last executing test programs: 5m28.194943077s ago: executing program 2 (id=243): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) 5m27.979249706s ago: executing program 2 (id=246): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nodioread_nolock}, {@quota}]}, 0x0, 0x51b, &(0x7f00000008c0)="$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") r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x10, 0x1, 0x1, {0xffff1c72, 0x23, 0x100007, 0xce3dfb02, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010080ffffff00000000010000000800010003000000340004800500030080ffffff05000300030000400500030080000000050003000100000005000300010000000d000300070000000800020003"], 0x58}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5m27.737337977s ago: executing program 2 (id=247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a0108000000000000000002f5ff090900010073797a31000000007c000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006408000a40000000020b00070066696c"], 0xc4}, 0x1, 0x0, 0x0, 0x24004900}, 0x2000) 5m27.690650291s ago: executing program 2 (id=248): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x4008032, 0xffffffffffffffff, 0xcd0b7000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340), 0x1, 0x525, &(0x7f0000000980)="$eJzs3U9vI2cZAPBnJvFudjfFLiBUKlEqWrRbYO2koW2EEJQLnCoB5b6ExImi2HEUO2UTVZCKb4CQQOLEiQsSHwCp6oEPgCpVggvigACBEGzhgAR0kMdjunHsJNUm9jb+/aR3/cx4Zp73Ha9fz7/MBDC1noyIFyNiJiKeiYhyMT4tShz2Sne6t++9utotSWTZy39LIinG9ZfVXcZsRNwoZpuLiK9/JeJbyUDST0W09w+2VhqN+m4xqtZp7tTa+we3N5srG/WN+vbS0uLzyy8sP7e8kBUeqJ2VfvDTL3/h9c98+/d3/nLrO91qff4jUYqBdpynXtNL+bro666j3YtINgH9z7w06YoAAHAm3W38D0bEJ/Lt/3LM5FtzA2YmUTMAAADgvGRfnI//JBEZAAAAcGmlETEfSVotrgWYjzS9Uhwb+HBcTxutdufT66297bXuexGVKKXrm436QnGtcCVKSXd4sbjGtj/87MDwUkQ8GhE/KF/Lh6urrcbahI99AAAAwLS4MbD//89ymsenG/J3AgAAAMDDqzJyAAAAALgs7PIDAADA5Te4///6hOoBAAAAXIivvvRSt2T951+vvbK/t9V65fZavb1Vbe6tVldbuzvVjVZrI79nX/O05TVarZ3Pxvbe3Vqn3u7U2vsHd5qtve3Onc0jj8AGAAAAxujRj7/xmyQiDj93LS9R3AcQ4Ig/TroCwHmamXQFgIlxF2+YXqVJVwCYuOSU9128AwAA7383P3r8/H//+f+ODcDl5lofAJg+zv/D9Cq5AhCmWpZl2Qd64dV3xx49MjDy/P+vzp4l4s3y/WMcXwQAgPGaz0uSVost/vlI02o14pGItBKlZH2zUV+IiO7+wa/Lpavd4cV8zuTUa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sS/L7fwMAAACXV0T65yS/m3/EzfLT84PHB64k/yrHn4qBH7/8w7srnc7uYnf83/NneV2JiM6PivHPXh378QsAAACYWsnhyLd6++nF6+JYawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAFHj73qur/TLOvH/9UkRUhuWfjbn8dS5KEXH9H0nM3jdfEhEz55D/8LWIeGxY/iTeybKsUtRiMH8aEdcuOH8lXzWj8984h/wwzd7o9j8vDvv+pfFk/jr8+zdblAc1uv9Li8yP5f3csP7vkWNLaw7N8fhbP6+NzP9axOOzw/uffv+bjMj/1LGl/TvLsuM5vvmNg4NR+bOfRNwc+vuTHMlV6zR3au39g9ubzZWN+kZ9e2lp8fnlF5afW16orW826sW/Q3N8/2O/eOek9l8fkv93v+31vye1/+lRCx3w37fu3vtQLywNy3/rqaG/v3MxIn9a/PZ9soi779/sx4e9+H5P/OzNJ05q/9qI9X/a53/rjO1/5mvf+8MZJwUAxqC9f7C10mjUd08I5s4wzZHgakSceeLJBb+ceyiq8R6D7Lu9T25MSZOLWnJ65D9Jv1UTX71HgmxsuWbiIWny/4OJdksAAMAFeHej/z3Peh6nvwEAAAAAAAAAAAAAAAAAAIAz3v/vQYPBnIeTaSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIn+FwAA//+CbuI8") r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x100, 0x70bd2b, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x40014) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="74830a00", @ANYBLOB="04002cbd7000fcdbdf250200000014000180060001000a00000006"], 0x74}, 0x1, 0x0, 0x0, 0x20048800}, 0x8014) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) write$P9_RGETLOCK(r3, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) ptrace$ARCH_SHSTK_STATUS(0x1e, r4, &(0x7f0000000700), 0x5005) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x4, &(0x7f0000002400)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000020000000b"], 0x0) syz_usbip_server_init(0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in=@loopback, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000640)=0xe8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x1, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0xffffffeffffffffe) 5m24.272270102s ago: executing program 2 (id=262): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x5509, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0xfd46, 0x8, 0x2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0xbcba}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000180)="9fa0", 0x2, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback={0x7812010001000000}, 0xc5f}, 0x1c) 5m23.943502541s ago: executing program 2 (id=268): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402401, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffe) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {}, {0xe, 0x10}}, [@TCA_RATE={0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010b00000000000000000600000020000180140002007665746831000000ab5f00000000000008000300"], 0x34}, 0x1, 0xa1ff, 0x0, 0x8000}, 0x0) 5m23.914439573s ago: executing program 32 (id=268): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402401, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffe) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {}, {0xe, 0x10}}, [@TCA_RATE={0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010b00000000000000000600000020000180140002007665746831000000ab5f00000000000008000300"], 0x34}, 0x1, 0xa1ff, 0x0, 0x8000}, 0x0) 5m2.762788345s ago: executing program 1 (id=526): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000300)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x19) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000280)={0x53, 0xfffffffffffffffe, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="a6da1fcb1579", 0x0, 0x8, 0x2, 0x200003, 0x0}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r1, 0x6708}, 0x8) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r6, &(0x7f0000003300)={&(0x7f0000002dc0)={0xa, 0x4ea4, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf61}, 0x6f, 0x0, 0x0, &(0x7f00000030c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x89}}}], 0x18}, 0x20044850) 5m2.173424976s ago: executing program 1 (id=527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "0300"}, 0x28) writev(r0, &(0x7f00000008c0), 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 5m1.33673966s ago: executing program 1 (id=540): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9d000) r1 = syz_open_dev$hidraw(&(0x7f0000000340), 0x0, 0x2) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000000c0)={0x4, "ccc0dde4b00a6d2c16b99a7fd0d48117b817abfccfa3806091bcc9f67e3de361a9172be4c429adba1c63d1674a55890c3e46ca658ca8939b7fc9c8f133dd3351"}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r2 = socket(0x3, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6c20}, 0x1, 0x0, 0x0, 0x40}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 5m0.87408655s ago: executing program 1 (id=545): mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) io_setup(0x80, &(0x7f0000000480)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/19, 0x13}], 0x1, 0x2e7dec88, 0xc4c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x400c84, &(0x7f0000000040)={[{}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0x41, 0x7c5, &(0x7f0000000dc0)="$eJzs3ctrXNcZAPDvjkYPy26lQqGPlaDQCoylypXtFrpQ6aIUajC069qDNBaORhqhGRlLCGITAtkEkpBFINl4k00ezi6rQB7b5L/IysZJZBOHQMKEOw9pZM3II1nSONLvB1dzzn3onG/OveeemXu5E8CxNZL+yUT8LiJeSSKG6vOTiOitprIRU7X1ptLs+tp0EpXKf79Oqus8XF+bjqZtUifrmd9GxKcvRpzObC+3tNITEYX8Ui2bZhbHSyurZ67N52bzs/mF8xOTk2cvnLtwfv9i/faL1VP3Xv3Xn96f+v6F39x5+bMkpuJUfVlzHPtlJEbq70lv7b1r8s/9LqzLkm5XgD3J1A++bKR9wFD0VFMAwFH2fERUAIBjJnH+B4BjpvE9wMP1tenG1N1vJA7X/X9ExEAt/kf1qbYkW79mN1C9Djr4MNlyZSSJiOF9KH8kIt768P/vplMc0HVIgFZu3oqIK8Mj2/v/ZNs9C7v159pL01lmU1/9deSx+Z32f65Sw9P7OB3//LXV+C+zMf6JFuOf/hbH7l488fg/sQ+F7CAd//09Ih5tG/9t3LQ23FPP/aI65utNrl4r5NO+7ZcRMRq9/Wl+YocyRh/8+KDdsubx3zevPfdOWn76urlG5m62f+s2M7ly7mlibnb/VsTvs63iTzbaP2kz/r3UYRn//ttLb7ZblsafxtuYtsTf21jr4Hr7yu2IP7Zs/8072tLUeHl++/2JSZy7cH68ujuMN3aKFj748o3BduU3t386peU3PgschrT9B3eOfzip3q+5OpcrFPJLpdqxvxuf3x76pN2yJ8efuZu99faWbdL9vy/5XzXdGEfcyJXLSxMRfcl/ts8/u7ltI99YP41/9A+tj/+d9v9017zSYfzZe1+9t2P8J7vb/jO7av9WibSTbrNoLle482iup135HbV//2Q1NVqf00n/166mjyee5r0DAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJUJJmxjXQmMzZW+w3vX8dgplAslU9fLS4vzET1t7KHozfTeNTlUNPzUCfqz8Nv5M8+lv9LRPwqIl7vP5E0nqM40+XYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDhZJvf/4+42e2qAQAHaaD17ErlsCsCAByaNud/AOAI29X5v+/g6gEAHB6f/wHg+On8/F+puCkAAI6GvX7+T7L7XBEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOqksXL6ZT5bv1tek0P3N9ZXmueP3MTL40Nza/PD02XVxaHJstFmcL+bHp4vyT/l+hWFycjIXlG+PlfKk8XlpZvTxfXF4oX742n5vNX873HkpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA7pZXVuVyhkF+S2EOi8mxUo/uJnvrudNBlJT9UKocS10eLtYA6WTl5JppgnxIDjZC72SsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Hz8FAAA//+I9yIn") unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @local, 0x206}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='syzkaller0\x00', 0x10) write(r3, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000240)='./file0\x00', 0x8900, &(0x7f0000000080)={0x9, 0xd, 0x0, {r4}}, 0x20) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000280)=0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3ff, 0x1}, 0x1186ca, 0xa7, 0x2, 0x5, 0xa5, 0x4, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x9) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 4m59.160546231s ago: executing program 1 (id=553): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00', {}, {}, 0x6802}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 4m57.485596539s ago: executing program 1 (id=577): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0xf}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55", 0x0, 0x0, 0x0}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000b40)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}, 0x0}, {@nouid32}, {@noload}, {@nodiscard}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@abort}, {@nouid32}, {@resgid}], [{@audit}, {@fowner_lt}], 0x2c}, 0xa, 0x52e, &(0x7f0000000c80)="$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") r4 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r5, 0x2, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) mkdir(&(0x7f00000003c0)='./file0\x00', 0x4) 4m57.463482031s ago: executing program 33 (id=577): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0xf}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55", 0x0, 0x0, 0x0}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000b40)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}, 0x0}, {@nouid32}, {@noload}, {@nodiscard}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@abort}, {@nouid32}, {@resgid}], [{@audit}, {@fowner_lt}], 0x2c}, 0xa, 0x52e, &(0x7f0000000c80)="$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") r4 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r5, 0x2, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) mkdir(&(0x7f00000003c0)='./file0\x00', 0x4) 2m39.473346777s ago: executing program 6 (id=1219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000110000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 2m39.345474128s ago: executing program 6 (id=1220): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) 1m56.374758057s ago: executing program 6 (id=1223): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) setfsuid(0xee00) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x5c}, 0x1, 0x0, 0x0, 0x24040041}, 0x0) 1m56.373117267s ago: executing program 6 (id=1228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0x28000006}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a000006090002007379"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) close(0x3) socket$phonet(0x23, 0x2, 0x1) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000000d0601080000000000000000020007000000f9ff000007000000d80d5b7ffdd904dbd26c4e5e9facff0bb14dadd2a0e70f6227e09240d901d9f3c60b278b3861c41689a4b99eb67a687326ceca1484606d697683ae64a9b15dfeb422a4afd420457c7353d7b8efbc3d124bcd50b4965f605baf2618de89918fd28608e71205930adcae9a479bdec08580605553eff26f495cd7ed122d4b9ee75efde1c7c85cbed6ea9c89069a2531f9a4fd4656d9a61ef13feb8020efa0"], 0x2c}}, 0x24008000) socket$xdp(0x2c, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000240)=0x7f, 0x4) ioctl$INCFS_IOC_FILL_BLOCKS(r5, 0x80106720, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xfffffffd, 0x0, &(0x7f0000000080), 0x1, 0x1}]}) 1m56.371302967s ago: executing program 6 (id=1232): r0 = socket$isdn(0x22, 0x3, 0x3) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000140)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0xb, &(0x7f0000000280)={[{@cruft}, {@check_relaxed}, {@utf8}, {@showassoc}, {@utf8}, {@map_normal}], [{@fowner_lt={'fowner<', r1}}, {@fsmagic={'fsmagic', 0x3d, 0x1000}}]}, 0x1, 0x57c, &(0x7f0000000340)="$eJzs3d9u01gewPGfS7uUgKrV7opFVYFD2ZVaqQQnhaCIm/U6J6khsSPbQe0VqmiLKlJYUVba9mbVvWBnpJm7eYG5nYeYR5jL0bzBXKF5gBlNRz5O2rRNmgJN00HfTwQ+iX/2+dmK/NNp/EcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBYbsm2c5ZUPb+xqHpzS2FQO2Z+e32zv0yYSdfOftjc71fESv7J+LhcSz+69pf9yKvJf9Mylb6bkvFkMi7bl6/+8eGfR0fayx+T0JnY3Np+sdxsrr4ediJDUtG+FwVezalo5UWBKhYK9t2FcqTKXlVHS//9TteUG2onDkI1486qXLE4r3R2KWj4lZJT1e0PH9zJ23ZBPcrWtRNGgX/3UTZyF7xq1fMrJiaZncQ8SL6Ij71YxdqpKbW23lyd75dkEpQ7SVB+/+1o16C8nc/ncvl8rnC/eP+BbY8e+cA+RI5EDP9Li+EazIEc+AAjrfovVfHEl4Ysiur6cqUkoQRS6zG/pVX4Z/9+Vx/bb2f9b1f5a/uzJ8XU/xvpuxu96n+PXM7utSlbsi0vZFma0pRVeT30jM72VREtvngSSSCe1MQxn6jWJ0qKUpCC2PJUFqQskSgpiyd/EC2RLEkksWjzjXIlFC2OxBJIKEpmxJVZUZKTohRlXpRoycqSBNIQXypSEkeqomVN1s1+nz8mx72g3EmC8scEUf9xxGjrkNVj9s6RWad7AAc+wm67/p/E2KCzAQAAAAAAg2CZv75bZnB/3bTKXlXbvcIzZ5sdAAAAAAA4DeaX/6lkYn7cvy7WseN/AAAAAADwO2SZa+ws89P+zbTVvhKKPwIAAAAAAPCJML//30gm5tT+m2Ix/gcAAAAA4FPzWd977Ef1i9a3P0kYjlk79cW/WRtOEudsXEiXu3B4jXF58vLPu8aoWVdhtLVKV09ZV9KgvZtgvmtN1vrlYb1PAtZEa+ntyyOyn4B8IbfSmFsr6XSlPSftJVP2qjrrBtWHOXGciZFYL8b/frn+HzGb/7lfm7Bkbb25mn32qrlictlJ1rKz0bqB4pH7KB7MpXNnyBtzvwVzzUXXLR4zF2K0+s2k/dqd2z+SLj7yHn2+lek0Zrp1I4fMwe0fT/rMZXttfSuL3Edu+Vu5ncbcnrmdTrpkke+XRb4zi859MXaKWcz3y2K+VxYn3BcAMCxrvavQr2kR3z1cdz/gKDew6n7oiD6TxsxMmgPr6GSXI7rd74huf2R1+2bvGQjt4F41Nun3y86q2q5cX/fsN6rmrWQXXniz8S+5urm1fWd9Y/n56vPVl/n8fMG+Z9v38zJmNqM1ofYAALro9oydds1Nx/99n8Jj3eszqv7T3ikFWXkmr6QpKzJnrjYwZxx0XWvGLHPJnIYw1zFqNRXx0Kg10/GEl7k+o7pMx4NeOmJ//D5tHYi1Oh4vAwDAp2S6Tx0+Sf2f6zPuznScUjjXZ3TcWcsBAMBg6PCdlYn/b4WhV3+aKxZzTrygVRi4j1XolSpaeX6sQ3fB8Sta1cMgDtygmjSeeCUdqahRrwdhrMpBqOpB5C2aJ7+raCmKdU1Fuub4sedG9ap2Iq3cwI8dN1YlL3JVvfHPqhct6NAsHNW165U914m9wFdR0AhdnVUq0roj0CtpP/bKXtL0VT30ak64pJ4E1UZNq5KO3NCrx0GovvqfSLsvzy8HYc2sNjvsnQ0AwDmxubX9YrnZXH3dr/GPE8T0aAx7GwEAwEFUaQAAAAAAAAAAAAAAAAAAAAAAzr8PvKTv7Bt/FZFBdnHltFa4e0zMJTkfO/N9GxfbX5dzkg+NwTeGe1wCMHi/BQAA//+c4l1c") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x22, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf0}}, 0x82}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(r2, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000040)="f4b84d", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "f59fbf2496072000001ea89de284fb0000e60080b8785d96000100000000000000000d000000000000000000000000000000f7ffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x2, 0x2000000000001]}}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) 1m55.373678836s ago: executing program 6 (id=1241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000400)={r9, 0x5, 0x1, [0x40]}, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x2}]}, {0x0, [0x61, 0x0, 0x30]}}, 0x0, 0x29}, 0x28) sendmsg$NL80211_CMD_STOP_AP(r7, 0x0, 0x0) 1m40.028197499s ago: executing program 34 (id=1241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000400)={r9, 0x5, 0x1, [0x40]}, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x2}]}, {0x0, [0x61, 0x0, 0x30]}}, 0x0, 0x29}, 0x28) sendmsg$NL80211_CMD_STOP_AP(r7, 0x0, 0x0) 52.453275374s ago: executing program 0 (id=1989): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000480)={0x0, @aes256, 0x0, @desc4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x3c, 0x5, 0x9, 0x8}, {0x6, 0x7, 0x1, 0x6}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000240)}, 0x20) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd0010000000000000000008000400ff0100000800030007000000"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x315a00, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000002c0)={0x3, &(0x7f0000000140)=[{0x400, 0x0, 0x8, 0x80}, {0x123, 0x1, 0xfb, 0xc7}, {0x9, 0x3, 0xa6, 0x4}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 51.507988218s ago: executing program 0 (id=2003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, 0x0, 0x707cea1f1589d032) 51.429295584s ago: executing program 0 (id=2004): socket$inet6(0xa, 0x80001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x2a000, 0x1000, 0x0, 0x1}, 0x20) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000380)=0x10ca19, 0x4) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0xe, r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRES16=r4], 0x0, 0xfffffffa, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000fddbdf250100000008000b00", @ANYRES32=0x0, @ANYBLOB="06000a004e21000014000700fe800000000000000000000000000011060001004e20000006000a004e240000050002000200000008000600ac1414aa14000700fe8000000000000000000000000000aa08000b00", @ANYRES32=0x0, @ANYBLOB="afc66c7ef8951c79e6770936d21427318483d13312e9ad3e14c68ff884e855b55e73d206cdfbb293795f12d1417c84fa3302124acb8c8f9d428166c42f115c40c83d8900"/78], 0x74}}, 0x40000) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x600}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r8 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) mq_notify(r8, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) mq_notify(r8, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[], 0x41, 0x340, &(0x7f0000000800)="$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") pread64(r7, &(0x7f0000000000)=""/47, 0x2f, 0x3) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 44.835362666s ago: executing program 0 (id=2058): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f000001bd80)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8001}}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) recvfrom$inet_nvme(r0, &(0x7f00000002c0)=""/232, 0xe8, 0x40010020, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000240)={[{@jqfmt_vfsv1}, {@dax_never}, {@barrier_val={'barrier', 0x3d, 0x797dff6}}, {@nodiscard}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@nombcache}]}, 0x3, 0x562, &(0x7f0000000400)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x0) lstat(&(0x7f0000000180)='./file2\x00', 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 44.329346881s ago: executing program 0 (id=2060): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) 42.525134919s ago: executing program 0 (id=2066): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4480, &(0x7f0000000b40)=ANY=[], 0x83, 0x235, &(0x7f0000000280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) get_robust_list(0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) set_mempolicy(0x6005, &(0x7f0000000040)=0xffffffffffbffffd, 0x4) socket(0x1d, 0x2, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) getsockopt$inet_udp_int(r1, 0x11, 0xa, 0x0, &(0x7f0000000140)) 42.467936885s ago: executing program 35 (id=2066): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4480, &(0x7f0000000b40)=ANY=[], 0x83, 0x235, &(0x7f0000000280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) get_robust_list(0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) set_mempolicy(0x6005, &(0x7f0000000040)=0xffffffffffbffffd, 0x4) socket(0x1d, 0x2, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) getsockopt$inet_udp_int(r1, 0x11, 0xa, 0x0, &(0x7f0000000140)) 41.209451245s ago: executing program 5 (id=2084): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x4d6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r1, &(0x7f0000000080)="cc", 0x1, 0x200980) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x22) 40.381961888s ago: executing program 5 (id=2086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) set_mempolicy(0x3, &(0x7f00000004c0)=0x5, 0x9) 39.34980682s ago: executing program 5 (id=2093): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@grpquota}, {@mblk_io_submit}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x242, 0xaa, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x347e17c4, 0x400002007fff, 0x3210}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) socket$inet6_tcp(0xa, 0x1, 0x0) 38.99691806s ago: executing program 5 (id=2096): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x9, 0xa, 0x1ff, 0x80, 0x4}, 0x14) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x58d1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}, 0x1c) 38.77651566s ago: executing program 5 (id=2097): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x3, 0x4) listen(r1, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x78, r3, 0x200, 0x70bd27, 0x25dfdbee, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7f}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x30, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x141}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4b2}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x800) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 38.270672255s ago: executing program 5 (id=2100): close(0xffffffffffffffff) unshare(0x400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000000)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}]}, 0x1, 0x566, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r1, &(0x7f0000000040)=""/225, 0xe1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xc, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 23.205980683s ago: executing program 36 (id=2100): close(0xffffffffffffffff) unshare(0x400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000000)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}]}, 0x1, 0x566, &(0x7f0000000540)="$eJzs3M9uG8cZAPBZmbJVFXUDBI0dxYeN04MLNAxJ1zKEAAHY1VLahOISu6vAPhVBLQVCpbRIUqDxzRe3BfoSaW99gp76RkGPPaZYLuk4tkjLfxIaze8HSDPkfjvzzYrYD6QwDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAiJLtTqcbhWE22r8Vz5dsF/neguOz8f71rWbBvCFE9U9YWwuXm6cuv/rN4Z/Vv66GS82jS2GtbtbC3R+/9sq7r7ZWZucvSOh7sDpN9vjg08WBUfg6+r6S+m7snnapW/FOOsrKPNvr76RxVubx1uZm553dQRkPsmFa3i6rdC9OWqFf5UV8LflF3N3auh6n7dv5/mhnuz9MZ0/efLvX6WzG77fHab8o89E777fLZDcbDrPRziSmPlzH3KxfiB9kVXzhwbW//qTcD4+OD7pnCeo9KajX6fW63V6vu3lj68bNTqf12BOdR4THIpb9omXZXtCdG57frP4DAAAA/7+iyWfs9fv/1cnn8FEYRF83lp0aAAAA8IJM/vN/6R9R/f4/hHA5RINsmHaWnRYAAADwAv3liXvsyvGF6N//CUWxGt0b3/p5dNKv4/on55rzzj06YjVoRReng0yazdb0UZJeiV5vgl6fRX81bQ6flEf0FAlszEkg/C1sNDEbd5r2zuxIM8v6IBum7SQfvtsN/f7FlSq9Vf3xk6M/hcny/zrauxiFw6Pjg/Zvf398Z5LLvXqUeyfTDRSP7aNYkMvnD/Y9PrLiL5uhVutcoum86828nYfXv9KcvvIUc94PbzQxb6w37fq3179Wz9ltz1v9evSTyWa651z5/XClibly7a26eevaKVn0Tsvi/HTwyW69h7N4pmtxhiyuL7gW4fDoQgjhTFn8aF4WAMtyOK8KPaj/j9bd1jPca7+p7u99h9X9fniziXlzY3JjbW2cckfvtKOw4I4+q7H3zj9rdftnuNrEXJ0Fn1pj3/vpZN7wymzepqpOiv+Xc+cth72o/kOd+/zkD+G1z764+/bRyUcfH3x88Emvd32z86tO50YvrE6WMW0WZArAD1dafBWtV3+OiiIb/6a7tdXtV7tpXOTJB3GRbe+kcTaq0iLZ7Y920nhc5FWe5MO682G2nZZxuT8e50UVD/IiHudldmvyzS/x9KtfyjT8clRlSTkepv0yjZN8VPWTKt7OyiQe7/96mJW7aTE5uRynSTbIkn6V5aO4le//PUnbcVym6UOB2XY6qrJBVndH8bjI9vrF7fjDfLi/l8bbaZkU2bjKmwFnc2WjQV7s9avsXGgv+2IDwEvisy/u/u6j4+ODT8/Y+e90c+DTnPX4rOeXsVQAYGpRlQYAAAAAAAAAAAAAAF4OT7v/7wV2VqcpLGd2nbN1wtpLkcZyOivPPU7rJVjF3M7sJnBqzPLuSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwz/8CAAD//3bhnLY=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r1, &(0x7f0000000040)=""/225, 0xe1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xc, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 4.200079519s ago: executing program 7 (id=2425): r0 = syz_clone(0x15100400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x0) r3 = syz_io_uring_setup(0x83b, &(0x7f0000000140)={0x0, 0x11e, 0x0, 0x1, 0x315}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_SEND={0x1a, 0x44, 0x0, r2, 0x0, 0x0, 0x0, 0x4040015, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x189e02, 0x0) r7 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000cebf0f0ef41aff9ee0bfbf961f787c60bad82d599157e5f8b4ec2f754ff3426cf2399048d3f1e41cf3fbe26c418321a80461fea95d8e41bd8d4dfe81c75583df6c9db89c79b4eb13ae9d6c228f1ceffb32bbda7eec00"/125], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r9, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, @fallback=0x3c, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0xb, @mcast1, 0x8}, r12}}, 0x48) writev(r11, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) process_madvise(r1, 0x0, 0x0, 0x15, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0/file0\x00'}) 3.869321508s ago: executing program 4 (id=2432): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0), 0x8) dup3(r0, r0, 0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x7, 0x4, 0x22, 0x1}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000000408050000000005000000000000860906000240001100007de34d00a273b8a19a63d02db9b495c2f2cfa67c0b1f468e3c092675d7e2012f585c01308d9a14b1ca64f4037865617f3113993f131ec5cd477199ddfc920dbb6690002162bb35e804897ee8385d911f"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x4000814) bpf$ENABLE_STATS(0x20, &(0x7f0000000540), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0xfff, 0x7, 0x40880, 0xffffffffffffffff, 0x1}, 0x50) r4 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x90000, 0x0, 0x56}, 0x18) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x5, 0x7, 0x9, 0x3, 0x8001}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r5, 0x4) r6 = syz_open_dev$vcsu(&(0x7f0000000080), 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r8, 0x40087602, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e23, 0x70, @empty, 0x8}}, 0xde4, 0x4df8, 0x7, 0x8, 0x5}, &(0x7f0000000400)=0x98) syz_emit_ethernet(0x52, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a583e2", 0xf, 0x2c, 0xff, @remote, @local, {[@routing={0x8, 0x0, 0x0, 0xe}], {{0x8000, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xf5f69f952cb74554, 0xffffffffffffffff, 0x6a855000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001440)={&(0x7f0000001240)="0883127a0b5c48b3329e67d6b0b509727b40ee2bed0aba9afb1563897543e22f77177acf1e068b9ebdb370073514dcdcd7e37d067c5697df2bb0570fe171eea3ca43c4f1c2af2b689adbd61d8bd64f85cbe2988ed5678df5eef3dca6b66673917d95395b8fdbd996ef907c4e50b87d0144fbd789c0c365076337924de267c8eead1ca49683b50a335ce453446f22c0832c", &(0x7f0000001300)=""/166, &(0x7f00000013c0)="af333a908368d3c3f1cd9b6743d0bcf718feca0ce8002b0be67feb80ec4e8ca2b733c812d565cc1882fd27395fc69a6b71277baf06fa09bc8aac70e5363d045b79cd62b635f4ee63404e0e6003dd", &(0x7f0000000c00)="ea7181846e5c71a78d08381a14c4e59a01ca44bbc28abc328110c62ac74e17f5fb556a450693afc7d3f4a2bcafac2799bddddc432973", 0x4, r1, 0x4}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r9 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8) 3.783627076s ago: executing program 7 (id=2435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}, 0x1, 0xe4ffffff}, 0x0) 3.783220396s ago: executing program 4 (id=2436): unshare(0x2c040480) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x4000c, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@norecovery}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@nodelalloc, 0x32}]}, 0x1, 0x4f0, &(0x7f00000003c0)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac141437000000000000000000000000000000000000000092010000000000000600000000000000ffff00000000020000000800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffbf000000002abd70000435000002000100200000000000000048000300"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x3e) r4 = semget$private(0x0, 0x3, 0x4e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) semtimedop(r4, &(0x7f0000000040)=[{0x3, 0x5, 0x1800}, {0x3, 0x5, 0x800}, {0x2, 0x1, 0x800}], 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") unshare(0x8000000) 3.717496542s ago: executing program 7 (id=2437): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000004c0)={0x0, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={r2, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}]}, &(0x7f00000002c0)=0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@errors_remount}]}, 0x0, 0x782, &(0x7f0000000700)="$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") getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x2}, 0x8) clock_getres(0xeaffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000440), &(0x7f0000000480)=0x4) capset(0x0, &(0x7f0000000280)) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(r5, &(0x7f0000000340)='./bus\x00', 0x3e3283, 0x68) write(r7, &(0x7f0000004200)='t', 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendfile(r7, r6, 0x0, 0x3ffff) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') read$watch_queue(r8, &(0x7f00000008c0)=""/68, 0x44) write(r5, &(0x7f0000000a00)="c788", 0x2) r9 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="f2000000040000000000000001000000950000009c000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000029c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x4c) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000380)=0x400, 0xfffffffffffff5fc, 0x0) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9b4}, 0x94) futex(&(0x7f0000000200)=0x2, 0x7, 0x2, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0x2) 3.716950512s ago: executing program 3 (id=2439): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)={0x144, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x144}, 0x1, 0x0, 0x0, 0x50}, 0x20040055) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0xfffe) r1 = socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0xfffe, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x493e0}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.548536707s ago: executing program 4 (id=2441): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600fff000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000000000000008000200095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 3.50597207s ago: executing program 9 (id=2442): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00fc0000000000"], 0x38}}, 0x10) 3.297351129s ago: executing program 9 (id=2443): syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0xb75, 0x4) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x44080040) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setresuid(0xee01, 0xee00, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) 2.993447275s ago: executing program 3 (id=2444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100050808004149014006040800", 0x58}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, 0x0, 0x284182, 0x0) sendmmsg$unix(r4, &(0x7f0000004640)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040095}}], 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x800) sendmsg$NFT_MSG_GETFLOWTABLE(r0, 0x0, 0x800) 2.993145356s ago: executing program 4 (id=2445): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) r0 = socket$netlink(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 'lo\x00'}}, 0x1e) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfb61cb0106df6c98}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x411, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r3, &(0x7f00000024c0)=""/205, 0x4c, 0x53) 2.958828768s ago: executing program 8 (id=2446): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x10) (fail_nth: 4) 2.704304371s ago: executing program 8 (id=2447): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0xea60}}, 0x100) rename(&(0x7f0000000500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8000, 0x20, 0x5, 0x2, {{0x33, 0x4, 0x3, 0x2b, 0xcc, 0x64, 0x0, 0xb, 0x4, 0x0, @private=0xa010101, @private=0xa010100, {[@rr={0x7, 0x27, 0x3b, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x36}, @loopback, @private=0xa010101, @multicast2, @remote, @loopback, @broadcast]}, @noop, @cipso={0x86, 0x42, 0xffffffffffffffff, [{0xb1609d8152cbee6f, 0x9, "fe077538e4cc90"}, {0x1, 0xa, "26c7740a4de45e1a"}, {0x7, 0xf, "17d944a0516db50d3a921a53de"}, {0x7, 0xb, "38f7be738383d25a1f"}, {0x2, 0xf, "66aa53a319b9058d3cece553e2"}]}, @generic={0xf, 0x11, "1edbc2ab42eb0bcdfec3ceda0c8c53"}, @generic={0x44, 0xf, "e837b4017e9896ada3f4284301"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x5b, [@remote, @broadcast]}, @lsrr={0x83, 0x13, 0x10, [@local, @empty, @local, @loopback]}, @end, @ssrr={0x89, 0xb, 0xc6, [@loopback, @private=0xa010101]}]}}}}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f00000002c0)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@data_journal}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9) syz_clone3(&(0x7f0000000340)={0x200103000, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@deltfilter={0x2c, 0x2d, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xf}, {0x0, 0xfff2}, {0xfff1, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x9d}]}, 0x2c}}, 0x10) bind$netlink(r3, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x80}, 0xc) r4 = creat(&(0x7f0000000200)='./file1\x00', 0x18) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000280)=0xb) 2.609390429s ago: executing program 3 (id=2448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000020000090900010073797a31000000007cf5ff00030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006408000a40000000020b00070066696c7465"], 0xc4}, 0x1, 0x0, 0x0, 0x24004900}, 0x2000) 2.607924589s ago: executing program 9 (id=2449): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 2.523064667s ago: executing program 3 (id=2450): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000003c0)="882d960004000000fc000000", 0xc}], 0x1}, 0x4048043) 2.466004902s ago: executing program 7 (id=2451): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(0x3) 2.37621039s ago: executing program 9 (id=2452): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r1, 0x1, 0x9, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apm_bios_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}]}, 0x54}}, 0x4044) 1.213350003s ago: executing program 9 (id=2453): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00fc00"], 0x38}}, 0x10) 1.152938568s ago: executing program 8 (id=2454): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x80000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) poll(&(0x7f0000000040)=[{r0, 0x84e0}], 0x1, 0x1000) 1.152394028s ago: executing program 9 (id=2455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0x20c89f, 0x1c881, 0x1, 0xd1}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002b"], 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x2800000a) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r6, 0x1) sendfile(r5, r6, 0x0, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0200000005000000020000000000000003000000000000000000c9da"], 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x5, 0x65, 0x1a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x20, 0x1, 0x7e, 0x69db}}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000006000000181a0000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000008600000018230000000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff8f82e0ff000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xfd, &(0x7f00000004c0)=""/253, 0x41100, 0x4e, '\x00', r8, @fallback=0x2, r9, 0x8, &(0x7f0000000780)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x10, 0xffff8001, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000800), &(0x7f0000000840)=[{0x1, 0x1, 0x9, 0x8}, {0x0, 0x4, 0xa, 0x7}, {0x3, 0x4, 0x10, 0x6}], 0x10, 0x6}, 0x94) 1.101818583s ago: executing program 3 (id=2456): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xfc, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xcc, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0xe, 0x0, 0x0, 0x2], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x10, 0xc, 0x5, 0x9, 0xa, 0x4, 0x3, 0x9, 0x8, 0xe, 0x9, 0xa, 0x2, 0x0, 0x5], 0x1, [0x7, 0x1, 0x1, 0x8001, 0xf84, 0x0, 0x4, 0x9, 0x2, 0x1, 0xa, 0x74, 0x1, 0x2, 0x40, 0x2], [0x3, 0x80, 0x2, 0xfff8, 0xb28, 0xff, 0x5, 0x3, 0x2, 0x200, 0x0, 0x101, 0x3db, 0x5, 0x3ff, 0x5]}}]}}]}, 0xfc}}, 0x0) socket$netlink(0x10, 0x3, 0x9) acct(0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x2802, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) gettid() semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x915b, 0x800}], 0x1, &(0x7f0000000100)={0x77359400}) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200404, &(0x7f00000005c0)={[{@noblock_validity}, {@sb={'sb', 0x3d, 0x6}}, {}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@debug}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000700)="$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") creat(&(0x7f0000000180)='./file0\x00', 0x81) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(0x0, 0x8000, 0x112) eventfd2(0xffffffff, 0x80800) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, 0x8008, 0x0, 0x12, 0x19, 0x11, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x4]}) mknod$loop(&(0x7f0000000680)='./file0\x00', 0x80, 0x0) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x801, @loopback}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)=0xfe) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000400)=""/235, 0xeb}], 0x1) 865.433913ms ago: executing program 4 (id=2457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/140, 0x8c}], 0x1, 0x3533, 0x401) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000080)=0x2a43, 0x4) mq_timedsend(r2, &(0x7f0000000600)="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", 0xfd1, 0x6, 0x0) mq_timedreceive(r2, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) 865.029913ms ago: executing program 7 (id=2458): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0x1c216, 0x4, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000480)) bpf$ENABLE_STATS(0x20, &(0x7f0000000380), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000c00)='GPL\x00', 0xff7ffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdb, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x24) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01040000000000000000070000050900020073797a30000000000900010073797a310000000008000740000000021400038008000240dc9ebfb7c6000000050800014000000000140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x854}, 0x24004001) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000740)=""/3, 0x3}], &(0x7f00000005c0), 0x2}, 0x20) lseek(0xffffffffffffffff, 0x9, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r3, 0x0, 0x0, 0x40010021, 0x0, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x24044055}, 0x40408c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000000), 0x10) bind$can_raw(r5, &(0x7f0000000080), 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x80) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x20800, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2], 0x1, 0x560, &(0x7f0000001100)="$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") r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0xca42, 0x0) mmap$qrtrtun(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x50, r6, 0x4) mkdirat(0xffffffffffffffff, 0x0, 0x26) open(0x0, 0x148640, 0x78e22799f4a46f8e) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)='cpu.pressure\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) 820.619997ms ago: executing program 4 (id=2459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x103af4, 0x10000, 0xffff, 0x1, 0x2, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001340)=""/4110, 0x100e}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129500, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x30c) 551.533901ms ago: executing program 3 (id=2460): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000009500"/32], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3c}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069107504e191568c04793fadcbefe933e900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) close(0xffffffffffffffff) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000001700000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x4014850) 255.019297ms ago: executing program 8 (id=2461): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000064010101000000000000000000002000ac1414130000000000000000000000004e2200004e230007020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="fe"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 193.446723ms ago: executing program 8 (id=2462): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 137.223457ms ago: executing program 8 (id=2463): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 0s ago: executing program 7 (id=2464): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c010000190011000000000010000000e0000001000000000000000000000000ac1414bb0000000000000000000000004e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="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"], 0x17c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c010000190011000000000010000000e0000001000000000000000000000000ac1414bb0000000000000000000000004e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="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"], 0x17c}}, 0x0) (async) kernel console output (not intermixed with test programs): 2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.307475][ T4008] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.340141][ T9594] netlink: 'syz.0.1817': attribute type 11 has an invalid length. [ 312.449136][ T9594] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1817'. [ 312.669489][ T9605] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 313.350600][ T9605] EXT4-fs (loop0): 1 truncate cleaned up [ 313.725028][ T9605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.798512][ T9620] netlink: 'syz.4.1823': attribute type 10 has an invalid length. [ 313.820068][ T9622] set_capacity_and_notify: 3 callbacks suppressed [ 313.820086][ T9622] loop7: detected capacity change from 0 to 256 [ 313.883017][ T9622] loop7: detected capacity change from 0 to 512 [ 313.910287][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.932436][ T9622] ext3: Unknown parameter 'euid<00000000000000000000' [ 314.015757][ T9624] loop4: detected capacity change from 0 to 4096 [ 314.048883][ T9626] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1829'. [ 314.068213][ T9624] EXT4-fs: Ignoring removed bh option [ 314.077775][ T9624] EXT4-fs: Ignoring removed mblk_io_submit option [ 314.931941][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1832'. [ 315.034601][ T9646] loop4: detected capacity change from 0 to 4096 [ 315.082551][ T9646] EXT4-fs: Ignoring removed bh option [ 315.106123][ T9652] loop0: detected capacity change from 0 to 512 [ 315.171550][ T9660] netlink: 'syz.0.1838': attribute type 10 has an invalid length. [ 315.204402][ T9656] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1837'. [ 315.282000][ T9664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1840'. [ 315.299780][ T9656] netlink: 'syz.3.1837': attribute type 11 has an invalid length. [ 315.328177][ T9656] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1837'. [ 315.574130][ T9672] loop0: detected capacity change from 0 to 4096 [ 315.581489][ T9672] EXT4-fs: Ignoring removed bh option [ 315.599108][ T9672] EXT4-fs: Ignoring removed mblk_io_submit option [ 315.626199][ T9666] loop7: detected capacity change from 0 to 512 [ 315.656772][ T9672] EXT4-fs: Mount option(s) incompatible with ext2 [ 315.785168][ T9656] loop3: detected capacity change from 0 to 512 [ 315.952508][ T9678] loop4: detected capacity change from 0 to 512 [ 315.965532][ T9656] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 316.013997][ T9678] loop4: detected capacity change from 0 to 512 [ 316.055286][ T9678] EXT4-fs: Ignoring removed oldalloc option [ 316.254269][ T9666] EXT4-fs (loop7): 1 orphan inode deleted [ 316.276634][ T9656] EXT4-fs (loop3): 1 truncate cleaned up [ 316.321882][ T9666] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.382116][ T9656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.502217][ T9691] lo speed is unknown, defaulting to 1000 [ 316.576798][ T9701] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1852'. [ 316.684309][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.756117][ T9715] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1855: invalid indirect mapped block 256 (level 2) [ 316.771634][ T9712] EXT4-fs: Ignoring removed bh option [ 316.784955][ T9715] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 316.785518][ T9715] EXT4-fs (loop0): 2 truncates cleaned up [ 316.786401][ T9712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.797429][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 316.820169][ C0] EXT4-fs (loop0): initial error at time 1771918112: ext4_free_branches:1023: inode 11 [ 316.828310][ T9715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.830048][ C0] EXT4-fs (loop0): last error at time 1771918112: ext4_free_branches:1023: inode 11 [ 316.863227][ T8183] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.929015][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.037931][ T9732] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 317.054742][ T9733] EXT4-fs: Ignoring removed bh option [ 317.060810][ T9733] EXT4-fs: Ignoring removed mblk_io_submit option [ 317.086050][ T9733] EXT4-fs: Mount option(s) incompatible with ext2 [ 317.086192][ T9732] EXT4-fs (loop7): orphan cleanup on readonly fs [ 317.137644][ T9732] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.1861: Block bitmap for bg 0 marked uninitialized [ 317.160613][ T9732] loop7: lost filesystem error report for type 5 error -117 [ 317.160943][ T9732] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 317.168322][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 317.168345][ C1] EXT4-fs (loop7): initial error at time 1771918112: ext4_read_block_bitmap_nowait:517 [ 317.168368][ C1] EXT4-fs (loop7): last error at time 1771918112: ext4_read_block_bitmap_nowait:517 [ 317.205297][ T9732] loop7: lost filesystem error report for type 5 error -117 [ 317.205609][ T9732] EXT4-fs (loop7): 1 orphan inode deleted [ 317.385122][ T9753] EXT4-fs: Ignoring removed nobh option [ 317.423811][ T9750] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1865'. [ 317.498074][ T9753] EXT4-fs (loop7): 1 orphan inode deleted [ 317.520876][ T9753] can0: slcan on ttyS3. [ 317.617594][ T9753] can0 (unregistered): slcan off ttyS3. [ 317.710388][ T9750] netlink: 'syz.5.1865': attribute type 11 has an invalid length. [ 317.735621][ T9757] syzkaller0: entered allmulticast mode [ 317.760092][ T9757] syzkaller0: entered promiscuous mode [ 317.791000][ T9757] syzkaller0 (unregistering): left promiscuous mode [ 317.836709][ T9757] syzkaller0 (unregistering): left allmulticast mode [ 317.884069][ T9759] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 317.961299][ T9750] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1865'. [ 318.038859][ T9759] EXT4-fs (loop5): 1 truncate cleaned up [ 318.070129][ T9764] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1868'. [ 318.084024][ T9764] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 318.132475][ T9747] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 13: comm syz.7.1863: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 318.155813][ T9769] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1869'. [ 318.182912][ T9770] lo speed is unknown, defaulting to 1000 [ 318.223354][ T9771] EXT4-fs: Ignoring removed bh option [ 318.238492][ T9773] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 318.329246][ T9773] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 318.353632][ T9773] EXT4-fs (loop4): write access unavailable, skipping orphan cleanup [ 318.505549][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 318.505569][ T28] audit: type=1326 audit(1771918114.005:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9778 comm="syz.5.1873" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4cdbbdc629 code=0x0 [ 318.557870][ T9783] tipc: Started in network mode [ 318.624483][ T9783] tipc: Node identity 4, cluster identity 4711 [ 318.631033][ T9783] tipc: Node number set to 4 [ 318.662447][ T9785] EXT4-fs: Ignoring removed orlov option [ 318.713871][ T28] audit: type=1400 audit(1771918114.215:2234): avc: denied { rename } for pid=9784 comm="syz.7.1875" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 318.738173][ T28] audit: type=1400 audit(1771918114.215:2235): avc: denied { unlink } for pid=9784 comm="syz.7.1875" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 318.764481][ T9790] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm syz.4.1870: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 318.767067][ T9785] netlink: 'syz.7.1875': attribute type 4 has an invalid length. [ 318.783602][ T9790] EXT4-fs (loop4): Remounting filesystem read-only [ 318.840323][ T9770] delete_channel: no stack [ 318.845137][ T9770] delete_channel: no stack [ 319.010883][ T9798] set_capacity_and_notify: 10 callbacks suppressed [ 319.010903][ T9798] loop7: detected capacity change from 0 to 8192 [ 319.013708][ T9796] loop4: detected capacity change from 0 to 4096 [ 319.033926][ T9796] EXT4-fs: Ignoring removed bh option [ 319.046174][ T9796] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.058592][ T7717] loop7: p1 p2 < > p3 p4 [ 319.063248][ T7717] loop7: p1 start 2382366175 is beyond EOD, truncated [ 319.077581][ T7717] loop7: p3 start 67108864 is beyond EOD, truncated [ 319.088129][ T7717] loop7: p4 size 33619971 extends beyond EOD, truncated [ 319.098050][ T9796] loop4: detected capacity change from 0 to 512 [ 319.106738][ T9798] loop7: p1 p2 < > p3 p4 [ 319.111773][ T9798] loop7: p1 start 2382366175 is beyond EOD, truncated [ 319.119980][ T9798] loop7: p3 start 67108864 is beyond EOD, truncated [ 319.126912][ T9798] loop7: p4 size 33619971 extends beyond EOD, truncated [ 319.150291][ T28] audit: type=1400 audit(1771918114.655:2236): avc: denied { ioctl } for pid=9797 comm="syz.7.1878" path="socket:[27670]" dev="sockfs" ino=27670 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 319.249305][ T9808] xt_TCPMSS: Only works on TCP SYN packets [ 319.250479][ T28] audit: type=1400 audit(1771918114.685:2237): avc: denied { getopt } for pid=9797 comm="syz.7.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 319.267967][ T9808] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1882'. [ 319.310404][ T9806] netlink: 'syz.7.1883': attribute type 11 has an invalid length. [ 319.385867][ T7717] udevd[7717]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 319.398280][ T7724] udevd[7724]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 319.510975][ T9806] loop7: detected capacity change from 0 to 512 [ 319.522352][ T9813] loop3: detected capacity change from 0 to 512 [ 319.529418][ T9813] EXT4-fs: Ignoring removed i_version option [ 319.545341][ T9819] loop5: detected capacity change from 0 to 1024 [ 319.552874][ T9813] EXT4-fs: Ignoring removed bh option [ 319.570495][ T9813] ext4 filesystem being mounted at /406/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 319.599314][ T9806] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 319.669827][ T9806] EXT4-fs (loop7): 1 truncate cleaned up [ 319.693738][ T8765] udevd[8765]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 319.693771][ T7717] udevd[7717]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 319.760773][ T7786] udevd[7786]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 319.760807][ T7717] udevd[7717]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 319.934354][ T9833] netlink: 'syz.4.1889': attribute type 9 has an invalid length. [ 319.946149][ T9838] __nla_validate_parse: 3 callbacks suppressed [ 319.946166][ T9838] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1888'. [ 319.982699][ T9837] netlink: 'syz.0.1891': attribute type 10 has an invalid length. [ 320.093274][ T9838] netlink: 'syz.5.1888': attribute type 11 has an invalid length. [ 320.129301][ T9838] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1888'. [ 320.141081][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1898'. [ 320.156463][ T9853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1896'. [ 320.171005][ T9851] loop7: detected capacity change from 0 to 1024 [ 320.192185][ T9858] loop4: detected capacity change from 0 to 4096 [ 320.211261][ T9858] EXT4-fs: Ignoring removed bh option [ 320.214498][ T9851] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 320.229197][ T9858] EXT4-fs: Ignoring removed mblk_io_submit option [ 320.289491][ T9853] netlink: 'syz.3.1896': attribute type 11 has an invalid length. [ 320.297293][ T9858] loop4: detected capacity change from 0 to 512 [ 320.332529][ T9853] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1896'. [ 320.366046][ T9863] loop7: detected capacity change from 0 to 512 [ 320.397313][ T9863] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 320.676399][ T9853] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 320.748297][ T9869] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.781870][ T28] audit: type=1400 audit(1771918116.285:2238): avc: denied { rename } for pid=9868 comm="syz.7.1901" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 320.877747][ T9830] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 320.891267][ T9853] EXT4-fs (loop3): 1 truncate cleaned up [ 321.054651][ T9830] EXT4-fs (loop5): 1 truncate cleaned up [ 321.837070][ T9882] netlink: 'syz.0.1906': attribute type 10 has an invalid length. [ 321.849802][ T9886] EXT4-fs: Ignoring removed bh option [ 321.856185][ T9886] EXT4-fs: Ignoring removed mblk_io_submit option [ 321.868116][ T9886] EXT4-fs: Mount option(s) incompatible with ext2 [ 321.882013][ T9889] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1907'. [ 322.023828][ T9889] netlink: 'syz.7.1907': attribute type 11 has an invalid length. [ 322.268732][ T9899] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 322.357252][ T9889] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1907'. [ 322.420474][ T9899] EXT4-fs (loop7): 1 truncate cleaned up [ 322.606914][ T9905] openvswitch: netlink: Missing key (keys=40, expected=80) [ 322.691632][ T9907] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1912'. [ 322.749327][ T9907] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1912'. [ 322.774779][ T9909] EXT4-fs: Ignoring removed bh option [ 322.935828][ T28] audit: type=1326 audit(1771918118.435:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.7.1911" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41e07bc629 code=0x0 [ 323.017823][ T9919] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1916'. [ 323.131777][ T9919] netlink: 'syz.0.1916': attribute type 11 has an invalid length. [ 323.192136][ T9931] lo speed is unknown, defaulting to 1000 [ 323.359137][ T9919] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 323.383831][ T9919] EXT4-fs (loop0): 1 truncate cleaned up [ 323.903414][ T9941] syzkaller0: entered promiscuous mode [ 323.925813][ T9941] syzkaller0: entered allmulticast mode [ 324.045196][ T9948] netlink: 'syz.3.1923': attribute type 11 has an invalid length. [ 324.089003][ T9957] netlink: 'syz.5.1926': attribute type 10 has an invalid length. [ 324.165598][ T9961] set_capacity_and_notify: 8 callbacks suppressed [ 324.165676][ T9961] loop0: detected capacity change from 0 to 4096 [ 324.201668][ T28] audit: type=1326 audit(1771918119.705:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9968 comm="syz.5.1932" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cdbbdc629 code=0x0 [ 324.244048][ T9961] EXT4-fs: Ignoring removed bh option [ 324.343645][ T9948] loop3: detected capacity change from 0 to 512 [ 324.455022][ T9948] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 324.483195][ T9948] EXT4-fs (loop3): 1 truncate cleaned up [ 324.836539][ T9990] loop3: detected capacity change from 0 to 128 [ 324.954037][ T9998] netlink: 'syz.3.1940': attribute type 10 has an invalid length. [ 325.059726][T10004] FAULT_INJECTION: forcing a failure. [ 325.059726][T10004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.073239][T10004] CPU: 1 UID: 0 PID: 10004 Comm: syz.5.1942 Tainted: G W syzkaller #0 PREEMPT(full) [ 325.073279][T10004] Tainted: [W]=WARN [ 325.073286][T10004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.073299][T10004] Call Trace: [ 325.073305][T10004] [ 325.073314][T10004] __dump_stack+0x1d/0x30 [ 325.073344][T10004] dump_stack_lvl+0x95/0xd0 [ 325.073369][T10004] dump_stack+0x15/0x1b [ 325.073467][T10004] should_fail_ex+0x263/0x280 [ 325.073494][T10004] should_fail+0xb/0x20 [ 325.073516][T10004] should_fail_usercopy+0x1a/0x20 [ 325.073606][T10004] _copy_from_user+0x1c/0xb0 [ 325.073688][T10004] ___sys_sendmsg+0xc1/0x1e0 [ 325.073733][T10004] __x64_sys_sendmsg+0xd4/0x160 [ 325.073825][T10004] x64_sys_call+0x194c/0x3020 [ 325.073853][T10004] do_syscall_64+0x12c/0x370 [ 325.073905][T10004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.073931][T10004] RIP: 0033:0x7f4cdbbdc629 [ 325.073948][T10004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.073965][T10004] RSP: 002b:00007f4cda637028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.074024][T10004] RAX: ffffffffffffffda RBX: 00007f4cdbe55fa0 RCX: 00007f4cdbbdc629 [ 325.074037][T10004] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 325.074052][T10004] RBP: 00007f4cda637090 R08: 0000000000000000 R09: 0000000000000000 [ 325.074067][T10004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.074081][T10004] R13: 00007f4cdbe56038 R14: 00007f4cdbe55fa0 R15: 00007ffe45ed5658 [ 325.074100][T10004] [ 325.290878][T10016] loop3: detected capacity change from 0 to 4096 [ 325.363168][T10016] EXT4-fs: Ignoring removed bh option [ 325.394336][T10021] __nla_validate_parse: 3 callbacks suppressed [ 325.394366][T10021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1949'. [ 325.622711][T10027] netlink: 'syz.5.1948': attribute type 11 has an invalid length. [ 325.643474][T10027] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1948'. [ 325.697341][ T28] audit: type=1400 audit(1771918121.176:2241): avc: denied { recv } for pid=10013 comm="syz.7.1946" saddr=10.128.0.163 src=45994 daddr=10.128.0.52 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 326.137290][ T28] audit: type=1326 audit(1771918121.636:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.3.1952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f904874c629 code=0x0 [ 326.153261][T10019] loop5: detected capacity change from 0 to 512 [ 326.206783][ T28] audit: type=1326 audit(1771918121.716:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10037 comm="syz.4.1953" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f839420c629 code=0x0 [ 326.245490][T10019] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 326.283412][T10040] loop7: detected capacity change from 0 to 128 [ 326.293880][T10040] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.1954'. [ 326.303317][T10040] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.1954'. [ 326.313737][T10040] vhci_hcd vhci_hcd.4: invalid port number 254 [ 326.320635][T10040] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 326.324988][T10019] EXT4-fs (loop5): 1 truncate cleaned up [ 326.470041][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1959'. [ 326.482471][T10051] ip6gre1: entered promiscuous mode [ 326.488161][T10051] ip6gre1: entered allmulticast mode [ 326.711638][T10062] loop0: detected capacity change from 0 to 4096 [ 326.719078][T10062] EXT4-fs: Ignoring removed bh option [ 327.204420][T10073] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1966'. [ 327.452362][T10084] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1969'. [ 327.486280][T10086] wg1: entered promiscuous mode [ 327.491271][T10086] wg1: entered allmulticast mode [ 327.515217][T10083] netlink: 'syz.7.1970': attribute type 11 has an invalid length. [ 327.524869][T10083] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1970'. [ 327.592806][T10090] lo speed is unknown, defaulting to 1000 [ 327.607123][ T3309] EXT4-fs unmount: 38 callbacks suppressed [ 327.607143][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.625138][ T28] audit: type=1326 audit(1771918123.116:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10092 comm="syz.5.1974" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cdbbdc629 code=0x0 [ 327.822663][ T28] audit: type=1326 audit(1771918123.236:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10095 comm="syz.0.1975" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8caddfc629 code=0x0 [ 327.866957][T10083] loop7: detected capacity change from 0 to 512 [ 327.906829][T10083] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 327.933536][T10083] EXT4-fs (loop7): 1 truncate cleaned up [ 327.952179][T10101] loop4: detected capacity change from 0 to 4096 [ 327.952524][T10101] EXT4-fs: Ignoring removed bh option [ 327.989852][T10083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.280335][ T8183] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.759785][T10123] loop3: detected capacity change from 0 to 256 [ 328.814672][T10123] FAT-fs (loop3): Directory bread(block 64) failed [ 328.822636][T10123] FAT-fs (loop3): Directory bread(block 65) failed [ 328.829734][T10123] FAT-fs (loop3): Directory bread(block 66) failed [ 328.837680][T10123] FAT-fs (loop3): Directory bread(block 67) failed [ 328.844365][T10123] FAT-fs (loop3): Directory bread(block 68) failed [ 328.851728][T10123] FAT-fs (loop3): Directory bread(block 69) failed [ 328.858995][T10123] FAT-fs (loop3): Directory bread(block 70) failed [ 328.867591][T10123] FAT-fs (loop3): Directory bread(block 71) failed [ 328.874313][T10123] FAT-fs (loop3): Directory bread(block 72) failed [ 328.881190][T10123] FAT-fs (loop3): Directory bread(block 73) failed [ 328.897067][T10125] wg1: entered promiscuous mode [ 328.904943][T10125] wg1: entered allmulticast mode [ 329.028010][T10134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1986'. [ 329.041158][T10132] netlink: 'syz.7.1987': attribute type 11 has an invalid length. [ 329.054952][T10134] EXT4-fs: Ignoring removed orlov option [ 329.062482][T10132] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1987'. [ 329.090195][T10130] EXT4-fs: Ignoring removed bh option [ 329.105413][T10134] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=204dc018, mo2=0002] [ 329.114185][T10134] System zones: 0-2, 18-18, 34-35 [ 329.118906][T10130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.132825][T10134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.161272][T10134] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.220037][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.253953][T10132] set_capacity_and_notify: 2 callbacks suppressed [ 329.254006][T10132] loop7: detected capacity change from 0 to 512 [ 329.302240][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.316100][ T28] audit: type=1326 audit(1771918124.816:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10140 comm="syz.3.1988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f904874c629 code=0x0 [ 329.340482][T10132] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 329.412289][ T28] audit: type=1326 audit(1771918124.916:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10146 comm="syz.0.1989" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8caddfc629 code=0x0 [ 329.444515][T10132] EXT4-fs (loop7): 1 truncate cleaned up [ 329.464617][T10132] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.766057][ T8183] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.809667][T10173] loop7: detected capacity change from 0 to 512 [ 329.817001][T10173] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 329.830601][T10173] EXT4-fs (loop7): 1 truncate cleaned up [ 329.837304][T10173] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.851956][ T28] audit: type=1400 audit(1771918125.356:2248): avc: denied { create } for pid=10172 comm="syz.7.1997" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 329.946263][ T8183] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.985381][T10179] loop7: detected capacity change from 0 to 512 [ 330.003539][T10179] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1999: invalid indirect mapped block 256 (level 2) [ 330.018780][T10179] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 330.025876][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 330.041833][ C1] EXT4-fs (loop7): initial error at time 1771918125: ext4_free_branches:1023: inode 11 [ 330.051604][ C1] EXT4-fs (loop7): last error at time 1771918125: ext4_free_branches:1023: inode 11 [ 330.062687][T10179] EXT4-fs (loop7): 2 truncates cleaned up [ 330.069733][T10179] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.096962][T10179] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1999: bg 0: block 5: invalid block bitmap [ 330.132601][ T8183] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.247325][T10183] loop3: detected capacity change from 0 to 4096 [ 330.268093][T10183] EXT4-fs: Ignoring removed bh option [ 330.283243][T10183] EXT4-fs: Ignoring removed mblk_io_submit option [ 330.303733][T10183] EXT4-fs: Mount option(s) incompatible with ext2 [ 330.361164][ T28] audit: type=1326 audit(1771918125.866:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10194 comm="syz.5.2006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cdbbdc629 code=0x0 [ 330.395441][T10183] loop3: detected capacity change from 0 to 512 [ 330.422942][T10198] loop7: detected capacity change from 0 to 2048 [ 330.433772][T10183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.462263][T10183] ext4 filesystem being mounted at /429/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.018811][T10206] __nla_validate_parse: 1 callbacks suppressed [ 331.018859][T10206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2007'. [ 331.089619][T10206] netlink: 'syz.4.2007': attribute type 11 has an invalid length. [ 331.112802][T10206] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2007'. [ 331.114241][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.296401][T10216] netlink: 'syz.3.2011': attribute type 10 has an invalid length. [ 331.424673][T10206] loop4: detected capacity change from 0 to 512 [ 331.464115][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2009'. [ 331.999392][ T28] audit: type=1326 audit(1771918127.466:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10223 comm="syz.3.2013" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f904874c629 code=0x0 [ 332.195680][T10230] loop5: detected capacity change from 0 to 128 [ 332.281361][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2019'. [ 332.284612][T10241] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2018'. [ 332.355126][T10241] loop4: detected capacity change from 0 to 256 [ 332.468308][T10250] netlink: 'syz.5.2022': attribute type 10 has an invalid length. [ 332.519054][T10252] loop4: detected capacity change from 0 to 4096 [ 332.535917][T10252] EXT4-fs: Ignoring removed bh option [ 332.725248][T10262] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2028'. [ 332.832945][T10267] netlink: 'syz.5.2028': attribute type 11 has an invalid length. [ 332.841140][T10267] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2028'. [ 333.088338][T10267] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 333.109448][T10267] EXT4-fs (loop5): 1 truncate cleaned up [ 333.119276][T10267] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.201348][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2029'. [ 333.411615][ T4341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.894080][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2031'. [ 334.173373][T10292] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2032'. [ 334.364799][T10294] netlink: 'syz.5.2034': attribute type 10 has an invalid length. [ 334.403499][T10295] set_capacity_and_notify: 1 callbacks suppressed [ 334.403526][T10295] loop7: detected capacity change from 0 to 256 [ 334.542499][T10295] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 334.702313][ T28] audit: type=1326 audit(1771918130.207:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.4.2039" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f839420c629 code=0x0 [ 334.713533][T10303] netlink: 'syz.5.2038': attribute type 5 has an invalid length. [ 334.763966][T10295] FAT-fs (loop7): error, corrupted file size (i_pos 196, 60330) [ 334.789664][T10313] loop5: detected capacity change from 0 to 256 [ 334.806694][T10295] FAT-fs (loop7): Filesystem has been set read-only [ 334.811238][T10313] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 334.844286][T10313] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 334.845343][T10295] FAT-fs (loop7): error, corrupted file size (i_pos 196, 60330) [ 334.974761][T10317] netlink: 'syz.3.2041': attribute type 11 has an invalid length. [ 335.068999][T10321] loop7: detected capacity change from 0 to 512 [ 335.100368][T10321] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 335.145457][T10321] EXT4-fs (loop7): orphan cleanup on readonly fs [ 335.165837][T10321] Quota error (device loop7): find_block_dqentry: Quota for id 0 referenced but not present [ 335.170329][T10317] loop3: detected capacity change from 0 to 512 [ 335.179294][T10321] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 335.202823][T10327] netlink: 'syz.5.2042': attribute type 11 has an invalid length. [ 335.224755][T10321] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.2052: Failed to acquire dquot type 1 [ 335.239616][T10317] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 335.246181][T10321] loop7: lost filesystem error report for type 5 error -5 [ 335.251502][T10321] EXT4-fs (loop7): Remounting filesystem read-only [ 335.259236][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 335.259260][ C0] EXT4-fs (loop7): initial error at time 1771918130: ext4_acquire_dquot:7001 [ 335.259280][ C0] EXT4-fs (loop7): last error at time 1771918130: ext4_acquire_dquot:7001 [ 335.328197][T10317] EXT4-fs (loop3): 1 truncate cleaned up [ 335.331557][T10321] EXT4-fs (loop7): 1 truncate cleaned up [ 335.348830][T10317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.376943][T10321] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 335.423794][T10322] loop5: detected capacity change from 0 to 512 [ 335.477165][ T8183] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.547176][T10322] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 335.639800][T10322] EXT4-fs (loop5): 1 truncate cleaned up [ 335.671811][T10322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.687149][T10340] x_tables: duplicate underflow at hook 1 [ 335.806881][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.951900][T10349] netlink: 'syz.3.2048': attribute type 10 has an invalid length. [ 335.974329][ T4341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.044191][T10350] __nla_validate_parse: 8 callbacks suppressed [ 336.044291][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2049'. [ 336.507151][T10338] lo speed is unknown, defaulting to 1000 [ 336.639655][ T28] audit: type=1326 audit(1771918132.147:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10363 comm="syz.5.2055" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cdbbdc629 code=0x0 [ 336.734984][T10367] loop4: detected capacity change from 0 to 512 [ 336.930018][T10376] loop0: detected capacity change from 0 to 512 [ 336.944856][T10376] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 337.019363][T10380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2057'. [ 337.072710][ T28] audit: type=1326 audit(1771918132.547:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.3.2059" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f904874c629 code=0x0 [ 337.127626][T10376] EXT4-fs (loop0): 1 truncate cleaned up [ 337.142014][T10381] loop4: detected capacity change from 0 to 1024 [ 337.149058][T10381] EXT4-fs: inline encryption not supported [ 337.194283][T10376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.396740][ T28] audit: type=1400 audit(1771918132.907:2254): avc: denied { rmdir } for pid=3309 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.421412][ T3309] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 337.532859][ T3309] EXT4-fs (loop0): Remounting filesystem read-only [ 337.951361][T10390] netlink: 'syz.3.2062': attribute type 10 has an invalid length. [ 338.019497][ T7009] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.207920][T10396] loop4: detected capacity change from 0 to 128 [ 339.236996][T10400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2068'. [ 339.337673][T10400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2068'. [ 339.360776][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.434440][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2067'. [ 339.727879][T10422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2073'. [ 339.764511][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.790889][T10422] netlink: 'syz.4.2073': attribute type 11 has an invalid length. [ 339.820321][T10422] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2073'. [ 339.869415][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.888750][T10424] loop4: detected capacity change from 0 to 512 [ 339.902713][T10428] netlink: 'syz.7.2074': attribute type 10 has an invalid length. [ 339.914838][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.938826][T10428] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 339.944964][T10430] loop3: detected capacity change from 0 to 1024 [ 339.949493][T10428] team0: Failed to send options change via netlink (err -105) [ 339.964917][T10428] team0: Port device dummy0 added [ 339.985976][T10430] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c128, mo2=0002] [ 340.003584][T10430] System zones: 0-1, 3-12 [ 340.009104][T10430] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.009190][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.010625][T10430] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.2075: bad entry in directory: directory entry overrun - offset=60, inode=21519, rec_len=1024, size=1024 fake=0 [ 340.042203][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.124460][T10430] EXT4-fs (loop3): Remounting filesystem read-only [ 340.133675][ T28] audit: type=1400 audit(1771918135.637:2255): avc: denied { read } for pid=10438 comm="syz.5.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 340.196070][T10443] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 340.207962][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 340.219670][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.231769][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.259124][T10439] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 340.279263][T10409] lo speed is unknown, defaulting to 1000 [ 340.544820][ T50] bridge_slave_1: left allmulticast mode [ 340.551039][T10462] loop5: detected capacity change from 0 to 512 [ 341.026895][ T50] bridge_slave_1: left promiscuous mode [ 341.039570][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.087704][T10466] loop7: detected capacity change from 0 to 512 [ 341.108575][T10462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.121413][ T50] bridge_slave_0: left allmulticast mode [ 341.131409][T10466] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 341.145735][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.191600][T10462] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.212402][T10466] EXT4-fs (loop7): 1 truncate cleaned up [ 341.243826][T10466] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.338091][T10437] syz.4.2076 (10437) used greatest stack depth: 7008 bytes left [ 341.395220][ T4341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.494091][T10484] loop4: detected capacity change from 0 to 4096 [ 341.549985][ T50] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 341.564554][ T50] bridge1 (unregistering): left promiscuous mode [ 341.610688][T10487] loop3: detected capacity change from 0 to 1764 [ 341.615884][T10484] EXT4-fs: Ignoring removed bh option [ 341.622833][T10484] EXT4-fs: Ignoring removed mblk_io_submit option [ 341.656392][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.671540][T10484] loop4: detected capacity change from 0 to 512 [ 341.679165][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.737253][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2086'. [ 341.843221][ T50] bond0 (unregistering): Released all slaves [ 341.905827][ T50] bond1 (unregistering): Released all slaves [ 342.013899][ T50] bond2 (unregistering): Released all slaves [ 342.294059][ T50] tipc: Disabling bearer [ 342.309252][ T50] tipc: Left network mode [ 342.326328][ T8183] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.419451][T10506] loop3: detected capacity change from 0 to 512 [ 342.427647][T10409] chnl_net:caif_netlink_parms(): no params data found [ 342.445495][T10506] FAT-fs (loop3): error, corrupted file size (i_pos 51, 9216) [ 342.461685][T10510] loop7: detected capacity change from 0 to 1024 [ 342.479906][T10510] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 342.500438][T10508] loop5: detected capacity change from 0 to 4096 [ 342.510605][T10508] EXT4-fs: Ignoring removed bh option [ 342.521339][ T50] veth1_macvtap: left promiscuous mode [ 342.528252][T10510] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 342.538004][ T50] veth0_macvtap: left promiscuous mode [ 342.543770][T10508] EXT4-fs: Ignoring removed mblk_io_submit option [ 342.550843][ T50] veth1_vlan: left promiscuous mode [ 342.554751][T10510] EXT4-fs (loop7): orphan cleanup on readonly fs [ 342.562995][ T50] veth0_vlan: left promiscuous mode [ 342.575107][T10508] EXT4-fs: Mount option(s) incompatible with ext2 [ 342.611963][T10510] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz.7.2091: Invalid inode table block 0 in block_group 0 [ 342.643613][T10510] loop7: lost filesystem error report for type 5 error -117 [ 342.644349][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 342.658419][ C1] EXT4-fs (loop7): initial error at time 1771918138: __ext4_get_inode_loc:4782 [ 342.667687][ C1] EXT4-fs (loop7): last error at time 1771918138: __ext4_get_inode_loc:4782 [ 342.684612][ T50] pim6reg (unregistering): left allmulticast mode [ 342.697891][T10510] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 342.708243][T10508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.721177][T10508] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 342.737131][T10510] loop7: lost filesystem error report for type 5 error -117 [ 342.737376][T10510] EXT4-fs error (device loop7): ext4_quota_write:7390: inode #3: comm syz.7.2091: mark_inode_dirty error [ 342.764565][T10510] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 342.765414][T10510] Quota error (device loop7): write_blk: dquota write failed [ 342.782507][T10510] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 342.787993][ T4341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.793779][T10510] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.2091: Failed to acquire dquot type 0 [ 342.813310][T10510] loop7: lost filesystem error report for type 5 error -117 [ 342.813847][T10510] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz.7.2091: Invalid inode table block 0 in block_group 0 [ 342.834582][T10510] loop7: lost filesystem error report for type 5 error -117 [ 342.834726][T10510] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 342.851844][T10510] loop7: lost filesystem error report for type 5 error -117 [ 342.852543][T10510] EXT4-fs error (device loop7): ext4_ext_truncate:4528: inode #15: comm syz.7.2091: mark_inode_dirty error [ 342.883913][T10531] EXT4-fs: Ignoring removed bh option [ 342.891478][ T50] team_slave_1 (unregistering): left promiscuous mode [ 342.899635][T10510] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 342.899739][T10510] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz.7.2091: Invalid inode table block 0 in block_group 0 [ 342.922284][ T50] team0 (unregistering): Port device team_slave_1 removed [ 342.922378][T10510] loop7: lost filesystem error report for type 5 error -117 [ 342.929724][T10510] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 342.931720][T10531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.946805][T10510] loop7: lost filesystem error report for type 5 error -117 [ 342.961497][T10510] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 342.969994][ T50] team_slave_0 (unregistering): left promiscuous mode [ 342.981050][T10536] netlink: 'syz.5.2097': attribute type 10 has an invalid length. [ 342.985360][T10510] loop7: lost filesystem error report for type 5 error -117 [ 343.037314][ T50] team0 (unregistering): Port device team_slave_0 removed [ 343.051958][T10510] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz.7.2091: Invalid inode table block 0 in block_group 0 [ 343.080291][T10510] loop7: lost filesystem error report for type 5 error -117 [ 343.080697][T10510] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 343.095112][ T50] dummy0 (unregistering): left promiscuous mode [ 343.109089][ T50] team0 (unregistering): Port device dummy0 removed [ 343.111680][T10510] loop7: lost filesystem error report for type 5 error -117 [ 343.117035][T10538] FAULT_INJECTION: forcing a failure. [ 343.117035][T10538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.129013][T10510] EXT4-fs error (device loop7): ext4_truncate:4587: inode #15: comm syz.7.2091: mark_inode_dirty error [ 343.129046][T10510] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 343.129123][T10510] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 343.129245][T10510] EXT4-fs (loop7): 1 truncate cleaned up [ 343.129749][T10510] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 343.245035][T10538] CPU: 0 UID: 0 PID: 10538 Comm: syz.4.2098 Tainted: G W syzkaller #0 PREEMPT(full) [ 343.245132][T10538] Tainted: [W]=WARN [ 343.245140][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 343.245152][T10538] Call Trace: [ 343.245157][T10538] [ 343.245192][T10538] __dump_stack+0x1d/0x30 [ 343.245294][T10538] dump_stack_lvl+0x95/0xd0 [ 343.245319][T10538] dump_stack+0x15/0x1b [ 343.245349][T10538] should_fail_ex+0x263/0x280 [ 343.245375][T10538] should_fail+0xb/0x20 [ 343.245396][T10538] should_fail_usercopy+0x1a/0x20 [ 343.245458][T10538] _copy_from_user+0x1c/0xb0 [ 343.245523][T10538] get_timespec64+0x4c/0x100 [ 343.245597][T10538] __se_sys_clock_nanosleep+0x10b/0x260 [ 343.245650][T10538] __x64_sys_clock_nanosleep+0x55/0x70 [ 343.245747][T10538] x64_sys_call+0x146e/0x3020 [ 343.245783][T10538] do_syscall_64+0x12c/0x370 [ 343.245830][T10538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.245856][T10538] RIP: 0033:0x7f83941ccece [ 343.245876][T10538] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 343.245897][T10538] RSP: 002b:00007f8392c5ef78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 343.245976][T10538] RAX: ffffffffffffffda RBX: 00007f8392c5f6c0 RCX: 00007f83941ccece [ 343.245990][T10538] RDX: 00007f8392c5efd0 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.246002][T10538] RBP: 00007f8392c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 343.246015][T10538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.246027][T10538] R13: 00007f8394486038 R14: 00007f8394485fa0 R15: 00007ffd374f4cb8 [ 343.246049][T10538] [ 343.252285][ T8183] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.492783][T10409] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.512664][T10409] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.525088][T10409] bridge_slave_0: entered allmulticast mode [ 343.545653][T10544] EXT4-fs: Ignoring removed bh option [ 343.554092][T10544] EXT4-fs: Ignoring removed mblk_io_submit option [ 343.563905][T10409] bridge_slave_0: entered promiscuous mode [ 343.570811][T10544] EXT4-fs: Mount option(s) incompatible with ext2 [ 343.573022][T10409] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.584885][T10409] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.614881][T10409] bridge_slave_1: entered allmulticast mode [ 343.622617][T10409] bridge_slave_1: entered promiscuous mode [ 343.631624][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.696720][T10409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.720247][T10409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.765413][T10409] team0: Port device team_slave_0 added [ 343.775411][T10409] team0: Port device team_slave_1 added [ 343.865924][T10409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.877828][T10409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.906777][ T28] audit: type=1326 audit(1771918139.398:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10569 comm="syz.3.2104" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f904874c629 code=0x0 [ 343.938525][T10409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.949708][T10572] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2106'. [ 343.960449][T10409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.974993][T10409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.027800][T10584] netlink: 'syz.7.2109': attribute type 10 has an invalid length. [ 344.029254][T10409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.080226][T10409] hsr_slave_0: entered promiscuous mode [ 344.086624][T10409] hsr_slave_1: entered promiscuous mode [ 344.092600][T10409] debugfs: 'hsr0' already exists in 'hsr' [ 344.099052][T10409] Cannot create hsr debugfs directory [ 344.176314][T10590] netlink: 'syz.7.2111': attribute type 21 has an invalid length. [ 344.205377][T10590] netlink: 'syz.7.2111': attribute type 1 has an invalid length. [ 344.214304][T10590] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2111'. [ 344.260138][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2111'. [ 344.312363][T10409] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 344.358709][T10409] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 344.376412][T10409] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 344.455842][T10588] lo speed is unknown, defaulting to 1000 [ 344.470822][T10409] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 344.491509][ T7717] loop4: p1 < > p2 p4 < p5 > [ 344.498057][ T7717] loop4: partition table partially beyond EOD, truncated [ 344.518874][ T7717] loop4: p1 start 134217728 is beyond EOD, truncated [ 344.548191][T10611] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2114'. [ 344.557439][ T7717] loop4: p2 size 591360 extends beyond EOD, truncated [ 344.578616][ T7717] loop4: p5 size 591360 extends beyond EOD, truncated [ 344.591845][T10611] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2114'. [ 344.607612][T10591] loop4: p1 < > p2 p4 < p5 > [ 344.615008][T10409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.624333][T10591] loop4: partition table partially beyond EOD, truncated [ 344.642896][T10591] loop4: p1 start 134217728 is beyond EOD, truncated [ 344.653414][T10409] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.669549][T10591] loop4: p2 size 591360 extends beyond EOD, truncated [ 344.675136][ T4506] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.678285][T10591] loop4: p5 size 591360 extends beyond EOD, [ 344.684015][ T4506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.728829][T10591] truncated [ 344.752821][T10625] netlink: 'syz.7.2116': attribute type 10 has an invalid length. [ 344.756089][ T4506] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.767845][ T4506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.001560][T10409] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 345.013455][T10626] netlink: 'syz.3.2115': attribute type 19 has an invalid length. [ 345.054232][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2115'. [ 345.081881][T10409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.165320][T10626] netlink: 'syz.3.2115': attribute type 19 has an invalid length. [ 345.182290][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2115'. [ 345.360337][T10409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.482542][T10643] set_capacity_and_notify: 5 callbacks suppressed [ 345.482656][T10643] loop4: detected capacity change from 0 to 4096 [ 345.744895][T10409] veth0_vlan: entered promiscuous mode [ 345.756811][T10409] veth1_vlan: entered promiscuous mode [ 345.795349][T10409] veth0_macvtap: entered promiscuous mode [ 345.798207][T10660] loop4: detected capacity change from 0 to 4096 [ 345.837541][T10409] veth1_macvtap: entered promiscuous mode [ 345.849887][T10409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.857694][T10660] EXT4-fs: Ignoring removed bh option [ 345.863244][T10660] EXT4-fs: Ignoring removed mblk_io_submit option [ 345.905032][T10409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.920202][T10660] loop4: detected capacity change from 0 to 512 [ 345.930459][ T4506] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.939461][ T4506] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.973547][ T50] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.984036][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.060871][ T28] audit: type=1326 audit(1771918141.568:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.4.2124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f839420c629 code=0x0 [ 346.104893][T10671] netlink: 'syz.7.2125': attribute type 10 has an invalid length. [ 346.633900][T10679] loop8: detected capacity change from 0 to 8192 [ 346.654210][ T28] audit: type=1400 audit(1771918142.158:2258): avc: denied { mounton } for pid=10678 comm="syz.8.2127" path="/file0" dev="ramfs" ino=30228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 347.049433][T10691] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 347.215192][ T28] audit: type=1400 audit(1771918142.718:2259): avc: denied { create } for pid=10689 comm="syz.4.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 347.734115][T10695] loop3: detected capacity change from 0 to 4096 [ 347.792811][T10695] EXT4-fs: Ignoring removed bh option [ 347.915512][T10695] EXT4-fs: Ignoring removed mblk_io_submit option [ 347.968483][T10695] EXT4-fs: Mount option(s) incompatible with ext2 [ 348.017015][ T28] audit: type=1326 audit(1771918143.518:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10698 comm="syz.7.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e07bc629 code=0x7ffc0000 [ 348.127232][T10695] loop3: detected capacity change from 0 to 512 [ 348.136771][T10699] loop7: detected capacity change from 0 to 2048 [ 348.143756][ T28] audit: type=1326 audit(1771918143.528:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10698 comm="syz.7.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f41e07bc629 code=0x7ffc0000 [ 348.227690][T10695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.271096][ T7724] loop7: p3 p4 < > [ 348.280807][ T7724] loop7: p3 start 11362048 is beyond EOD, truncated [ 348.291040][ T28] audit: type=1326 audit(1771918143.528:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10698 comm="syz.7.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e07bc629 code=0x7ffc0000 [ 348.326806][T10695] ext4 filesystem being mounted at /462/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.426866][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.443731][ T28] audit: type=1326 audit(1771918143.548:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10698 comm="syz.7.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f41e07bc629 code=0x7ffc0000 [ 348.539055][ T28] audit: type=1326 audit(1771918143.548:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10698 comm="syz.7.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e07bc629 code=0x7ffc0000 [ 348.636460][ T28] audit: type=1326 audit(1771918143.548:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10698 comm="syz.7.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f41e07bc629 code=0x7ffc0000 [ 348.741809][ T28] audit: type=1326 audit(1771918143.548:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10698 comm="syz.7.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e07bc629 code=0x7ffc0000 [ 348.881221][T10699] loop7: p3 p4 < > [ 348.900465][T10699] loop7: p3 start 11362048 is beyond EOD, truncated [ 349.001790][ T2999] loop7: p3 p4 < > [ 349.015771][ T2999] loop7: p3 start 11362048 is beyond EOD, truncated [ 349.029336][T10710] netlink: 'syz.8.2136': attribute type 10 has an invalid length. [ 349.110354][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2134'. [ 349.208091][T10710] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 349.231420][T10712] loop4: detected capacity change from 0 to 512 [ 349.239004][T10710] team0: Failed to send options change via netlink (err -105) [ 349.251492][T10712] FAULT_INJECTION: forcing a failure. [ 349.251492][T10712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.285769][T10710] team0: Port device dummy0 added [ 349.311521][T10712] CPU: 1 UID: 0 PID: 10712 Comm: syz.4.2137 Tainted: G W syzkaller #0 PREEMPT(full) [ 349.311559][T10712] Tainted: [W]=WARN [ 349.311567][T10712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 349.311652][T10712] Call Trace: [ 349.311659][T10712] [ 349.311668][T10712] __dump_stack+0x1d/0x30 [ 349.311700][T10712] dump_stack_lvl+0x95/0xd0 [ 349.311727][T10712] dump_stack+0x15/0x1b [ 349.311792][T10712] should_fail_ex+0x263/0x280 [ 349.311819][T10712] should_fail+0xb/0x20 [ 349.311838][T10712] should_fail_usercopy+0x1a/0x20 [ 349.311865][T10712] _copy_from_user+0x1c/0xb0 [ 349.311896][T10712] kstrtouint_from_user+0x69/0xf0 [ 349.311927][T10712] proc_fail_nth_write+0x50/0x160 [ 349.311997][T10712] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 349.312057][T10712] vfs_write+0x269/0x9f0 [ 349.312124][T10712] ? __rcu_read_unlock+0x4e/0x70 [ 349.312146][T10712] ? __fget_files+0x184/0x1c0 [ 349.312168][T10712] ? mutex_lock+0x57/0x90 [ 349.312202][T10712] ksys_write+0xdc/0x1a0 [ 349.312284][T10712] __x64_sys_write+0x40/0x50 [ 349.312355][T10712] x64_sys_call+0x27e1/0x3020 [ 349.312380][T10712] do_syscall_64+0x12c/0x370 [ 349.312474][T10712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.312495][T10712] RIP: 0033:0x7f83941ccece [ 349.312566][T10712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 349.312647][T10712] RSP: 002b:00007f8392c5efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 349.312672][T10712] RAX: ffffffffffffffda RBX: 00007f8392c5f6c0 RCX: 00007f83941ccece [ 349.312741][T10712] RDX: 0000000000000001 RSI: 00007f8392c5f0a0 RDI: 0000000000000004 [ 349.312753][T10712] RBP: 00007f8392c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 349.312766][T10712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.312778][T10712] R13: 00007f8394486038 R14: 00007f8394485fa0 R15: 00007ffd374f4cb8 [ 349.312795][T10712] [ 349.452252][ T7717] udevd[7717]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 349.571787][ T7717] udevd[7717]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 350.038414][T10730] loop8: detected capacity change from 0 to 1024 [ 350.148278][T10730] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 350.163316][T10727] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 350.209627][T10730] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 350.249149][T10730] EXT4-fs error (device loop8): ext4_get_journal_inode:5863: inode #32: comm syz.8.2141: iget: special inode unallocated [ 350.348568][T10730] loop8: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 350.349231][T10730] EXT4-fs (loop8): Remounting filesystem read-only [ 350.358604][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 350.358635][ C0] EXT4-fs (loop8): initial error at time 1771918145: ext4_get_journal_inode:5863: inode 32 [ 350.358667][ C0] EXT4-fs (loop8): last error at time 1771918145: ext4_get_journal_inode:5863: inode 32 [ 350.499059][T10735] lo speed is unknown, defaulting to 1000 [ 350.617313][T10730] EXT4-fs (loop8): no journal found [ 350.622589][T10730] EXT4-fs (loop8): can't get journal size [ 350.662416][T10730] EXT4-fs (loop8): filesystem is read-only [ 350.715108][T10730] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 350.744888][T10409] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.898955][T10762] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2147'. [ 350.917273][T10761] loop7: detected capacity change from 0 to 1024 [ 350.969309][T10761] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 351.036546][T10761] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 351.076739][T10761] EXT4-fs (loop7): orphan cleanup on readonly fs [ 351.104947][T10761] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz.7.2145: Invalid inode table block 0 in block_group 0 [ 351.126164][T10767] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2149'. [ 351.154264][T10761] fserror_report: 1 callbacks suppressed [ 351.154280][T10761] loop7: lost filesystem error report for type 5 error -117 [ 351.170360][T10761] EXT4-fs (loop7): Remounting filesystem read-only [ 351.177764][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 351.177786][ C0] EXT4-fs (loop7): initial error at time 1771918146: __ext4_get_inode_loc:4782 [ 351.177812][ C0] EXT4-fs (loop7): last error at time 1771918146: __ext4_get_inode_loc:4782 [ 351.279003][T10769] loop3: detected capacity change from 0 to 4096 [ 351.307017][T10769] EXT4-fs: Ignoring removed bh option [ 351.313408][T10761] __quota_error: 24 callbacks suppressed [ 351.313454][T10761] Quota error (device loop7): write_blk: dquota write failed [ 351.341432][T10769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.364514][T10761] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 351.392874][T10761] EXT4-fs (loop7): 1 truncate cleaned up [ 351.447187][T10761] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 351.486757][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.684189][ T8183] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.790362][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 352.706586][T10794] loop8: detected capacity change from 0 to 512 [ 352.713100][ T28] audit: type=1400 audit(1771918148.209:2291): avc: denied { associate } for pid=10790 comm="syz.8.2156" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 353.097300][T10794] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.123755][T10794] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.280523][T10801] loop4: detected capacity change from 0 to 2048 [ 353.302055][T10797] loop7: detected capacity change from 0 to 512 [ 353.325357][T10797] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.353231][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'. [ 353.397355][T10409] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.426805][T10806] loop3: detected capacity change from 0 to 4096 [ 353.453295][ T28] audit: type=1400 audit(1771918148.959:2292): avc: denied { setattr } for pid=10796 comm="syz.7.2158" name="cgroup.controllers" dev="loop7" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 353.478810][T10806] EXT4-fs: Ignoring removed bh option [ 353.496522][T10809] netlink: 'syz.4.2163': attribute type 10 has an invalid length. [ 353.529233][ T8183] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.539894][T10806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.667052][T10814] loop4: detected capacity change from 0 to 256 [ 353.739310][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.756106][T10830] loop4: detected capacity change from 0 to 256 [ 353.776654][T10830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2169'. [ 353.867022][T10827] loop8: detected capacity change from 0 to 256 [ 354.024050][T10838] loop7: detected capacity change from 0 to 512 [ 354.385000][T10858] netlink: 'syz.4.2175': attribute type 10 has an invalid length. [ 354.434623][T10862] 8021q: VLANs not supported on vxcan1 [ 354.505740][T10870] EXT4-fs: Ignoring removed bh option [ 354.621917][T10874] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 354.659983][T10877] hub 8-0:1.0: USB hub found [ 354.665474][T10877] hub 8-0:1.0: 8 ports detected [ 354.685261][T10877] netlink: 'syz.3.2180': attribute type 10 has an invalid length. [ 354.694368][T10877] veth1_vlan: left allmulticast mode [ 354.989375][T10881] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2182'. [ 355.477116][T10891] qrtr: Invalid version 255 [ 355.507774][T10908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2187'. [ 355.546954][T10900] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.559590][T10900] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.715565][T10914] netlink: 'syz.3.2188': attribute type 10 has an invalid length. [ 356.163165][T10923] set_capacity_and_notify: 3 callbacks suppressed [ 356.163185][T10923] loop8: detected capacity change from 0 to 512 [ 356.175524][T10920] kexec: Could not allocate control_code_buffer [ 356.206115][T10923] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.2191: invalid block [ 356.246537][T10923] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 356.246888][T10923] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2191: invalid indirect mapped block 4294967295 (level 1) [ 356.256207][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 356.256234][ C0] EXT4-fs (loop8): initial error at time 1771918151: ext4_get_branch:178: inode 11: block 4294967295 [ 356.256271][ C0] EXT4-fs (loop8): last error at time 1771918151: ext4_get_branch:178: inode 11: block 4294967295 [ 356.299181][T10923] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 356.301982][T10923] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2191: invalid indirect mapped block 4294967295 (level 1) [ 356.325958][T10923] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 356.327529][T10923] EXT4-fs (loop8): 2 truncates cleaned up [ 356.400592][T10923] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.454822][T10409] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.479322][T10943] loop7: detected capacity change from 0 to 2048 [ 356.506533][T10953] loop4: detected capacity change from 0 to 2048 [ 356.551903][T10957] loop3: detected capacity change from 0 to 4096 [ 356.569916][T10957] EXT4-fs: Ignoring removed bh option [ 356.603151][T10957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.212450][T10988] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2197'. [ 357.307654][T10992] loop7: detected capacity change from 0 to 1764 [ 357.359704][T10998] netlink: 388 bytes leftover after parsing attributes in process `syz.8.2201'. [ 357.413311][T10992] ISOFS: Unable to identify CD-ROM format. [ 357.438459][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.449508][T11000] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2203'. [ 357.466151][ T23] hid-generic 0004:00A9:0000.000A: unknown main item tag 0x0 [ 357.474556][ T23] hid-generic 0004:00A9:0000.000A: unknown main item tag 0x2 [ 357.482321][ T23] hid-generic 0004:00A9:0000.000A: reserved main item tag 0xe [ 357.508381][T11004] bridge5: entered promiscuous mode [ 357.522898][ T23] hid-generic 0004:00A9:0000.000A: hidraw0: HID v1.01 Device [syz1] on syz0 [ 357.533131][T11004] bridge5: entered allmulticast mode [ 357.544409][T11006] netlink: 'syz.3.2202': attribute type 10 has an invalid length. [ 357.579075][T11009] loop7: detected capacity change from 0 to 512 [ 357.595532][T11007] fido_id[11007]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 357.605756][T11009] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 357.658922][T11009] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2206: bad orphan inode 2 [ 357.670373][T11009] loop7: lost filesystem error report for type 5 error -117 [ 357.671441][T11009] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.702932][T11016] loop4: detected capacity change from 0 to 2048 [ 357.724457][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2208'. [ 357.758965][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2208'. [ 357.794936][T11009] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.807142][ T28] audit: type=1400 audit(1771918153.319:2293): avc: denied { sqpoll } for pid=11018 comm="syz.8.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 358.019044][T11027] loop8: detected capacity change from 0 to 4096 [ 358.027996][T11027] EXT4-fs: Ignoring removed bh option [ 358.285656][T11027] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.614269][T11033] lo speed is unknown, defaulting to 1000 [ 358.797394][ T28] audit: type=1326 audit(1771918154.300:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.7.2215" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41e07bc629 code=0x0 [ 358.859367][ T28] audit: type=1400 audit(1771918154.360:2295): avc: denied { setattr } for pid=11043 comm="syz.3.2216" name="udp" dev="proc" ino=4026532540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 358.913726][T10409] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.926127][ T28] audit: type=1400 audit(1771918154.360:2296): avc: denied { nlmsg_read } for pid=11043 comm="syz.3.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 358.947780][ T28] audit: type=1400 audit(1771918154.360:2297): avc: denied { audit_write } for pid=11043 comm="syz.3.2216" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 358.969595][ T28] audit: type=1107 audit(1771918154.360:2298): pid=11043 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 358.984589][ T28] audit: type=1400 audit(1771918154.360:2299): avc: denied { listen } for pid=11043 comm="syz.3.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 359.073337][T11034] lo speed is unknown, defaulting to 1000 [ 359.100134][T11057] loop4: detected capacity change from 0 to 1024 [ 359.111830][T11052] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2219'. [ 359.118161][T11059] netlink: 'syz.8.2218': attribute type 10 has an invalid length. [ 359.129321][T11057] EXT4-fs: Ignoring removed orlov option [ 359.144736][ T28] audit: type=1400 audit(1771918154.660:2300): avc: denied { remount } for pid=11056 comm="syz.4.2220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 359.180755][ T3545] hid-generic 0004:00A9:0000.000B: unknown main item tag 0x0 [ 359.189674][ T3545] hid-generic 0004:00A9:0000.000B: unknown main item tag 0x2 [ 359.220050][ T3545] hid-generic 0004:00A9:0000.000B: reserved main item tag 0xe [ 359.248824][ T3545] hid-generic 0004:00A9:0000.000B: hidraw0: HID v1.01 Device [syz1] on syz0 [ 359.307663][T11062] fido_id[11062]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 359.469836][T11034] chnl_net:caif_netlink_parms(): no params data found [ 359.493745][T11074] loop4: detected capacity change from 0 to 128 [ 359.627637][T11072] FAT-fs (loop3): error, corrupted file size (i_pos 51, 9216) [ 359.659559][T11034] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.667147][T11034] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.674829][T11034] bridge_slave_0: entered allmulticast mode [ 359.681668][T11034] bridge_slave_0: entered promiscuous mode [ 359.688897][T11034] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.696290][T11034] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.703905][T11034] bridge_slave_1: entered allmulticast mode [ 359.710428][T11034] bridge_slave_1: entered promiscuous mode [ 359.728913][T11034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.739906][T11034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.779637][T11034] team0: Port device team_slave_0 added [ 359.806544][T11034] team0: Port device team_slave_1 added [ 359.847008][T11034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.883216][T11034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.944411][T11034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.971621][T11034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.979419][T11034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.006374][T11034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.090046][T11034] hsr_slave_0: entered promiscuous mode [ 360.113987][T11034] hsr_slave_1: entered promiscuous mode [ 360.136283][T11099] netlink: 'syz.4.2232': attribute type 10 has an invalid length. [ 360.146043][T11034] debugfs: 'hsr0' already exists in 'hsr' [ 360.163868][T11034] Cannot create hsr debugfs directory [ 360.323428][T11107] EXT4-fs: Ignoring removed nobh option [ 360.333764][T11034] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 360.349036][T11034] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 360.357280][T11107] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c129, mo2=0002] [ 360.366605][T11034] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 360.372292][T11107] System zones: 0-1, 3-12 [ 360.381030][T11107] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.396126][T11034] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 360.413729][T11104] netlink: 'syz.4.2234': attribute type 11 has an invalid length. [ 360.422320][T11104] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2234'. [ 360.433658][T11108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.442153][T11108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.461743][T10409] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.543608][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2237'. [ 360.569349][T11034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.584303][ T50] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.604318][ T50] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.629655][T11034] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.649367][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.656535][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.683874][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.691054][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.710973][ T50] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.731171][ T50] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.790108][T11137] netlink: 'syz.8.2243': attribute type 10 has an invalid length. [ 360.800958][ T50] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.812459][ T50] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.854491][T11144] netlink: 'syz.8.2244': attribute type 1 has an invalid length. [ 360.877021][ T50] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.887002][ T50] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.907595][T11144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.919634][T11034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.977224][T11147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11147 comm=syz.8.2244 [ 360.993354][ T50] bridge_slave_0: left allmulticast mode [ 361.019249][ T50] bridge_slave_0: left promiscuous mode [ 361.026746][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.041995][ T28] audit: type=1400 audit(1771918156.550:2301): avc: denied { module_load } for pid=11141 comm="syz.8.2244" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=31631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 361.074909][T11144] Invalid ELF header magic: != ELF [ 361.191878][ T28] audit: type=1400 audit(1771918156.700:2302): avc: denied { getopt } for pid=11165 comm="syz.3.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 361.216637][T11171] set_capacity_and_notify: 5 callbacks suppressed [ 361.216658][T11171] loop8: detected capacity change from 0 to 128 [ 361.246988][T11171] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 361.272432][T11171] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 361.315545][T10409] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.328135][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.338987][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.349108][ T50] bond0 (unregistering): Released all slaves [ 361.357389][ T50] bond1 (unregistering): Released all slaves [ 361.376922][ T50] bond2 (unregistering): Released all slaves [ 361.393639][ T50] bond3 (unregistering): Released all slaves [ 361.531362][ T50] tipc: Left network mode [ 362.533634][T11200] loop8: detected capacity change from 0 to 512 [ 362.540874][T11200] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 362.560195][T11200] EXT4-fs (loop8): 1 truncate cleaned up [ 362.566501][T11200] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.580911][T11200] netlink: 'syz.8.2250': attribute type 33 has an invalid length. [ 362.708129][ T50] hsr_slave_0: left promiscuous mode [ 362.782521][ T50] hsr_slave_1: left promiscuous mode [ 362.917746][T11216] netlink: 'syz.4.2253': attribute type 10 has an invalid length. [ 362.944921][ T50] veth1_macvtap: left promiscuous mode [ 362.974328][ T50] veth0_macvtap: left promiscuous mode [ 363.163562][ T50] team_slave_1 (unregistering): left promiscuous mode [ 363.180924][ T50] team0 (unregistering): Port device team_slave_1 removed [ 363.199706][ T50] team_slave_0 (unregistering): left promiscuous mode [ 363.215572][ T50] team0 (unregistering): Port device team_slave_0 removed [ 363.282846][ T50] dummy0 (unregistering): left promiscuous mode [ 363.297295][ T50] team0 (unregistering): Port device dummy0 removed [ 363.568815][T11034] veth0_vlan: entered promiscuous mode [ 363.580265][T11226] netlink: 'syz.3.2255': attribute type 11 has an invalid length. [ 363.596932][T11034] veth1_vlan: entered promiscuous mode [ 363.617381][T10409] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.619679][T11226] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2255'. [ 363.631125][T11034] veth0_macvtap: entered promiscuous mode [ 363.649677][T11245] loop3: detected capacity change from 0 to 512 [ 363.665432][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 363.665449][ T28] audit: type=1326 audit(1771918159.180:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839420c629 code=0x7ffc0000 [ 363.696711][ T28] audit: type=1326 audit(1771918159.180:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839420c629 code=0x7ffc0000 [ 363.726102][T11245] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 363.765958][T11034] veth1_macvtap: entered promiscuous mode [ 363.782635][ T28] audit: type=1326 audit(1771918159.290:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f839420c629 code=0x7ffc0000 [ 363.816941][T11034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.836628][ T28] audit: type=1326 audit(1771918159.290:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839420c629 code=0x7ffc0000 [ 363.872543][ T28] audit: type=1326 audit(1771918159.290:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839420c629 code=0x7ffc0000 [ 363.904764][T11244] loop4: detected capacity change from 0 to 1024 [ 363.924089][T11258] netlink: 'syz.8.2260': attribute type 16 has an invalid length. [ 363.928876][T11034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.946435][T11245] EXT4-fs (loop3): 1 truncate cleaned up [ 363.952270][T11258] netlink: 'syz.8.2260': attribute type 17 has an invalid length. [ 363.952855][T11244] EXT4-fs: Ignoring removed orlov option [ 363.952929][T11244] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.969844][T11245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.024652][T11258] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.031754][T11258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.039070][T11258] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.046281][T11258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.146530][T11258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.184560][ T28] audit: type=1326 audit(1771918159.690:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f839420c629 code=0x7ffc0000 [ 364.261195][ T4008] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.306927][ T4008] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.322558][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.379550][ T4008] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.396580][ T28] audit: type=1326 audit(1771918159.690:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839420c629 code=0x7ffc0000 [ 364.470564][ T30] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.507048][ T28] audit: type=1326 audit(1771918159.690:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839420c629 code=0x7ffc0000 [ 364.563486][ T28] audit: type=1326 audit(1771918159.690:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f839420c629 code=0x7ffc0000 [ 364.612184][T11275] loop3: detected capacity change from 0 to 2048 [ 364.651986][ T28] audit: type=1326 audit(1771918159.700:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.4.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839420c629 code=0x7ffc0000 [ 364.746275][T11288] loop7: detected capacity change from 0 to 8192 [ 364.780119][T11295] netlink: 27 bytes leftover after parsing attributes in process `syz.9.2267'. [ 364.957309][T11307] loop7: detected capacity change from 0 to 1024 [ 364.964637][T11307] EXT4-fs: Ignoring removed orlov option [ 364.979426][T11307] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 365.003416][T11307] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.018549][T11307] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 365.045131][ T8183] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.247613][T11318] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2272'. [ 365.431777][T11323] loop4: detected capacity change from 0 to 4096 [ 365.446206][T11323] EXT4-fs: Ignoring removed bh option [ 365.467382][T11323] EXT4-fs: Ignoring removed mblk_io_submit option [ 365.505164][T11323] loop4: detected capacity change from 0 to 512 [ 366.747015][T11357] loop7: detected capacity change from 0 to 2048 [ 367.090011][T11365] openvswitch: netlink: Missing key (keys=40, expected=80) [ 367.189014][T11367] loop9: detected capacity change from 0 to 4096 [ 367.207398][T11367] EXT4-fs: Ignoring removed bh option [ 367.233950][T11367] EXT4-fs: Ignoring removed mblk_io_submit option [ 367.260854][T11367] EXT4-fs: Mount option(s) incompatible with ext2 [ 367.296235][T11367] loop9: detected capacity change from 0 to 512 [ 367.344569][T11367] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.368867][T11367] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.416559][T11374] loop4: detected capacity change from 0 to 128 [ 367.436921][T11034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.518401][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2293'. [ 367.534155][T11378] bridge_slave_1 (unregistering): left allmulticast mode [ 367.542140][T11378] bridge_slave_1 (unregistering): left promiscuous mode [ 367.549289][T11378] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.886616][T11392] loop8: detected capacity change from 0 to 512 [ 367.911436][T11394] hub 8-0:1.0: USB hub found [ 367.916327][T11394] hub 8-0:1.0: 8 ports detected [ 367.926499][T11394] netlink: 'syz.4.2296': attribute type 10 has an invalid length. [ 367.944740][T11392] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2298: invalid indirect mapped block 256 (level 2) [ 367.967346][T11392] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 367.968004][T11392] EXT4-fs (loop8): 2 truncates cleaned up [ 367.977358][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 367.977396][ C1] EXT4-fs (loop8): initial error at time 1771918163: ext4_free_branches:1023: inode 11 [ 367.977428][ C1] EXT4-fs (loop8): last error at time 1771918163: ext4_free_branches:1023: inode 11 [ 368.154413][T11392] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.243813][T11399] syzkaller0: entered promiscuous mode [ 368.260895][T11392] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.2298: bg 0: block 5: invalid block bitmap [ 368.284279][T11399] syzkaller0: entered allmulticast mode [ 368.301844][T11392] netlink: 'syz.8.2298': attribute type 1 has an invalid length. [ 368.355195][T11392] 8021q: adding VLAN 0 to HW filter on device bond2 [ 368.389867][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2302'. [ 368.424910][T11408] bond1: entered promiscuous mode [ 368.439743][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2298'. [ 368.440626][T11408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.506370][T11392] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 368.521379][T11420] loop9: detected capacity change from 0 to 512 [ 368.528836][T11420] EXT4-fs: dax option not supported [ 368.565998][T11392] bond2: (slave batadv1): making interface the new active one [ 368.617184][T11392] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 368.647425][T11417] loop9: detected capacity change from 0 to 1024 [ 368.681046][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 368.681065][ T28] audit: type=1326 audit(1771918164.191:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11416 comm="syz.9.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6d1434cece code=0x7ffc0000 [ 368.751861][T11434] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2311'. [ 368.757905][ T28] audit: type=1326 audit(1771918164.231:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11416 comm="syz.9.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1438c629 code=0x7ffc0000 [ 368.812941][T11437] netlink: 'syz.9.2312': attribute type 1 has an invalid length. [ 368.815618][ T28] audit: type=1326 audit(1771918164.231:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11416 comm="syz.9.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d1438c629 code=0x7ffc0000 [ 368.836927][T11435] loop4: detected capacity change from 0 to 2048 [ 368.849321][ T28] audit: type=1326 audit(1771918164.231:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11416 comm="syz.9.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1438c629 code=0x7ffc0000 [ 368.876884][ T28] audit: type=1326 audit(1771918164.231:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11416 comm="syz.9.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1438c629 code=0x7ffc0000 [ 368.914435][T10409] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.989737][T11442] syzkaller0: entered promiscuous mode [ 368.996124][T11442] syzkaller0: entered allmulticast mode [ 369.129708][T11445] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2316'. [ 369.140170][T11447] loop9: detected capacity change from 0 to 4096 [ 369.156838][T11447] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.162213][T11451] loop8: detected capacity change from 0 to 512 [ 369.193442][T11453] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2318'. [ 369.199002][T11451] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.2317: invalid block [ 369.218335][T11451] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 369.221196][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 369.232101][T11451] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2317: invalid indirect mapped block 4294967295 (level 1) [ 369.236840][ C0] EXT4-fs (loop8): initial error at time 1771918164: ext4_get_branch:178: inode 11: block 4294967295 [ 369.261893][ C0] EXT4-fs (loop8): last error at time 1771918164: ext4_get_branch:178: inode 11: block 4294967295 [ 369.272036][T11456] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2319'. [ 369.288198][T11451] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 369.288440][T11451] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2317: invalid indirect mapped block 4294967295 (level 1) [ 369.330992][T11451] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 369.331307][T11451] EXT4-fs (loop8): 2 truncates cleaned up [ 369.363524][T11451] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.416701][T10409] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.553884][T11474] IPv6: NLM_F_CREATE should be specified when creating new route [ 369.562091][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2325'. [ 369.601576][T11034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.652063][T11476] lo speed is unknown, defaulting to 1000 [ 369.838666][T11484] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2328'. [ 369.873202][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2326'. [ 369.900681][T11487] macvlan2: entered promiscuous mode [ 369.961824][T11484] netlink: 'syz.4.2328': attribute type 11 has an invalid length. [ 370.004457][T11499] FAULT_INJECTION: forcing a failure. [ 370.004457][T11499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.038229][T11499] CPU: 1 UID: 0 PID: 11499 Comm: syz.8.2333 Tainted: G W syzkaller #0 PREEMPT(full) [ 370.038268][T11499] Tainted: [W]=WARN [ 370.038277][T11499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 370.038292][T11499] Call Trace: [ 370.038299][T11499] [ 370.038329][T11499] __dump_stack+0x1d/0x30 [ 370.038360][T11499] dump_stack_lvl+0x95/0xd0 [ 370.038389][T11499] dump_stack+0x15/0x1b [ 370.038481][T11499] should_fail_ex+0x263/0x280 [ 370.038508][T11499] should_fail+0xb/0x20 [ 370.038528][T11499] should_fail_usercopy+0x1a/0x20 [ 370.038556][T11499] _copy_from_user+0x1c/0xb0 [ 370.038649][T11499] ___sys_sendmsg+0xc1/0x1e0 [ 370.038693][T11499] __x64_sys_sendmsg+0xd4/0x160 [ 370.038814][T11499] x64_sys_call+0x194c/0x3020 [ 370.038844][T11499] do_syscall_64+0x12c/0x370 [ 370.038947][T11499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.038972][T11499] RIP: 0033:0x7f5d5e19c629 [ 370.038991][T11499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.039012][T11499] RSP: 002b:00007f5d5cbef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.039037][T11499] RAX: ffffffffffffffda RBX: 00007f5d5e415fa0 RCX: 00007f5d5e19c629 [ 370.039127][T11499] RDX: 707cea1f1589d032 RSI: 0000200000000340 RDI: 0000000000000003 [ 370.039144][T11499] RBP: 00007f5d5cbef090 R08: 0000000000000000 R09: 0000000000000000 [ 370.039158][T11499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.039286][T11499] R13: 00007f5d5e416038 R14: 00007f5d5e415fa0 R15: 00007ffd307dae78 [ 370.039309][T11499] [ 370.256775][T11504] netlink: 'syz.7.2332': attribute type 11 has an invalid length. [ 370.304283][T11503] lo speed is unknown, defaulting to 1000 [ 370.456201][ T28] audit: type=1400 audit(1771918165.961:2382): avc: denied { setopt } for pid=11517 comm="syz.3.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 370.511137][ T28] audit: type=1400 audit(1771918165.961:2383): avc: denied { getopt } for pid=11517 comm="syz.3.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 370.731392][T11495] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 370.768389][T11495] EXT4-fs (loop7): 1 truncate cleaned up [ 370.854383][T11495] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.964949][T11535] netlink: 'syz.3.2345': attribute type 10 has an invalid length. [ 371.030094][T11537] EXT4-fs: Ignoring removed orlov option [ 371.062812][T11537] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 371.093782][T11537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.135557][T11537] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 371.184339][ T8183] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.202663][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.254213][T11549] netlink: 'syz.7.2349': attribute type 9 has an invalid length. [ 371.290494][T11553] netlink: 'syz.3.2350': attribute type 9 has an invalid length. [ 371.306408][T11552] EXT4-fs: Ignoring removed bh option [ 371.331143][T11552] EXT4-fs: Ignoring removed mblk_io_submit option [ 371.344655][T11555] ip6tnl1: entered allmulticast mode [ 371.351676][ T28] audit: type=1400 audit(1771918166.861:2384): avc: denied { map } for pid=11554 comm="syz.9.2353" path="socket:[33282]" dev="sockfs" ino=33282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 371.455403][T11566] netlink: 'syz.7.2354': attribute type 10 has an invalid length. [ 371.638460][T11555] vfat: Unknown parameter '' [ 371.654316][T11573] xfrm0: entered promiscuous mode [ 371.691793][T11573] tmpfs: Bad value for 'mpol' [ 372.326925][T11579] set_capacity_and_notify: 7 callbacks suppressed [ 372.326946][T11579] loop4: detected capacity change from 0 to 1024 [ 372.372023][T11579] EXT4-fs: Ignoring removed orlov option [ 372.448576][T11579] loop4: detected capacity change from 0 to 512 [ 372.595383][T11583] loop7: detected capacity change from 0 to 512 [ 372.658286][T11583] FAT-fs (loop7): error, corrupted file size (i_pos 51, 9216) [ 372.944073][T11588] loop8: detected capacity change from 0 to 1764 [ 372.963341][T11592] loop7: detected capacity change from 0 to 4096 [ 373.038905][T11590] loop4: detected capacity change from 0 to 4096 [ 373.103569][T11592] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.121186][T11590] EXT4-fs: Ignoring removed bh option [ 373.190962][T11590] EXT4-fs: Ignoring removed mblk_io_submit option [ 373.191432][T11592] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.2366: corrupted inode contents [ 373.233427][T11597] loop9: detected capacity change from 0 to 512 [ 373.241361][T11592] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #15: comm syz.7.2366: mark_inode_dirty error [ 373.260325][ T28] audit: type=1400 audit(1771918168.771:2385): avc: denied { link } for pid=11591 comm="syz.7.2366" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 373.291012][T11592] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.2366: corrupted inode contents [ 373.304934][T11600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.321301][T11592] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.2366: mark_inode_dirty error [ 373.361514][T11600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.385523][T11597] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.401134][T11592] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.2366: corrupted inode contents [ 373.431981][T11597] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.444103][T11604] syzkaller0: entered promiscuous mode [ 373.449616][T11604] syzkaller0: entered allmulticast mode [ 373.496090][T11614] __nla_validate_parse: 7 callbacks suppressed [ 373.496109][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2372'. [ 373.514999][T11614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.522709][T11614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.530307][T11592] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.2366: mark_inode_dirty error [ 373.531244][T11614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.550017][T11614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.560350][T11592] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.2366: corrupted inode contents [ 373.573844][T11597] EXT4-fs error (device loop9): ext4_get_first_dir_block:3527: inode #12: comm syz.9.2368: Attempting to read directory block (0) that is past i_size (3) [ 373.583505][T11592] EXT4-fs error (device loop7): ext4_truncate:4587: inode #15: comm syz.7.2366: mark_inode_dirty error [ 373.591294][ T28] audit: type=1400 audit(1771918169.091:2386): avc: denied { reparent } for pid=11596 comm="syz.9.2368" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 373.623065][T11597] EXT4-fs (loop9): Remounting filesystem read-only [ 373.632451][T11592] EXT4-fs error (device loop7) in ext4_setattr:5983: Corrupt filesystem [ 373.641593][T11599] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.2366: corrupted inode contents [ 373.686755][T11616] netlink: 'syz.3.2373': attribute type 10 has an invalid length. [ 373.696672][T11034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.707496][ T119] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 373.718583][ T119] __quota_error: 1 callbacks suppressed [ 373.718593][ T119] Quota error (device loop9): write_blk: dquota write failed [ 373.731768][ T119] Quota error (device loop9): free_dqentry: Can't write quota data block 5 [ 373.794014][ T28] audit: type=1326 audit(1771918169.311:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11620 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839420c629 code=0x7ffc0000 [ 373.821294][T11626] netlink: 'syz.3.2376': attribute type 58 has an invalid length. [ 373.829474][ T28] audit: type=1326 audit(1771918169.311:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11620 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f839420c629 code=0x7ffc0000 [ 373.860572][ T28] audit: type=1326 audit(1771918169.311:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11620 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839420c629 code=0x7ffc0000 [ 373.871834][T11630] loop8: detected capacity change from 0 to 128 [ 373.885406][ T28] audit: type=1326 audit(1771918169.311:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11620 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f839420c629 code=0x7ffc0000 [ 373.918275][ T28] audit: type=1326 audit(1771918169.311:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11620 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839420c629 code=0x7ffc0000 [ 373.923773][T11621] loop4: detected capacity change from 0 to 1024 [ 373.945499][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2380'. [ 373.959095][T11633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2380'. [ 373.964910][T11621] EXT4-fs: Ignoring removed orlov option [ 373.975458][T11621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 373.991999][ T28] audit: type=1326 audit(1771918169.331:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11620 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f839420c629 code=0x7ffc0000 [ 374.016218][ T28] audit: type=1326 audit(1771918169.331:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11620 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839420c629 code=0x7ffc0000 [ 374.017814][T11630] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 374.040642][ T28] audit: type=1326 audit(1771918169.331:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11620 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f839420c629 code=0x7ffc0000 [ 374.088096][T11630] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 374.150014][T10409] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 374.209942][ T8183] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.273061][T11650] loop9: detected capacity change from 0 to 512 [ 374.638483][T11656] lo speed is unknown, defaulting to 1000 [ 374.813344][T11657] netlink: 144 bytes leftover after parsing attributes in process `syz.7.2388'. [ 374.961507][T11655] lo speed is unknown, defaulting to 1000 [ 375.116796][T11656] FAT-fs (loop9): error, corrupted file size (i_pos 51, 8960) [ 375.124515][T11656] FAT-fs (loop9): error, corrupted file size (i_pos 51, 8960) [ 375.206475][T11678] tipc: Started in network mode [ 375.225318][T11678] tipc: Node identity , cluster identity 4711 [ 375.232059][T11679] EXT4-fs: Ignoring removed orlov option [ 375.253334][T11679] EXT4-fs: Ignoring removed nomblk_io_submit option [ 375.294425][T11679] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 375.453502][T11704] ip6t_srh: unknown srh invflags 4000 [ 376.137709][T11717] ext4: Bad value for 'max_batch_time' [ 376.208607][ T7786] loop4: p3 p4 < > [ 376.222779][ T7786] loop4: p3 start 11362048 is beyond EOD, truncated [ 376.265250][T11714] loop4: p3 p4 < > [ 376.278996][T11714] loop4: p3 start 11362048 is beyond EOD, truncated [ 376.309363][T11736] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2409'. [ 376.356435][T11741] program syz.3.2410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.397166][ T7717] udevd[7717]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 376.414475][T11741] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 376.421031][T11741] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 376.453987][T11741] vhci_hcd vhci_hcd.0: Device attached [ 376.471577][ T7717] udevd[7717]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 376.508730][T11754] EXT4-fs: Ignoring removed bh option [ 376.530956][T11760] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 376.537567][T11760] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 376.553076][T11760] vhci_hcd vhci_hcd.0: Device attached [ 376.565231][T11754] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.601934][T11746] vhci_hcd: connection closed [ 376.617379][T11762] vhci_hcd: connection closed [ 376.624136][ T50] vhci_hcd vhci_hcd.3: stop threads [ 376.635017][ T35] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 376.646467][ T50] vhci_hcd vhci_hcd.3: release socket [ 376.652171][ T50] vhci_hcd vhci_hcd.3: disconnect device [ 376.661108][ T50] vhci_hcd vhci_hcd.3: stop threads [ 376.666914][ T50] vhci_hcd vhci_hcd.3: release socket [ 376.672476][ T50] vhci_hcd vhci_hcd.3: disconnect device [ 376.730051][T11773] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=11773 comm=syz.4.2417 [ 377.176236][ T35] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 377.185926][ T35] usb 7-1: enqueue for inactive port 0 [ 377.213212][ T35] usb 7-1: enqueue for inactive port 0 [ 377.224031][ T35] usb 7-1: enqueue for inactive port 0 [ 377.371319][T11034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.381695][ T35] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 377.572527][T11805] netlink: 256 bytes leftover after parsing attributes in process `syz.9.2426'. [ 377.610373][T11805] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2426'. [ 377.722639][T11808] set_capacity_and_notify: 5 callbacks suppressed [ 377.722660][T11808] loop8: detected capacity change from 0 to 512 [ 377.732548][T11808] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.732619][T11808] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 377.867235][T10409] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.918166][T11831] loop4: detected capacity change from 0 to 1024 [ 377.920218][T11832] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2428'. [ 377.927629][T11831] EXT4-fs: Ignoring removed orlov option [ 377.997469][T11836] loop8: detected capacity change from 0 to 2048 [ 378.007669][T11836] EXT4-fs: Ignoring removed orlov option [ 378.015366][T11836] EXT4-fs: Ignoring removed oldalloc option [ 378.036589][T11836] EXT4-fs (loop8): filesystem too large to mount safely on this system [ 378.043308][T11846] netlink: 'syz.3.2439': attribute type 27 has an invalid length. [ 378.056987][T11838] loop4: detected capacity change from 0 to 512 [ 378.059130][T11847] loop9: detected capacity change from 0 to 512 [ 378.093097][T11838] loop4: detected capacity change from 0 to 512 [ 378.106018][T11848] loop7: detected capacity change from 0 to 2048 [ 378.133405][T11847] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.148134][T11846] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.155290][T11846] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.163103][T11847] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 378.193866][T11854] loop8: detected capacity change from 0 to 1024 [ 378.207379][T11848] EXT4-fs error (device loop7): __ext4_fill_super:5563: inode #2: comm syz.7.2437: inode has both inline data and extents flags [ 378.231711][T11854] EXT4-fs: Ignoring removed orlov option [ 378.238113][T11854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 378.247830][T11848] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 378.249204][T11854] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 378.249509][T11859] netlink: 'syz.4.2441': attribute type 1 has an invalid length. [ 378.258405][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 378.258427][ C0] EXT4-fs (loop7): initial error at time 1771918173: __ext4_fill_super:5563: inode 2 [ 378.258468][ C0] EXT4-fs (loop7): last error at time 1771918173: __ext4_fill_super:5563: inode 2 [ 378.260753][T11848] EXT4-fs (loop7): Remounting filesystem read-only [ 378.313981][T11848] EXT4-fs (loop7): get root inode failed [ 378.319987][T11848] EXT4-fs (loop7): mount failed [ 378.359425][T11848] loop7: detected capacity change from 0 to 128 [ 378.379932][T11034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.419888][T11863] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2442'. [ 378.466974][T11846] macvlan1: left allmulticast mode [ 378.489634][T11846] vlan2: left promiscuous mode [ 378.499422][T11846] hsr0: left promiscuous mode [ 378.512580][T11846] vlan3: left promiscuous mode [ 378.517595][T11846] bridge3: left promiscuous mode [ 378.523135][T11846] vlan3: left allmulticast mode [ 378.528052][T11846] bridge3: left allmulticast mode [ 378.534702][T11846] bond1: left promiscuous mode [ 378.542883][ T6475] lo speed is unknown, defaulting to 1000 [ 378.557739][ T6475] syz0: Port: 1 Link DOWN [ 378.569169][T11850] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 378.579744][T11850] bond2 (unregistering): Released all slaves [ 378.598668][T11859] bond8: entered promiscuous mode [ 378.604436][T11859] 8021q: adding VLAN 0 to HW filter on device bond8 [ 378.624079][T11860] bond8: (slave bridge6): making interface the new active one [ 378.632357][T11860] bridge6: entered promiscuous mode [ 378.641598][T11860] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 378.650900][ T4008] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.661970][ T4008] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.680120][ T6475] lo speed is unknown, defaulting to 1000 [ 378.691719][T11866] lo speed is unknown, defaulting to 1000 [ 378.696882][ T4008] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.706390][ T4008] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.743765][ T4008] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.752268][ T4008] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.761479][ T4008] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.770027][ T4008] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.801127][T11875] FAULT_INJECTION: forcing a failure. [ 378.801127][T11875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.844547][T11875] CPU: 1 UID: 0 PID: 11875 Comm: syz.8.2446 Tainted: G W syzkaller #0 PREEMPT(full) [ 378.844588][T11875] Tainted: [W]=WARN [ 378.844597][T11875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 378.844612][T11875] Call Trace: [ 378.844691][T11875] [ 378.844701][T11875] __dump_stack+0x1d/0x30 [ 378.844735][T11875] dump_stack_lvl+0x95/0xd0 [ 378.844760][T11875] dump_stack+0x15/0x1b [ 378.844787][T11875] should_fail_ex+0x263/0x280 [ 378.844841][T11875] should_fail+0xb/0x20 [ 378.844860][T11875] should_fail_usercopy+0x1a/0x20 [ 378.844887][T11875] _copy_from_iter+0xcf/0xea0 [ 378.844917][T11875] ? __alloc_skb+0x4f6/0x690 [ 378.845008][T11875] ? __alloc_skb+0x200/0x690 [ 378.845031][T11875] netlink_sendmsg+0x4ae/0x6f0 [ 378.845063][T11875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.845168][T11875] ____sys_sendmsg+0x5af/0x600 [ 378.845213][T11875] ___sys_sendmsg+0x195/0x1e0 [ 378.845316][T11875] __x64_sys_sendmsg+0xd4/0x160 [ 378.845352][T11875] x64_sys_call+0x194c/0x3020 [ 378.845384][T11875] do_syscall_64+0x12c/0x370 [ 378.845517][T11875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.845542][T11875] RIP: 0033:0x7f5d5e19c629 [ 378.845558][T11875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.845586][T11875] RSP: 002b:00007f5d5cbef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.845642][T11875] RAX: ffffffffffffffda RBX: 00007f5d5e415fa0 RCX: 00007f5d5e19c629 [ 378.845660][T11875] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 378.845676][T11875] RBP: 00007f5d5cbef090 R08: 0000000000000000 R09: 0000000000000000 [ 378.845691][T11875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.845705][T11875] R13: 00007f5d5e416038 R14: 00007f5d5e415fa0 R15: 00007ffd307dae78 [ 378.845727][T11875] [ 379.067065][T11880] loop8: detected capacity change from 0 to 1024 [ 379.080987][T11881] netlink: 'syz.4.2445': attribute type 13 has an invalid length. [ 379.122342][T11880] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 379.560223][T11881] hsr0: left promiscuous mode [ 380.516918][T11900] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2453'. [ 380.704935][ T36] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.705929][ T28] kauditd_printk_skb: 216 callbacks suppressed [ 380.705944][ T28] audit: type=1326 audit(1771918176.222:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904874c629 code=0x7ffc0000 [ 380.714173][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.714284][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 380.714396][ T36] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.714429][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.714460][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 380.744355][ T28] audit: type=1326 audit(1771918176.242:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904874c629 code=0x7ffc0000 [ 380.793015][T11906] EXT4-fs: Ignoring removed orlov option [ 380.865914][ T36] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.875554][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.884573][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 380.893742][ T36] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.903361][T11906] EXT4-fs: Ignoring removed nomblk_io_submit option [ 380.904203][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.924450][T11906] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 380.930570][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 380.940209][ T28] audit: type=1326 audit(1771918176.242:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f904874c629 code=0x7ffc0000 [ 380.964933][ T28] audit: type=1326 audit(1771918176.242:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904874c629 code=0x7ffc0000 [ 380.989292][ T28] audit: type=1326 audit(1771918176.242:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f904874c629 code=0x7ffc0000 [ 381.018141][ T28] audit: type=1326 audit(1771918176.242:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904874c629 code=0x7ffc0000 [ 381.031400][T11912] syzkaller1: entered promiscuous mode [ 381.045216][ T28] audit: type=1326 audit(1771918176.242:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f904874c629 code=0x7ffc0000 [ 381.051188][T11912] syzkaller1: entered allmulticast mode [ 381.071730][ T28] audit: type=1326 audit(1771918176.242:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904874c629 code=0x7ffc0000 [ 381.071833][ T28] audit: type=1326 audit(1771918176.242:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f904874c629 code=0x7ffc0000 [ 381.129321][ T28] audit: type=1326 audit(1771918176.242:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904874c629 code=0x7ffc0000 [ 381.369015][T11921] lo speed is unknown, defaulting to 1000 [ 381.536166][ T7717] loop3: p1 < > p2 p4 < p5 > [ 381.540900][ T7717] loop3: partition table partially beyond EOD, truncated [ 381.548238][ T7717] loop3: p1 start 134217728 is beyond EOD, truncated [ 381.565708][ T7717] loop3: p2 size 591360 extends beyond EOD, truncated [ 381.587012][ T7717] loop3: p5 size 591360 extends beyond EOD, truncated [ 381.608222][T11922] loop3: p1 < > p2 p4 < p5 > [ 381.652053][T11922] loop3: partition table partially beyond EOD, truncated [ 381.679268][T11929] EXT4-fs: Ignoring removed bh option [ 381.702742][T11922] loop3: p1 start 134217728 is beyond EOD, truncated [ 381.711232][T11922] loop3: p2 size 591360 extends beyond EOD, truncated [ 381.731802][T11922] loop3: p5 size 591360 extends beyond EOD, truncated [ 381.733620][T11929] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.757454][T11933] netlink: 196 bytes leftover after parsing attributes in process `syz.7.2464'. [ 381.768148][ T7717] ================================================================== [ 381.770063][T11933] netlink: 196 bytes leftover after parsing attributes in process `syz.7.2464'. [ 381.776349][ T7717] BUG: KCSAN: data-race in __d_drop / fast_dput [ 381.791956][ T7717] [ 381.794293][ T7717] write to 0xffff88811b059c10 of 8 bytes by task 2999 on cpu 1: [ 381.802064][ T7717] __d_drop+0x14d/0x240 [ 381.806253][ T7717] __dentry_kill+0x122/0x460 [ 381.810873][ T7717] finish_dput+0x2b/0x200 [ 381.815320][ T7717] dput+0x52/0x60 [ 381.818978][ T7717] terminate_walk+0x77/0x210 [ 381.823597][ T7717] path_lookupat+0x469/0x500 [ 381.828208][ T7717] filename_lookup+0x190/0x390 [ 381.833004][ T7717] do_readlinkat+0x74/0x2f0 [ 381.837545][ T7717] __x64_sys_readlink+0x47/0x60 [ 381.842436][ T7717] x64_sys_call+0x2b51/0x3020 [ 381.847150][ T7717] do_syscall_64+0x12c/0x370 [ 381.851788][ T7717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.857718][ T7717] [ 381.860055][ T7717] read to 0xffff88811b059c10 of 8 bytes by task 7717 on cpu 0: [ 381.867613][ T7717] fast_dput+0x5f/0x2c0 [ 381.871801][ T7717] dput+0x24/0x60 [ 381.875461][ T7717] filename_unlinkat+0x217/0x410 [ 381.880414][ T7717] __se_sys_unlink+0x2b/0xe0 [ 381.885018][ T7717] __x64_sys_unlink+0x1f/0x30 [ 381.889714][ T7717] x64_sys_call+0x2eb6/0x3020 [ 381.894519][ T7717] do_syscall_64+0x12c/0x370 [ 381.899145][ T7717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.905158][ T7717] [ 381.907494][ T7717] value changed: 0xffff888237bd0698 -> 0x0000000000000000 [ 381.914602][ T7717] [ 381.917012][ T7717] Reported by Kernel Concurrency Sanitizer on: [ 381.923362][ T7717] CPU: 0 UID: 0 PID: 7717 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 381.933787][ T7717] Tainted: [W]=WARN [ 381.937602][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.947714][ T7717] ================================================================== [ 382.058418][T11937] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2465'. [ 382.078753][T10409] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.