.974752][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.010852][ T28] audit: type=1400 audit(1781817067.971:1376): avc: denied { write } for pid=7987 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.047866][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1127'. [ 179.087009][ T8005] hsr_slave_0: left promiscuous mode [ 179.103475][ T28] audit: type=1400 audit(1781817067.991:1377): avc: denied { write } for pid=8011 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.132820][ T8005] hsr_slave_1: left promiscuous mode [ 179.238300][ T28] audit: type=1400 audit(1781817068.201:1378): avc: denied { write } for pid=8015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.324987][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1134'. [ 179.333831][ T28] audit: type=1400 audit(1781817068.291:1379): avc: denied { write } for pid=8047 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.352472][ T8051] sctp: [Deprecated]: syz.6.1133 (pid 8051) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.352472][ T8051] Use struct sctp_sack_info instead [ 179.373964][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1134'. [ 179.385739][ T8049] netlink: 'syz.8.1135': attribute type 5 has an invalid length. [ 179.427786][ T28] audit: type=1400 audit(1781817068.311:1380): avc: denied { getopt } for pid=8048 comm="syz.8.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.713656][ T361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.082185][ T28] audit: type=1400 audit(1781817068.591:1381): avc: denied { write } for pid=8055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.295784][ T28] audit: type=1400 audit(1781817068.611:1382): avc: denied { write } for pid=8071 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.530582][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.826734][ T8086] netdevsim netdevsim8 netdevsim0: IPsec offload requires 128 bit authentication [ 180.930915][ T8094] loop6: detected capacity change from 0 to 512 [ 180.937309][ T28] audit: type=1400 audit(1781817069.881:1383): avc: denied { write } for pid=8077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.976857][ T8094] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.032793][ T8094] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 181.070818][ T28] audit: type=1400 audit(1781817070.021:1384): avc: denied { write } for pid=8098 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.110983][ T8094] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 181.148310][ T8104] loop8: detected capacity change from 0 to 512 [ 181.157841][ T8094] EXT4-fs (loop6): orphan cleanup on readonly fs [ 181.193706][ T8094] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1139: bg 0: block 361: padding at end of block bitmap is not set [ 181.208659][ T8104] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1142: inode has both inline data and extents flags [ 181.240660][ T8104] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.240781][ T8104] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1142: couldn't read orphan inode 15 (err -117) [ 181.250227][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 181.250257][ C1] EXT4-fs (loop8): initial error at time 1781817070: ext4_orphan_get:1399: inode 15 [ 181.250293][ C1] EXT4-fs (loop8): last error at time 1781817070: ext4_orphan_get:1399: inode 15 [ 181.280215][ T8094] loop6: lost filesystem error report for type 5 error -117 [ 181.287420][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.302825][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 181.309288][ C0] EXT4-fs (loop6): initial error at time 1781817070: ext4_validate_block_bitmap:441 [ 181.316863][ T8109] loop4: detected capacity change from 0 to 512 [ 181.318732][ C0] EXT4-fs (loop6): last error at time 1781817070: ext4_validate_block_bitmap:441 [ 181.331199][ T8094] EXT4-fs (loop6): Remounting filesystem read-only [ 181.335048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.359596][ T8104] loop8: lost filesystem error report for type 5 error -117 [ 181.366914][ T8104] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.400880][ T8094] EXT4-fs (loop6): 1 truncate cleaned up [ 181.413310][ T8094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 181.444995][ T7741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.445087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.602344][ T7485] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.635458][ T8120] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.1139: dx entry: limit 0 != root limit 125 [ 181.647271][ T8120] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1139: Corrupt directory, running e2fsck is recommended [ 181.665761][ T8122] netlink: 'syz.8.1148': attribute type 4 has an invalid length. [ 181.721906][ T8124] loop7: detected capacity change from 0 to 128 [ 181.730735][ T8122] loop8: detected capacity change from 0 to 1024 [ 181.739728][ T8122] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 181.754840][ T8124] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.787669][ T8124] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.903259][ T4411] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 181.937204][ T6630] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.963231][ T8118] loop4: detected capacity change from 0 to 512 [ 181.973445][ T8118] EXT4-fs: Ignoring removed nobh option [ 181.979127][ T8118] ext4: Unknown parameter 'uid>00000000000000060929' [ 182.125224][ T8145] usb usb8: check_ctrlrecip: process 8145 (syz.4.1156) requesting ep 01 but needs 81 [ 182.142228][ T8145] usb usb8: usbfs: process 8145 (syz.4.1156) did not claim interface 0 before use [ 182.224797][ T8145] gretap2: entered promiscuous mode [ 182.238338][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1159'. [ 182.299311][ T8163] loop4: detected capacity change from 0 to 136 [ 182.417834][ T8167] loop7: detected capacity change from 0 to 512 [ 182.429120][ T8167] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.444975][ T8167] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 182.466277][ T8167] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 182.478265][ T8167] EXT4-fs (loop7): orphan cleanup on readonly fs [ 182.486020][ T8167] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1162: bg 0: block 361: padding at end of block bitmap is not set [ 182.509212][ T8167] loop7: lost filesystem error report for type 5 error -117 [ 182.511298][ T8167] EXT4-fs (loop7): Remounting filesystem read-only [ 182.519587][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 182.519619][ C1] EXT4-fs (loop7): initial error at time 1781817071: ext4_validate_block_bitmap:441 [ 182.519639][ C1] EXT4-fs (loop7): last error at time 1781817071: ext4_validate_block_bitmap:441 [ 182.560817][ T8167] EXT4-fs (loop7): 1 truncate cleaned up [ 182.570104][ T8167] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 182.948627][ T8172] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.1162: dx entry: limit 0 != root limit 125 [ 182.960527][ T8172] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1162: Corrupt directory, running e2fsck is recommended [ 183.378865][ T937] net_ratelimit: 3 callbacks suppressed [ 183.378883][ T937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.538351][ T6630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 183.568013][ T8178] netlink: 'syz.4.1167': attribute type 1 has an invalid length. [ 183.641965][ T8178] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.653716][ T8181] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 183.694894][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 183.694908][ T28] audit: type=1400 audit(1781817072.651:1393): avc: denied { relabelto } for pid=8180 comm="syz.6.1168" name="file0" dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_log_t:s0" [ 183.853605][ T28] audit: type=1400 audit(1781817072.651:1394): avc: denied { associate } for pid=8180 comm="syz.6.1168" name="file0" dev="tmpfs" ino=843 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_log_t:s0" [ 184.005330][ T28] audit: type=1400 audit(1781817072.691:1395): avc: denied { write } for pid=8180 comm="syz.6.1168" name="file0" dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_log_t:s0" [ 184.031839][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.040618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.128078][ T8186] pimreg: entered allmulticast mode [ 184.132200][ T28] audit: type=1400 audit(1781817072.691:1396): avc: denied { open } for pid=8180 comm="syz.6.1168" name="file0" dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_log_t:s0" [ 184.187953][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.209653][ T8188] pimreg: left allmulticast mode [ 184.347063][ T8196] loop8: detected capacity change from 0 to 256 [ 184.355586][ T8196] vfat: Unknown parameter 'check.relaxed' [ 184.447280][ T8181] loop6: detected capacity change from 0 to 2048 [ 184.473150][ T28] audit: type=1400 audit(1781817073.431:1397): avc: denied { mounton } for pid=8180 comm="syz.6.1168" path="/154/file0" dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_log_t:s0" [ 184.501323][ T8181] EXT4-fs: Ignoring removed nobh option [ 184.633941][ T8181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.704873][ T8204] tmpfs: Unknown parameter 'siJe' [ 184.806748][ T8181] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.828489][ T8181] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.839946][ T8203] syzkaller0: entered promiscuous mode [ 184.868353][ T8203] syzkaller0: entered allmulticast mode [ 184.882145][ T8212] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.923888][ T8203] tipc: Started in network mode [ 184.929324][ T8203] tipc: Node identity c200e7305e19, cluster identity 4711 [ 184.936675][ T8203] tipc: Enabled bearer , priority 0 [ 184.954896][ T8202] tipc: Resetting bearer [ 184.962751][ T8202] tipc: Disabling bearer [ 184.998729][ T8212] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 185.050104][ T8212] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 185.106799][ T8212] EXT4-fs (loop4): orphan cleanup on readonly fs [ 185.118448][ T28] audit: type=1400 audit(1781817074.081:1398): avc: denied { bind } for pid=8213 comm="syz.2.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 185.147532][ T8212] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1175: bg 0: block 361: padding at end of block bitmap is not set [ 185.193418][ T8212] loop4: lost filesystem error report for type 5 error -117 [ 185.194357][ T8212] EXT4-fs (loop4): Remounting filesystem read-only [ 185.201728][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 185.201743][ C0] EXT4-fs (loop4): initial error at time 1781817074: ext4_validate_block_bitmap:441 [ 185.201763][ C0] EXT4-fs (loop4): last error at time 1781817074: ext4_validate_block_bitmap:441 [ 185.254279][ T8222] netdevsim netdevsim8 netdevsim0: IPsec offload requires 128 bit authentication [ 185.288848][ T8212] EXT4-fs (loop4): 1 truncate cleaned up [ 185.295174][ T8212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 185.309406][ T8224] bridge0: port 3(gretap0) entered blocking state [ 185.315875][ T8224] bridge0: port 3(gretap0) entered disabled state [ 185.322505][ T8224] gretap0: entered allmulticast mode [ 185.323685][ T937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.328388][ T8224] gretap0: entered promiscuous mode [ 185.358041][ T7741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.565068][ T28] audit: type=1400 audit(1781817074.511:1399): avc: denied { unlink } for pid=4411 comm="syz-executor" name="file0" dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_log_t:s0" [ 185.600398][ T8231] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1175: dx entry: limit 0 != root limit 125 [ 185.612214][ T8231] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1175: Corrupt directory, running e2fsck is recommended [ 185.643475][ T8230] vfat: Unknown parameter 'check.relaxed' [ 185.958320][ T8241] pimreg: entered allmulticast mode [ 185.981118][ T8241] pimreg: left allmulticast mode [ 186.053047][ T8243] set_capacity_and_notify: 2 callbacks suppressed [ 186.053113][ T8243] loop7: detected capacity change from 0 to 128 [ 186.100838][ T8243] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.113628][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 186.121786][ T8243] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.171041][ T28] audit: type=1400 audit(1781817075.131:1400): avc: denied { write } for pid=8242 comm="syz.7.1184" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.240092][ T6630] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.278732][ T8257] sctp: [Deprecated]: syz.6.1186 (pid 8257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.278732][ T8257] Use struct sctp_sack_info instead [ 186.288553][ T8255] loop7: detected capacity change from 0 to 2048 [ 186.325022][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.337897][ T8255] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.367638][ T28] audit: type=1400 audit(1781817075.331:1401): avc: denied { write } for pid=8254 comm="syz.7.1188" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.402441][ T28] audit: type=1400 audit(1781817075.331:1402): avc: denied { write } for pid=8254 comm="syz.7.1188" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.425669][ T6630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.475219][ T8269] loop7: detected capacity change from 0 to 512 [ 186.500065][ T8269] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 186.575175][ T8269] EXT4-fs (loop7): 1 truncate cleaned up [ 186.586337][ T8269] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.679685][ T6630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.800674][ T8287] loop4: detected capacity change from 0 to 2048 [ 186.907179][ T8287] loop4: p1 p4 [ 186.914348][ T8287] loop4: p4 size 589824 extends beyond EOD, truncated [ 187.109056][ T8290] loop7: detected capacity change from 0 to 8192 [ 187.175383][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.183659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.223545][ T8290] syz.7.1198: attempt to access beyond end of device [ 187.223545][ T8290] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 187.242986][ T2169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.612303][ T8293] FAT-fs (loop7): error, invalid FAT chain (i_pos 1171, last_block 3) [ 187.620636][ T8293] FAT-fs (loop7): Filesystem has been set read-only [ 187.896500][ T8283] pimreg: entered allmulticast mode [ 188.670613][ T8295] pimreg: left allmulticast mode [ 188.679671][ T8289] loop6: detected capacity change from 0 to 128 [ 188.732326][ T8289] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.772778][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 188.788822][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 188.862165][ T8300] loop4: detected capacity change from 0 to 2048 [ 188.866541][ T8289] FAT-fs (loop6): Filesystem has been set read-only [ 188.885099][ T3376] net_ratelimit: 3 callbacks suppressed [ 188.885135][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.981863][ T8300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.001879][ T8306] netlink: 'syz.2.1203': attribute type 1 has an invalid length. [ 189.063534][ T8306] 8021q: adding VLAN 0 to HW filter on device bond7 [ 189.080741][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.234759][ T8322] hub 8-0:1.0: USB hub found [ 189.239521][ T8322] hub 8-0:1.0: 8 ports detected [ 189.363750][ T8326] sctp: [Deprecated]: syz.2.1205 (pid 8326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.363750][ T8326] Use struct sctp_sack_info instead [ 189.644828][ T6259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.699957][ T8332] FAULT_INJECTION: forcing a failure. [ 189.699957][ T8332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.725026][ T8332] CPU: 1 UID: 0 PID: 8332 Comm: syz.2.1207 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 189.725125][ T8332] Tainted: [W]=WARN [ 189.725132][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 189.725145][ T8332] Call Trace: [ 189.725154][ T8332] [ 189.725162][ T8332] __dump_stack+0x1d/0x30 [ 189.725196][ T8332] dump_stack_lvl+0x95/0xd0 [ 189.725212][ T8332] dump_stack+0x15/0x1b [ 189.725228][ T8332] should_fail_ex+0x25e/0x270 [ 189.725250][ T8332] should_fail+0xb/0x20 [ 189.725334][ T8332] should_fail_usercopy+0x1a/0x20 [ 189.725353][ T8332] _copy_from_user+0x1c/0xb0 [ 189.725401][ T8332] ___sys_sendmsg+0xc1/0x1e0 [ 189.725440][ T8332] __x64_sys_sendmsg+0xd4/0x160 [ 189.725513][ T8332] x64_sys_call+0x194c/0x3020 [ 189.725531][ T8332] do_syscall_64+0x136/0x3c0 [ 189.725630][ T8332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.725714][ T8332] RIP: 0033:0x7f996bd0ce59 [ 189.725763][ T8332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.725786][ T8332] RSP: 002b:00007f996a767028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.725817][ T8332] RAX: ffffffffffffffda RBX: 00007f996bf85fa0 RCX: 00007f996bd0ce59 [ 189.725830][ T8332] RDX: 0000000000000000 RSI: 00002000000041c0 RDI: 0000000000000003 [ 189.725842][ T8332] RBP: 00007f996a767090 R08: 0000000000000000 R09: 0000000000000000 [ 189.725853][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.725917][ T8332] R13: 00007f996bf86038 R14: 00007f996bf85fa0 R15: 00007fff3295d728 [ 189.725996][ T8332] [ 189.902223][ T6259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.910568][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.928204][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.992255][ T8336] vti0: entered promiscuous mode [ 190.033000][ T8340] batadv_slave_1: entered promiscuous mode [ 190.047705][ T8339] batadv_slave_1: left promiscuous mode [ 190.069232][ T8343] FAULT_INJECTION: forcing a failure. [ 190.069232][ T8343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.103163][ T8343] CPU: 0 UID: 0 PID: 8343 Comm: syz.2.1212 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 190.103235][ T8343] Tainted: [W]=WARN [ 190.103243][ T8343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 190.103256][ T8343] Call Trace: [ 190.103297][ T8343] [ 190.103305][ T8343] __dump_stack+0x1d/0x30 [ 190.103324][ T8343] dump_stack_lvl+0x95/0xd0 [ 190.103341][ T8343] dump_stack+0x15/0x1b [ 190.103440][ T8343] should_fail_ex+0x25e/0x270 [ 190.103461][ T8343] should_fail+0xb/0x20 [ 190.103480][ T8343] should_fail_usercopy+0x1a/0x20 [ 190.103503][ T8343] _copy_from_user+0x1c/0xb0 [ 190.103543][ T8343] ___sys_sendmsg+0xc1/0x1e0 [ 190.103571][ T8343] ? _raw_spin_unlock+0x9/0x30 [ 190.103602][ T8343] __x64_sys_sendmsg+0xd4/0x160 [ 190.103661][ T8343] x64_sys_call+0x194c/0x3020 [ 190.103683][ T8343] do_syscall_64+0x136/0x3c0 [ 190.103713][ T8343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.103734][ T8343] RIP: 0033:0x7f996bd0ce59 [ 190.103761][ T8343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.103780][ T8343] RSP: 002b:00007f996a767028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.103847][ T8343] RAX: ffffffffffffffda RBX: 00007f996bf85fa0 RCX: 00007f996bd0ce59 [ 190.103863][ T8343] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 190.103877][ T8343] RBP: 00007f996a767090 R08: 0000000000000000 R09: 0000000000000000 [ 190.103942][ T8343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.103955][ T8343] R13: 00007f996bf86038 R14: 00007f996bf85fa0 R15: 00007fff3295d728 [ 190.103975][ T8343] [ 190.276079][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'. [ 190.457010][ T8350] netlink: 'syz.2.1215': attribute type 1 has an invalid length. [ 190.569031][ T8350] 8021q: adding VLAN 0 to HW filter on device bond8 [ 191.084885][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.563439][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.608696][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 191.608752][ T28] audit: type=1400 audit(1781817080.571:1407): avc: denied { ioctl } for pid=8375 comm="syz.2.1225" path="socket:[21262]" dev="sockfs" ino=21262 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 191.695342][ T28] audit: type=1400 audit(1781817080.621:1408): avc: denied { connect } for pid=8375 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 191.943220][ T8365] loop4: detected capacity change from 0 to 1024 [ 192.044711][ T8309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.077759][ T8365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 192.105921][ T8382] netlink: 'syz.7.1227': attribute type 1 has an invalid length. [ 192.114496][ T8365] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.138421][ T8365] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 192.148899][ T8382] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.203643][ T8388] usb usb8: check_ctrlrecip: process 8388 (syz.8.1228) requesting ep 01 but needs 81 [ 192.213158][ T8388] usb usb8: usbfs: process 8388 (syz.8.1228) did not claim interface 0 before use [ 192.215594][ T8385] syzkaller1: entered promiscuous mode [ 192.229610][ T8385] syzkaller1: entered allmulticast mode [ 192.230223][ T28] audit: type=1400 audit(1781817081.151:1409): avc: denied { bind } for pid=8383 comm="syz.6.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.335898][ T8388] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 192.367487][ T2169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.375894][ T28] audit: type=1400 audit(1781817081.321:1410): avc: denied { name_bind } for pid=8393 comm="syz.7.1229" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 192.461344][ T8402] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1232'. [ 192.472403][ T8403] sctp: [Deprecated]: syz.2.1231 (pid 8403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.472403][ T8403] Use struct sctp_sack_info instead [ 192.483356][ T8402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.510240][ T8404] loop6: detected capacity change from 0 to 128 [ 192.565465][ T937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.613223][ T8406] netlink: 'syz.7.1233': attribute type 3 has an invalid length. [ 192.645879][ T8406] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1233'. [ 192.682555][ T2169] ================================================================== [ 192.690679][ T2169] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 192.700134][ T2169] [ 192.702447][ T2169] write to 0xffff8881541c8156 of 3 bytes by task 8404 on cpu 1: [ 192.710161][ T2169] copy_folio_from_iter_atomic+0x728/0x10a0 [ 192.716050][ T2169] generic_perform_write+0x2c4/0x490 [ 192.721327][ T2169] __generic_file_write_iter+0x9e/0x120 [ 192.726853][ T2169] generic_file_write_iter+0x77/0x1f0 [ 192.732296][ T2169] iter_file_splice_write+0x6a0/0xa60 [ 192.737826][ T2169] direct_splice_actor+0x156/0x280 [ 192.743005][ T2169] splice_direct_to_actor+0x2f9/0x680 [ 192.748454][ T2169] do_splice_direct+0x119/0x1a0 [ 192.753405][ T2169] do_sendfile+0x37d/0x640 [ 192.757819][ T2169] __x64_sys_sendfile64+0x105/0x150 [ 192.762996][ T2169] x64_sys_call+0x2dc4/0x3020 [ 192.767653][ T2169] do_syscall_64+0x136/0x3c0 [ 192.772228][ T2169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.778122][ T2169] [ 192.780427][ T2169] read to 0xffff8881541c8000 of 512 bytes by task 2169 on cpu 0: [ 192.788144][ T2169] copy_folio_from_iter_atomic+0x728/0x10a0 [ 192.794022][ T2169] generic_perform_write+0x2c4/0x490 [ 192.799285][ T2169] shmem_file_write_iter+0xc5/0xf0 [ 192.804380][ T2169] lo_rw_aio+0x6a9/0x760 [ 192.808605][ T2169] loop_process_work+0x567/0xac0 [ 192.813524][ T2169] loop_workfn+0x31/0x40 [ 192.817747][ T2169] process_scheduled_works+0x4d4/0x9a0 [ 192.823278][ T2169] worker_thread+0x569/0x750 [ 192.827867][ T2169] kthread+0x221/0x270 [ 192.831917][ T2169] ret_from_fork+0x146/0x330 [ 192.836494][ T2169] ret_from_fork_asm+0x1a/0x30 [ 192.841246][ T2169] [ 192.843557][ T2169] Reported by Kernel Concurrency Sanitizer on: [ 192.849706][ T2169] CPU: 0 UID: 0 PID: 2169 Comm: kworker/u8:7 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 192.860812][ T2169] Tainted: [W]=WARN [ 192.864619][ T2169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 192.874690][ T2169] Workqueue: loop6 loop_workfn [ 192.879471][ T2169] ================================================================== [ 194.644933][ T937] net_ratelimit: 6 callbacks suppressed [ 194.644950][ T937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.674821][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.535176][ T2169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.543358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.684870][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.804783][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.724978][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.914828][ T2169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.764941][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.044845][ T2169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.844981][ T3376] net_ratelimit: 6 callbacks suppressed [ 199.845009][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.294788][ T361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.884866][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.893565][ T2169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.902701][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.911434][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.285402][ T361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.293668][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.394764][ T361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.925028][ T937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog