last executing test programs: 7m5.49047883s ago: executing program 2 (id=621): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400", 0x4}, {&(0x7f0000000000)="13475b84", 0x4}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000001c0)=@sg0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000002000000000000ff020000000f0000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c000000000000007f000001000000000000000000000000020000000400"], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x3c, 0x4, 0x0, 0x2e00, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) acct(0x0) acct(0x0) 7m2.951800192s ago: executing program 2 (id=627): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="05"], 0x10) 7m1.879884584s ago: executing program 2 (id=632): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3c}) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c6000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x264}, 0x94) r1 = pidfd_getfd(r0, r0, 0x0) setns(r1, 0x64000080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0xb) write(r2, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYRESHEX], 0x4, 0xa0e, &(0x7f00000001c0)="$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") 7m1.659932213s ago: executing program 2 (id=637): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='\xca^}:\xc1((\x00', &(0x7f00000000c0)="d70782667fe5fac297143c71719a50fe69e1afcb1f0057c75ded08c14f63757105", 0x21) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={0x50, r1, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x70, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000) gettid() socket$igmp6(0xa, 0x3, 0x2) r8 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000380)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8000}}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") 7m1.424129348s ago: executing program 2 (id=642): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="05"], 0x10) 7m0.87124877s ago: executing program 2 (id=647): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004005) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x106200, 0x10003, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@delqdisc={0x2bc, 0x25, 0x656ccfe66a296765, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x8, 0xb}, {0xfff2, 0xfff2}, {0x5, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x7, 0x6, 0xc1f, 0x2, 0x60000000, 0x5, 0x5}}, {0xe, 0x2, [0x9, 0xe, 0x3ff, 0xd, 0x658]}}, {{0xfffffffffffffe63, 0x1, {0x1, 0x5, 0x0, 0x9, 0x2, 0x9, 0x515ced36, 0x5}}, {0xe, 0x2, [0x81bd, 0x81, 0x7fff, 0x2, 0x80]}}]}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_STAB={0x0, 0x2, "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"}]}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe1, 0x5, 0x4, 0x6, 0x0, 0x10000, 0x1, 0x4}}, {0xc, 0x2, [0x9, 0x101, 0xffff, 0x4]}}]}, @TCA_STAB={0x1b4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xf8, 0x7, 0x4, 0x2, 0x80000001, 0x100, 0x9}}, {0x16, 0x2, [0x2, 0x1, 0x5, 0xa4, 0x5, 0xb6f0, 0xff, 0x5, 0x7]}}, {{0x1c, 0x1, {0x94, 0xf5, 0x2, 0x9, 0x0, 0x7, 0x95c0, 0x9}}, {0x16, 0x2, [0xf, 0x800, 0x0, 0xbe, 0x7, 0xa54c, 0xc000, 0x5, 0x0]}}, {{0x1c, 0x1, {0xff, 0x10, 0x0, 0x7, 0x1, 0x3a, 0x9, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x7, 0xe6, 0x889a, 0xe94b, 0x2, 0x4, 0x200, 0x5}}, {0xe, 0x2, [0xf85, 0x8, 0x4, 0x3, 0xfffe]}}, {{0x1c, 0x1, {0x55, 0x1, 0x4, 0x8, 0x2, 0x8f8, 0x6, 0x3}}, {0xa, 0x2, [0x7, 0xf8ae, 0x3]}}, {{0x1c, 0x1, {0x42, 0x4, 0x9, 0x5, 0x1, 0x7f, 0x9, 0x2}}, {0x8, 0x2, [0x8, 0x94]}}, {{0x1c, 0x1, {0xe1, 0x5, 0x8, 0x7, 0x0, 0x10000, 0x4, 0x7}}, {0x12, 0x2, [0x8, 0x3, 0x7, 0x3, 0x5, 0xffff, 0x48]}}, {{0x1c, 0x1, {0x0, 0xf, 0x4, 0x121, 0x0, 0x9, 0x81, 0x8}}, {0x14, 0x2, [0x9, 0xe, 0xffff, 0x401, 0x3ff, 0x6, 0x2, 0xaa1d]}}, {{0x1c, 0x1, {0x9, 0x4, 0x5, 0x6, 0x0, 0x1, 0x2000, 0xfffffffffffffd40}}, {0xa, 0x2, [0x4, 0x7fff, 0x0]}}, {{0x1c, 0x1, {0x9, 0x4, 0xfffb, 0x800, 0x0, 0x0, 0x4, 0x1}}, {0x6, 0x2, [0x5]}}]}, @qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4000800}, 0x2404c904) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x18c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_MASTER={0x70, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TUPLE_REPLY={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0x18c}, 0x1, 0x0, 0x0, 0x64050000}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x0, 0x0, 0x3}}, 0x18) sendmmsg(r4, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="e9", 0x1}, {0x0, 0xf5}], 0x2}}], 0x1, 0x800) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) msgget(0x3, 0x1a6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x4, 0xcbf, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd65}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}}) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m0.675423075s ago: executing program 32 (id=647): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004005) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x106200, 0x10003, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@delqdisc={0x2bc, 0x25, 0x656ccfe66a296765, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x8, 0xb}, {0xfff2, 0xfff2}, {0x5, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x7, 0x6, 0xc1f, 0x2, 0x60000000, 0x5, 0x5}}, {0xe, 0x2, [0x9, 0xe, 0x3ff, 0xd, 0x658]}}, {{0xfffffffffffffe63, 0x1, {0x1, 0x5, 0x0, 0x9, 0x2, 0x9, 0x515ced36, 0x5}}, {0xe, 0x2, [0x81bd, 0x81, 0x7fff, 0x2, 0x80]}}]}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_STAB={0x0, 0x2, "4a46fdfa6fae0fe7b017daed17db5eaed887b362b190e3f640ea235abc6333d6429d5af1f6ee5bdd230e2bff3f6d118cbda4258c0d4693845ae2a909a3a3e929bc3618c91ccb93e93fef85215d9fdf764a985449b0f618ccb322b41f1d15fdb93d6768d5eaf49d31cc578b7fd556e9abbc58bdd9d981524ddd0811718d5b922bcd9c744a74c63ca07a2873d9711a56e31a6d4d9a887107093c709586d7fdba230707b8a6be9361a1e9878191aa227261fedd9d7065a4e39e0c8965d8c027f67f4b39ebf075456d740763d53a77c9924b829909569dcaabb59c1618878e5ae5d10748312734f74314a96df57d6e47c83792aa7f8ebfb8c9345299849496f24116"}]}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe1, 0x5, 0x4, 0x6, 0x0, 0x10000, 0x1, 0x4}}, {0xc, 0x2, [0x9, 0x101, 0xffff, 0x4]}}]}, @TCA_STAB={0x1b4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xf8, 0x7, 0x4, 0x2, 0x80000001, 0x100, 0x9}}, {0x16, 0x2, [0x2, 0x1, 0x5, 0xa4, 0x5, 0xb6f0, 0xff, 0x5, 0x7]}}, {{0x1c, 0x1, {0x94, 0xf5, 0x2, 0x9, 0x0, 0x7, 0x95c0, 0x9}}, {0x16, 0x2, [0xf, 0x800, 0x0, 0xbe, 0x7, 0xa54c, 0xc000, 0x5, 0x0]}}, {{0x1c, 0x1, {0xff, 0x10, 0x0, 0x7, 0x1, 0x3a, 0x9, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x7, 0xe6, 0x889a, 0xe94b, 0x2, 0x4, 0x200, 0x5}}, {0xe, 0x2, [0xf85, 0x8, 0x4, 0x3, 0xfffe]}}, {{0x1c, 0x1, {0x55, 0x1, 0x4, 0x8, 0x2, 0x8f8, 0x6, 0x3}}, {0xa, 0x2, [0x7, 0xf8ae, 0x3]}}, {{0x1c, 0x1, {0x42, 0x4, 0x9, 0x5, 0x1, 0x7f, 0x9, 0x2}}, {0x8, 0x2, [0x8, 0x94]}}, {{0x1c, 0x1, {0xe1, 0x5, 0x8, 0x7, 0x0, 0x10000, 0x4, 0x7}}, {0x12, 0x2, [0x8, 0x3, 0x7, 0x3, 0x5, 0xffff, 0x48]}}, {{0x1c, 0x1, {0x0, 0xf, 0x4, 0x121, 0x0, 0x9, 0x81, 0x8}}, {0x14, 0x2, [0x9, 0xe, 0xffff, 0x401, 0x3ff, 0x6, 0x2, 0xaa1d]}}, {{0x1c, 0x1, {0x9, 0x4, 0x5, 0x6, 0x0, 0x1, 0x2000, 0xfffffffffffffd40}}, {0xa, 0x2, [0x4, 0x7fff, 0x0]}}, {{0x1c, 0x1, {0x9, 0x4, 0xfffb, 0x800, 0x0, 0x0, 0x4, 0x1}}, {0x6, 0x2, [0x5]}}]}, @qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4000800}, 0x2404c904) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x18c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_MASTER={0x70, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TUPLE_REPLY={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0x18c}, 0x1, 0x0, 0x0, 0x64050000}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x0, 0x0, 0x3}}, 0x18) sendmmsg(r4, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="e9", 0x1}, {0x0, 0xf5}], 0x2}}], 0x1, 0x800) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) msgget(0x3, 0x1a6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x4, 0xcbf, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd65}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}}) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m54.30902257s ago: executing program 3 (id=709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a9a12bbd7000fcdbdf250100000000000002000000050000001700"], 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x8884) 6m53.712048892s ago: executing program 3 (id=710): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010003b0c28bd7000fedbdf8eb4000000", @ANYRES32=r2, @ANYBLOB="0008000000620000300012800b00010065727370616e0000200002800400120006"], 0x50}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) sendto$inet6(r0, 0x0, 0x4881b39f, 0x4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) sendmmsg$inet(r6, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0x3, 0xfffffc00, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff}, 0x9c) write$P9_RREAD(r7, &(0x7f0000002080)=ANY=[], 0xec1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6m51.401827087s ago: executing program 3 (id=716): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000080)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@resgid}]}, 0x1, 0x5ea, &(0x7f00000005c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000080)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@resgid}]}, 0x1, 0x5ea, &(0x7f00000005c0)="$eJzs3c9vFdUeAPDv3P6gpfBaCHnv8RaPJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWBq9Zm5nSm87t6WXtlOZzye57Zlz7nC+w+23M/f0nLkBVNZg+qUWsT8ippOI/mR+sa0zssbBhec9+P2Ds+kjiXr9lV+TSLK6/PlJ9r0v27knIr7/Lom9HSv7nZm7dnF8amryarY9PHtpenhm7trhC5fGz0+en7w8+tzoiePHjp8YOdLWcV0vqDt98+13+z8ae/2rL/5IRr7+aSyJk/Fi9sSlx7FRBmOw8X+SrGzqO7HRnZWkI/s5WfoSJ50lBsS65K9fV0T8J/qjIx6+eP3x4UulBgdsqnoSUQcqKpH/UFH5dUD+3n75++BaKVclwFa4f2phAGBl/ncujA1GT2NsYOeDJJYO6yQR0d7IXLNdEXH3ztjNc3fGbsYmjcMBxeZvRMR/i/I/aeT/QPTEQCP/a035n14XnMm+p/Uvt9n/8qFi+Q9bZyH/e1bN/2iR/28syf832+x/8GHxrd6m/O9t95AAAAAAAACgsm6fiohni/7+X1uc/xMF83/6IuLkBvQ/uGx75d//a/c2oBugwP1TES8Uzv+t5bN/Bzqy0u7GfICu5NyFqckjEfGviDgUXTvS7ZFV+jj88d7PW7UNZvP/8kfa/91sLmAWx73OHc37TIzPjj/ucQMR929E/K9w/m+yeP5PCs7/6e+D6UfsY+/Tt8401+zbnZfWzn9gs9S/jDhYeP5/eNeKZJX7c8TIkeHG9cBwflWw0v/f/+SbVv23m/9uMQGPLz3/71w9/weSpffrmVl/H0fnOuut2tq9/u9OXm3ccqY7q3tvfHb26khEd3K6I61tqh9df8zwJMrzIc+XNP8PPbX6+F/R9X9vRMwv+7eT35rXFOf+/Vffz63icf0P5Unzf2Jd5//1F0ZvDXzbqv9HO/8fa5zrD2U1xv9gwWd5mnY31xekY2dR01bHCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPglpE7IqkNrRYrtWGhiL6ImJf7KxNXZmZfebclXcuT6Rtjc//r+Wf9Nu/sJ3kn/8/sGR7dNn20YjYExGfdvQ2tofOXpmaKPvgAQAAAAAAAAAAAAAAAAAAYJvoa7H+P/VLR9nRAZuus+wAgNIU5P8PZcQBbD3nf6gu+Q/VJf+huuQ/VJf8h+qS/1Bd8h+qS/4DAAAAAMATZc+B2z8mETH/fG/jkerO2rpKjQzYbLWyAwBK4xY/UF2m/kB1eY8PJGu097TcqfHlZHu9Tp9tbz8AAAAAAAAAAAAAqKaD+9ez/v/PLY4O2EzW/0N1Wf8P1ZWv/z9QchzA1rP+H4g17gFQuP5/zb0AAAAAAAAAAAAAgI00M3ft4vjU1ORVhde2RxhbWajX69fTn4LtEs8/vJBPhd8u8Swr5Gv9Hm2v8n4nAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzf4OAAD//8CTJes=") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) unshare(0x20000400) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x4, 0x0, 0x85c, 0x5}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) (async) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 6m50.72414323s ago: executing program 3 (id=718): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000200000008500000095000000b70000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x33, &(0x7f00000003c0)=""/4118, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x1b3, 0x80) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [{0x2, 0x1}, {0x2, 0x1}], {}, [], {0x10, 0x2}}, 0x34, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x4, 0x0, 0x1}, &(0x7f0000001500)=[{}]) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) lchown(&(0x7f0000000180)='./bus\x00', r4, r5) 6m49.808087688s ago: executing program 3 (id=727): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, 0x0, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="05"], 0x10) 6m48.363568543s ago: executing program 3 (id=742): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$TUNGETDEVNETNS(r4, 0x5460, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000006febcee83c8aef7a2c378883e261b2f991bdbb577d982ca56dcf29d1684d936b3001099dd5617a3f632b771d6ff78e0186c4f1386b615ba27da6d836c38a033faabfec3c5dd361619056b77f5d8673625033c7bff3ce352c6df92d2a87094231cda00ec10fdc"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f00fff9000000000b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f, '\x00', 0x0, 0xb000000}, 0x21) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'nicvf0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340)="ededefdeb5c3c51e23134dd1f0d29ac92cd759857d943731b68698ba06b41f262c79c60c056410ab32567b9b02cd0cf13cd7e06450f37023051bcad2379a343e3b836d73070d19e45abecf1b4d1905d51099fe15c8dc10766bd93ff145e419d260fb701e318bbf8f140bfadb7b7a2939f4b1f8839dd1a68ebcb55545f4e9f515cc1dafe5cd3b120fe4d98dee282cf5510b742d", 0x93, 0x90, &(0x7f0000000540)={0x11, 0x8, r6, 0x1, 0x7}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x1, &(0x7f0000000200)=@raw=[@ldst={0x3, 0x0, 0x0, 0x6, 0x5}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) 6m48.315082832s ago: executing program 33 (id=742): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$TUNGETDEVNETNS(r4, 0x5460, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000006febcee83c8aef7a2c378883e261b2f991bdbb577d982ca56dcf29d1684d936b3001099dd5617a3f632b771d6ff78e0186c4f1386b615ba27da6d836c38a033faabfec3c5dd361619056b77f5d8673625033c7bff3ce352c6df92d2a87094231cda00ec10fdc"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f00fff9000000000b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f, '\x00', 0x0, 0xb000000}, 0x21) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'nicvf0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340)="ededefdeb5c3c51e23134dd1f0d29ac92cd759857d943731b68698ba06b41f262c79c60c056410ab32567b9b02cd0cf13cd7e06450f37023051bcad2379a343e3b836d73070d19e45abecf1b4d1905d51099fe15c8dc10766bd93ff145e419d260fb701e318bbf8f140bfadb7b7a2939f4b1f8839dd1a68ebcb55545f4e9f515cc1dafe5cd3b120fe4d98dee282cf5510b742d", 0x93, 0x90, &(0x7f0000000540)={0x11, 0x8, r6, 0x1, 0x7}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x1, &(0x7f0000000200)=@raw=[@ldst={0x3, 0x0, 0x0, 0x6, 0x5}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) 4m3.734214578s ago: executing program 1 (id=2383): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m3.680704146s ago: executing program 1 (id=2384): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000e80300007d01ff02000000000000000000000000000112006558"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) 4m3.35459822s ago: executing program 1 (id=2390): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write(0xffffffffffffffff, &(0x7f00000010c0)="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", 0x1000) 4m3.337534226s ago: executing program 1 (id=2391): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010021bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4020040000000000140003006261746164763000000000000000000018d63effff3c01000006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/power/wakeup_count', 0x0, 0x10a) r3 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$sock(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)="a4", 0x1}], 0x1}}], 0x1, 0x40000a4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 4m3.142537301s ago: executing program 1 (id=2395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000240)={[{}, {@subsystem='freezer'}]}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback, 0x1c}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x74}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x40000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) recvfrom(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000418120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x3ff, r6, 'id1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1a7) gettimeofday(&(0x7f00000000c0), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, &(0x7f0000000180)=0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x5, &(0x7f0000000200)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x1f00, 0x5, '\x00', r10, 0x25, r7, 0x8, &(0x7f0000000300)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x5, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r5, r5, r7, r7, r5, r11], &(0x7f0000000840), 0x10, 0x101}, 0x94) setsockopt$sock_int(r8, 0x1, 0x35, &(0x7f0000000100)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000500)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x8}, 0x8) 4m1.852098772s ago: executing program 1 (id=2407): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x2}, 0x1}) io_uring_enter(r1, 0x20047f6, 0xa511, 0xa, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f00000036c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@ip_tos_u8={{0x11, 0x84, 0x1, 0x38}}], 0x18}}], 0x2, 0x48000) 4m1.849508072s ago: executing program 34 (id=2407): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x2}, 0x1}) io_uring_enter(r1, 0x20047f6, 0xa511, 0xa, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f00000036c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@ip_tos_u8={{0x11, 0x84, 0x1, 0x38}}], 0x18}}], 0x2, 0x48000) 5.124161737s ago: executing program 6 (id=5055): r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) unshare(0x2040400) fallocate(r0, 0x81, 0x13, 0x10) 5.113786525s ago: executing program 6 (id=5057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRESHEX], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x22040000) 5.059554852s ago: executing program 6 (id=5058): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000680001002dbd70000000008000000200000000000c00088008000600ffff0000240002000100000005000000000100008000000002"], 0x48}}, 0x44010) 4.983977025s ago: executing program 6 (id=5061): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001200010100000000fedbdf250200000008000000000000000800e88004004380"], 0x24}}, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8674d, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x1a2d, 0x0, 0x7fa, 0x8, 0x10000000000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x40, 0x44) acct(&(0x7f00000000c0)='./file0\x00') acct(0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r1, 0x0, 0x9, 0x2000403) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x67, 0x0, 0xa, 0x0, 0x0, 0x7, 0x80400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0xb25}, 0x80, 0x7fff, 0x10ffe, 0x6, 0x2, 0x10001, 0x2, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x9, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x1, 0xfffe, 0x0, 0x6, 0x8a}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000ad0000009500000000000000d586fc0965122e6e4ff4b1e7d1318e1e61e724977f12980c746f80843471206a553def4959eba434c41c5967a027d3b787560237e597a2d1d2b621"], &(0x7f0000000040)='GPL\x00', 0xc}, 0x94) sendto$inet6(r2, &(0x7f0000000000)="e8", 0x1, 0x65055, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @local, 0x20}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000120000/0x2000)=nil, 0x2000, 0x1000008) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000b00)=@ethtool_rxfh={0x46, 0x50, 0x2, 0xb5a, 0xfc, "717f78", 0x6, [0x4, 0xf407f11, 0x10001, 0x99, 0x5, 0x10]}}) 4.9633364s ago: executing program 4 (id=5063): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf2500000000000000000000000000000001ff020080ffffff0000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="05"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 4.727761895s ago: executing program 4 (id=5065): ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000000)) (async) r0 = timerfd_create(0x3, 0x80c00) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x4) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdf090e1574e71895}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8008}, 0x8054) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex=0x0, 0x5, 0x1, 0x7, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0}, 0x40) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000440)={0x7, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@fallback=r0, r1, 0x2a, 0x28, 0x0, @void, @void, @void, @value=r5, r4}, 0x20) (async) r6 = dup3(r1, r1, 0x80000) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001a80)={&(0x7f0000000500)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000540)="589b7777e0d645291255e79ec884146b5e7b570a65e64c6fb10590ed60aeaf7e48505c50d8590994d396dcf1d6cbf50a7b128cb585bc3f5d9e38099cbd53b760cb9f7af3fb18810553e49f2007c3c427ee108cd6b8e24ab6b13f63d8a7e3f88fb8d7009335ba9b6f2586f896b203973ba3b3ace6b84fc4e0246e5f0d72f6526252e8eec5", 0x84}, {&(0x7f0000000600)="a3a79af04195e0d8f3222eaad96d3fe34634a5d74501d7dac35fe4354d23bb69592980c49ec52d2bda9b012ea763", 0x2e}, {&(0x7f0000000640)="e6ebf7adbb80e6bdd1d04c8bbb15ffdc8f414eb956d736e484c9aad29af68551ac74d515059982366ea5e9a2b7114bff511a64eaf2f78a41cbe5eaf196bf5a8e317acc4e82e6a30e997c6a19550e37eaf7dbcd2ddae15ba6bbab965971e7ace1be0a15ddb55c57f9812e92383e95cf616eb6b5d3cbe93e87d10eb43d9d5132e1ea9d5157fc4d3cd04d517d439e37b15d5616b4a3dd5401658e34049baeb88d94f5a89c4e01147ffc2d1e55e5eee223855a67338e36818ba663a535e2957559f51ab223ae11fda16176ce8e991d40d26c26ca22b3a9cced9541e894dc2cd5d0abf1d12c92563f26aecb44ee9d5875", 0xee}, {&(0x7f0000000740)="363006cf242f553cbe5f177b87965ed8f799c42dcdd84d096d6b73e172910ceb9d94cb3c8dd7a1cdf7860ee3889364de3558329112ea065ea82ed36cd6550b372cb265a976ac06d2e051f443d981ca0bd6c636078bc0f9d3806b03a4358242486371de8ef5d9acf650ad2f57bb54550b77caed9e61fd40470d8cf730eae2eac86e79ecaaf0b48c8e4909e12e09085a136ebda7d46b5a52224cf499b3d3a60ad541853a8f4fa90f82cbbe7c130c6023f43fa0a3bf8dd85a0106abe471f4e2a0", 0xbf}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="f2638a57d653ddcf65b92e803fb4b209aae73c76db57825709f700db70e6fe4c1c14f9b81746ab4b54e9d0a34b7d8df39531b258850d044b8ee97b7846749c02cc650d2ce1dfc8b4997eb128126b33808b944b28de37befdcb08764d0492d9952a57852558a4a4319e6f780c2b979f01eee437cd90397fcd8aff6c990b3a50fb8251712d9384fdd3db1e5e38389854dbabf377761914557f220c028baf2b5f03f5a031b85d09130c30b73365c1a44e415582a98d22f62123d2d89b2789c3ec4596ea61f1ec392e0929bb8f290dc967", 0xcf}], 0x6, &(0x7f0000001980)=[@ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0x7e, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x6}, {@empty, 0xe90}, {@private=0xa010101, 0x6}, {@loopback, 0x4}, {@private=0xa010100, 0x7f}, {@rand_addr=0x64010100, 0x2}, {@multicast1, 0x3}, {@broadcast, 0x8}]}, @ra={0x94, 0x4}, @generic={0x44, 0xb, "120babb5b66db86f93"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0xd8}, 0x40000c0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x400) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e80)={r7, 0xe0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001b80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c40)=[0x0], 0x0, 0x23, &(0x7f0000001c80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001cc0), &(0x7f0000001d00), 0x8, 0x84, 0x8, 0x8, &(0x7f0000001d40)}}, 0x10) (async) timer_create(0x4, &(0x7f0000001ec0)={0x0, 0x2b, 0x2}, &(0x7f0000001f00)=0x0) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x78, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x4053d774d749e0db}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0xffffffffffffffff) (async) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, r6, 0x5) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000002480)={{r0, &(0x7f00000021c0)='syz2\x00', 0x4001, &(0x7f0000002200)={@_ha_fsid={[0x10, 0x7fff]}, {0x400, 0x0, 0x9, 0x4}}, 0x7fffffff, &(0x7f0000002240)={@_ha_fsid}, &(0x7f0000002280)=0x4}, 0x2, &(0x7f0000002440)=[{0x2, 0x6, &(0x7f00000022c0)='/selinux/status\x00', &(0x7f0000002300)="23427d4fa9afc16ae9afcbb76f0a9abcec5f45b87a0bcbf4e31170eeb76ce02e598fdb30b04ac3862f8427854913f750508694018d1766c3e09498fe888d4ec118", 0x41, 0x20}, {0x3, 0x5d5, &(0x7f0000002380)='hash:ip\x00', &(0x7f00000023c0)="62f7ebab0a452dca8fa34d4336fedcc1069aa1cf4ddedd2aee0f4884a4df1108c550eb08b94c887950cf1d053a23a1fe6326aa29c6db3356cd3f82675358862f40f6008d193bb680218112ba6874d4f89199667583fcc5e0d4aea9d971dbc7afd2a62d6acee0", 0x66, 0x2}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002540)={0x6, 0xc, &(0x7f0000002080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd4}, [@exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x1, 0x6, 0x7, 0x3, 0xfffffffffffffffe, 0x6ed9c0d60d8b43f3}, @ldst={0x0, 0x0, 0x7, 0x0, 0x2, 0x4, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4e25fa14, 0x0, 0x0, 0x0, 0x1fa}, @generic={0x1, 0xe, 0x0, 0x2, 0x2}]}, &(0x7f0000002100)='GPL\x00', 0x80000000, 0x40, &(0x7f0000002140)=""/64, 0x40f00, 0x1, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002180)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)=[r7, r6, r10, r1, r6, r6, r7, r7, r1, r7], 0x0, 0x10, 0x140000}, 0x94) (async) timer_gettime(r9, &(0x7f0000002600)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000002640)={0x5, 0x7c, 0x1, 'queue0\x00', 0xc}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000002800)={'gre0\x00', &(0x7f0000002740)={'gre0\x00', r3, 0x10, 0x20, 0xffffff00, 0xa2c, {{0x24, 0x4, 0x3, 0x2, 0x90, 0x68, 0x0, 0x3, 0xb02ad9bb98b2eb9d, 0x0, @remote, @private=0xa010101, {[@cipso={0x86, 0x5e, 0x2, [{0x5, 0x8, "ecc3bc4ac382"}, {0x6, 0x4, "82a2"}, {0x7, 0x7, "fb945b9977"}, {0x6, 0xc, "4c161579bd3112b8fb99"}, {0x3, 0x8, "0e2b8ba746f7"}, {0x5, 0x3, '_'}, {0x7, 0x2}, {0x6, 0xe, "0be5d51db4bf762e24caa6cc"}, {0x5, 0xf, "ef1f578cc891726cb132dedb4d"}, {0x5, 0xf, "283670922cf77b148809c26706"}]}, @cipso={0x86, 0x1c, 0x2, [{0x6, 0x8, "6ba06f0c2990"}, {0x0, 0xe, "c68c20dd351118db36416116"}]}, @end, @noop]}}}}}) sendmsg$nl_route_sched_retired(r7, &(0x7f0000002980)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002940)={&(0x7f0000002840)=@delqdisc={0x100, 0x25, 0x8, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xd, 0xb}, {0x9, 0x10}, {0xfff2, 0x6}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x797}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3c}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x13}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000050}, 0x40000) iopl(0x7) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000029c0)) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x78, 0x2, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x53}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x44000}, 0x20000010) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000003080)={{0xffffffffffffffff, &(0x7f0000002b80)='@^\x00', 0x101000, &(0x7f0000002bc0)={@_ha_fsid={[0xa352]}, {0x5, 0xb, 0x8, 0x8}}, 0x4, &(0x7f0000002c00), &(0x7f0000002c40)=0xfffffffa}, 0x4, &(0x7f0000003000)=[{0x1, 0x3, &(0x7f0000002c80)='gtp\x00', &(0x7f0000002cc0)="aca1a6e47c197d3bac67ad7298889262589746a44ac97dd52067c64dcfbf6829a3085032486a4e3dfe68313d16769065332b05327aadb69317acaa047b93ef3f100d948d1df3aee8270ec633a99cd9f823b6a7ede4639dab66abb4674d27ae2fa40fd64338bf5f52cd33bd98d16339d085e3acaff19e6583fe37425f531aca12e5841484f9174bb41204bddebf7417c9eace12f2903cf8e6cb7c3a80088688aa0ab68b657814cd33644a1b0cb55a8f6adc30c3126ab4c16cf7c8fea9b797f13a2ad3", 0xc2, 0x2}, {0x3, 0xff, &(0x7f0000002dc0)='GPL\x00', &(0x7f0000002e00)="5eb3169fca27228b4afdfb2ade2571c5536ea747dd2e264ec06f2d1f436f82e90cb4c084ae6003b8f791ecb513f0ea2e18c477c342f4eb60963663eaee25a5eeba9ea9df8c08146684a3c5660128075417e18d179d29080772299ab964a66ea4d774ff3285e9340a6f27044ae6d2f5cf6b64d2e938997904c517539cf27d69d43483bd0f643e053bf4640b219428ea5e560b4bb725367a74b6cf80cbba8f5c89af3292372f32190c59eb65dd998447ab4f7ee1804d5fa05f4d2f311d44b1cbcce0d19a9c5407dead406c5db726cfc8076510d7da079af6f53c5f9108", 0xdc, 0x12}, {0x2, 0x6, &(0x7f0000002f00)='$-\x00', &(0x7f0000002f40)="fd2dc2ff0c4ea129d11c88ec4c05ab0af5a100380d2121089f032dcd", 0x1c, 0x38}, {0x1, 0xe, &(0x7f0000002f80)='dsmark\x00', &(0x7f0000002fc0)="1726be27ca0257c3d8577b882afb3520dd1fb7538f124495e5ff662dc372", 0x1e, 0x22}]}) 4.70452676s ago: executing program 4 (id=5067): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TCXONC(r3, 0x540a, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)) syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzsz0GtwkAABNDZ/qZt8hHAEZyAB7igpgleOGACA3jABAJIF5qgADi8d9rszE6y4ctuSUmapPxlOpbndZdkmWvSJn2Se/5rMcPb23G1znHb1KBcFhkPyal/hXVoM1eHaXBMl12ZN9rsz5/8KQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8qkcAAAD//8d/CPY=") tgkill(0x0, r0, 0x20) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000003a00)=[{{&(0x7f0000001080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000001180)=""/176, 0xb0}], 0x3, &(0x7f00000024c0)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000001340)=""/87, 0x57}, {&(0x7f00000013c0)=""/130, 0x82}, {&(0x7f00000034c0)=""/131, 0x83}, {&(0x7f0000001280)=""/49, 0x31}, {&(0x7f0000003580)=""/226, 0xe2}, {&(0x7f0000003680)=""/56, 0x38}, {&(0x7f00000036c0)=""/100, 0x64}, {&(0x7f0000003740)=""/76, 0x4c}, {&(0x7f00000037c0)=""/194, 0xc2}], 0x9, &(0x7f0000003980)=""/81, 0x51}, 0x4}], 0x2, 0x42, 0x0) r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00100000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x80000000}, 0x0, 0xff7fffffffffffff, r4, 0x0) 4.435843968s ago: executing program 5 (id=5071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[], 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) 4.382339065s ago: executing program 5 (id=5074): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f0000000100)={[{@nobh}, {@abort}, {@nomblk_io_submit}]}, 0x3, 0x4f8, &(0x7f0000000140)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000640)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000840)) 4.164032195s ago: executing program 7 (id=5077): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400", 0x4}, {&(0x7f0000000000)="13475b84", 0x4}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c696f636861727365743d63703836302c696f636861727365743d6d616363726f617469616e2c756e695f786c6174653d312c747a3d5554432c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c6e6f636173652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c736d61636b66736465663d757466383d302c64697273796e632c736d61636b66736861743d262c657569643e807d6dc634ae06b292a3825c7626caa45b7a39a81660437a556646a082c54e8cf9c81260f6a760b9f06d5738818ee5a4503b0364b0f4c56abfe2", @ANYRES32, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000001c0)=@sg0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000080ff0000000000ff020000000f0000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c000000000000007f000001000000000000000000000000020000000400"], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x3c, 0x4, 0x0, 0x2e00, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) acct(0x0) acct(0x0) 4.163779245s ago: executing program 5 (id=5078): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x54, 0x1) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0x0, 0x1c}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.120995475s ago: executing program 6 (id=5079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="400000000906010300000000000000000000000905000100070000", @ANYRESHEX], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x22040000) 1.118010029s ago: executing program 5 (id=5081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r1, &(0x7f0000000d40)=""/43, 0x2b) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="40000000090601030000000000000000000000090500010007000000080009400000000f0900020073797a310000001a100008800c00078008000940", @ANYRESHEX], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x22040000) 1.117446199s ago: executing program 6 (id=5082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r1, 0x7, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x32, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000000200)={0x0, 0x7f, 0xc0}) clock_gettime(0x0, 0x0) mkdir(&(0x7f0000000340)='./file\x00', 0x0) rmdir(&(0x7f0000000000)='./file/file0/..//file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) times(&(0x7f0000000180)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc3}, 0x20000840) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x60, r8, 0x420, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008041) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 1.101517575s ago: executing program 5 (id=5083): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "28261850795f47f43c66952b56148328b81bfc2fc60c5e66bc91e6bdef5a32d21c5c7c99247030eb80d6aedcd83bfda3ef0346962fa009e1d02fa865f328f0b4", 0x3e}, 0x48, r0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 864.6997ms ago: executing program 7 (id=5084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.L'}, 0x15) r3 = dup(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$UHID_CREATE2(r3, 0x0, 0x1001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) dup3(r6, r5, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="540100001000010000000008feffffffac1414bb00000000000000000000000000000000000000000000000000000001000200004e2000500000200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x24000058) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=r8, @ANYBLOB="20002dbd7000fedbdf252600000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x8081}, 0x8440) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="076f3fe89cf3c80f261669580025bd7000fddbdf25050000001800018000000000000014000380100003800c000180060002002d000000a582529e087231c07c80dc3286cf00dcf7e0a37a07f34f576191dcb8323f469c6592f8a57bb1d6acc7c623f374e991e1e2735e5a19dbeaa5e2ee60f3bdf7be7a9a4f93ad075c8abea9585bd32377e7d52a0142d1d032fd69d23a91ec01340efd719ef7b750cd31656babb9bc25afca2d1286ea52ea08ef545648968fc9ed8196308c1e40df3d11f22506026d6e8c7c23226488a2715f030dbb7549da13703b49944c23bad8ec85c12b4909b454093ad878"], 0x40}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x50, r0, 0xd057e000) 863.00978ms ago: executing program 4 (id=5085): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r2, @in={{0x2, 0x4e23, @empty}}, 0x6, 0x6}, &(0x7f00000000c0)=0x90) 711.776185ms ago: executing program 4 (id=5086): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$eJzs3dFvG3cdAPDvOXabtinJgAeYtDHYUDtB7WZhW8TDGBIST5MQ472ExI2iOnEUO1sTTTT9FxASSDzBMxJ/ABKqxAuPCGkSPIM0BELQgQQPsENnn5PUOSfe5sSt8/lI1/v9fue77/eX+s5355/OAZxbz0XE6xHxQZqmL0bEbN5eyqfY607Z695/+M5yNiWRpm/+PYkkb+ttK8nnV/LVpiPi29+M+F5yNG5rZ/fOUqNR38rrtfb6Zq21s3tjbX1ptb5a31hYmH9l8dXFlxdvjqSfVyPitW/8OcvktV99+e0/3frr9e9nlZl8+eF+fEjl4xZ2u165ON23wtZHDPY4yvpT6VUuDbfO/VPMBwCAwbJz/E9GxBci4sWYjanjT2cBAACAJ1D6tZn4bxKRFrswoB0AAAB4gpQ6Y2CTUjUfCzATpVK12h3D++m4XGo0W+0v3W5ub6x0x8rORaV0e61Rv5mPFZ6LSpLV5zvlg/pLffWFiHgqIn44e6lTry43GyvjvvkBAAAA58SVvuv/f812r/8BAACACTM37gQAAACAU+f6HwAAACaf638AAACYaN96441sSnu/f73y1s72neZbN1bqrTvV9e3l6nJza7O62myudp7Zt37S9hrN5uZXYmP7bq1db7VrrZ3dW+vN7Y32rbWYPpMOAQAAAEc89bkHf0giYu+rlzpT5sK4kwLORHm/lOTzgr3/j1Pd+XuPtKZpeu9UcwNO19QQr3nvYnG78wR4spX7Gwbs68DkqYw7AWDskhOWDxy889t8/vnR5gMAAIzetc/2ff9f7t7XP/57gXK2RunMkgROhZ0Yzq++z/l0dlyJAGeu8/3/sAN5nCzARKkMNQIQmGQf+/v/E6Xph0oIAAAYuZnOlJSq+e29mSiVqtWIq52fBagkt9ca9ZsR8YmI+P1s5WJWn++smZx4zQAAAAAAAAAAAAAAAAAAAAAAAAAAdKVpEikAAAAw0SJKf0l+3X2W/7XZF2b67w9cSP7T+UngCxHx9k/e/NHdpXZ7az5r/8d+e/vHeftL47iDAQAAAPTrXad35v8edzYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATJr3H76z3JuGePmlUcX929cjYq4ofjmmO/PpqETE5X8mUT60XhIRUyOIv3c/Ij5TFD/J0toPWRR/FH+EE+LHXP5X6I+f9f3KCOLDefYgO/68XrT/leK5zrx4/ytHPFL/qAYf/2L/+Dc14PhzdcgYT7/7i9rA+Pcjni4/Gr/cFz8ZEP/5IeN/9zu7u4OWpT+NuNb7/Okc8Q5HOCjV2uubtdbO7o219aXV+mp9Y2Fh/pXFVxdfXrxZu73WqOf/Fsb4wTO//OC4/l8u/PxL8mwG9/+Fgu0VfSb97927Dz/Vq+wdjX/9+YL4v/lZZ3avIH4pj/PFvJwtv9Yr73XLhz378989e1z/Vw76Xznc/5P+/68P2mi/IzvKM8O+dQCAU9Da2b2z1GjUtya2kF2lPwZpKDxOhYsRUd9q3eu1VEbxJknTNM32qYJFDyJimO0kMeKelorzOSgMPAKM+8gEAACM2sFJ/7gzAQAAAAAAAAAAAAAAAAAAgPPrLB631h/z4BHIySgeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBL/DwAA//9Q/9KQ") 672.274076ms ago: executing program 0 (id=5087): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf250100000008000100010000500400048008000200010000002c000480050003ffffff80000550030002000000050003000200000005000300000000000500030002000000540008"], 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x48084) 644.088999ms ago: executing program 7 (id=5088): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file2\x00'}) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x2}, 0x84, 0x0, 0x10000, 0x0, 0x2, 0x8, 0x6, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, r0, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x113002, 0x0) close_range(r1, r2, 0x0) (async, rerun: 64) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) (rerun: 64) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) (async) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {}, {@usrquota}, {@data_err_ignore}, {@init_itable}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x559, &(0x7f0000000940)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r7, 0x0, r7, &(0x7f00000000c0)=0xae8, 0x863, 0x0) (async) r8 = socket(0x15, 0x5, 0x0) connect$l2tp6(r8, &(0x7f0000000080)={0xa, 0x0, 0x2001fe, @private0, 0x9, 0x3}, 0x20) (async) getsockname$llc(r8, 0x0, &(0x7f00000000c0)) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x1, 0x1, r6}}, 0x40) (async) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/hibernate_compression_threads', 0x1, 0x68) write$UHID_INPUT2(r9, &(0x7f0000000bc0)=ANY=[@ANYBLOB="00a687a29f00"], 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x843c}, 0x10}, 0x94) 488.170773ms ago: executing program 0 (id=5089): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f0000000100)={[{@nobh}, {@abort}, {@nomblk_io_submit}]}, 0x3, 0x4f8, &(0x7f0000000140)="$eJzs3E1sFGUfAPD/bLv9gBfoy8vL+4IoBTQ2JrZQUDiYGExMPGhixIMcm1IJUsDQHoQQKYnBM4lXQzwab5p41aPxZOIVDx5MDJEYLnwkJmNmd6Yf+9UuXVrL/n7Jdp9n5pl5nv/MPLOz83QngK41nP1JIv4VEbciYls1u7TAcPXt/t0rkw/uXpmMuTQ98WdSKXcvy+eK5TbnmZFSROmTpGaFVTOXLp+dmJ6eupjnx2bPfTg2c+nyi2fOTZyeOj11fvzYsSOHDx19efyl9oNqUF8W173dH1/Ys+uNkzfemuwtpg/k74vjaKq3vWYMt5j3XHur+sfbsiid1G+nq2vaGFZsID+sy1n/vzK9/+R6NwhYM2mapv3NZ8+lta7VTQE2rCTWuwXA+ig+6LPvv/fullf2PfgJcud49gUoqcR9P39V5/RGKS9Trvl+20nDEfHe3MObg/HwZrS6D/HrY2oAANB1vj9eXAlm13/VV3VOKXYuKrc1H0MZioh/R8T2iPhPROyIiP9GVMr+LyL+X1tBEpG2qH9HTX6h/m/yUYTS7VUH2UJ2/fdKPra19PqvuPqLoZ48tyWiuGCeOphvk5Eo979/ZnrqUJP19y1Tf3H9V7yy+rP3hRKl2701N+hOTcxOPFq09e5ci9jdWxt/0pvtuGIYJ4mIXRGxu431Di1Kn3nhyz3zmfLScsvHX5E2GNJrezyukfSLiOer+38uluz/hRqT1uOTYwMxPXVwLDsKDjas48efrr/drP5l4//2t9pFXj/63YnVhj0v2/+bqvGXI4+9Mn67EP9QEpHMj9fORKQ97dVx/ZdPK+sdPlA/7xGO/76YmJ3oS97NM1UfTczOXjwU0Ze8WT99fGHhIl+Uz+IfOdC4/2/Pl8m2xFMRkR3ET0fEMxGxN2/7vojYHxH1of38R5H64bVnP2i2bZbGv7XZ8T8/Tt1pWfynGp7/luz/hfH6FSaKhbMpPWf33XrQ5OSxsv1/pJIayac0Pv8lS04RK23p6rYeAAAAbAylqPzvf2l0Pl0qjY5W7wHtiE2l6Qszs3sj4vyp6m8EhqJcKu50Ve8Hl5Pi/ufQovx4Tf5wft/4s57BSn508sJyt0aBx2xzpc8ndf0/83ub93mBDagD42jABrVc/995Y40aAqw5n//QvRb1/7kmReb8pww8mXz+Q/dq1P+vxlctB+icM2DjS/Vl6Gr6P3Sv3nhnPl352XPDX9sCTyKf/9CV2v1df3uJtH966tWIqJ01UDfl0uUYeDzNGGxQ17oksiurDq6wHBErKzz4KFUUl4DNn/BQam+F/VE/qydaLZW0fI7DX2ma1s/Ktsqy7Tm9s+MHf/FMlE4fNl8v9NNy5SFL87M+37aCSFeRWJfTEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMf9HQAA//8V1NEi") quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000640)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000840)) 437.085231ms ago: executing program 4 (id=5090): socket$kcm(0x2a, 0x2, 0x0) (async) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xb, 0x0}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xb, 0x0}, 0x0) io_setup(0x18b, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x1f, 0x1, 0x0, r2, 0x0, 0x0, 0x3000}]) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="7871c3ae417689220b342081a460ff07", 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) (async) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) (async) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r6, r6, 0x0, 0xe3aa6ea) (async) sendfile(r6, r6, 0x0, 0xe3aa6ea) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setrlimit(0x40000000000008, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x140a, 0x1, 0x70bd29, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40c4}, 0x20008000) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x700000000000000, 0x0, 0x80c0}, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x1e, &(0x7f00000001c0)=""/152, 0x0, 0x9}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f0000000000)="0bbb268d0200a808ed90cfcf000000000000210d0000aaa8fa017242ba9380d410000000000000002900000004000000", 0x30) (async) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f0000000000)="0bbb268d0200a808ed90cfcf000000000000210d0000aaa8fa017242ba9380d410000000000000002900000004000000", 0x30) 401.200823ms ago: executing program 0 (id=5091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="40000000090601030000000000000000000000090500010007000000080009400000000f0900020073797a310000001a100008800c00078008000940", @ANYRESHEX], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x22040000) (fail_nth: 2) 356.231993ms ago: executing program 7 (id=5092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="400000000906010300000000000000000000000905000100070000", @ANYRESHEX], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x22040000) 326.771586ms ago: executing program 0 (id=5093): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x46}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x94) 292.110738ms ago: executing program 7 (id=5094): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x25a000, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0x3, 0xfffffc00, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$P9_RREAD(r3, &(0x7f0000002080)=ANY=[], 0xec1) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x200, 0x0, 0x0, 0x7, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='((!}^+&)\x00') ioctl$TIOCGPTPEER(r3, 0x5441, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)={0x58, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x29}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x45) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000300)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r12}, &(0x7f0000000340), &(0x7f0000000540)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r11}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES16=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 124.082809ms ago: executing program 5 (id=5095): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000029000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) 56.293173ms ago: executing program 0 (id=5096): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r2, @in={{0x2, 0x4e23, @empty}}, 0x6, 0x6}, &(0x7f00000000c0)=0x90) 228.53µs ago: executing program 0 (id=5097): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], &(0x7f0000000500)=""/50, 0x18, 0x32, 0x1, 0x81}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000"], 0x0, 0x0, 0x0, 0x0, 0x9f0e5cc4bcd4d319, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001700008d540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 0s ago: executing program 7 (id=5098): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mbind(&(0x7f00008a5000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x200000, 0x0, 0xc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x8188ca, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,dots,noLots,nodots,nodots,dots,dots,\x00'], 0x5, 0x1204, &(0x7f0000004880)="$eJzs209rHGUcB/Bfmzb/atL43xbEB70owmB78CBegqQgXVDaRmgFYUImumTdDZk9ZEWwHrx48gX4EgQv3gT1DfTia/AWBNGLJ0c2s02661ZUtptgPx9Y5rfzfWb2eXh2Bp5lZ//1Lz7c3iqzrahVM/U2xem463a89P1rv31+/eatq6uNxtq1lK6s3rj0akpp+bnv3v34q+d/6J5755vlb+fizsp7+79c/unO6biw/8eND5plapap3emmPG10Ot18o1WkzWa5naX0dqvIyyI122WxW+f9j2oVaavV2dnppby9ubS4s1uUZcrbvbRd9FK3k7q7L6f8/bzZTlmWpaXF4L/6dLCtqv7rbMxGVVXVQizGuXgklmI5zsdKPBqPxePxRDwZT8XT8UxcOGh1zF0HAAAAAAAAAAAAAAAAAACA/5nfq9Hn/897/h8AAAAAAAAAAAAAAAAAAACm7PrNW1dXG421aynNR/x8e299b73e1vmVNxtrr6QDK0dH/bq3tz5zmF+q8zScz8XiIL88Np+PF1+o8372xluNkfxibD744QMAAMBDIUuH+uv7U3Eqhtb3WTaUD/Tzurrn94GR9fuZuHhmyoPhXyt7H23nZwdv8lar2D3YM+Fi7oGdecJFfHa459mFo2gjIsYcVX1y3xMunIjhTKSYG3w7Tkp/Jl8cTe6XM+OvguGL5iT0ebSYvztL49rM1MWPX/+lzex9J3cqtx+O2T23vr+3MDulHgEAAAAAAAAAAPBPTOVPtQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwJztwIAAAAAAgyN96gg0KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBQAAP//yT5Whg==") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) set_mempolicy(0x3, 0x0, 0x4) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, 0x0, 0x0) sendto$l2tp(r3, &(0x7f0000000180)="d23c2810150944cb9ffb01576623acec2e2561376e178a3672d76830b7ee324452884e8d672e3037cf1e666cfa4e669a46c45b75c87bc4143a4a30c77e3d8bb868ebb5e0f6f01724831cc64108b343d6a685", 0x36, 0x0, &(0x7f0000000240)={0x2, 0x0, @remote, 0x2}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000007000000020000000700000000000000", @ANYRES32, @ANYBLOB="0040000000000000000005000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x600}, {0x85, 0x0, 0x0, 0x3}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r4}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) kernel console output (not intermixed with test programs): denied { ioctl } for pid=16644 comm="syz.4.4081" path="/181/bus/bus" dev="loop4" ino=18 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 460.692781][T16691] __nla_validate_parse: 8 callbacks suppressed [ 460.692815][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4094'. [ 460.727113][T16693] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 460.740922][T16693] gretap1: entered allmulticast mode [ 460.750590][T16691] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 460.763656][T16691] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 460.853512][T13251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.077302][ T28] audit: type=1400 audit(1772330151.559:9432): avc: denied { create } for pid=16703 comm="syz.7.4099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 461.208577][ T28] audit: type=1400 audit(1772330151.699:9433): avc: denied { kexec_image_load } for pid=16703 comm="syz.7.4099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 461.377717][T16708] loop4: detected capacity change from 0 to 512 [ 461.563276][T16708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.653386][T16708] ext4 filesystem being mounted at /182/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.740181][ T28] audit: type=1400 audit(1772330152.229:9434): avc: denied { ioctl } for pid=16699 comm="syz.4.4097" path="socket:[61875]" dev="sockfs" ino=61875 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 461.869818][T16726] netlink: 182 bytes leftover after parsing attributes in process `syz.7.4106'. [ 461.881365][T16725] syzkaller1: entered promiscuous mode [ 461.893749][T16725] syzkaller1: entered allmulticast mode [ 461.916847][T16726] FAULT_INJECTION: forcing a failure. [ 461.916847][T16726] name failslab, interval 1, probability 0, space 0, times 0 [ 461.950611][T16726] CPU: 0 UID: 0 PID: 16726 Comm: syz.7.4106 Tainted: G W syzkaller #0 PREEMPT(full) [ 461.950651][T16726] Tainted: [W]=WARN [ 461.950658][T16726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.950673][T16726] Call Trace: [ 461.950681][T16726] [ 461.950691][T16726] __dump_stack+0x1d/0x30 [ 461.950724][T16726] dump_stack_lvl+0x95/0xd0 [ 461.950835][T16726] dump_stack+0x15/0x1b [ 461.950859][T16726] should_fail_ex+0x263/0x280 [ 461.950945][T16726] should_failslab+0x8c/0xb0 [ 461.951027][T16726] kmem_cache_alloc_noprof+0x66/0x400 [ 461.951053][T16726] ? skb_clone+0x151/0x1f0 [ 461.951129][T16726] skb_clone+0x151/0x1f0 [ 461.951180][T16726] __netlink_deliver_tap+0x2c9/0x500 [ 461.951213][T16726] ? netlink_attachskb+0x2e2/0x660 [ 461.951268][T16726] netlink_sendskb+0x126/0x150 [ 461.951326][T16726] netlink_unicast+0x2a2/0x690 [ 461.951421][T16726] netlink_ack+0x4c8/0x500 [ 461.951455][T16726] netlink_rcv_skb+0x192/0x220 [ 461.951490][T16726] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 461.951593][T16726] xfrm_netlink_rcv+0x48/0x60 [ 461.951637][T16726] netlink_unicast+0x5c0/0x690 [ 461.951665][T16726] netlink_sendmsg+0x5c8/0x6f0 [ 461.951780][T16726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.951809][T16726] ____sys_sendmsg+0x5af/0x600 [ 461.951933][T16726] ___sys_sendmsg+0x195/0x1e0 [ 461.951973][T16726] __x64_sys_sendmsg+0xd4/0x160 [ 461.952020][T16726] x64_sys_call+0x194c/0x3020 [ 461.952057][T16726] do_syscall_64+0x12c/0x370 [ 461.952084][T16726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.952165][T16726] RIP: 0033:0x7f5d392ec799 [ 461.952207][T16726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.952233][T16726] RSP: 002b:00007f5d37d3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.952257][T16726] RAX: ffffffffffffffda RBX: 00007f5d39565fa0 RCX: 00007f5d392ec799 [ 461.952344][T16726] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 461.952362][T16726] RBP: 00007f5d37d3f090 R08: 0000000000000000 R09: 0000000000000000 [ 461.952375][T16726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.952389][T16726] R13: 00007f5d39566038 R14: 00007f5d39565fa0 R15: 00007ffcdaa4e0b8 [ 461.952480][T16726] [ 462.220415][T16732] loop7: detected capacity change from 0 to 512 [ 462.248016][T16732] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 462.305429][T16732] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4109: invalid indirect mapped block 9 (level 0) [ 462.343750][T16732] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 462.344066][T16732] EXT4-fs (loop7): 1 truncate cleaned up [ 462.353288][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 462.353320][ C0] EXT4-fs (loop7): initial error at time 1772330152: ext4_free_branches:1023: inode 11 [ 462.353381][ C0] EXT4-fs (loop7): last error at time 1772330152: ext4_free_branches:1023: inode 11 [ 462.405630][T16700] syz.4.4097 (16700) used greatest stack depth: 8760 bytes left [ 462.445672][T13251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.485721][T16732] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.530720][T16744] syzkaller0: entered promiscuous mode [ 462.568712][T11030] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.575384][T16744] syzkaller0: entered allmulticast mode [ 462.609789][T16745] loop4: detected capacity change from 0 to 4096 [ 462.669692][T16745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.729994][T16745] loop7: detected capacity change from 0 to 16384 [ 462.757938][ T28] audit: type=1400 audit(1772330153.219:9435): avc: denied { getopt } for pid=16742 comm="syz.4.4113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 462.895857][T16761] loop7: detected capacity change from 16384 to 0 [ 462.896119][ C1] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 462.925842][T16764] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4117'. [ 462.934854][T16764] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4117'. [ 463.027429][T16769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.040864][T16769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.053312][T16769] 8021q: VLANs not supported on caif0 [ 463.107522][T16774] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4122'. [ 463.120806][T16774] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4122'. [ 463.131377][T16774] syzkaller0: entered promiscuous mode [ 463.164248][T16774] syzkaller0: entered allmulticast mode [ 463.234312][T16781] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4125'. [ 463.295227][ T28] audit: type=1400 audit(1772330153.779:9436): avc: denied { name_bind } for pid=16782 comm="syz.7.4127" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 463.319034][T16785] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4127'. [ 463.406811][T13251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.432193][T16739] syz.0.4112 (16739) used greatest stack depth: 7224 bytes left [ 463.485455][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4131'. [ 463.508277][T16797] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4131'. [ 463.632807][T16810] loop4: detected capacity change from 0 to 512 [ 463.642834][T16810] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 463.666492][T16810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.690191][T16810] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.961417][T16837] syzkaller0: entered promiscuous mode [ 463.971160][T13251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.988304][T16837] syzkaller0: entered allmulticast mode [ 464.042353][ T28] audit: type=1400 audit(1772330154.519:9437): avc: denied { append } for pid=16854 comm="syz.6.4147" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 464.893249][T16900] loop7: detected capacity change from 0 to 256 [ 465.191207][T16900] FAT-fs (loop7): Directory bread(block 64) failed [ 465.197908][T16900] FAT-fs (loop7): Directory bread(block 65) failed [ 465.204475][T16900] FAT-fs (loop7): Directory bread(block 66) failed [ 465.211112][T16900] FAT-fs (loop7): Directory bread(block 67) failed [ 465.217715][T16900] FAT-fs (loop7): Directory bread(block 68) failed [ 465.224366][T16900] FAT-fs (loop7): Directory bread(block 69) failed [ 465.231291][T16900] FAT-fs (loop7): Directory bread(block 70) failed [ 465.237996][T16900] FAT-fs (loop7): Directory bread(block 71) failed [ 465.244612][T16900] FAT-fs (loop7): Directory bread(block 72) failed [ 465.251192][T16900] FAT-fs (loop7): Directory bread(block 73) failed [ 466.640380][T16912] __nla_validate_parse: 6 callbacks suppressed [ 466.640402][T16912] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4159'. [ 467.011483][T16913] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 467.030455][T16913] gretap1: entered allmulticast mode [ 467.057621][T16919] ALSA: seq fatal error: cannot create timer (-22) [ 467.064940][ T28] audit: type=1400 audit(1772330157.539:9438): avc: denied { ioctl } for pid=16918 comm="syz.5.4161" path="socket:[62794]" dev="sockfs" ino=62794 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 467.105819][ T28] audit: type=1400 audit(1772330157.579:9439): avc: denied { getopt } for pid=16920 comm="syz.4.4162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 467.273741][T16932] loop5: detected capacity change from 0 to 8192 [ 467.275444][ T28] audit: type=1400 audit(1772330157.749:9440): avc: denied { getopt } for pid=16934 comm="syz.4.4168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 467.282021][T16932] msdos: Unknown parameter 'noLots' [ 467.316819][T16937] tipc: Started in network mode [ 467.321760][T16937] tipc: Node identity 0000006416173b000000000000000001, cluster identity 4711 [ 467.332740][T16937] tipc: Enabling of bearer rejected, failed to enable media [ 467.446892][ T28] audit: type=1326 audit(1772330157.929:9441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16936 comm="syz.6.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a243cc799 code=0x7ffc0000 [ 467.471608][ T28] audit: type=1326 audit(1772330157.929:9442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16936 comm="syz.6.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a243cc799 code=0x7ffc0000 [ 467.495575][ T28] audit: type=1326 audit(1772330157.929:9443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16936 comm="syz.6.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a2438cfce code=0x7ffc0000 [ 467.519693][ T28] audit: type=1326 audit(1772330157.929:9444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16936 comm="syz.6.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6a243cda97 code=0x7ffc0000 [ 467.543596][ T28] audit: type=1326 audit(1772330157.929:9445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16936 comm="syz.6.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a243cc799 code=0x7ffc0000 [ 467.545043][ T3402] IPVS: starting estimator thread 0... [ 467.568079][ T28] audit: type=1326 audit(1772330157.929:9446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16936 comm="syz.6.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6a243cda97 code=0x7ffc0000 [ 467.623331][ T7865] bio_check_eod: 173 callbacks suppressed [ 467.623346][ T7865] kworker/u8:11: attempt to access beyond end of device [ 467.623346][ T7865] loop7: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 467.644343][ T7865] kworker/u8:11: attempt to access beyond end of device [ 467.644343][ T7865] loop7: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 467.662160][ T7865] kworker/u8:11: attempt to access beyond end of device [ 467.662160][ T7865] loop7: rw=1, sector=1960, nr_sectors = 2416 limit=256 [ 467.676678][T16942] IPVS: using max 2256 ests per chain, 112800 per kthread [ 467.690032][ T7865] kworker/u8:11: attempt to access beyond end of device [ 467.690032][ T7865] loop7: rw=1, sector=4376, nr_sectors = 2064 limit=256 [ 467.733621][T16946] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4170'. [ 467.743552][T16946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4170'. [ 467.755351][T16946] ip6tnl1: entered allmulticast mode [ 467.844401][ T7865] kworker/u8:11: attempt to access beyond end of device [ 467.844401][ T7865] loop7: rw=1, sector=6440, nr_sectors = 5120 limit=256 [ 467.863379][ T7865] kworker/u8:11: attempt to access beyond end of device [ 467.863379][ T7865] loop7: rw=1, sector=11560, nr_sectors = 2048 limit=256 [ 467.880941][ T7865] kworker/u8:11: attempt to access beyond end of device [ 467.880941][ T7865] loop7: rw=1, sector=13608, nr_sectors = 2056 limit=256 [ 467.898747][ T7865] kworker/u8:11: attempt to access beyond end of device [ 467.898747][ T7865] loop7: rw=1, sector=15664, nr_sectors = 2976 limit=256 [ 467.919977][ T7865] kworker/u8:11: attempt to access beyond end of device [ 467.919977][ T7865] loop7: rw=1, sector=18640, nr_sectors = 3656 limit=256 [ 467.939895][ T7865] kworker/u8:11: attempt to access beyond end of device [ 467.939895][ T7865] loop7: rw=1, sector=22296, nr_sectors = 1936 limit=256 [ 467.956943][T16950] loop4: detected capacity change from 0 to 512 [ 468.448598][T16950] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.4173: inode has both inline data and extents flags [ 468.496207][T16950] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 468.496371][T16950] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4173: couldn't read orphan inode 15 (err -117) [ 468.505566][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 468.505587][ C0] EXT4-fs (loop4): initial error at time 1772330158: ext4_orphan_get:1391: inode 15 [ 468.505639][ C0] EXT4-fs (loop4): last error at time 1772330158: ext4_orphan_get:1391: inode 15 [ 468.615704][T16964] loop6: detected capacity change from 0 to 512 [ 468.659732][T16950] loop4: lost filesystem error report for type 5 error -117 [ 468.665864][T16964] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 468.715385][T16964] EXT4-fs (loop6): mount failed [ 468.725804][T16950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 468.762114][T16970] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4176'. [ 468.791384][T16970] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4176'. [ 468.818416][T16970] syzkaller0: entered promiscuous mode [ 468.823936][T16970] syzkaller0: entered allmulticast mode [ 468.844258][T16954] ucma_write: process 517 (syz.4.4173) changed security contexts after opening file descriptor, this is not allowed. [ 468.946900][T16970] 0: reclassify loop, rule prio 0, protocol 800 [ 468.969624][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4182'. [ 468.982292][T16993] loop7: detected capacity change from 0 to 1024 [ 469.024509][T16993] EXT4-fs: Ignoring removed mblk_io_submit option [ 469.065461][T16993] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 469.090301][T16993] System zones: 0-1, 3-36 [ 469.106355][T16993] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #3: comm syz.7.4186: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 469.156374][T17003] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4189'. [ 469.165564][T17003] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4189'. [ 469.175802][T17003] syzkaller0: entered promiscuous mode [ 469.181328][T17003] syzkaller0: entered allmulticast mode [ 469.197385][T16993] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 469.200726][T16993] EXT4-fs error (device loop7): ext4_quota_enable:7195: comm syz.7.4186: Bad quota inode: 3, type: 0 [ 469.210009][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 469.210033][ C1] EXT4-fs (loop7): initial error at time 1772330159: ext4_ext_check_inode:521: inode 3 [ 469.210078][ C1] EXT4-fs (loop7): last error at time 1772330159: ext4_ext_check_inode:521: inode 3 [ 469.246738][T16993] loop7: lost filesystem error report for type 5 error -117 [ 469.247126][T16993] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 469.335785][T16993] EXT4-fs (loop7): mount failed [ 469.368197][T16993] loop7: detected capacity change from 0 to 512 [ 469.397858][T16993] ext4: Unknown parameter 'func' [ 469.439795][T13251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 469.636408][T17035] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4201'. [ 469.639157][T17036] loop4: detected capacity change from 0 to 512 [ 469.666507][T17036] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 469.723769][T17036] EXT4-fs (loop4): 1 truncate cleaned up [ 469.737038][T17041] netlink: 168 bytes leftover after parsing attributes in process `syz.7.4204'. [ 469.755857][T17036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.960925][T13251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.979868][T17060] Cannot find del_set index 4 as target [ 470.039781][T17066] loop7: detected capacity change from 0 to 512 [ 470.088754][T17066] EXT4-fs (loop7): unable to read superblock [ 470.119772][T17052] loop5: detected capacity change from 0 to 1024 [ 470.241757][T17081] random: crng reseeded on system resumption [ 470.324131][T17052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 470.391288][T17086] loop6: detected capacity change from 0 to 256 [ 470.549994][T17086] FAT-fs (loop6): Directory bread(block 64) failed [ 470.556728][T17086] FAT-fs (loop6): Directory bread(block 65) failed [ 470.563366][T17086] FAT-fs (loop6): Directory bread(block 66) failed [ 470.569982][T17086] FAT-fs (loop6): Directory bread(block 67) failed [ 470.576629][T17086] FAT-fs (loop6): Directory bread(block 68) failed [ 470.583244][T17086] FAT-fs (loop6): Directory bread(block 69) failed [ 470.589967][T17086] FAT-fs (loop6): Directory bread(block 70) failed [ 470.596687][T17086] FAT-fs (loop6): Directory bread(block 71) failed [ 470.603421][T17086] FAT-fs (loop6): Directory bread(block 72) failed [ 470.610070][T17086] FAT-fs (loop6): Directory bread(block 73) failed [ 470.685633][T17052] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.919022][T17072] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.4208: lblock 3 mapped to illegal pblock 3 (length 1) [ 471.065409][T17072] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 471.120504][T17072] EXT4-fs (loop5): This should not happen!! Data will be lost [ 471.120504][T17072] [ 471.204031][T14368] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 471.549110][T17118] netlink: 'syz.0.4228': attribute type 8 has an invalid length. [ 471.645338][T17118] __nla_validate_parse: 3 callbacks suppressed [ 471.645358][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4228'. [ 472.206882][T17122] ip6gre1: entered promiscuous mode [ 472.218885][T17122] ip6gre1: entered allmulticast mode [ 472.348714][T17125] loop5: detected capacity change from 0 to 512 [ 472.376135][T17125] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 472.388363][T17125] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 472.398915][T17125] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4232: Corrupt directory, running e2fsck is recommended [ 472.413146][T17125] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 472.421805][T17125] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.4232: corrupted in-inode xattr: e_name out of bounds [ 472.436104][T17125] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 472.436336][T17125] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4232: couldn't read orphan inode 15 (err -117) [ 472.445533][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 472.445550][ C1] EXT4-fs (loop5): initial error at time 1772330162: ext4_iget_extra_inode:5025: inode 15 [ 472.445593][ C1] EXT4-fs (loop5): last error at time 1772330162: ext4_iget_extra_inode:5025: inode 15 [ 472.486231][T17125] loop5: lost filesystem error report for type 5 error -117 [ 472.486800][T17125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.554716][T17130] xt_hashlimit: size too large, truncated to 1048576 [ 472.638337][T17138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4236'. [ 472.648035][T14368] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.674459][T17140] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4238'. [ 472.754435][T17146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4237'. [ 472.800251][T17152] FAULT_INJECTION: forcing a failure. [ 472.800251][T17152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.834160][T17154] loop4: detected capacity change from 0 to 2048 [ 472.852616][T17152] CPU: 1 UID: 0 PID: 17152 Comm: syz.7.4241 Tainted: G W syzkaller #0 PREEMPT(full) [ 472.852670][T17152] Tainted: [W]=WARN [ 472.852680][T17152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 472.852697][T17152] Call Trace: [ 472.852705][T17152] [ 472.852715][T17152] __dump_stack+0x1d/0x30 [ 472.852746][T17152] dump_stack_lvl+0x95/0xd0 [ 472.852786][T17152] dump_stack+0x15/0x1b [ 472.852862][T17152] should_fail_ex+0x263/0x280 [ 472.852918][T17152] should_fail+0xb/0x20 [ 472.852944][T17152] should_fail_usercopy+0x1a/0x20 [ 472.852977][T17152] _copy_from_user+0x1c/0xb0 [ 472.853014][T17152] __sys_bpf+0x183/0x7e0 [ 472.853043][T17152] __x64_sys_bpf+0x41/0x50 [ 472.853085][T17152] x64_sys_call+0x10cb/0x3020 [ 472.853118][T17152] do_syscall_64+0x12c/0x370 [ 472.853138][T17152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.853175][T17152] RIP: 0033:0x7f5d392ec799 [ 472.853193][T17152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.853213][T17152] RSP: 002b:00007f5d37d3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 472.853240][T17152] RAX: ffffffffffffffda RBX: 00007f5d39565fa0 RCX: 00007f5d392ec799 [ 472.853305][T17152] RDX: 0000000000000020 RSI: 0000200000001180 RDI: 0000000000000008 [ 472.853320][T17152] RBP: 00007f5d37d3f090 R08: 0000000000000000 R09: 0000000000000000 [ 472.853333][T17152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.853346][T17152] R13: 00007f5d39566038 R14: 00007f5d39565fa0 R15: 00007ffcdaa4e0b8 [ 472.853367][T17152] [ 473.240682][T17176] loop6: detected capacity change from 0 to 2048 [ 473.333922][T17176] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.485731][T15929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.513747][T17192] netlink: 182 bytes leftover after parsing attributes in process `syz.4.4255'. [ 473.533770][T17192] FAULT_INJECTION: forcing a failure. [ 473.533770][T17192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.552458][T17192] CPU: 1 UID: 0 PID: 17192 Comm: syz.4.4255 Tainted: G W syzkaller #0 PREEMPT(full) [ 473.552578][T17192] Tainted: [W]=WARN [ 473.552587][T17192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.552604][T17192] Call Trace: [ 473.552672][T17192] [ 473.552680][T17192] __dump_stack+0x1d/0x30 [ 473.552712][T17192] dump_stack_lvl+0x95/0xd0 [ 473.552742][T17192] dump_stack+0x15/0x1b [ 473.552772][T17192] should_fail_ex+0x263/0x280 [ 473.552876][T17192] should_fail+0xb/0x20 [ 473.552900][T17192] should_fail_usercopy+0x1a/0x20 [ 473.552941][T17192] _copy_to_user+0x20/0xa0 [ 473.552974][T17192] simple_read_from_buffer+0xb5/0x130 [ 473.553072][T17192] proc_fail_nth_read+0x10e/0x150 [ 473.553143][T17192] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 473.553174][T17192] vfs_read+0x1ab/0x7f0 [ 473.553213][T17192] ? __rcu_read_unlock+0x4e/0x70 [ 473.553240][T17192] ? __fget_files+0x184/0x1c0 [ 473.553462][T17192] ? mutex_lock+0x57/0x90 [ 473.553525][T17192] ksys_read+0xdc/0x1a0 [ 473.553566][T17192] __x64_sys_read+0x40/0x50 [ 473.553606][T17192] x64_sys_call+0x2886/0x3020 [ 473.553763][T17192] do_syscall_64+0x12c/0x370 [ 473.553894][T17192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.553918][T17192] RIP: 0033:0x7f2b56edcfce [ 473.553985][T17192] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 473.554008][T17192] RSP: 002b:00007f2b5596efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 473.554033][T17192] RAX: ffffffffffffffda RBX: 00007f2b5596f6c0 RCX: 00007f2b56edcfce [ 473.554050][T17192] RDX: 000000000000000f RSI: 00007f2b5596f0a0 RDI: 0000000000000005 [ 473.554128][T17192] RBP: 00007f2b5596f090 R08: 0000000000000000 R09: 0000000000000000 [ 473.554145][T17192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.554160][T17192] R13: 00007f2b57196038 R14: 00007f2b57195fa0 R15: 00007ffd5634ab48 [ 473.554180][T17192] [ 473.789024][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4254'. [ 473.805056][T17198] loop4: detected capacity change from 0 to 512 [ 473.902704][T17198] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 473.919979][T17198] EXT4-fs (loop4): mount failed [ 473.953909][T17209] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4260'. [ 473.973321][T17209] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4260'. [ 474.012983][T17214] loop5: detected capacity change from 0 to 1764 [ 474.112242][T17215] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 474.819765][T17232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4268'. [ 474.910482][T17243] netlink: 'syz.7.4270': attribute type 1 has an invalid length. [ 474.979906][T17237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4269'. [ 474.989710][T17237] syzkaller0: entered promiscuous mode [ 474.995258][T17237] syzkaller0: entered allmulticast mode [ 475.010260][T17241] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.035261][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 475.035286][ T28] audit: type=1400 audit(1772330165.519:9512): avc: denied { read } for pid=17239 comm="syz.6.4271" path="socket:[63780]" dev="sockfs" ino=63780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 475.082984][ T28] audit: type=1400 audit(1772330165.519:9513): avc: denied { name_bind } for pid=17240 comm="syz.7.4270" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 475.177449][T17255] loop5: detected capacity change from 0 to 512 [ 475.186703][T17255] EXT4-fs: Ignoring removed bh option [ 475.191252][T17263] sctp: [Deprecated]: syz.0.4274 (pid 17263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 475.191252][T17263] Use struct sctp_sack_info instead [ 475.225035][T17262] sctp: [Deprecated]: syz.0.4274 (pid 17262) Use of struct sctp_assoc_value in delayed_ack socket option. [ 475.225035][T17262] Use struct sctp_sack_info instead [ 475.278411][T17255] EXT4-fs (loop5): 1 truncate cleaned up [ 475.288334][T17255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.356725][T17255] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4273: invalid indirect mapped block 4294967295 (level 1) [ 475.371565][T17255] EXT4-fs (loop5): Remounting filesystem read-only [ 475.598072][T17273] syzkaller0: entered promiscuous mode [ 475.633115][T17273] syzkaller0: entered allmulticast mode [ 476.196722][T14368] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.291945][T17285] syzkaller0: entered promiscuous mode [ 476.305861][T17285] syzkaller0: entered allmulticast mode [ 476.480682][T17293] loop7: detected capacity change from 0 to 1764 [ 476.729487][T17306] __nla_validate_parse: 5 callbacks suppressed [ 476.729505][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4291'. [ 476.847107][T17310] loop7: detected capacity change from 0 to 128 [ 477.102018][T17314] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 477.228811][ T28] audit: type=1400 audit(1772330167.719:9514): avc: denied { map } for pid=17327 comm="syz.6.4299" path="socket:[63453]" dev="sockfs" ino=63453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 477.272718][ T28] audit: type=1400 audit(1772330167.719:9515): avc: denied { accept } for pid=17327 comm="syz.6.4299" path="socket:[63453]" dev="sockfs" ino=63453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 477.315606][T17329] loop4: detected capacity change from 0 to 1764 [ 477.456498][ T28] audit: type=1326 audit(1772330167.939:9516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17339 comm="syz.4.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b56f1c799 code=0x7ffc0000 [ 477.505503][ T28] audit: type=1326 audit(1772330167.939:9517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17339 comm="syz.4.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b56f1c799 code=0x7ffc0000 [ 477.539056][T17345] ip6gre3: entered promiscuous mode [ 477.544531][T17345] ip6gre3: entered allmulticast mode [ 477.576396][ T28] audit: type=1326 audit(1772330167.939:9518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17339 comm="syz.4.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f2b56f1c799 code=0x7ffc0000 [ 477.606242][T17350] loop7: detected capacity change from 0 to 512 [ 477.642913][ T28] audit: type=1326 audit(1772330167.939:9519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17339 comm="syz.4.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b56f1c799 code=0x7ffc0000 [ 477.709150][T17350] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.726472][ T28] audit: type=1326 audit(1772330167.939:9520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17339 comm="syz.4.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b56f1c799 code=0x7ffc0000 [ 477.731150][T17350] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 477.765320][ T28] audit: type=1326 audit(1772330168.019:9521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17339 comm="syz.4.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b56f1c799 code=0x7ffc0000 [ 477.907522][T17350] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.4306: corrupted inode contents [ 477.935391][T17350] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #2: comm syz.7.4306: mark_inode_dirty error [ 478.020573][T17350] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.4306: corrupted inode contents [ 478.047267][T17374] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4314'. [ 478.062173][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4306'. [ 478.086674][T17350] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.4306: mark_inode_dirty error [ 478.103539][T17374] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 478.244811][T17374] bond1 (unregistering): Released all slaves [ 478.263117][T17375] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 478.386634][T11030] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.427237][T17386] FAULT_INJECTION: forcing a failure. [ 478.427237][T17386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.487859][T17386] CPU: 0 UID: 0 PID: 17386 Comm: syz.7.4318 Tainted: G W syzkaller #0 PREEMPT(full) [ 478.487892][T17386] Tainted: [W]=WARN [ 478.487899][T17386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 478.487915][T17386] Call Trace: [ 478.487924][T17386] [ 478.487934][T17386] __dump_stack+0x1d/0x30 [ 478.487990][T17386] dump_stack_lvl+0x95/0xd0 [ 478.488017][T17386] dump_stack+0x15/0x1b [ 478.488038][T17386] should_fail_ex+0x263/0x280 [ 478.488066][T17386] should_fail+0xb/0x20 [ 478.488094][T17386] should_fail_usercopy+0x1a/0x20 [ 478.488187][T17386] _copy_to_user+0x20/0xa0 [ 478.488218][T17386] simple_read_from_buffer+0xb5/0x130 [ 478.488260][T17386] proc_fail_nth_read+0x10e/0x150 [ 478.488293][T17386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.488337][T17386] vfs_read+0x1ab/0x7f0 [ 478.488376][T17386] ? __rcu_read_unlock+0x4e/0x70 [ 478.488403][T17386] ? __fget_files+0x184/0x1c0 [ 478.488507][T17386] ? mutex_lock+0x57/0x90 [ 478.488544][T17386] ksys_read+0xdc/0x1a0 [ 478.488665][T17386] __x64_sys_read+0x40/0x50 [ 478.488700][T17386] x64_sys_call+0x2886/0x3020 [ 478.488788][T17386] do_syscall_64+0x12c/0x370 [ 478.488812][T17386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.488834][T17386] RIP: 0033:0x7f5d392acfce [ 478.488886][T17386] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 478.488907][T17386] RSP: 002b:00007f5d37d3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 478.488931][T17386] RAX: ffffffffffffffda RBX: 00007f5d37d3f6c0 RCX: 00007f5d392acfce [ 478.488948][T17386] RDX: 000000000000000f RSI: 00007f5d37d3f0a0 RDI: 0000000000000004 [ 478.488964][T17386] RBP: 00007f5d37d3f090 R08: 0000000000000000 R09: 0000000000000000 [ 478.489031][T17386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.489086][T17386] R13: 00007f5d39566038 R14: 00007f5d39565fa0 R15: 00007ffcdaa4e0b8 [ 478.489114][T17386] [ 478.707370][T17392] loop6: detected capacity change from 0 to 512 [ 478.728177][T17392] vfat: Unknown parameter '' [ 478.738466][T17392] loop6: detected capacity change from 0 to 512 [ 478.809210][T17398] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4324'. [ 478.844747][T17400] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4325'. [ 479.113199][T17418] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4333'. [ 479.122409][T17418] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4333'. [ 479.333898][T17438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4340'. [ 479.378707][T17442] loop7: detected capacity change from 0 to 512 [ 479.406956][T17442] EXT4-fs: Ignoring removed nobh option [ 479.469626][T17442] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.523141][T17442] ext4 filesystem being mounted at /400/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 479.598674][T17442] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.4342: iget: bad i_size value: 2533274857506816 [ 479.616315][T17442] netlink: 'syz.7.4342': attribute type 1 has an invalid length. [ 479.660967][T17442] netlink: 'syz.7.4342': attribute type 2 has an invalid length. [ 479.681528][T17442] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4342'. [ 479.696525][T17461] bond3: option arp_all_targets: invalid value (262144) [ 479.713355][T17459] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25883 sclass=netlink_xfrm_socket pid=17459 comm=syz.4.4345 [ 479.732545][T17461] bond3 (unregistering): Released all slaves [ 479.832140][T11030] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.843839][T17467] loop5: detected capacity change from 0 to 512 [ 479.863290][T17467] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 479.889058][T17469] loop7: detected capacity change from 0 to 1764 [ 479.898379][T17467] EXT4-fs (loop5): 1 truncate cleaned up [ 479.904502][T17467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.020835][T17473] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4352'. [ 480.056897][T17473] syzkaller0: entered promiscuous mode [ 480.075650][T14368] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.094880][T17473] syzkaller0: entered allmulticast mode [ 480.123240][T17474] 0: reclassify loop, rule prio 0, protocol 800 [ 480.214366][T17476] loop5: detected capacity change from 0 to 1024 [ 480.398884][T17490] loop5: detected capacity change from 0 to 128 [ 480.469708][T17491] loop7: detected capacity change from 0 to 256 [ 480.551514][T17490] hsr_slave_0: left promiscuous mode [ 480.581172][T17490] hsr_slave_1: left promiscuous mode [ 480.641011][T17491] FAT-fs (loop7): Directory bread(block 64) failed [ 480.647686][T17491] FAT-fs (loop7): Directory bread(block 65) failed [ 480.654479][T17491] FAT-fs (loop7): Directory bread(block 66) failed [ 480.661205][T17491] FAT-fs (loop7): Directory bread(block 67) failed [ 480.668268][T17491] FAT-fs (loop7): Directory bread(block 68) failed [ 480.675055][T17491] FAT-fs (loop7): Directory bread(block 69) failed [ 480.681781][T17491] FAT-fs (loop7): Directory bread(block 70) failed [ 480.689088][T17491] FAT-fs (loop7): Directory bread(block 71) failed [ 480.695754][T17491] FAT-fs (loop7): Directory bread(block 72) failed [ 480.702627][T17491] FAT-fs (loop7): Directory bread(block 73) failed [ 482.720079][ T7865] bio_check_eod: 148 callbacks suppressed [ 482.720095][ T7865] kworker/u8:11: attempt to access beyond end of device [ 482.720095][ T7865] loop7: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 482.760906][ T7865] kworker/u8:11: attempt to access beyond end of device [ 482.760906][ T7865] loop7: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 482.789442][T17505] loop5: detected capacity change from 0 to 1764 [ 482.800639][ T7865] kworker/u8:11: attempt to access beyond end of device [ 482.800639][ T7865] loop7: rw=1, sector=1960, nr_sectors = 4088 limit=256 [ 482.870449][ T7865] kworker/u8:11: attempt to access beyond end of device [ 482.870449][ T7865] loop7: rw=1, sector=6048, nr_sectors = 4112 limit=256 [ 482.936763][ T7865] kworker/u8:11: attempt to access beyond end of device [ 482.936763][ T7865] loop7: rw=1, sector=10160, nr_sectors = 4088 limit=256 [ 482.975065][T17514] __nla_validate_parse: 3 callbacks suppressed [ 482.975081][T17514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4367'. [ 482.987339][ T7865] kworker/u8:11: attempt to access beyond end of device [ 482.987339][ T7865] loop7: rw=1, sector=14248, nr_sectors = 5776 limit=256 [ 483.042752][ T7865] kworker/u8:11: attempt to access beyond end of device [ 483.042752][ T7865] loop7: rw=1, sector=20024, nr_sectors = 4208 limit=256 [ 483.084209][ T7865] kworker/u8:11: attempt to access beyond end of device [ 483.084209][ T7865] loop7: rw=1, sector=24264, nr_sectors = 32 limit=256 [ 483.121476][ T7865] kworker/u8:11: attempt to access beyond end of device [ 483.121476][ T7865] loop7: rw=1, sector=24328, nr_sectors = 32 limit=256 [ 483.145364][ T7865] kworker/u8:11: attempt to access beyond end of device [ 483.145364][ T7865] loop7: rw=1, sector=24392, nr_sectors = 32 limit=256 [ 483.183033][T17521] syzkaller0: entered promiscuous mode [ 483.201248][T17521] syzkaller0: entered allmulticast mode [ 483.297455][T17519] random: crng reseeded on system resumption [ 483.528952][T17537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4375'. [ 483.557219][T17537] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 483.606189][T17542] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 483.622679][T17537] bond1 (unregistering): Released all slaves [ 483.789149][T17549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 483.858534][T17555] syzkaller0: entered promiscuous mode [ 483.864139][T17555] syzkaller0: entered allmulticast mode [ 483.873178][T17559] netlink: 182 bytes leftover after parsing attributes in process `syz.4.4383'. [ 483.983073][T17565] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4385'. [ 484.081134][T17570] geneve2: entered promiscuous mode [ 484.100473][T17570] geneve2: entered allmulticast mode [ 484.119301][ T50] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 484.127791][ T50] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 484.137758][ T50] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 484.157906][ T50] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 484.303753][T17579] loop7: detected capacity change from 0 to 512 [ 484.315452][T17579] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 484.342304][T17579] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4391'. [ 484.358148][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4377'. [ 484.369807][T17579] netlink: 35 bytes leftover after parsing attributes in process `syz.7.4391'. [ 484.379557][T17579] netlink: 'syz.7.4391': attribute type 5 has an invalid length. [ 484.394612][T17542] bond1: entered promiscuous mode [ 484.399999][T17542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 484.406918][T17579] netlink: 'syz.7.4391': attribute type 6 has an invalid length. [ 484.414662][T17579] netlink: 35 bytes leftover after parsing attributes in process `syz.7.4391'. [ 484.430385][T17545] bridge2: entered promiscuous mode [ 484.445954][T17545] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 484.476831][T17586] bridge0: entered promiscuous mode [ 484.483737][T17586] bridge0: port 3(macsec1) entered blocking state [ 484.490644][T17586] bridge0: port 3(macsec1) entered disabled state [ 484.497420][T17586] macsec1: entered allmulticast mode [ 484.502892][T17586] bridge0: entered allmulticast mode [ 484.509284][T17586] macsec1: left allmulticast mode [ 484.514460][T17586] bridge0: left allmulticast mode [ 484.520848][T17586] bridge0: left promiscuous mode [ 484.535287][T17542] bond_slave_0: entered promiscuous mode [ 484.541007][T17542] bond_slave_1: entered promiscuous mode [ 484.548305][T17542] vlan0: entered promiscuous mode [ 484.553460][T17542] bond0: entered promiscuous mode [ 484.562538][T17542] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 485.545319][T17601] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4399'. [ 485.915380][T17607] syzkaller0: entered promiscuous mode [ 485.992886][T17612] loop4: detected capacity change from 0 to 512 [ 486.000182][T17607] syzkaller0: entered allmulticast mode [ 486.036598][T17612] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 486.057286][T17612] EXT4-fs error (device loop4): __ext4_fill_super:5563: inode #2: comm syz.4.4401: iget: special inode unallocated [ 486.069743][T17612] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 486.070023][T17612] EXT4-fs (loop4): get root inode failed [ 486.079132][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 486.079160][ C0] EXT4-fs (loop4): initial error at time 1772330176: __ext4_fill_super:5563: inode 2 [ 486.079192][ C0] EXT4-fs (loop4): last error at time 1772330176: __ext4_fill_super:5563: inode 2 [ 486.136394][T17612] EXT4-fs (loop4): mount failed [ 486.759126][T17637] syzkaller0: entered promiscuous mode [ 486.774870][T17637] syzkaller0: entered allmulticast mode [ 487.143079][T17649] xt_hashlimit: size too large, truncated to 1048576 [ 487.648914][T17659] syzkaller0: entered promiscuous mode [ 487.654831][T17659] syzkaller0: entered allmulticast mode [ 487.753818][T17671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.763553][T17671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.776358][T17671] vlan0: entered promiscuous mode [ 488.888035][T17695] loop4: detected capacity change from 0 to 512 [ 488.928180][T17695] EXT4-fs: Ignoring removed nobh option [ 489.020479][T17695] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 489.031518][T17703] ip6gre2: entered promiscuous mode [ 489.036297][T17695] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4429: invalid indirect mapped block 256 (level 1) [ 489.037186][T17703] ip6gre2: entered allmulticast mode [ 489.063448][T17695] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 489.063680][T17695] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4429: invalid indirect mapped block 2683928664 (level 1) [ 489.072896][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 489.072920][ C0] EXT4-fs (loop4): initial error at time 1772330179: ext4_free_branches:1023: inode 13 [ 489.072980][ C0] EXT4-fs (loop4): last error at time 1772330179: ext4_free_branches:1023: inode 13 [ 489.128938][T17695] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 489.129251][T17695] EXT4-fs (loop4): 1 truncate cleaned up [ 489.144660][T17695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.192166][T17695] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.4429: Invalid block bitmap block 3 in block_group 0 [ 489.237164][T17695] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 489.278417][T17695] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4429: invalid indirect mapped block 1536 (level 1) [ 489.313095][T17726] FAULT_INJECTION: forcing a failure. [ 489.313095][T17726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.364352][T17726] CPU: 0 UID: 0 PID: 17726 Comm: syz.6.4439 Tainted: G W syzkaller #0 PREEMPT(full) [ 489.364394][T17726] Tainted: [W]=WARN [ 489.364466][T17726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.364479][T17726] Call Trace: [ 489.364486][T17726] [ 489.364496][T17726] __dump_stack+0x1d/0x30 [ 489.364536][T17726] dump_stack_lvl+0x95/0xd0 [ 489.364560][T17726] dump_stack+0x15/0x1b [ 489.364584][T17726] should_fail_ex+0x263/0x280 [ 489.364614][T17726] should_fail+0xb/0x20 [ 489.364639][T17726] should_fail_usercopy+0x1a/0x20 [ 489.364711][T17726] _copy_from_user+0x1c/0xb0 [ 489.364738][T17726] get_user_ifreq+0x52/0x110 [ 489.364817][T17726] bt_sock_ioctl+0xa2/0x580 [ 489.364936][T17726] sock_do_ioctl+0x73/0x230 [ 489.364994][T17726] sock_ioctl+0x41b/0x610 [ 489.365031][T17726] ? mutex_lock+0x57/0x90 [ 489.365064][T17726] ? __pfx_sock_ioctl+0x10/0x10 [ 489.365219][T17726] __se_sys_ioctl+0xce/0x140 [ 489.365259][T17726] __x64_sys_ioctl+0x43/0x50 [ 489.365310][T17726] x64_sys_call+0x1563/0x3020 [ 489.365347][T17726] do_syscall_64+0x12c/0x370 [ 489.365374][T17726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.365403][T17726] RIP: 0033:0x7f6a243cc799 [ 489.365465][T17726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.365490][T17726] RSP: 002b:00007f6a22e1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.365516][T17726] RAX: ffffffffffffffda RBX: 00007f6a24645fa0 RCX: 00007f6a243cc799 [ 489.365565][T17726] RDX: 0000000000000000 RSI: 0000000000008946 RDI: 0000000000000004 [ 489.365578][T17726] RBP: 00007f6a22e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 489.365591][T17726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.365677][T17726] R13: 00007f6a24646038 R14: 00007f6a24645fa0 R15: 00007ffc695d61d8 [ 489.365716][T17726] [ 489.662278][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 489.662299][ T28] audit: type=1400 audit(1772330180.129:9581): avc: denied { read } for pid=17735 comm="syz.7.4444" name="file0" dev="tmpfs" ino=2257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 489.696489][T17738] netlink: 'syz.7.4445': attribute type 1 has an invalid length. [ 489.709231][T17738] netlink: 'syz.7.4445': attribute type 4 has an invalid length. [ 489.718027][T13251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.727214][T17738] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.4445'. [ 490.086975][T17752] loop6: detected capacity change from 0 to 1024 [ 490.093701][T17752] EXT4-fs: inline encryption not supported [ 490.099804][T17752] EXT4-fs: Ignoring removed bh option [ 490.152361][T17754] tipc: Failed to obtain node identity [ 490.181073][T17754] tipc: Enabling of bearer rejected, failed to enable media [ 490.194027][T17752] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.210298][T17752] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4447'. [ 490.219511][T17752] netlink: 'syz.6.4447': attribute type 1 has an invalid length. [ 490.227312][T17752] netlink: 'syz.6.4447': attribute type 2 has an invalid length. [ 490.235226][T17752] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4447'. [ 490.259104][ T28] audit: type=1400 audit(1772330180.739:9582): avc: denied { write } for pid=17741 comm="syz.6.4447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 490.377936][T17760] syzkaller0: entered promiscuous mode [ 490.383690][T17760] syzkaller0: entered allmulticast mode [ 490.535182][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4453'. [ 490.685339][T17776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4457'. [ 490.781505][T15929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.860452][T17764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4451'. [ 491.844038][T17804] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4464'. [ 492.588306][T17811] geneve2: entered promiscuous mode [ 493.526701][ T36] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 493.543223][ T50] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 493.561866][ T50] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 494.599589][T17813] loop5: detected capacity change from 0 to 1024 [ 494.606295][T17813] EXT4-fs: inline encryption not supported [ 494.987518][ T36] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 495.038184][T17813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.247952][T14368] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.408001][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4481'. [ 495.504032][T17854] vlan2: entered promiscuous mode [ 495.968678][T17894] ip6gre4: entered promiscuous mode [ 496.004339][T17894] ip6gre4: entered allmulticast mode [ 496.165568][T17909] loop5: detected capacity change from 0 to 512 [ 496.173578][T17910] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4500'. [ 496.223016][T17912] FAULT_INJECTION: forcing a failure. [ 496.223016][T17912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.248749][T17909] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #11: block 10: comm syz.5.4501: lblock 0 mapped to illegal pblock 10 (length 1) [ 496.289110][T17910] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 496.309711][T17912] CPU: 0 UID: 0 PID: 17912 Comm: syz.6.4502 Tainted: G W syzkaller #0 PREEMPT(full) [ 496.309753][T17912] Tainted: [W]=WARN [ 496.309780][T17912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.309795][T17912] Call Trace: [ 496.309802][T17912] [ 496.309810][T17912] __dump_stack+0x1d/0x30 [ 496.309882][T17912] dump_stack_lvl+0x95/0xd0 [ 496.309905][T17912] dump_stack+0x15/0x1b [ 496.309926][T17912] should_fail_ex+0x263/0x280 [ 496.309963][T17912] should_fail+0xb/0x20 [ 496.309984][T17912] should_fail_usercopy+0x1a/0x20 [ 496.310015][T17912] _copy_to_user+0x20/0xa0 [ 496.310091][T17912] simple_read_from_buffer+0xb5/0x130 [ 496.310113][T17912] proc_fail_nth_read+0x10e/0x150 [ 496.310143][T17912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 496.310182][T17912] vfs_read+0x1ab/0x7f0 [ 496.310224][T17912] ? __rcu_read_unlock+0x4e/0x70 [ 496.310248][T17912] ? __fget_files+0x184/0x1c0 [ 496.310306][T17912] ? mutex_lock+0x57/0x90 [ 496.310334][T17912] ksys_read+0xdc/0x1a0 [ 496.310372][T17912] __x64_sys_read+0x40/0x50 [ 496.310503][T17912] x64_sys_call+0x2886/0x3020 [ 496.310549][T17912] do_syscall_64+0x12c/0x370 [ 496.310651][T17912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.310677][T17912] RIP: 0033:0x7f6a2438cfce [ 496.310692][T17912] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 496.310710][T17912] RSP: 002b:00007f6a22e1efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 496.310788][T17912] RAX: ffffffffffffffda RBX: 00007f6a22e1f6c0 RCX: 00007f6a2438cfce [ 496.310874][T17912] RDX: 000000000000000f RSI: 00007f6a22e1f0a0 RDI: 0000000000000003 [ 496.310886][T17912] RBP: 00007f6a22e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 496.310902][T17912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.310970][T17912] R13: 00007f6a24646038 R14: 00007f6a24645fa0 R15: 00007ffc695d61d8 [ 496.310989][T17912] [ 496.340784][T17909] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 496.517733][T17910] bond3 (unregistering): Released all slaves [ 496.525261][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 496.539350][ C1] EXT4-fs (loop5): initial error at time 1772330187: ext4_map_blocks:776: inode 11: block 10 [ 496.549600][ C1] EXT4-fs (loop5): last error at time 1772330187: ext4_map_blocks:776: inode 11: block 10 [ 496.559649][T17909] EXT4-fs (loop5): Remounting filesystem read-only [ 496.566900][T17909] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 496.577258][T17909] EXT4-fs (loop5): 1 orphan inode deleted [ 496.583387][T17909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.609207][T14368] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.801583][T17939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4512'. [ 496.921885][T17946] loop5: detected capacity change from 0 to 256 [ 497.070392][T17946] FAT-fs (loop5): Directory bread(block 64) failed [ 497.077187][T17946] FAT-fs (loop5): Directory bread(block 65) failed [ 497.083996][T17946] FAT-fs (loop5): Directory bread(block 66) failed [ 497.090700][T17946] FAT-fs (loop5): Directory bread(block 67) failed [ 497.097431][T17946] FAT-fs (loop5): Directory bread(block 68) failed [ 497.104185][T17946] FAT-fs (loop5): Directory bread(block 69) failed [ 497.110909][T17946] FAT-fs (loop5): Directory bread(block 70) failed [ 497.117659][T17946] FAT-fs (loop5): Directory bread(block 71) failed [ 497.124384][T17946] FAT-fs (loop5): Directory bread(block 72) failed [ 497.130965][T17946] FAT-fs (loop5): Directory bread(block 73) failed [ 499.110184][ T3750] hid_parser_main: 2583 callbacks suppressed [ 499.110206][ T3750] hid-generic 0009:0800:0004.0002: unknown main item tag 0x0 [ 499.197576][ T50] bio_check_eod: 145 callbacks suppressed [ 499.197602][ T50] kworker/u8:3: attempt to access beyond end of device [ 499.197602][ T50] loop5: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 499.482753][ T50] kworker/u8:3: attempt to access beyond end of device [ 499.482753][ T50] loop5: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 499.606306][ T50] kworker/u8:3: attempt to access beyond end of device [ 499.606306][ T50] loop5: rw=1, sector=1960, nr_sectors = 2432 limit=256 [ 499.678518][ T50] kworker/u8:3: attempt to access beyond end of device [ 499.678518][ T50] loop5: rw=1, sector=4392, nr_sectors = 2048 limit=256 [ 499.695612][ T3750] hid-generic 0009:0800:0004.0002: unknown main item tag 0x0 [ 499.703099][ T3750] hid-generic 0009:0800:0004.0002: unknown main item tag 0x0 [ 499.710692][ T3750] hid-generic 0009:0800:0004.0002: unknown main item tag 0x0 [ 499.719617][ T3750] hid-generic 0009:0800:0004.0002: unknown main item tag 0x0 [ 499.723529][T17971] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4524'. [ 499.727078][ T3750] hid-generic 0009:0800:0004.0002: unknown main item tag 0x0 [ 499.743451][ T3750] hid-generic 0009:0800:0004.0002: unknown main item tag 0x0 [ 499.753689][T17973] 9p: Bad value for 'wfdno' [ 499.759447][ T50] kworker/u8:3: attempt to access beyond end of device [ 499.759447][ T50] loop5: rw=1, sector=6440, nr_sectors = 2056 limit=256 [ 499.797902][ T3750] hid-generic 0009:0800:0004.0002: unknown main item tag 0x0 [ 499.823565][ T50] kworker/u8:3: attempt to access beyond end of device [ 499.823565][ T50] loop5: rw=1, sector=8496, nr_sectors = 2072 limit=256 [ 499.842768][ T50] kworker/u8:3: attempt to access beyond end of device [ 499.842768][ T50] loop5: rw=1, sector=10568, nr_sectors = 3080 limit=256 [ 499.860855][ T50] kworker/u8:3: attempt to access beyond end of device [ 499.860855][ T50] loop5: rw=1, sector=13648, nr_sectors = 2056 limit=256 [ 499.877827][ T50] kworker/u8:3: attempt to access beyond end of device [ 499.877827][ T50] loop5: rw=1, sector=15704, nr_sectors = 2048 limit=256 [ 499.927612][ T50] kworker/u8:3: attempt to access beyond end of device [ 499.927612][ T50] loop5: rw=1, sector=17752, nr_sectors = 2048 limit=256 [ 499.950169][ T3750] hid-generic 0009:0800:0004.0002: unknown main item tag 0x0 [ 499.958011][ T3750] hid-generic 0009:0800:0004.0002: unknown main item tag 0x0 [ 499.973575][ T3750] hid-generic 0009:0800:0004.0002: hidraw0: HID v0.02 Device [syz0] on syz1 [ 500.014701][T17988] fido_id[17988]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 500.211504][T17994] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4531'. [ 500.628937][T18003] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4533'. [ 500.675586][T18007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4534'. [ 500.763055][T18009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4535'. [ 501.405790][T18037] team0: Device macvtap0 is already an upper device of the team interface [ 501.469705][T18044] syzkaller1: entered promiscuous mode [ 501.475533][T18044] syzkaller1: entered allmulticast mode [ 501.602676][T18054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4552'. [ 501.700176][T18054] vlan2: entered promiscuous mode [ 501.753171][T18057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4553'. [ 501.762606][T18057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4553'. [ 502.070474][T18077] loop4: detected capacity change from 0 to 736 [ 502.177163][T18082] loop5: detected capacity change from 0 to 512 [ 502.295988][T18082] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 502.320202][T18082] EXT4-fs (loop5): orphan cleanup on readonly fs [ 502.386165][T18082] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 502.484985][T18082] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 502.580110][T18082] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4562: Corrupt directory, running e2fsck is recommended [ 502.648954][T18092] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 502.695909][T18082] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 502.771484][T18082] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.4562: corrupted in-inode xattr: e_name out of bounds [ 502.871290][T18082] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 502.871512][T18082] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4562: couldn't read orphan inode 15 (err -117) [ 502.880732][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 502.880761][ C1] EXT4-fs (loop5): initial error at time 1772330193: ext4_iget_extra_inode:5025: inode 15 [ 502.880801][ C1] EXT4-fs (loop5): last error at time 1772330193: ext4_iget_extra_inode:5025: inode 15 [ 503.029885][T18082] loop5: lost filesystem error report for type 5 error -117 [ 503.030511][T18082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 503.138071][T14368] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.159684][T18117] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4571'. [ 503.169064][T18117] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4571'. [ 503.230644][T18121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4570'. [ 503.281295][T18121] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 503.304962][T18121] bond1 (unregistering): Released all slaves [ 503.728448][T18136] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 503.791791][T18141] netlink: 182 bytes leftover after parsing attributes in process `syz.6.4578'. [ 503.903733][T18145] vlan0: entered promiscuous mode [ 503.954855][T18147] loop4: detected capacity change from 0 to 4096 [ 503.975516][T18151] loop6: detected capacity change from 0 to 512 [ 503.982327][T18151] EXT4-fs: Invalid commit interval -1, must be smaller than 21474836 [ 503.994033][ T28] audit: type=1400 audit(1772330194.489:9583): avc: denied { connect } for pid=18150 comm="syz.6.4583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 504.025776][T18147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.055304][ T28] audit: type=1400 audit(1772330194.539:9584): avc: denied { write } for pid=18150 comm="syz.6.4583" path="socket:[67625]" dev="sockfs" ino=67625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 504.621459][T18174] ip6tnl3: entered allmulticast mode [ 504.691810][T18176] syzkaller0: entered promiscuous mode [ 504.706474][T18176] syzkaller0: entered allmulticast mode [ 504.773420][T13251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.650556][T18206] __nla_validate_parse: 4 callbacks suppressed [ 505.650985][T18206] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4601'. [ 505.889781][T18216] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4605'. [ 506.098477][T18212] team_slave_0: entered promiscuous mode [ 506.104285][T18212] team_slave_1: entered promiscuous mode [ 506.124625][T18212] macsec1: entered promiscuous mode [ 506.140355][T18212] team0: entered promiscuous mode [ 506.151689][T18212] macsec1: entered allmulticast mode [ 506.164014][T18212] team0: entered allmulticast mode [ 506.177705][T18212] team_slave_0: entered allmulticast mode [ 506.190711][T18212] team_slave_1: entered allmulticast mode [ 506.206007][T18212] team0: Device macsec1 is already an upper device of the team interface [ 506.230645][T18212] team0: left allmulticast mode [ 506.239951][T18212] team_slave_0: left allmulticast mode [ 506.252306][T18212] team_slave_1: left allmulticast mode [ 506.263976][T18212] team0: left promiscuous mode [ 506.274316][T18212] team_slave_0: left promiscuous mode [ 506.279881][T18212] team_slave_1: left promiscuous mode [ 506.308058][T18213] team0: entered promiscuous mode [ 506.314358][T18213] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 506.515091][T18233] loop6: detected capacity change from 0 to 1764 [ 506.595911][T18239] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4611'. [ 506.868144][T18249] bond3: entered allmulticast mode [ 506.877350][T18252] bridge1: entered promiscuous mode [ 506.882976][T18252] bridge1: entered allmulticast mode [ 507.101863][T18275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4625'. [ 507.117613][T18275] vlan0: entered promiscuous mode [ 509.366735][T18289] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.4626'. [ 509.472748][T18295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9488 sclass=netlink_route_socket pid=18295 comm=syz.6.4629 [ 509.557662][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4629'. [ 509.666103][T18323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4640'. [ 509.690651][T18323] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 509.703498][T18323] bond1 (unregistering): Released all slaves [ 509.718903][T18327] ipvlan1: entered promiscuous mode [ 509.724455][T18327] ipvlan1: entered allmulticast mode [ 509.730265][T18327] veth0_vlan: entered allmulticast mode [ 509.838995][T18342] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.4644'. [ 509.901770][T18348] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25883 sclass=netlink_xfrm_socket pid=18348 comm=syz.4.4646 [ 510.062639][ T28] audit: type=1400 audit(1772330200.549:9585): avc: denied { getopt } for pid=18343 comm="syz.5.4647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 510.107349][T18373] loop4: detected capacity change from 0 to 128 [ 512.089258][T18382] SET target dimension over the limit! [ 512.185970][T18381] netlink: 182 bytes leftover after parsing attributes in process `syz.4.4654'. [ 513.043599][T18382] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4657'. [ 513.122408][T18382] netlink: 260 bytes leftover after parsing attributes in process `syz.6.4657'. [ 513.155990][T18402] vlan2: entered promiscuous mode [ 513.271005][T18408] syzkaller0: entered promiscuous mode [ 513.285371][T18408] syzkaller0: entered allmulticast mode [ 513.300581][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4661'. [ 513.312931][T18410] ÿÿÿÿÿÿ: renamed from vlan0 (while UP) [ 513.363155][T18410] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4666'. [ 513.440395][ T28] audit: type=1400 audit(1772330203.919:9586): avc: denied { map } for pid=18417 comm="syz.5.4670" path="socket:[67954]" dev="sockfs" ino=67954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 513.679683][T18442] syzkaller0: entered promiscuous mode [ 513.691617][T18442] syzkaller0: entered allmulticast mode [ 513.949306][T18476] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4690'. [ 514.458924][T18483] loop4: detected capacity change from 0 to 256 [ 515.014029][T18483] FAT-fs (loop4): Directory bread(block 64) failed [ 515.020649][T18483] FAT-fs (loop4): Directory bread(block 65) failed [ 515.027283][T18483] FAT-fs (loop4): Directory bread(block 66) failed [ 515.033882][T18483] FAT-fs (loop4): Directory bread(block 67) failed [ 515.040492][T18483] FAT-fs (loop4): Directory bread(block 68) failed [ 515.047081][T18483] FAT-fs (loop4): Directory bread(block 69) failed [ 515.053805][T18483] FAT-fs (loop4): Directory bread(block 70) failed [ 515.060446][T18483] FAT-fs (loop4): Directory bread(block 71) failed [ 515.067125][T18483] FAT-fs (loop4): Directory bread(block 72) failed [ 515.073791][T18483] FAT-fs (loop4): Directory bread(block 73) failed [ 516.973782][T11243] bio_check_eod: 173 callbacks suppressed [ 516.973803][T11243] kworker/u8:13: attempt to access beyond end of device [ 516.973803][T11243] loop4: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 516.997165][T11243] kworker/u8:13: attempt to access beyond end of device [ 516.997165][T11243] loop4: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 517.026906][T11243] kworker/u8:13: attempt to access beyond end of device [ 517.026906][T11243] loop4: rw=1, sector=1960, nr_sectors = 2056 limit=256 [ 517.098566][T18525] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4704'. [ 517.100405][T11243] kworker/u8:13: attempt to access beyond end of device [ 517.100405][T11243] loop4: rw=1, sector=4016, nr_sectors = 4096 limit=256 [ 517.133271][T18525] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 517.140728][T11243] kworker/u8:13: attempt to access beyond end of device [ 517.140728][T11243] loop4: rw=1, sector=8112, nr_sectors = 7552 limit=256 [ 517.171217][T11243] kworker/u8:13: attempt to access beyond end of device [ 517.171217][T11243] loop4: rw=1, sector=15664, nr_sectors = 8568 limit=256 [ 517.190572][T11243] kworker/u8:13: attempt to access beyond end of device [ 517.190572][T11243] loop4: rw=1, sector=24264, nr_sectors = 32 limit=256 [ 517.205948][T11243] kworker/u8:13: attempt to access beyond end of device [ 517.205948][T11243] loop4: rw=1, sector=24328, nr_sectors = 32 limit=256 [ 517.219884][T11243] kworker/u8:13: attempt to access beyond end of device [ 517.219884][T11243] loop4: rw=1, sector=24392, nr_sectors = 32 limit=256 [ 517.233947][T11243] kworker/u8:13: attempt to access beyond end of device [ 517.233947][T11243] loop4: rw=1, sector=24456, nr_sectors = 32 limit=256 [ 517.315661][T18525] bond2 (unregistering): Released all slaves [ 517.640907][T18536] loop5: detected capacity change from 0 to 8192 [ 517.658822][T18554] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 517.685669][ T3308] loop5: p1 p2 p3 p4[DM] [ 517.692897][ T3308] loop5: p1 size 835329 extends beyond EOD, truncated [ 517.708847][ T3308] loop5: p3 start 134217728 is beyond EOD, truncated [ 517.725370][ T3308] loop5: p4 size 262144 extends beyond EOD, truncated [ 517.743484][T18536] loop5: p1 p2 p3 p4[DM] [ 517.748108][T18536] loop5: p1 size 835329 extends beyond EOD, truncated [ 517.756219][T18536] loop5: p3 start 134217728 is beyond EOD, truncated [ 517.763074][T18536] loop5: p4 size 262144 extends beyond EOD, truncated [ 517.777580][ T3001] loop5: p1 p2 p3 p4[DM] [ 517.786448][ T3001] loop5: p1 size 835329 extends beyond EOD, truncated [ 517.798072][ T3001] loop5: p3 start 134217728 is beyond EOD, truncated [ 517.810311][ T3001] loop5: p4 size 262144 extends beyond EOD, truncated [ 518.125967][T18600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4724'. [ 518.146781][T18600] netlink: 'syz.0.4724': attribute type 1 has an invalid length. [ 518.188451][T18600] bond1: (slave geneve2): making interface the new active one [ 518.200744][T18602] loop6: detected capacity change from 0 to 8192 [ 518.208524][T18600] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 518.221200][T18602] msdos: Unknown parameter 'noLots' [ 518.228127][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 518.244605][ T28] audit: type=1326 audit(1772330208.729:9587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4d1c799 code=0x7ffc0000 [ 518.272652][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 518.395729][T18600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4724'. [ 518.428702][T18600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 518.451691][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 518.467024][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 518.479074][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 518.486086][ T28] audit: type=1326 audit(1772330208.729:9588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f68e4d1c799 code=0x7ffc0000 [ 518.499676][ T3570] udevd[3570]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 518.513528][ T28] audit: type=1326 audit(1772330208.729:9589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4d1c799 code=0x7ffc0000 [ 518.532130][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 518.546182][ T28] audit: type=1326 audit(1772330208.729:9590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68e4d1c799 code=0x7ffc0000 [ 518.598529][ T28] audit: type=1326 audit(1772330208.729:9591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4d1c799 code=0x7ffc0000 [ 518.672446][T18616] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4728'. [ 518.675116][ T28] audit: type=1326 audit(1772330208.729:9592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f68e4cdcfce code=0x7ffc0000 [ 518.724138][ T28] audit: type=1326 audit(1772330208.729:9593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f68e4cdcfce code=0x7ffc0000 [ 518.749624][ T28] audit: type=1326 audit(1772330208.729:9594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f68e4cdcfce code=0x7ffc0000 [ 518.774100][ T28] audit: type=1326 audit(1772330208.729:9595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4d1c799 code=0x7ffc0000 [ 518.798033][ T28] audit: type=1326 audit(1772330208.729:9596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f68e4d1c799 code=0x7ffc0000 [ 519.030920][T18639] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4737'. [ 519.044133][T18627] siw: device registration error -23 [ 519.394486][T18658] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4743'. [ 519.433843][T18672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4746'. [ 519.469020][T18674] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4747'. [ 519.512056][T18677] netlink: 'syz.4.4748': attribute type 20 has an invalid length. [ 519.520574][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4748'. [ 519.770511][T18714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4760'. [ 519.816216][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4762'. [ 519.958332][T18733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.979555][T18733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.000893][T18733] dummy0: entered promiscuous mode [ 520.006571][T18733] vlan2: entered promiscuous mode [ 520.151463][T18747] loop6: detected capacity change from 0 to 1764 [ 520.371879][T18774] vlan2: entered promiscuous mode [ 520.467465][T18776] loop6: detected capacity change from 0 to 8192 [ 520.476530][T18776] vfat: Unknown parameter '0x00000000000000060000000000000000000002000000000000000000000011' [ 520.581503][T18785] netlink: 'syz.7.4782': attribute type 1 has an invalid length. [ 520.598465][T18785] netlink: 'syz.7.4782': attribute type 21 has an invalid length. [ 520.730981][T18792] netlink: 'syz.5.4785': attribute type 4 has an invalid length. [ 520.744689][T18792] loop5: detected capacity change from 0 to 512 [ 520.791942][T18792] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 520.816183][T18792] EXT4-fs (loop5): orphan cleanup on readonly fs [ 520.834184][T18792] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 520.884792][T18792] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 521.015117][T18792] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.4785: corrupted inode contents [ 521.052349][T18792] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 521.053411][T18792] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #16: comm syz.5.4785: mark_inode_dirty error [ 521.062659][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 521.062677][ C1] EXT4-fs (loop5): initial error at time 1772330211: ext4_do_update_inode:5569: inode 16 [ 521.062703][ C1] EXT4-fs (loop5): last error at time 1772330211: ext4_do_update_inode:5569: inode 16 [ 521.101217][T18792] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 521.101821][T18792] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.4785: corrupted inode contents [ 521.135232][T18792] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 521.135775][T18792] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.4785: mark_inode_dirty error [ 521.162761][T18792] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 521.166657][T18792] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.4785: corrupted inode contents [ 521.197141][T18792] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 521.197516][T18792] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 521.236689][T18792] loop5: lost filesystem error report for type 5 error -117 [ 521.238043][T18792] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.4785: corrupted inode contents [ 521.257553][T18792] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 521.258390][T18792] EXT4-fs error (device loop5): ext4_truncate:4587: inode #16: comm syz.5.4785: mark_inode_dirty error [ 521.280738][T18792] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 521.281250][T18792] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 521.301907][T18792] loop5: lost filesystem error report for type 5 error -117 [ 521.406494][T18792] EXT4-fs (loop5): 1 truncate cleaned up [ 521.507656][T18792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 521.658062][T14368] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 522.142424][T18833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.180352][T18901] __nla_validate_parse: 10 callbacks suppressed [ 523.180370][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4817'. [ 523.247997][T18909] loop5: detected capacity change from 0 to 512 [ 523.275608][T18909] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 523.323908][T18909] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.4821: Invalid inode bitmap blk 4 in block_group 0 [ 523.345319][T18909] loop5: lost filesystem error report for type 5 error -117 [ 523.348600][T18909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.444113][T14368] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.506432][T18901] loop4: detected capacity change from 0 to 512 [ 523.619314][T18922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.621639][T18901] EXT4-fs (loop4): 1 truncate cleaned up [ 523.770813][T18901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.962887][T18900] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4817: bg 0: block 465: padding at end of block bitmap is not set [ 524.393224][T13251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.516118][T18939] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4830'. [ 524.525385][T18939] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4830'. [ 524.597191][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 524.597207][ T28] audit: type=1400 audit(1772330215.089:9600): avc: denied { ioctl } for pid=18944 comm="syz.4.4832" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 524.646960][T18935] loop6: detected capacity change from 0 to 8192 [ 524.653833][T18935] msdos: Unknown parameter 'noLots' [ 525.093299][T18961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4836'. [ 525.213988][T18969] syzkaller1: entered promiscuous mode [ 525.221801][T18969] syzkaller1: entered allmulticast mode [ 525.399399][T18981] syz.6.4844 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 525.430760][T18981] 9pnet_fd: p9_fd_create_unix (18981): problem connecting socket: ./file0: -2 [ 525.522841][T18989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.780125][T18998] loop5: detected capacity change from 0 to 1764 [ 526.034266][T19013] loop4: detected capacity change from 0 to 512 [ 526.060388][T19013] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 526.096801][T19013] EXT4-fs (loop4): 1 truncate cleaned up [ 526.105592][T19013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.125397][ T28] audit: type=1400 audit(1772330216.619:9601): avc: denied { execute } for pid=19011 comm="syz.4.4852" path="/323/file2/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 526.231708][T19022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4855'. [ 526.279637][T19024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.288290][T19024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.292226][T19022] vlan2: entered promiscuous mode [ 526.545262][ T28] audit: type=1400 audit(1772330217.029:9602): avc: denied { read } for pid=19030 comm="syz.0.4859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 526.887110][T13251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.476734][T19055] 9pnet_fd: p9_fd_create_unix (19055): problem connecting socket: ./file0: -2 [ 527.701892][T19067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.183228][T19074] loop4: detected capacity change from 0 to 128 [ 528.445097][T19096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4879'. [ 528.472411][T19096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4879'. [ 528.489628][T19096] syzkaller0: entered promiscuous mode [ 528.498568][T19096] syzkaller0: entered allmulticast mode [ 528.506871][T19096] 0: reclassify loop, rule prio 0, protocol 800 [ 528.845711][T19123] loop4: detected capacity change from 0 to 1024 [ 528.852683][T19123] EXT4-fs: inline encryption not supported [ 528.871374][T19110] loop5: detected capacity change from 0 to 1024 [ 528.892726][ T28] audit: type=1400 audit(1772330219.329:9603): avc: denied { write } for pid=19117 comm="syz.4.4888" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 528.916845][T19123] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 528.932233][T19110] EXT4-fs: Ignoring removed nomblk_io_submit option [ 528.995252][T19123] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.4888: lblock 2 mapped to illegal pblock 2 (length 1) [ 529.009327][T19123] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 529.010738][T19123] EXT4-fs (loop4): Remounting filesystem read-only [ 529.019837][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 529.019862][ C1] EXT4-fs (loop4): initial error at time 1772330219: ext4_map_blocks:776: inode 3: block 2 [ 529.019918][ C1] EXT4-fs (loop4): last error at time 1772330219: ext4_map_blocks:776: inode 3: block 2 [ 529.053281][T19123] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 529.061520][T19123] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 529.070399][T19123] EXT4-fs (loop4): 1 orphan inode deleted [ 529.078729][T19123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.319514][T19110] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 529.718016][T19110] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 529.741358][T13251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.756501][T19110] System zones: 0-1, 3-36 [ 529.782448][T19132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.810051][T19110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.865996][T14368] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.939565][ T28] audit: type=1326 audit(1772330220.429:9604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19134 comm="syz.4.4892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b56f1c799 code=0x7ffc0000 [ 529.977158][ T28] audit: type=1326 audit(1772330220.429:9605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19134 comm="syz.4.4892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b56f1c799 code=0x7ffc0000 [ 530.043404][ T28] audit: type=1326 audit(1772330220.429:9606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19134 comm="syz.4.4892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f2b56f1c799 code=0x7ffc0000 [ 530.071580][ T28] audit: type=1326 audit(1772330220.429:9607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19134 comm="syz.4.4892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b56f1c799 code=0x7ffc0000 [ 530.103860][ T28] audit: type=1326 audit(1772330220.429:9608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19134 comm="syz.4.4892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b56f1c799 code=0x7ffc0000 [ 530.131937][ T28] audit: type=1326 audit(1772330220.429:9609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19134 comm="syz.4.4892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b56f1c799 code=0x7ffc0000 [ 530.215512][ T28] audit: type=1326 audit(1772330220.429:9610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19134 comm="syz.4.4892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b56f1c799 code=0x7ffc0000 [ 530.240383][ T28] audit: type=1326 audit(1772330220.429:9611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19134 comm="syz.4.4892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b56f1c799 code=0x7ffc0000 [ 530.264540][ T28] audit: type=1326 audit(1772330220.429:9612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19134 comm="syz.4.4892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b56f1c799 code=0x7ffc0000 [ 530.752158][T19157] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4898'. [ 530.828795][ T28] audit: type=1326 audit(1772330220.429:9613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19134 comm="syz.4.4892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b56f1c799 code=0x7ffc0000 [ 530.976378][T19162] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1543 sclass=netlink_tcpdiag_socket pid=19162 comm=syz.5.4900 [ 532.049702][T19186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.128048][T19196] loop5: detected capacity change from 0 to 1764 [ 532.196896][T19203] loop5: detected capacity change from 0 to 512 [ 532.232502][T19205] loop4: detected capacity change from 0 to 512 [ 532.328977][T19205] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 532.340792][T19205] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 532.351436][T19205] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4917: Corrupt directory, running e2fsck is recommended [ 532.364871][T19203] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 532.406972][T19205] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 532.415634][T19205] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.4917: corrupted in-inode xattr: invalid ea_ino [ 532.419366][T19203] EXT4-fs (loop5): mount failed [ 532.429861][T19205] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 532.435171][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 532.451039][ C1] EXT4-fs (loop4): initial error at time 1772330222: ext4_iget_extra_inode:5025: inode 15 [ 532.455715][T19205] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4917: couldn't read orphan inode 15 (err -117) [ 532.461030][ C1] EXT4-fs (loop4): last error at time 1772330222: ext4_iget_extra_inode:5025: inode 15 [ 532.473943][T19205] loop4: lost filesystem error report for type 5 error -117 [ 532.488655][T19205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.533742][T13251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.981334][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4928'. [ 533.047338][T19246] sctp: [Deprecated]: syz.7.4930 (pid 19246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 533.047338][T19246] Use struct sctp_sack_info instead [ 533.225598][T19256] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.4934'. [ 533.251324][T19258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 533.596237][T19265] ip6gre3: entered promiscuous mode [ 533.613480][T19265] ip6gre3: entered allmulticast mode [ 533.653397][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4940'. [ 533.727702][T19271] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.740253][T19271] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.763077][T19271] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 533.795251][T19274] batadv_slave_1: entered promiscuous mode [ 533.828421][T19278] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 533.879485][T19271] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.900316][T19271] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.936491][T19271] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 534.082392][T19271] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.131517][T19271] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.162899][T19271] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 534.185844][T19293] loop6: detected capacity change from 0 to 512 [ 534.205666][T19293] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 534.216829][T19293] EXT4-fs (loop6): orphan cleanup on readonly fs [ 534.224162][T19293] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 534.237545][T19293] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 534.248052][T19293] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4951: Corrupt directory, running e2fsck is recommended [ 534.263552][T19293] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 534.272204][T19293] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.4951: corrupted in-inode xattr: e_name out of bounds [ 534.287309][T19293] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 534.287457][T19293] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4951: couldn't read orphan inode 15 (err -117) [ 534.296799][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 534.296820][ C0] EXT4-fs (loop6): initial error at time 1772330224: ext4_iget_extra_inode:5025: inode 15 [ 534.296865][ C0] EXT4-fs (loop6): last error at time 1772330224: ext4_iget_extra_inode:5025: inode 15 [ 534.335883][T19293] loop6: lost filesystem error report for type 5 error -117 [ 534.343094][T19293] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 534.349399][T19271] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.381196][T19271] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.393396][T15929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.412815][T19298] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4952'. [ 534.417427][T19271] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 534.509876][T19270] batadv_slave_1: left promiscuous mode [ 534.560539][ T50] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.569299][ T50] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 534.577956][ T50] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 534.589972][ T50] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.599116][ T50] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 534.607720][ T50] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 534.632789][ T50] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.646101][ T50] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 534.664659][ T50] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 534.677635][ T309] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.688117][ T309] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 534.703401][ T309] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 534.730030][T19309] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25883 sclass=netlink_xfrm_socket pid=19309 comm=syz.6.4956 [ 534.787573][T19312] loop4: detected capacity change from 0 to 512 [ 534.810623][T19312] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.4957: Failed to acquire dquot type 1 [ 534.822490][T19312] loop4: lost filesystem error report for type 5 error -117 [ 534.830836][T19312] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.4957: Failed to acquire dquot type 1 [ 534.838252][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 534.838273][ C1] EXT4-fs (loop4): last error at time 1772330225: ext4_acquire_dquot:7001 [ 534.866089][T19312] loop4: lost filesystem error report for type 5 error -117 [ 534.882411][T19312] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4957: bg 0: block 248: padding at end of block bitmap is not set [ 534.904220][T19312] loop4: lost filesystem error report for type 5 error -117 [ 534.917081][T19312] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 534.942691][T19312] loop4: lost filesystem error report for type 5 error -117 [ 534.953169][T19312] __quota_error: 34 callbacks suppressed [ 534.953190][T19312] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 534.979568][T19312] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 535.009265][T19317] bond4: option ad_select: invalid value (4) [ 535.021970][T19312] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.4957: Failed to acquire dquot type 1 [ 535.037007][T19317] bond4 (unregistering): Released all slaves [ 535.085448][T19312] loop4: lost filesystem error report for type 5 error -117 [ 535.085683][T19312] EXT4-fs (loop4): 1 orphan inode deleted [ 535.119143][T19312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.143889][T19312] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.433945][T19326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.749879][T19278] syz.5.4945 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 535.766498][T19278] CPU: 1 UID: 0 PID: 19278 Comm: syz.5.4945 Tainted: G W syzkaller #0 PREEMPT(full) [ 535.766550][T19278] Tainted: [W]=WARN [ 535.766560][T19278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 535.766579][T19278] Call Trace: [ 535.766587][T19278] [ 535.766599][T19278] __dump_stack+0x1d/0x30 [ 535.766645][T19278] dump_stack_lvl+0x95/0xd0 [ 535.766679][T19278] dump_stack+0x15/0x1b [ 535.766705][T19278] dump_header+0x80/0x240 [ 535.766730][T19278] oom_kill_process+0x295/0x350 [ 535.766753][T19278] out_of_memory+0x97d/0xb80 [ 535.766790][T19278] try_charge_memcg+0x62e/0xa10 [ 535.766846][T19278] obj_cgroup_charge_pages+0x23/0xc0 [ 535.766950][T19278] __memcg_kmem_charge_page+0x9e/0x170 [ 535.767046][T19278] __alloc_frozen_pages_noprof+0x18a/0x360 [ 535.767079][T19278] alloc_pages_mpol+0xb3/0x260 [ 535.767121][T19278] alloc_pages_noprof+0x8f/0x130 [ 535.767159][T19278] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 535.767234][T19278] __kvmalloc_node_noprof+0x3d4/0x650 [ 535.767341][T19278] ? ip_set_alloc+0x24/0x30 [ 535.767405][T19278] ? ip_set_alloc+0x24/0x30 [ 535.767545][T19278] ? __kmalloc_cache_noprof+0x18a/0x410 [ 535.767574][T19278] ip_set_alloc+0x24/0x30 [ 535.767598][T19278] hash_netiface_create+0x282/0x740 [ 535.767635][T19278] ? __pfx_hash_netiface_create+0x10/0x10 [ 535.767736][T19278] ip_set_create+0x3cf/0x970 [ 535.767828][T19278] ? __nla_parse+0x40/0x60 [ 535.767862][T19278] nfnetlink_rcv_msg+0x509/0x5d0 [ 535.767932][T19278] netlink_rcv_skb+0x123/0x220 [ 535.767961][T19278] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 535.768070][T19278] nfnetlink_rcv+0x167/0x1720 [ 535.768177][T19278] ? __kfree_skb+0x109/0x150 [ 535.768209][T19278] ? nlmon_xmit+0x4f/0x60 [ 535.768245][T19278] ? consume_skb+0x4b/0x160 [ 535.768328][T19278] ? nlmon_xmit+0x4f/0x60 [ 535.768367][T19278] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 535.768514][T19278] ? __dev_queue_xmit+0x136c/0x1f20 [ 535.768549][T19278] ? __dev_queue_xmit+0x148/0x1f20 [ 535.768604][T19278] ? update_load_avg+0x5d/0x680 [ 535.768642][T19278] ? ref_tracker_free+0x37d/0x3e0 [ 535.768698][T19278] ? __netlink_deliver_tap+0x4dc/0x500 [ 535.768741][T19278] netlink_unicast+0x5c0/0x690 [ 535.768778][T19278] netlink_sendmsg+0x5c8/0x6f0 [ 535.768897][T19278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.768942][T19278] ____sys_sendmsg+0x5af/0x600 [ 535.768977][T19278] ___sys_sendmsg+0x195/0x1e0 [ 535.769036][T19278] __x64_sys_sendmsg+0xd4/0x160 [ 535.769074][T19278] x64_sys_call+0x194c/0x3020 [ 535.769130][T19278] do_syscall_64+0x12c/0x370 [ 535.769159][T19278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.769189][T19278] RIP: 0033:0x7f78e6dfc799 [ 535.769208][T19278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.769229][T19278] RSP: 002b:00007f78e584f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.769368][T19278] RAX: ffffffffffffffda RBX: 00007f78e7075fa0 RCX: 00007f78e6dfc799 [ 535.769383][T19278] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 535.769400][T19278] RBP: 00007f78e6e92bd9 R08: 0000000000000000 R09: 0000000000000000 [ 535.769415][T19278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.769428][T19278] R13: 00007f78e7076038 R14: 00007f78e7075fa0 R15: 00007ffc847b0078 [ 535.769449][T19278] [ 535.769508][T19278] memory: usage 307200kB, limit 307200kB, failcnt 602 [ 536.149032][T19278] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 536.157706][T19278] kmem: usage 295716kB, limit 9007199254740988kB, failcnt 0 [ 536.166040][T19278] Memory cgroup stats for /syz5: [ 536.166268][T19278] cache 0 [ 536.175766][T19278] rss 11497472 [ 536.179334][T19278] shmem 0 [ 536.182497][T19278] mapped_file 0 [ 536.186910][T19278] dirty 0 [ 536.190236][T19278] writeback 0 [ 536.194424][T19278] workingset_refault_anon 747 [ 536.199969][T19278] workingset_refault_file 23 [ 536.205880][T19278] swap 368640 [ 536.210067][T19278] swapcached 6938624 [ 536.214057][T19278] pgpgin 395640 [ 536.218178][T19278] pgpgout 392832 [ 536.221888][T19278] pgfault 417356 [ 536.226183][T19278] pgmajfault 178 [ 536.230234][T19278] inactive_anon 4096 [ 536.234365][T19278] active_anon 0 [ 536.238893][T19278] inactive_file 11497472 [ 536.243354][T19278] active_file 0 [ 536.248944][T19278] unevictable 0 [ 536.252622][T19278] hierarchical_memory_limit 314572800 [ 536.258784][T19278] hierarchical_memsw_limit 9223372036854771712 [ 536.266138][T19278] total_cache 0 [ 536.282203][T19278] total_rss 11497472 [ 536.287593][T19278] total_shmem 0 [ 536.291989][T19278] total_mapped_file 0 [ 536.322539][T19278] total_dirty 0 [ 536.335910][T19278] total_writeback 0 [ 536.347732][T19278] total_workingset_refault_anon 747 [ 536.360682][T19278] total_workingset_refault_file 23 [ 536.375363][T19278] total_swap 368640 [ 536.385447][T19278] total_swapcached 6938624 [ 536.389967][T19278] total_pgpgin 395640 [ 536.409593][T19278] total_pgpgout 392832 [ 536.419857][T19278] total_pgfault 417356 [ 536.424089][T19278] total_pgmajfault 178 [ 536.444415][T19278] total_inactive_anon 4096 [ 536.454509][T19278] total_active_anon 0 [ 536.464423][T19278] total_inactive_file 11497472 [ 536.480079][T19278] total_active_file 0 [ 536.488894][T19278] total_unevictable 0 [ 536.503212][T19278] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4945,pid=19277,uid=0 [ 536.528909][T19278] Memory cgroup out of memory: Killed process 19278 (syz.5.4945) total-vm:96340kB, anon-rss:12472kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 536.745603][T19278] syz.5.4945 (19278) used greatest stack depth: 6944 bytes left [ 536.826362][T19359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4971'. [ 536.876893][T19362] xt_hashlimit: overflow, rate too high: 0 [ 537.039353][T19359] loop5: detected capacity change from 0 to 512 [ 537.120108][T19359] EXT4-fs (loop5): 1 truncate cleaned up [ 537.158740][T19359] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.265417][T13251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.354346][T19380] loop4: detected capacity change from 0 to 512 [ 537.397971][T19383] netlink: 140 bytes leftover after parsing attributes in process `syz.7.4981'. [ 537.459882][T19389] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4980'. [ 537.464038][T19391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4977'. [ 537.499420][T19394] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4985'. [ 537.517585][T19394] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4985'. [ 537.537632][T19396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4986'. [ 537.576849][T19391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4977'. [ 537.600874][T19396] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 537.617060][T19396] bond2 (unregistering): Released all slaves [ 537.742624][ T7865] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 465: padding at end of block bitmap is not set [ 537.780252][ T7865] EXT4-fs (loop5): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 117 [ 537.804721][ T7865] EXT4-fs (loop5): This should not happen!! Data will be lost [ 537.804721][ T7865] [ 537.832081][T14368] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.903023][T19418] IPv6: NLM_F_CREATE should be specified when creating new route [ 539.006653][T19433] loop5: detected capacity change from 0 to 2048 [ 539.016464][ T28] audit: type=1326 audit(1772330229.509:9643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19454 comm="syz.0.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4d1c799 code=0x7ffc0000 [ 539.152843][ T28] audit: type=1326 audit(1772330229.509:9644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19454 comm="syz.0.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4d1c799 code=0x7ffc0000 [ 539.181555][T19433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.411258][ T28] audit: type=1326 audit(1772330229.539:9645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19454 comm="syz.0.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68e4d1c799 code=0x7ffc0000 [ 539.889889][T19468] loop6: detected capacity change from 0 to 128 [ 539.897004][T19468] ext4: Unknown parameter 'smackfshat' [ 539.925935][T19468] netlink: 'syz.6.5009': attribute type 1 has an invalid length. [ 540.318923][T19472] loop4: detected capacity change from 0 to 512 [ 540.338622][ T28] audit: type=1326 audit(1772330229.539:9646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19454 comm="syz.0.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4d1c799 code=0x7ffc0000 [ 540.489280][T19425] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 540.506790][ T28] audit: type=1326 audit(1772330229.539:9647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19454 comm="syz.0.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f68e4d1c799 code=0x7ffc0000 [ 540.516800][T19472] Quota error (device loop4): v2_read_file_info: Free block number 3 out of range (1, 3). [ 540.544245][T19472] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 540.560934][T19472] EXT4-fs (loop4): mount failed [ 540.589174][ T28] audit: type=1326 audit(1772330229.539:9648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19454 comm="syz.0.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4d1c799 code=0x7ffc0000 [ 540.659232][ T28] audit: type=1326 audit(1772330229.539:9649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19454 comm="syz.0.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f68e4d1c799 code=0x7ffc0000 [ 540.670761][T14368] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.683912][ T28] audit: type=1326 audit(1772330229.539:9650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19454 comm="syz.0.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4d1c799 code=0x7ffc0000 [ 540.722291][ T28] audit: type=1326 audit(1772330229.539:9651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19454 comm="syz.0.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68e4d1c799 code=0x7ffc0000 [ 540.747720][ T28] audit: type=1326 audit(1772330229.539:9652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19454 comm="syz.0.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4d1c799 code=0x7ffc0000 [ 540.772300][ T28] audit: type=1326 audit(1772330229.539:9653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19454 comm="syz.0.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4d1c799 code=0x7ffc0000 [ 540.890849][T19501] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25883 sclass=netlink_xfrm_socket pid=19501 comm=syz.6.5022 [ 541.169459][T19515] delete_channel: no stack [ 541.174400][ T28] audit: type=1400 audit(1772330231.659:9654): avc: denied { setopt } for pid=19499 comm="syz.4.5023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 541.330595][T19524] loop6: detected capacity change from 0 to 256 [ 542.040160][T19524] FAT-fs (loop6): Directory bread(block 64) failed [ 542.047912][T19524] FAT-fs (loop6): Directory bread(block 65) failed [ 542.054936][T19524] FAT-fs (loop6): Directory bread(block 66) failed [ 542.062556][T19524] FAT-fs (loop6): Directory bread(block 67) failed [ 542.071708][T19524] FAT-fs (loop6): Directory bread(block 68) failed [ 542.078822][T19524] FAT-fs (loop6): Directory bread(block 69) failed [ 542.085682][T19524] FAT-fs (loop6): Directory bread(block 70) failed [ 542.092481][T19524] FAT-fs (loop6): Directory bread(block 71) failed [ 542.099543][T19524] FAT-fs (loop6): Directory bread(block 72) failed [ 542.107129][T19524] FAT-fs (loop6): Directory bread(block 73) failed [ 543.318006][T19532] ip6gre3: entered promiscuous mode [ 543.323625][T19532] ip6gre3: entered allmulticast mode [ 545.725176][T19527] loop4: detected capacity change from 0 to 8192 [ 546.192481][ T3308] loop4: p1 p2 p3 p4[DM] [ 546.199768][ T7865] bio_check_eod: 204 callbacks suppressed [ 546.199782][ T7865] kworker/u8:11: attempt to access beyond end of device [ 546.199782][ T7865] loop6: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 546.222373][ T3308] loop4: p1 size 835329 extends beyond EOD, truncated [ 546.231709][ T3308] loop4: p3 start 134217728 is beyond EOD, truncated [ 546.238840][ T3308] loop4: p4 size 262144 extends beyond EOD, truncated [ 546.246462][ T7865] kworker/u8:11: attempt to access beyond end of device [ 546.246462][ T7865] loop6: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 546.262454][T19527] loop4: p1 p2 p3 p4[DM] [ 546.267012][T19527] loop4: p1 size 835329 extends beyond EOD, truncated [ 546.275489][T19527] loop4: p3 start 134217728 is beyond EOD, truncated [ 546.283056][T19527] loop4: p4 size 262144 extends beyond EOD, truncated [ 546.296465][ T7865] kworker/u8:11: attempt to access beyond end of device [ 546.296465][ T7865] loop6: rw=1, sector=1960, nr_sectors = 3392 limit=256 [ 546.317203][ T7865] kworker/u8:11: attempt to access beyond end of device [ 546.317203][ T7865] loop6: rw=1, sector=5352, nr_sectors = 2048 limit=256 [ 546.410030][ T28] audit: type=1400 audit(1772330236.899:9655): avc: denied { bind } for pid=19547 comm="syz.4.5037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 546.433831][ T7865] kworker/u8:11: attempt to access beyond end of device [ 546.433831][ T7865] loop6: rw=1, sector=7400, nr_sectors = 2560 limit=256 [ 546.466696][ T7865] kworker/u8:11: attempt to access beyond end of device [ 546.466696][ T7865] loop6: rw=1, sector=9960, nr_sectors = 4000 limit=256 [ 546.489528][T19556] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25883 sclass=netlink_xfrm_socket pid=19556 comm=syz.0.5038 [ 546.511754][ T3570] udevd[3570]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 546.524386][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 546.535781][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 546.547434][ T7865] kworker/u8:11: attempt to access beyond end of device [ 546.547434][ T7865] loop6: rw=1, sector=13960, nr_sectors = 4112 limit=256 [ 546.575822][ T3570] udevd[3570]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 546.584280][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 546.592013][ T7865] kworker/u8:11: attempt to access beyond end of device [ 546.592013][ T7865] loop6: rw=1, sector=18072, nr_sectors = 2616 limit=256 [ 546.611394][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 546.639089][ T7865] kworker/u8:11: attempt to access beyond end of device [ 546.639089][ T7865] loop6: rw=1, sector=20688, nr_sectors = 2048 limit=256 [ 546.663986][ T7865] kworker/u8:11: attempt to access beyond end of device [ 546.663986][ T7865] loop6: rw=1, sector=22736, nr_sectors = 1976 limit=256 [ 546.801326][T19555] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5040'. [ 546.843108][T19563] loop5: detected capacity change from 0 to 8192 [ 546.875556][T19569] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5034'. [ 546.885716][ T3308] loop5: p1 p2 p3 p4[DM] [ 546.890252][ T3308] loop5: p1 size 835329 extends beyond EOD, truncated [ 546.899764][T19569] vlan0: entered promiscuous mode [ 546.906422][ T3308] loop5: p3 start 134217728 is beyond EOD, truncated [ 546.913194][ T3308] loop5: p4 size 262144 extends beyond EOD, truncated [ 546.937875][T19563] loop5: p1 p2 p3 p4[DM] [ 546.942431][T19563] loop5: p1 size 835329 extends beyond EOD, truncated [ 546.951287][T19563] loop5: p3 start 134217728 is beyond EOD, truncated [ 546.958105][T19563] loop5: p4 size 262144 extends beyond EOD, truncated [ 547.011163][T19571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5044'. [ 547.176250][T19584] loop6: detected capacity change from 0 to 512 [ 547.183296][T19584] EXT4-fs: Ignoring removed nobh option [ 547.189616][T19584] EXT4-fs: Ignoring removed nomblk_io_submit option [ 547.199734][T19584] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.5050: iget: bad i_size value: 38620345925642 [ 547.213702][T19584] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 547.214164][T19584] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.5050: couldn't read orphan inode 15 (err -117) [ 547.223736][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 547.223784][ C0] EXT4-fs (loop6): initial error at time 1772330237: ext4_orphan_get:1391: inode 15 [ 547.223831][ C0] EXT4-fs (loop6): last error at time 1772330237: ext4_orphan_get:1391: inode 15 [ 547.264142][T19584] loop6: lost filesystem error report for type 5 error -117 [ 547.265822][T19584] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.288950][ T28] audit: type=1400 audit(1772330237.779:9656): avc: denied { create } for pid=19583 comm="syz.6.5050" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 547.333467][T19590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5051'. [ 547.365415][T15929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.520651][T19600] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25883 sclass=netlink_xfrm_socket pid=19600 comm=syz.0.5054 [ 547.605757][ T3491] Process accounting resumed [ 547.629384][T19616] loop5: detected capacity change from 0 to 512 [ 547.643163][T19616] EXT4-fs: Ignoring removed nobh option [ 547.667773][T19616] EXT4-fs: Ignoring removed nomblk_io_submit option [ 547.682991][T19616] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.5062: iget: bad i_size value: 38620345925642 [ 547.699674][T19616] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 547.699995][T19616] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5062: couldn't read orphan inode 15 (err -117) [ 547.713498][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 547.713526][ C0] EXT4-fs (loop5): initial error at time 1772330238: ext4_orphan_get:1391: inode 15 [ 547.713565][ C0] EXT4-fs (loop5): last error at time 1772330238: ext4_orphan_get:1391: inode 15 [ 547.753246][T19616] loop5: lost filesystem error report for type 5 error -117 [ 547.753968][T19616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.819544][T14368] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.933680][T19633] loop5: detected capacity change from 0 to 1024 [ 548.033044][T19633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.110293][T19634] loop4: detected capacity change from 0 to 8192 [ 548.127226][T14368] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.155686][ T3308] loop4: p1 p2 p3 p4[DM] [ 548.164077][ T3308] loop4: p1 size 835329 extends beyond EOD, truncated [ 548.172980][ T3308] loop4: p3 start 134217728 is beyond EOD, truncated [ 548.180765][ T3308] loop4: p4 size 262144 extends beyond EOD, truncated [ 548.192055][T19634] loop4: p1 p2 p3 p4[DM] [ 548.197033][T19634] loop4: p1 size 835329 extends beyond EOD, truncated [ 548.206105][T19634] loop4: p3 start 134217728 is beyond EOD, truncated [ 548.213042][T19634] loop4: p4 size 262144 extends beyond EOD, truncated [ 548.246244][T19656] loop5: detected capacity change from 0 to 512 [ 548.262525][T19656] EXT4-fs: Ignoring removed nobh option [ 548.282442][T19656] EXT4-fs: Ignoring removed nomblk_io_submit option [ 548.299011][T19656] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.5074: iget: bad i_size value: 38620345925642 [ 548.312838][T19656] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 548.313907][T19656] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5074: couldn't read orphan inode 15 (err -117) [ 548.323166][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 548.323207][ C1] EXT4-fs (loop5): initial error at time 1772330238: ext4_orphan_get:1391: inode 15 [ 548.323241][ C1] EXT4-fs (loop5): last error at time 1772330238: ext4_orphan_get:1391: inode 15 [ 548.360873][T19656] loop5: lost filesystem error report for type 5 error -117 [ 548.363260][T19656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.399628][T14368] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.651004][T19676] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5079'. [ 551.626099][T19683] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5082'. [ 551.825182][T19684] loop6: detected capacity change from 0 to 2048 [ 551.884273][T19688] loop4: detected capacity change from 0 to 512 [ 551.914805][T19684] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.936247][T19688] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 551.945792][T19688] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 551.961687][T19688] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.5086: Failed to acquire dquot type 1 [ 551.973458][T19688] loop4: lost filesystem error report for type 5 error -117 [ 551.973872][T19688] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 551.981267][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 551.981294][ C0] EXT4-fs (loop4): last error at time 1772330242: ext4_acquire_dquot:7001 [ 552.007346][T19688] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 552.017084][T19688] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.5086: Failed to acquire dquot type 1 [ 552.030582][T19688] loop4: lost filesystem error report for type 5 error -117 [ 552.034467][T19688] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5086: bg 0: block 248: padding at end of block bitmap is not set [ 552.057634][T19688] loop4: lost filesystem error report for type 5 error -117 [ 552.057822][T19688] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 552.074600][T19688] loop4: lost filesystem error report for type 5 error -117 [ 552.074899][T19688] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 552.091862][T19688] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 552.101950][T19688] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.5086: Failed to acquire dquot type 1 [ 552.113400][T19688] loop4: lost filesystem error report for type 5 error -117 [ 552.115224][T19688] EXT4-fs (loop4): 1 orphan inode deleted [ 552.128940][T19688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.141762][T19688] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.169269][T13251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.222947][T19708] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5092'. [ 552.641018][T19719] ================================================================== [ 552.649183][T19719] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 552.657301][T19719] [ 552.659652][T19719] write to 0xffff888134699a68 of 8 bytes by task 19711 on cpu 1: [ 552.667472][T19719] filemap_splice_read+0x523/0x780 [ 552.672784][T19719] splice_direct_to_actor+0x26e/0x670 [ 552.678596][T19719] do_splice_direct+0x119/0x1a0 [ 552.683890][T19719] do_sendfile+0x382/0x650 [ 552.688469][T19719] __x64_sys_sendfile64+0x105/0x150 [ 552.693691][T19719] x64_sys_call+0x2dc4/0x3020 [ 552.698501][T19719] do_syscall_64+0x12c/0x370 [ 552.703372][T19719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.709328][T19719] [ 552.711689][T19719] write to 0xffff888134699a68 of 8 bytes by task 19719 on cpu 0: [ 552.719558][T19719] filemap_splice_read+0x523/0x780 [ 552.724715][T19719] splice_direct_to_actor+0x26e/0x670 [ 552.730222][T19719] do_splice_direct+0x119/0x1a0 [ 552.735122][T19719] do_sendfile+0x382/0x650 [ 552.739584][T19719] __x64_sys_sendfile64+0x105/0x150 [ 552.744810][T19719] x64_sys_call+0x2dc4/0x3020 [ 552.749542][T19719] do_syscall_64+0x12c/0x370 [ 552.754238][T19719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.760457][T19719] [ 552.763025][T19719] value changed: 0x000000000025f000 -> 0x0000000000450000 [ 552.770251][T19719] [ 552.772633][T19719] Reported by Kernel Concurrency Sanitizer on: [ 552.779266][T19719] CPU: 0 UID: 0 PID: 19719 Comm: syz.4.5090 Tainted: G W syzkaller #0 PREEMPT(full) [ 552.790420][T19719] Tainted: [W]=WARN [ 552.794244][T19719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.804403][T19719] ================================================================== [ 553.017760][T19683] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 553.060543][T15929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.