last executing test programs: 5m30.247920454s ago: executing program 32 (id=1083): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) r0 = inotify_init() r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1af455ea}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000280)='./bus\x00', 0x4d9e, &(0x7f0000000180), 0x1, 0x467, &(0x7f0000000c00)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(r2, 0x410, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x1fd}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000001c0)={r5, 0x7, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={r5, 0x5}, &(0x7f0000000100)=0x8) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x10}, {0xe47d81a02087f6be, 0xffe0}, {0x3, 0xb}}, ["", "", "", "", ""]}, 0x24}}, 0x0) 3m27.382179895s ago: executing program 2 (id=2340): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458b0", 0x3}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 3m26.06207702s ago: executing program 2 (id=2362): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x78bf, 0x0, 0x40204, 0x100039}, &(0x7f0000000340)=0x0, &(0x7f0000000f80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1fffffff}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x50}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet(0xa, 0x801, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r5], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffe7ffff3, 0x20031, 0xffffffffffffffff, 0xbe9f5000) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 3m25.533115846s ago: executing program 2 (id=2364): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0x7ffffc, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setresuid(0x0, 0x0, 0xee00) r5 = syz_open_procfs(0x0, 0x0) poll(&(0x7f00000003c0)=[{r1, 0x400}, {r1, 0x94}, {r5, 0x504}, {r1}, {r4, 0x410}, {r4, 0x2}], 0x6, 0x5) syz_genetlink_get_family_id$ieee802154(&(0x7f0000005d40), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) r7 = socket(0x10, 0x2, 0x0) syz_io_uring_setup(0x100293f, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000500)="8a59aecf7b28e6e31f3c4fa56523dcfb9fd974763e6429bb6867e6dce94f312dd6d2aa3874b9f3c84323c547743897a15b62590e75dee9b9658b9d83d8be74af0117b771dcac1b349c4fd6", 0x4b}], 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}, 0x1, 0x300000000000000}, 0x0) 3m24.400676742s ago: executing program 2 (id=2376): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) unshare(0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) setresuid(0xee01, r2, r2) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000009c0), 0x11, 0x56b, &(0x7f0000000440)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x131) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0x1bfd31aa}], 0x1, 0x0, 0x0, 0x1) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r7, 0x0, 0xd, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 3m23.441612789s ago: executing program 2 (id=2379): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newtaction={0xbc, 0x30, 0x1, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x40, 0xfffffffffffffffe, 0x4}}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0xa, 0x3, @val=0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffffc}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xb}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x60000000}}}}]}]}, 0xbc}}, 0x0) 3m23.269239748s ago: executing program 2 (id=2383): socket$inet_icmp(0x2, 0x2, 0x1) socket$packet(0x11, 0x2, 0x300) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m23.242398269s ago: executing program 33 (id=2383): socket$inet_icmp(0x2, 0x2, 0x1) socket$packet(0x11, 0x2, 0x300) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m48.84330896s ago: executing program 6 (id=2713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x8840) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x2000000}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x8, 0x0) getrlimit(0x3, &(0x7f0000000040)) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) 2m47.758281123s ago: executing program 6 (id=2718): lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x7fff7ffc}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(r4, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 2m45.98046765s ago: executing program 6 (id=2725): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001340)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000f7fb20000a00800000003300", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020000100000000000000090000000000000083000000000000000000000000000000000000000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b00000000000000000000000000000000000000000000000000000000000000000800000000000000000000ac141428000000000000000000000000000004d43200000000000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d533"], 0x23c}}, 0x4080) 2m45.915680984s ago: executing program 6 (id=2726): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc, &(0x7f0000000440), 0x3, 0x44b, &(0x7f0000001a40)="$eJzs3MtvG8UfAPDv2kn7Sx+/hKo8mhYaKIiIR9KkpfTABQQSB5CQ4FCOIUmrULdBTZBoFUFAqBxRJe6IIxJ/ASe4IOCExBUkjqhShXJp4WS09m5iO44b5+UUfz7SJjO7Y898vTv2zE6cALrWUPojiTgQEb9FRH81W19gqPrrztLC5N9LC5NJlMtv/pVUyt1eWpjMi+aP259neiIKnyZxtEm9c1evXZwolaavZPnR+Uvvjc5dvfbszKWJC9MXpi+Pnz17+tTY82fGn9uSONO4bg9+OHvsyKtv33h98tyNd376Jsnjb4ijhT/aqHKo1cEnyuU2nmr3O1iTTno62BDaUqx20+it9P/+KMbKyeuPVz7paOOAbVUul8sPrH14sQz8hyXR6RYAnZF/0Kfz33zboaHHrnDrxeoEKI37TrZVj/REISvT2zC/3UpDEXFu8Z8v0y3Wfx8CAGDDvkvHP880G/8Vova+0P+zNZSBiLgvIg5FxJmIOBwR90dUyj4YEQ+1WX/jIsnq8U/hZl32jTYruIt0/PdCtrZVP/7LR38xUMxyByvx9ybnZ0rTJ7PXZDh696b5sRZ1fP/yr5+vdax2/Jduaf35WDBrx82evfWPmZqYn9hMzLVufRwx2NMs/mR5JSCJiCMRMbjeJ204qTNPfX2sVdHW8bewBetM5a8inqye/8VoiD+XtF6fHP1flKZPjuZXxWo//3J9zat2U/FvgfT872t6/S/HP5DUrtfOtV/H9d8/W3NOs9Hrf0/yVt2+Dybm56+MRexJXqs2unb/eEO58ZXyafzDJ5r3/0Ox8kocjYj0In44Ih6JiONZ2x+NiMci4kSL+H986fF3Nx7/9krjn2rr/K8k9kTjnuaJ4sUfvq2rdKCd+NPzf7qSGs72rOf9bz3t2tjVDAAAAPeeQkQciKQwspwuFEZGqn/Dfzj2FUqzc/NPn599//JU9TsCA9FbyO909dfcDx3LpvV5frwhfyq7b/xFsa+SH5mcLU11OnjocvvX6P+pP4udbh2w7XxfC7qX/g/dS/+H7qX/Q/dq0v/7OtEOYOc1+/z/aF2PTBr/XRhwj2no/02W/RZ3rC3AzjL/h+6l/0P30v+hK831xd2/JC8hsSoRhV3RjN2WOL47mrH5RKffmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALbGvwEAAP//dtjoWw==") r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x100000, 0x80000}]) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x31}}, 0x20}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 2m45.368654141s ago: executing program 6 (id=2729): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) unshare(0x2040400) readahead(r4, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYRESHEX=r3, @ANYRES32=r2, @ANYRESDEC=0x0], 0x24, 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x1085, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@deltclass={0x78, 0x29, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x1}, {0x0, 0xffff}, {0x5, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xf0}}, @TCA_RATE={0x6, 0x5, {0x15, 0x7}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0xff, 0xd5}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3ff}}}, @TCA_RATE={0x6, 0x5, {0xa5}}, @TCA_RATE={0x6, 0x5, {0xa4, 0x2}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000ffdbdf2502002000050002000a00000014000900ff020000000000000000ee00000000013595593507fe6847d84f3d8dbba8b071214ce5b8384e8c3d0b98817261b9b3ea5d665087d44b477a05a1f32351b7faed7ab341cea63c1e5cdcb6274a3176af38dd836d88480060ad0c3c47f6e6b891d715817c4221e961"], 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xac}, [@call={0x85, 0x0, 0x0, 0x44}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x7, 0x0, 0x1, 0x8, 0x6, 0xc, 0xffffffffffffffff}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x200}]}, &(0x7f0000000300)='GPL\x00', 0x2, 0xbe, &(0x7f0000000340)=""/190, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2, r4, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xe, 0x12}, 0x10, r9, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)=[r4], &(0x7f0000000500)=[{0x5, 0x4, 0x2, 0x1}, {0x2, 0x5, 0x10, 0xb}, {0x4, 0x1, 0xd}, {0x2, 0x4, 0xf, 0x7}, {0x5, 0x3, 0x9, 0x6}, {0x1, 0x2, 0x2, 0x3}, {0x3, 0x4, 0x7, 0x6}, {0x3, 0x4, 0x0, 0x7}], 0x10, 0x2}, 0x94) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r8, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_AF={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4c000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) 2m45.214937698s ago: executing program 6 (id=2731): unshare(0x6a040000) mmap(&(0x7f000049c000/0x2000)=nil, 0x2000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f000049c000/0x2000)=nil, 0x2000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x1, 0x0, 0x1, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10) close(r0) 2m45.171953861s ago: executing program 34 (id=2731): unshare(0x6a040000) mmap(&(0x7f000049c000/0x2000)=nil, 0x2000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f000049c000/0x2000)=nil, 0x2000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x1, 0x0, 0x1, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10) close(r0) 1m15.734686738s ago: executing program 3 (id=3427): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) readv(r0, &(0x7f0000001840)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RGETLOCK(r5, &(0x7f00000001c0)=ANY=[], 0x200002e6) fcntl$setpipe(r5, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@jqfmt_vfsold}, {@nodelalloc}, {@errors_remount}, {@nomblk_io_submit}, {@usrjquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1e, 0x4e0, &(0x7f0000001a40)="$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") setuid(0xee00) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 1m14.811740443s ago: executing program 3 (id=3443): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/47, 0x2f}, {0x0}], 0x2}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d", 0x2f}], 0x1}}], 0x1, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1m14.134434616s ago: executing program 3 (id=3450): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = epoll_create(0x7fff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x80000000}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x1b) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x2, 0x4, 0x9, 0x9, 0xe, "e83a4e915234e059edd8719153c6b2477aff0a"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002300)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@delchain={0x34, 0x2e, 0x1, 0x70bd2f, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffe9, 0xffff}, {0x0, 0x1a}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x44080) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffff4a}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080d5}, 0x20000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r9, 0x65, 0x6, 0x0, &(0x7f0000000240)) 1m14.043326611s ago: executing program 3 (id=3455): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0xffffffffffffffe6}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x8, 0x1ce6f317) pipe2$9p(&(0x7f00000001c0), 0x0) fsmount(0xffffffffffffffff, 0x0, 0x88) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x37}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x8, 0xa8, {}, 0x2000000000001005, 0x6}}}, 0xfc36) 1m11.097072716s ago: executing program 3 (id=3465): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001340)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000f7fb20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020000100000000000000090000000000000083000000000000000000000000000000000000000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b"], 0x23c}}, 0x4080) 1m10.074889306s ago: executing program 3 (id=3475): r0 = syz_open_dev$loop(0x0, 0x40, 0x1c0862) readv(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r6, 0x29, 0x31, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m9.937599953s ago: executing program 35 (id=3475): r0 = syz_open_dev$loop(0x0, 0x40, 0x1c0862) readv(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r6, 0x29, 0x31, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 35.597423196s ago: executing program 8 (id=3719): perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2) io_uring_setup(0x7a53, &(0x7f0000000240)={0x0, 0x93c7, 0x40, 0x0, 0x17c}) r0 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x44040) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="0209000202000000"], 0x10}}, 0x40810) 35.553222928s ago: executing program 8 (id=3720): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000540)='net/udp6\x00') socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x20, 0x5, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001efffffff0008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 35.397961336s ago: executing program 8 (id=3724): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map=0x1, r0, 0x2f, 0x20}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xc03c, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, r4}, 0xc) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) r6 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r7, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_setup(0x202, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_getevents(r8, 0x4, 0x4, &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) pwritev(r5, &(0x7f0000000c00)=[{&(0x7f0000000880)="030c63ec8c0cec2f8f0ff7bc0e338487df23c97c1fa267f0d43f1aa52d482117952caaa884859ec6a4ea53332ec13633c4a1a7972be0971c97bba877cfd51b4b88c9a23bb5660a360dd13e1e58d31abed7ab965562b8227b2b3186d815a418290ee7d3ad556700e2a0fcf3be9bd16c5547da69c74341c66594d2f84715f8034efdcb06de196f892af8c5a134b484bb27723860c78072d77c9941f83873fff2e5e6536128ff99df1dd9e71b6c35c5ca4eca88a21df5c87de8e430cf0daec59554d0fb7fd3f3fe7afd2f9a76b59935b4cc01e67f8e24456c7748af70f4", 0xdc}, {&(0x7f0000000980)="12521449c4cd47314e22e399b56c9c25959ae59216de2188e0806aaf4bc101350999cadb9bf3363b118300d2ff76d039552e", 0x32}, {&(0x7f00000009c0)="32228c6d9d5984a302a8988a7b3b617d0affc758e27c3b39d4fdea29242477aa1f2c4685749a75ef332c384c74c83f29ae628b870adc421d93d121013007b1e9283f63328a7f351de366bc32b6d606d946380cb71ffcde44fb9f29065a5ec84f48e53f16c6203fc9791bccc268ed3bdcfb2956284f4c15e70e041d0e87b0b748add1a5db60ec885e57dacabc7ab1cf0452d871bd5467f28351cc503157ae5b45e146aa586ea06b48896f51fc795acbb454aefc26e3c37c7fa28b34a3d51d78ddd1bc3339fe68dd", 0xc7}, {&(0x7f0000000ac0)="2875344fa20c153f585c5e9a604d382233652f1e6075e5ec7e3887a462ae722a5e98f387daade3797c36c30b0455164612f235e88d1cdcf9550699bd", 0x3c}, {&(0x7f0000000b00)="452eb052fb891bfc20f8f163c88dacb5d2066bb74a2ce16847fd986265ac1f225cccc68b82fd574308074bd9879df5891ca809aa9b2bef51842fe2fbdf618219bfae250e94f43ef5156ef341813c", 0x4e}, {&(0x7f0000000b80)="ed9c568053267cad29e1f73aa20c8c1cb7bf3305074cd4e6ace30019536e8bb04e90630f8567bc9245eee4f8c3e4bc2a4fa6d72aec6cafb708b2ac9f0ae0317198a168110632bd74539cefda3f08286af65e192b5cb1ace2294a54615e071af6c599d6e2210ef5", 0x67}], 0x6, 0x0, 0xb) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x9820}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x94, &(0x7f0000000200)=""/148, 0x40f00, 0x40, '\x00', r4, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x5, 0x1, 0xfff}, 0x10, 0x2c179, r0, 0x3, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0x8, 0xc}, {0x1, 0x5, 0xe, 0x8}, {0x102, 0x2, 0xc, 0x4}], 0x10, 0x80000001}, 0x94) 35.090397661s ago: executing program 8 (id=3730): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x9, 0x4, 0x8, 0x8, 0x8}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@deltfilter={0x38, 0x2d, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xd}, {0x7, 0xc}, {0xd, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x38}}, 0x4000041) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r4}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) write$evdev(r0, &(0x7f0000000580)=[{{0x0, 0x2710}, 0x1, 0x5, 0x8001}, {{0x0, 0xea60}, 0x3, 0xfff8}, {{0x77359400}, 0x16, 0x7ff, 0x200}, {{}, 0x2, 0x2, 0xbd6b}, {{0x0, 0xea60}, 0x16, 0x0, 0x7}], 0x78) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x66, &(0x7f0000001940)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000480)=0x1020, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={&(0x7f0000000200)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x90}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="740000002d0001002abd70000000000008000000", @ANYRES32, @ANYBLOB], 0x74}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000000)={0xfff, 0x3, 0x80000001, 0x4}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) socket$packet(0x11, 0x2, 0x300) sendto$inet6(r7, &(0x7f0000000040)="83ff0000", 0x49, 0x0, 0x0, 0xf) 34.096062179s ago: executing program 8 (id=3737): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000048020000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ffffff1fb50a00000000000005000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 33.819706103s ago: executing program 8 (id=3743): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x100, 0x0, {0x0, 0x0, 0x74, r1, {0x1, 0x4}, {}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x4}, 0x10026, 0x100000010003, 0xfffffff8, 0x4, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0xffffffffffffffff}, 0x102802, 0x42, 0x0, 0x3, 0xfff, 0x80008001, 0x7fff}, 0x0, 0xfff0000000000002, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400001, 0x4) unshare(0x2040400) readahead(r4, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback=r2, r4, 0x11, 0x10, 0x0, @void, @value=r4}, 0x20) 33.783852084s ago: executing program 36 (id=3743): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x100, 0x0, {0x0, 0x0, 0x74, r1, {0x1, 0x4}, {}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x4}, 0x10026, 0x100000010003, 0xfffffff8, 0x4, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0xffffffffffffffff}, 0x102802, 0x42, 0x0, 0x3, 0xfff, 0x80008001, 0x7fff}, 0x0, 0xfff0000000000002, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400001, 0x4) unshare(0x2040400) readahead(r4, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback=r2, r4, 0x11, 0x10, 0x0, @void, @value=r4}, 0x20) 33.051066011s ago: executing program 4 (id=3752): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r1, 0x5) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r3, 0x400, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex:\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x30004084) 33.009781443s ago: executing program 4 (id=3753): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x400000, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x68, &(0x7f0000000200)=[{&(0x7f0000000b40)=""/195, 0xc3}, {&(0x7f00000023c0)=""/4103, 0x1007}, {&(0x7f0000000c40)=""/231, 0xe7}], 0x3}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x68, &(0x7f00000009c0)=ANY=[@ANYBLOB="fffff0ffffffaaaaaaaaaa000800451b005a00000000002f907800000000e0000001248081000000000010000800000086dd007f080088be0000000010008000010000000000000008fb21eb0000000120182e74"], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff0000000300000000b70300000000000085000000060000009500000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@bh}, {@data_ordered}, {@norecovery}]}, 0x3, 0x586, &(0x7f00000003c0)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, 0x0}, 0x4800) r10 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r10, 0x66020000) process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYBLOB="08000800000106000400070048004544001c0067000030029078ac1414aaac1414bb1ed29078ac14141d2eaa8d669bdbe59a9153e77de36dc887706f652b2a30abe9f2bcf55783ff0b5e6d6ae185052f66181ea4d4643e862fd67d9653d21457907be64a49c88fb0fe2eb8505fd054f434fc47b8f451ab4803329e2e3f4a6914f80d88b8ed96d7a0963332bb522aaf9bc67e668b437289a8ba53fa5121d8f6427dfd175dad78c1d983cfcb8ad9ea3153b53150bc4b7b41fe22e57321c91f03ac2d4f1a2ba2b42118a6e4e186a006627c5217c992d2c52d85573a28ae704d1e922748d8b59df7bc791fdb5ef27e5daa74906a726d00000000"], 0x2a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJfVh1Y1sXdlGwYBciLhqapIZOf5CkYGvBBFwoKIi4LdKN/4B76d6dCOrOtVBFKha0dB73zp1mMplfaTIzSe7nA5M599wzOeebOyf33HvnzA2gtOazH2nE+xGvbyQRs03rZqK+cr4o9+Lfj29mjyRqte/+K4mkyGuUT4rnM8XCZET86XLEpyv76918+Oj2crVW95OIc1t37p/bfPjoo/U7y7dWb63eXTr/tY8vLH596eOlpoa+vTPF85Wr3/n8L3/6w6+u/bn6URIX4/r4j1eiJY6jMh/z8boIsTl/LCIuZIk2f5eT5hSEUGqV4v04HhGfjdmo5Et1s7H+i5E2DhioWiWi1l3SqwBwUuneUFaNcUDj2L6/4+DrAx6VDM/zS/UDoP3xjxWnHCbzY6PpF0nTkVH93MbZI6g/q+PV48knrx7PPYk95yFevtk6Y0dQTyfbOxHxuXbxJ3nbzuaRZvGne47104hYjIiJon3fOkQbkqb0IM7DdHOQ+Ju3Qxb/xeI5y7/8lvW3ntYadvwAlNOzS8WOfDtb2t3/ZWOPxvgn2ox/Zg5/SSY36v1f5/FfY38/mY970pZxWDZmudb+V463Zvz951d+3an++vhv7knjkdXfGAsOw/OdiLmW+H+WBVuMf7L4kzbbPyty42J/dXz7L/+80mndqOOvPY34oO3xz+6oNEt1uT55bm29urpY/9m2jj/88Qe/61R/+/jfGUCk7WXbf7pD/E3bP219XfY3ud/+V+60Zvz+2tM7neqf6bn9039MJPXjzYki50c7W1sbSxETydWiSJG/vLW1cb57vPUyL2v581I9/g+/1L7/73n/t0Q11fiX2Yf737v9otO6t3n/N11Mfl3rsw2dZPGv9N7++/p/lverPuv47/cffKHTum7xTx0mMAAAAAAAACihNL8Gm6QLb9JpurBQny/7mZhOq/c2t768du/B3ZWID/PPQ46nkSb5R0Zm68vJ2np1dan4PGxj+XzL8lci4r2I+E1lKl9euHmvujLq4AEAAAAAAAAAAAAAAAAAAOCYOFPM/2/cp/o/lfr8f6Aket9gbt/9H4BTYpA3mASOt7z/d9vFvzu8tgDDZf8P5aX/Q3np/1Be+j+Ul/4P5aX/Q3np/1Be+j8AAAAAnErvffHZ35KI2P7GVP7ITBTrTPqF0238QKUrA2sHMHx6NJTXm0v/BvtQOn2N//9XfDng4JsDjEDSLjMfHNS6d/5nbV+5a+fwbQMAAAAAAAAAAAAA6j54v/P8/4PNDQZOGtP+oLwOMf/fVwfACeer/6G8HOMDPWbxx2SnFb3m/wMAAAAAAAAAAAAAR2YmfyTpQjEXeCbSdGEh4lMRcTbGk7X16upiRLwbEX+tjL+TLS+NutEAAAAAAAAAAAAAAAAAAABwymw+fHR7uVpd3WhO/H9fzulONO6C2rtwrY8yXRPfjAO+KpLh/1mmImLkG2VgibGmnCRiO9vyx6JhG5txPJqRJ0b8jwkAAAAAAAAAAAAAAAAAAEqoae5xe3O/HXKLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD4du//3yOxMl1/QV+F9yZGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDJ9EgAA//+YYDw3") sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@getchain={0x3c, 0x11, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xb}}, [{0x8, 0xb, 0x81}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3ee}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$sock_SIOCOUTQNSD(r10, 0x894b, &(0x7f0000000140)) 30.866221138s ago: executing program 4 (id=3768): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x500) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x0, 0x0, 0x80000045, [0x2, 0x89ff]}}) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010021, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r0, 0x0, 0x3ffff) 29.499499935s ago: executing program 4 (id=3778): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x1c, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8f7c5b, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) waitid(0x1, r0, 0x0, 0x61000006, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "8250ccdff1387e64d6e96c0cd72598de41565d7ce8f810fa44da02c54800756ebcce42e0c32aba9a51358e420064b6c047404180fa862c17683780cd44d06f15", 0x27}, 0x48, 0xfffffffffffffffd) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) nanosleep(&(0x7f0000000300)={r2, r3+10000000}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4010, &(0x7f00000001c0), 0x2, 0xbd8, &(0x7f00000083c0)="$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") keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r1, 0xc6, 0x1000}, &(0x7f0000000140)={'enc=', 'raw', ' hash=', {'sha3-512\x00'}}, &(0x7f00000001c0)="27840319d6202c6d5d17a8091980e0b6aa15acb0bcda799e392b306f7ba6d9aa020b17eea1faccefb2c555747722c76cb0b1d50d99076a70c22034c5d1e85179049f45b26d60782a4e7af36f27ca2e7e21109489bd2b581aeca00ff9745a7575bc45849581d28e13240ab390825222eb188c3ac494b38a2ba431ac9b3faa34b812da06582783543469af169bd5b2a813f00bae595050bad3059cdaf78549605f1b610279f93cc4beeb4bcf8920060bf2d827f198996115d079d87d21f31457d18946ce2359f8", &(0x7f0000001900)=""/4096) 28.649385486s ago: executing program 4 (id=3785): r0 = socket$kcm(0x2, 0x922000000001, 0x106) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x143042, 0x80) fchown(r1, 0xee01, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x2000c050) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x4f]}}, 0x0, 0x44}, 0x28) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$eJzs2k9rHHUYB/BnYqUxJd2I/2hB+kMP6mVocvIgkiAtiAFFG6EK0qmZ6JJxN2SWwIrYeNGLB1+CZ/HoTZCKFy+5+Ao8eMslxx7EkXbTNhtWyKJxS/P5XPZhn/0uz/AMw+8wu69888n6Wp2vFb2YyrKYWoztuJXFXEzFXdvx0gtXf332navvvbG0vHzp7ZQuL12ZX0gpnb3w0/ufff/czd6Zd384++Pp2Jn7YHfviz92nt45t/vXlY/bdWrXqdPtpSJd73Z7xfWqTKvtej1P6a2qLOoytTt1uTnUX6u6Gxv9VHRWZ2c2Nsu6TkWnn9bLfup1U2+zn4qPinYn5XmeZmeCf2Plu1tNE3vNo9ciu/vd7O/RiuzxlD2xmD11LXtmOzu31zStyQ7KMbm3/6ZpHvs2zty0/xPlwEN9OqL6amtla2XwOegvrUU7qijjYrTiz7h9m+wb1JdfX750Md0xF19WN/bzN7ZWHhnOz0cr5kbn5wf5NJw/HTMH8wvRiidH5xdG5qfjxecP5PNoxW8fRjeqWI3b2fv5z+dTeu3N5UP583d+BwDwsMnTPSPPb3n+T/1Bfozz4aHz1ak4f2qy105E3f90vaiqclMxTnFh3NT05GeeeHH8N1uTRTwIV3qk4pefX335ARhjv1g8vJ1JP5n4P9xf+lET08c7EAAAAAAAAAAAAEfy371F+PX+Pw61snHeLAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6mvwMAAP//cOvMBw==") mkdir(&(0x7f0000000300)='./bus\x00', 0x8) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20742, 0x0) r5 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x100087}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0xffffffffffffffff, 0x1}}, 0x48) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000180), 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000380)={0x6, &(0x7f0000000000)=[{@fixed}, {@fixed}, {@fixed}, {@none}, {@fixed}, {@fixed}]}) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0x0, 0x0) 27.96097383s ago: executing program 4 (id=3789): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000003247d60b7030000030a00006a0a00fe0000000c850000003f000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35149a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e571f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521f9e3dbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b13fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc90307f5f7a9cb7f1e5ed79dbf92e5d9c3f40a1313db007da349939e8805418029fef1be9f8729d4f1e43572059a7b4564d00"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x4000400, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000)={0x900}, 0x143}, 0x48) 27.910755003s ago: executing program 37 (id=3789): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x4000400, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000)={0x900}, 0x143}, 0x48) 6.52779559s ago: executing program 7 (id=3974): prlimit64(0x0, 0xb, &(0x7f0000000300)={0x5, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001002cbd70000000000000000000", @ANYRES32=r7], 0x20}}, 0x2000e844) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000490001002dbd7000fbdbdf250a002000", @ANYRES32=r1, @ANYBLOB="c000"/12], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r11) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x3, 0xc, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) 2.010075391s ago: executing program 0 (id=4027): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_io_uring_setup(0x6167, &(0x7f0000000400)={0x0, 0x641b, 0x10100, 0x1, 0x1}, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x10, 0x0, 0x21e}, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) creat(&(0x7f00000000c0)='./file1\x00', 0x80) syz_io_uring_setup(0x5bf, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, 0x0, 0x0) r2 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, 0x0, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$caif_stream(0x25, 0x1, 0x4) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000000)=0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='devices.list\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040)) 1.913351696s ago: executing program 0 (id=4029): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0xe000000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000)={0x900}, 0x143}, 0x48) 1.756167744s ago: executing program 5 (id=4030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x0) 1.651204359s ago: executing program 9 (id=4032): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = getpid() syz_pidfd_open(r1, 0x0) (async) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x2, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x4, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4014, &(0x7f0000001000)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d4e3a332f", @ANYRESDEC=r4]) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a00010037bd700003dcdf250220200100000000001f1201"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x4040010) 1.553916403s ago: executing program 7 (id=4034): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu>00||!') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x2, {0x1}}, 0x18) sendto$isdn(r3, 0x0, 0x0, 0xc040, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0x100514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x5, 0xfffffffc, 0x5, 0x2000008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000104000000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x20000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000030026bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="e1794600ea020400140012806c010100766c6e0000800004000280"], 0x34}, 0x1, 0x0, 0x0, 0x24008011}, 0x16c3035570930880) r6 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xe) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) ioctl$XFS_IOC_SCRUBV_METADATA(r5, 0xc0285840, &(0x7f00000000c0)={0x8, 0x0, 0x80000000, 0x0, 0x1, 0x6, 0x0, &(0x7f00000003c0)=[{0x2, 0x1ff, 0x3ffc000}, {0x15, 0x101, 0x6}, {0x14, 0x101, 0x6}, {0x14, 0xfe, 0x4}, {0x5, 0x101, 0x2}, {0x21, 0xfe, 0x4c}]}) write$binfmt_elf64(r8, 0x0, 0x9ca) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000010560100300012800b000100697036746e6c0000200002801400020000000000000000000000ffffac14142a0500090029000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 1.553555943s ago: executing program 5 (id=4035): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40012041, 0x0) 1.354193963s ago: executing program 1 (id=4036): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x7, 0x3}, 0x2200, 0x10001, 0xda, 0x5, 0xabca, 0x5, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffe}, {0xa, 0x0, 0x2, @empty}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x6e]}}, 0x5c) 1.335951194s ago: executing program 1 (id=4037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601020060000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400020000008001240fffffffa0d000300686173683a6e657400000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000003380)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) getpid() getresgid(&(0x7f0000004d00), &(0x7f0000004d40), &(0x7f0000004d80)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000006180)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000073c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000007400)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000078c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) setresuid(0x0, 0x0, 0x0) getgid() getpgid(0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000007900)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007940), 0x48001, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000007980)) setresgid(0x0, 0x0, 0x0) 1.268746027s ago: executing program 1 (id=4038): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x1ff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a310000f703050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.22218298s ago: executing program 5 (id=4039): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) fcntl$notify(r2, 0x402, 0x80000014) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') exit(0x100000000000035) getdents(r3, 0x0, 0x0) r4 = fsopen(&(0x7f00000003c0)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x82) fchdir(r5) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c5) r7 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) ftruncate(r7, 0x3007ffc) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r1) openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) 1.22205021s ago: executing program 9 (id=4040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000008400000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002"], 0x124}}, 0x0) 1.22181462s ago: executing program 9 (id=4041): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1, @none}, 0xe) prctl$PR_SET_FPEMU(0xa, 0x1) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000200)={0x1, 0x6000, 0x4, 0x8, 0x9, 0x9, 0x3}, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000400)) mmap(&(0x7f000053e000/0x1000)=nil, 0x1000, 0x100000a, 0x11012, r2, 0x0) prctl$PR_SET_FPEMU(0xa, 0x1) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000440)='autofs\x00', 0x0) munmap(&(0x7f00005f6000/0x3000)=nil, 0x3000) getsockname$qrtr(r4, &(0x7f0000000340), &(0x7f0000000380)=0xc) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_FPEMU(0xa, 0x3) fsmount(r5, 0x0, 0x2) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000100)=""/207, 0xcf}, {&(0x7f0000000000)=""/70, 0x46}], 0x2, 0x7fff, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x4000)=nil, 0x4000) 1.183601282s ago: executing program 9 (id=4042): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6(0xa, 0x800000000000002, 0x0) io_uring_setup(0x44d9, &(0x7f0000000100)={0x0, 0x6fb8, 0x2, 0x2, 0x382}) r0 = gettid() syz_clone3(&(0x7f00000003c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r0], 0x2}, 0x58) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac030000000000008500000033"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x7c, &(0x7f0000000040)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x5]}}}}}}}, 0x0) 1.036991478s ago: executing program 0 (id=4043): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b40)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x401}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@journal_async_commit}, {@jqfmt_vfsold}, {@bsdgroups}, {@data_err_ignore}]}, 0x0, 0x55c, &(0x7f0000000440)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000020000000000000000000003000000000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x8000000) 906.214735ms ago: executing program 9 (id=4044): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0xffffffe4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {0x9}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 902.017195ms ago: executing program 0 (id=4045): openat$tun(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08012200", @ANYRES32=r1], 0x90}}, 0x0) 843.838958ms ago: executing program 7 (id=4046): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x10100, 0xe000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_TOS={0x5, 0x9, 0xfd}]}}}]}, 0x40}}, 0x0) 577.943281ms ago: executing program 7 (id=4047): socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='+\x00', &(0x7f0000000080)='\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x204000, 0x0) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000100)={0xd, 0x0, 0x4}) (async) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000100)={0xd, 0x0, 0x4}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'caif0\x00', 0x4}) syz_open_dev$vcsu(&(0x7f0000000180), 0x1, 0x48000) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000180), 0x1, 0x48000) ioctl$NILFS_IOCTL_GET_CPSTAT(r3, 0x80186e83, &(0x7f00000001c0)) recvmmsg$unix(r3, &(0x7f0000002000)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/26, 0x1a}, {&(0x7f00000003c0)=""/174, 0xae}], 0x4, &(0x7f00000004c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000000600)=""/51, 0x33}, {&(0x7f0000000640)=""/189, 0xbd}, {&(0x7f0000000700)=""/83, 0x53}, {&(0x7f0000000780)=""/1, 0x1}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/152, 0x98}, {&(0x7f0000001880)=""/26, 0x1a}, {&(0x7f00000018c0)=""/117, 0x75}, {&(0x7f0000001940)=""/150, 0x96}, {&(0x7f0000001a00)=""/39, 0x27}], 0xa, &(0x7f0000001b00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001b80)=""/63, 0x3f}, {&(0x7f0000001bc0)=""/240, 0xf0}, {&(0x7f0000001cc0)=""/159, 0x9f}, {&(0x7f0000001d80)=""/150, 0x96}, {&(0x7f0000001e40)=""/117, 0x75}, {&(0x7f0000001ec0)=""/93, 0x5d}], 0x6, &(0x7f0000001fc0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x3, 0x101, &(0x7f00000020c0)) setsockopt$MRT_ADD_MFC(r9, 0x0, 0xcc, &(0x7f0000002100)={@local, @empty, 0x0, "17a8cc41f3cf727842b4ac774baba966d65db33b562c62699070df37e7496fe3", 0xffffffff, 0x7ff, 0x8001, 0x4}, 0x3c) writev(r4, &(0x7f0000002200)=[{&(0x7f0000002140)="d794809b636351a2fcbb608a7135a3d902d56cc3f8bf029a0c3f4992339e5a7f2ec80e69c11f02e6a09ac40c92892e1be1f0216ce98d91842121e0ad22fbdacaf7f9acde29239e48f91944e40a511c9fce5cd85e1bfd99fc00ffccd3e8eda5c9c4d0a1a47372d50ee9640d05ebab6b64a1dbd0dd1971d284ef65d7ce87b0d893b3417dfaf3371be27072c3df5acec1711f7c1c5fde56062ecc3c54d8828c499b13485dd1e8b15f704d209cfdb4", 0xad}], 0x1) write$selinux_access(r11, &(0x7f0000002240)={'system_u:object_r:inetd_log_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xffffffffffffffc0}, 0x46) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2df}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2df}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f00000023c0), 0x4) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r16, 0x84, 0x74, &(0x7f0000002400)=""/49, &(0x7f0000002440)=0x31) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r16, 0x84, 0x74, &(0x7f0000002400)=""/49, &(0x7f0000002440)=0x31) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r7, 0xc0305302, &(0x7f0000002480)={0x7, 0x500, 0x4, 0x81, 0xfff, 0x1}) fsconfig$FSCONFIG_SET_PATH(r14, 0x3, &(0x7f00000024c0)='system_u:object_r:inetd_log_t:s0', &(0x7f0000002500)='./file0\x00', r5) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000002540)={0x0, 0x9}, &(0x7f0000002580)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r16, 0x84, 0x73, &(0x7f00000025c0)={r17, 0x31ab, 0x0, 0x6, 0x5}, &(0x7f0000002600)=0x18) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r15, 0xc0205866, &(0x7f0000002c00)={&(0x7f0000002640)=0x4, 0x9, &(0x7f0000002680)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000002bc0)}) ioctl$NILFS_IOCTL_SYNC(r10, 0x80086e8a, &(0x7f0000002c40)) (async) ioctl$NILFS_IOCTL_SYNC(r10, 0x80086e8a, &(0x7f0000002c40)) r18 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002cc0), r14) sendmsg$L2TP_CMD_TUNNEL_DELETE(r14, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x24, r18, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c807}, 0x4000000) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r14, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x24, r18, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c807}, 0x4000000) accept(r6, 0x0, &(0x7f0000002dc0)) (async) accept(r6, 0x0, &(0x7f0000002dc0)) getsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000002e00), &(0x7f0000002e40)=0x10) (async) getsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000002e00), &(0x7f0000002e40)=0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002ec0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0xc804) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002ec0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0xc804) r19 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003000), r12) sendmsg$IPVS_CMD_GET_DEST(r12, &(0x7f0000003180)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003140)={&(0x7f0000003040)={0xd4, r19, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x55}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffff5b}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x37ac}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x804}, 0x20000004) r20 = openat$cgroup_netprio_ifpriomap(r13, &(0x7f00000031c0), 0x2, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r20, 0xc080583d, &(0x7f0000003200)={0x5, 0x6, 0x2, 0x6, 0xffffff80, 0x9, 0x4a6, 0xff}) 529.095614ms ago: executing program 0 (id=4048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601020060000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400020000008001240fffffffa0d000300686173683a6e657400000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000003380)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000004bc0)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@private0}, 0x0, @in6=@private2}}, &(0x7f0000004cc0)=0xe8) getresgid(&(0x7f0000004d00), &(0x7f0000004d40), &(0x7f0000004d80)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000006180)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000073c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000007400)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000078c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) setresuid(0x0, 0x0, 0x0) getgid() getpgid(0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000007900)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007940), 0x48001, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000007980)) setresgid(0x0, 0x0, 0x0) 412.830859ms ago: executing program 7 (id=4049): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40012041, 0x0) 314.056654ms ago: executing program 9 (id=4050): r0 = syz_open_dev$loop(0x0, 0x40, 0x1c0862) readv(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113340000000000bf5000000000000007000000ee0016055e030100000000002505ffffffb0000069163e0000000000bf0700000000000026050700c0ffffff6706000020000000140600000ee60060bf500000000000002f650000000006006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7166c23d28c0a7101b8b09736ecd34aa9dc1b498"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x49) 303.106055ms ago: executing program 5 (id=4051): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff850000007b000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000fdff06040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000008000140000040002c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000408000240000000940900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 226.816288ms ago: executing program 7 (id=4052): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0x5) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) fchdir(r1) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x7fffffff) ftruncate(r4, 0x2007ffb) (async) ftruncate(r4, 0x2007ffb) setuid(0xee01) r7 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xffefffff}, {0x16, 0x0, 0x4}]}, 0x10) sendfile(r4, r4, 0x0, 0x1000000201005) (async) sendfile(r4, r4, 0x0, 0x1000000201005) 190.12147ms ago: executing program 0 (id=4053): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xaf, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x20033, 0x51b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000702e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 181.239461ms ago: executing program 1 (id=4054): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000002000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 62.181656ms ago: executing program 1 (id=4055): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socket(0x6, 0x80000, 0x668000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x44045) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1c0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/profiling', 0x800, 0x150) (async) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000180)='./file1\x00', 0xa500014c) (async) r4 = syz_io_uring_setup(0x304, &(0x7f0000000300)={0x0, 0x8006d85, 0x400, 0x2, 0x200118}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r7, 0x0, 0x0, 0x0, 0x100}) (async) io_uring_enter(r4, 0x8aa, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f00000006c0)={0xfffffffffffffff7, r7, 0x2, {0x27fffffffffffff, 0x4}, 0x54}, 0x1) (async) inotify_add_watch(r3, &(0x7f00000003c0)='./file0/file3\x00', 0xd0) (async) inotify_add_watch(r3, &(0x7f00000000c0)='./file1\x00', 0x8) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) r8 = open(&(0x7f0000000400)='./bus\x00', 0x143342, 0x1c0) (async) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r9, 0x0, 0x3}) (async) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r8], 0x7c}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x800}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}}, 0x40) 60.975856ms ago: executing program 5 (id=4056): perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x30084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0xfffffffc, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x3, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe, 0x9}}}}}, 0x0) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="d643474bff23b361da0c14297ed4ebf1ce6c0a927728fa1611b89437acb9a51c708d56c7a15b175fde93589c2d97c0f45db05f7108ac8394b48181", 0x3b, 0xfffffffffffffffe) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3, 0x0, r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 28.681358ms ago: executing program 1 (id=4057): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000402000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00d4bf56f74b428209dd4c7f27635330000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d8287463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b608088e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000077ef79d28f42201fc0e3bb4974e77cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0feabb0f22b20afe95fba722056f94ab15f1c"], &(0x7f0000000140)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0x7ffffc, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setresuid(0x0, 0x0, 0xee00) r5 = syz_open_procfs(0x0, 0x0) poll(&(0x7f00000003c0)=[{r1, 0x400}, {r1, 0x94}, {r5, 0x504}, {r1}, {r4, 0x410}, {r4, 0x2}], 0x6, 0x5) syz_genetlink_get_family_id$ieee802154(&(0x7f0000005d40), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) r7 = socket(0x10, 0x2, 0x0) syz_io_uring_setup(0x100293f, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000500)="8a59aecf7b28e6e31f3c4fa56523dcfb9fd974763e6429bb6867e6dce94f312dd6d2aa3874b9f3c84323c547743897a15b62590e75dee9b9658b9d83d8be74af0117b771dcac1b349c4fd6", 0x4b}], 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}}, 0x400000000000000) 0s ago: executing program 5 (id=4058): r0 = msgget$private(0x0, 0x200) msgsnd(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000000008000"], 0x8, 0x0) msgsnd(r0, &(0x7f0000000a80)=ANY=[@ANYRESOCT], 0x401, 0x0) msgctl$IPC_RMID(r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f00000001c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$kcm(0x10, 0x2, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 7759][T15285] chnl_net:caif_netlink_parms(): no params data found [ 410.594665][T15307] EXT4-fs (loop0): orphan cleanup on readonly fs [ 410.641057][T15307] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #11: block 7: comm syz.0.3484: lblock 7 mapped to illegal pblock 7 (length 1) [ 410.671916][T15307] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 410.679509][T15307] EXT4-fs (loop0): 1 orphan inode deleted [ 410.688696][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 410.688716][ C0] EXT4-fs (loop0): initial error at time 1773855065: ext4_map_blocks:776: inode 11: block 7 [ 410.688769][ C0] EXT4-fs (loop0): last error at time 1773855065: ext4_map_blocks:776: inode 11: block 7 [ 410.721497][T15307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 410.768257][T15285] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.787997][T15285] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.800405][T15285] bridge_slave_0: entered allmulticast mode [ 410.807508][T15285] bridge_slave_0: entered promiscuous mode [ 410.814824][T15285] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.822625][T15285] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.829790][T15285] bridge_slave_1: entered allmulticast mode [ 410.836707][T15285] bridge_slave_1: entered promiscuous mode [ 410.861481][T15285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.872098][T15285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.920411][T12521] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.924268][T15285] team0: Port device team_slave_0 added [ 410.937564][T15285] team0: Port device team_slave_1 added [ 410.948566][T15344] loop5: detected capacity change from 0 to 512 [ 410.958916][T15347] FAULT_INJECTION: forcing a failure. [ 410.958916][T15347] name failslab, interval 1, probability 0, space 0, times 0 [ 410.964949][T15344] msdos: Unknown parameter 'ÿ' [ 411.008915][ T28] audit: type=1400 audit(1773855065.823:8308): avc: denied { ioctl } for pid=15346 comm="syz.7.3489" path="socket:[48161]" dev="sockfs" ino=48161 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 411.023924][T15347] CPU: 1 UID: 0 PID: 15347 Comm: syz.0.3488 Tainted: G W syzkaller #0 PREEMPT(full) [ 411.023959][T15347] Tainted: [W]=WARN [ 411.023966][T15347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 411.023980][T15347] Call Trace: [ 411.023987][T15347] [ 411.023995][T15347] __dump_stack+0x1d/0x30 [ 411.024042][T15347] dump_stack_lvl+0x95/0xd0 [ 411.024073][T15347] dump_stack+0x15/0x1b [ 411.024095][T15347] should_fail_ex+0x263/0x280 [ 411.024122][T15347] should_failslab+0x8c/0xb0 [ 411.024170][T15347] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 411.024211][T15347] ? __alloc_skb+0x2d6/0x690 [ 411.024309][T15347] __alloc_skb+0x2d6/0x690 [ 411.024335][T15347] ? __alloc_skb+0x200/0x690 [ 411.024374][T15347] mr6_netlink_event+0x7b/0x110 [ 411.024454][T15347] ip6mr_mfc_add+0x73a/0x1700 [ 411.024566][T15347] ? should_fail_ex+0xd9/0x280 [ 411.024593][T15347] ? mutex_lock+0x57/0x90 [ 411.024624][T15347] ip6_mroute_setsockopt+0x7ea/0xa80 [ 411.024745][T15347] do_ipv6_setsockopt+0x21d/0x21d0 [ 411.024772][T15347] ? _parse_integer+0x27/0x40 [ 411.024796][T15347] ? kstrtoull+0x111/0x140 [ 411.024886][T15347] ? __rcu_read_unlock+0x4e/0x70 [ 411.024909][T15347] ? avc_has_perm_noaudit+0xab/0x130 [ 411.024939][T15347] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 411.024968][T15347] ipv6_setsockopt+0x59/0x130 [ 411.025022][T15347] rawv6_setsockopt+0x1d2/0x410 [ 411.025157][T15347] sock_common_setsockopt+0x69/0x80 [ 411.025181][T15347] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 411.025219][T15347] __sys_setsockopt+0x184/0x200 [ 411.025318][T15347] __x64_sys_setsockopt+0x64/0x80 [ 411.025347][T15347] x64_sys_call+0x2327/0x3020 [ 411.025374][T15347] do_syscall_64+0x12c/0x370 [ 411.025441][T15347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.025463][T15347] RIP: 0033:0x7fc6cae7c799 [ 411.025479][T15347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.025498][T15347] RSP: 002b:00007fc6c98d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 411.025565][T15347] RAX: ffffffffffffffda RBX: 00007fc6cb0f5fa0 RCX: 00007fc6cae7c799 [ 411.025580][T15347] RDX: 00000000000000d2 RSI: 0000000000000029 RDI: 0000000000000003 [ 411.025593][T15347] RBP: 00007fc6c98d7090 R08: 000000000000005c R09: 0000000000000000 [ 411.025660][T15347] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 411.025674][T15347] R13: 00007fc6cb0f6038 R14: 00007fc6cb0f5fa0 R15: 00007ffc249d3fb8 [ 411.025754][T15347] [ 411.035797][T15348] syz.7.3489 (15348) used obsolete PPPIOCDETACH ioctl [ 411.240222][ T28] audit: type=1400 audit(1773855065.823:8309): avc: denied { accept } for pid=15346 comm="syz.7.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 411.352346][T15285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.359482][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.493803][T15362] loop0: detected capacity change from 0 to 256 [ 411.513955][T15362] FAT-fs (loop0): count of clusters too big (178174) [ 411.548120][T15362] FAT-fs (loop0): Can't find a valid FAT filesystem [ 411.560330][T15285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.598999][T15360] dummy0 speed is unknown, defaulting to 1000 [ 411.617073][T15360] dummy0 speed is unknown, defaulting to 1000 [ 411.626525][T15363] lo speed is unknown, defaulting to 1000 [ 411.632776][T15285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.646141][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.734338][T15285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.756338][T15360] dummy0 speed is unknown, defaulting to 1000 [ 411.795952][T15360] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 411.838365][T15371] loop0: detected capacity change from 0 to 1024 [ 411.870371][T15285] hsr_slave_0: entered promiscuous mode [ 411.870593][T15371] EXT4-fs: inline encryption not supported [ 411.882872][T15285] hsr_slave_1: entered promiscuous mode [ 411.888705][T15285] debugfs: 'hsr0' already exists in 'hsr' [ 411.910338][T15285] Cannot create hsr debugfs directory [ 411.939200][T15371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.965883][T15360] dummy0 speed is unknown, defaulting to 1000 [ 412.005982][T15360] dummy0 speed is unknown, defaulting to 1000 [ 412.027034][T15285] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 412.042405][T15360] dummy0 speed is unknown, defaulting to 1000 [ 412.042511][T15285] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 412.058875][T15371] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 412.060344][T15285] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 412.093714][T15371] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20003 [ 412.104089][T15360] dummy0 speed is unknown, defaulting to 1000 [ 412.113510][T15285] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 412.135796][T15360] dummy0 speed is unknown, defaulting to 1000 [ 412.144159][ T28] audit: type=1400 audit(1773855066.963:8310): avc: denied { bind } for pid=15370 comm="syz.0.3494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 412.168219][T12521] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.181812][T15360] dummy0 speed is unknown, defaulting to 1000 [ 412.203359][T15360] dummy0 speed is unknown, defaulting to 1000 [ 412.262693][T15285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.294917][T15285] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.348306][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.352304][T15395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.355399][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.387464][T15395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.398762][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.405891][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.411320][T15395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.443265][T15395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.465219][T15395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.483882][T15395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.502430][T15395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.521448][T15395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.619407][T15285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.012719][T15285] veth0_vlan: entered promiscuous mode [ 413.021233][T15285] veth1_vlan: entered promiscuous mode [ 413.039825][T15285] veth0_macvtap: entered promiscuous mode [ 413.049591][T15285] veth1_macvtap: entered promiscuous mode [ 413.155873][T15416] netlink: 'syz.7.3500': attribute type 9 has an invalid length. [ 413.163672][T15416] netlink: 'syz.7.3500': attribute type 7 has an invalid length. [ 413.171466][T15416] netlink: 'syz.7.3500': attribute type 8 has an invalid length. [ 413.185565][T15285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.246658][T15285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.361724][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.389772][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.516930][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.590024][ T28] audit: type=1400 audit(1773855068.403:8311): avc: denied { bind } for pid=15419 comm="syz.5.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 413.620725][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.837933][T15424] netdevsim netdevsim8 netdevsim0: IPsec offload requires 128 bit authentication [ 413.995567][T15429] loop8: detected capacity change from 0 to 1024 [ 413.997322][T15426] syzkaller0: entered promiscuous mode [ 414.002372][T15429] EXT4-fs: Invalid want_extra_isize 1025 [ 414.052361][T15426] syzkaller0: entered allmulticast mode [ 414.164595][ T12] nci: nci_rx_work: unknown MT 0x1 [ 414.608481][T15440] xt_hashlimit: max too large, truncated to 1048576 [ 414.672899][ T28] audit: type=1400 audit(1773855069.493:8312): avc: denied { read write } for pid=15439 comm="syz.8.3507" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 414.757747][T15442] loop8: detected capacity change from 0 to 32768 [ 414.788662][ T3825] Bluetooth: hci0: Frame reassembly failed (-84) [ 414.798896][ T28] audit: type=1400 audit(1773855069.493:8313): avc: denied { open } for pid=15439 comm="syz.8.3507" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 414.830516][T13500] loop8: p1 p3 < > [ 414.845314][T15442] loop8: p1 p3 < > [ 414.998436][T15462] syzkaller1: entered promiscuous mode [ 415.004264][T15462] syzkaller1: entered allmulticast mode [ 415.067276][T15463] loop4: detected capacity change from 0 to 512 [ 415.092799][T15465] loop8: detected capacity change from 0 to 128 [ 415.156233][T15463] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 415.176797][T15465] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 415.233719][T15465] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.287294][T12530] udevd[12530]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 415.301575][T13500] udevd[13500]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 415.331085][T15463] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 415.334435][T12530] udevd[12530]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 415.346845][T15463] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3512: bg 0: block 248: padding at end of block bitmap is not set [ 415.356837][T13500] udevd[13500]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 415.371464][T15463] loop4: lost filesystem error report for type 5 error -117 [ 415.380147][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 415.383586][T15285] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 415.387522][ C0] EXT4-fs (loop4): last error at time 1773855070: ext4_validate_block_bitmap:441 [ 415.394538][T15463] Quota error (device loop4): write_blk: dquota write failed [ 415.402952][ C0] [ 415.422625][T15463] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 415.432803][T15463] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.3512: Failed to acquire dquot type 1 [ 415.444370][T15463] loop4: lost filesystem error report for type 5 error -117 [ 415.447128][T15470] loop8: detected capacity change from 0 to 128 [ 415.460276][T15463] EXT4-fs (loop4): 1 truncate cleaned up [ 415.471193][T15463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 415.480525][T15470] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 415.510396][T15470] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.550617][T13130] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 415.562074][T15285] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 415.591957][T15475] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3516'. [ 415.608945][T15475] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3516'. [ 415.650595][ T4857] Bluetooth: hci1: Frame reassembly failed (-84) [ 415.754924][ T28] audit: type=1400 audit(1773855070.573:8314): avc: denied { ioctl } for pid=15476 comm="syz.8.3517" path="socket:[48355]" dev="sockfs" ino=48355 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 416.266290][T15418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.375841][T15487] loop7: detected capacity change from 0 to 1024 [ 416.382726][T15487] EXT4-fs: inline encryption not supported [ 416.389063][T15487] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 416.400927][T15487] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 2: comm syz.7.3519: lblock 2 mapped to illegal pblock 2 (length 1) [ 416.415198][T15487] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 416.415503][T15487] EXT4-fs (loop7): Remounting filesystem read-only [ 416.424631][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 416.424650][ C0] EXT4-fs (loop7): initial error at time 1773855071: ext4_map_blocks:776: inode 3: block 2 [ 416.424688][ C0] EXT4-fs (loop7): last error at time 1773855071: ext4_map_blocks:776: inode 3: block 2 [ 416.457455][T15487] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 416.466921][T15487] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 416.475917][T15487] EXT4-fs (loop7): 1 orphan inode deleted [ 416.487614][T15487] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.504144][T15487] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.566816][T15494] loop0: detected capacity change from 0 to 256 [ 416.582811][T15494] FAT-fs (loop0): count of clusters too big (178174) [ 416.589819][T15494] FAT-fs (loop0): Can't find a valid FAT filesystem [ 416.629657][T15499] xt_limit: Overflow, try lower: 65536/2147483648 [ 416.672885][T15499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.713328][T15500] netlink: 'syz.4.3521': attribute type 9 has an invalid length. [ 416.721521][T15500] netlink: 'syz.4.3521': attribute type 7 has an invalid length. [ 416.729406][T15500] netlink: 'syz.4.3521': attribute type 8 has an invalid length. [ 416.850222][ T4095] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 417.114942][T15509] loop0: detected capacity change from 0 to 128 [ 417.167976][T15509] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 417.198692][T15509] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 417.241146][T15509] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3526'. [ 417.531173][ T28] audit: type=1400 audit(1773855072.343:8315): avc: denied { create } for pid=15508 comm="syz.0.3526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 417.551993][T15515] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 418.139028][T15479] Bluetooth: hci1: command 0x1003 tx timeout [ 418.160245][T15454] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 418.181392][T12521] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 418.344274][T15524] FAULT_INJECTION: forcing a failure. [ 418.344274][T15524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.840208][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 418.901621][T15524] CPU: 0 UID: 0 PID: 15524 Comm: syz.0.3528 Tainted: G W syzkaller #0 PREEMPT(full) [ 418.901657][T15524] Tainted: [W]=WARN [ 418.901665][T15524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 418.901678][T15524] Call Trace: [ 418.901686][T15524] [ 418.901694][T15524] __dump_stack+0x1d/0x30 [ 418.901720][T15524] dump_stack_lvl+0x95/0xd0 [ 418.901818][T15524] dump_stack+0x15/0x1b [ 418.901917][T15524] should_fail_ex+0x263/0x280 [ 418.901946][T15524] should_fail+0xb/0x20 [ 418.901971][T15524] should_fail_usercopy+0x1a/0x20 [ 418.902053][T15524] _copy_to_user+0x20/0xa0 [ 418.902231][T15524] simple_read_from_buffer+0xb5/0x130 [ 418.902258][T15524] proc_fail_nth_read+0x10e/0x150 [ 418.902286][T15524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.902391][T15524] vfs_read+0x1ab/0x7f0 [ 418.902481][T15524] ? __rcu_read_unlock+0x4e/0x70 [ 418.902500][T15524] ? __fget_files+0x184/0x1c0 [ 418.902523][T15524] ? mutex_lock+0x57/0x90 [ 418.902595][T15524] ksys_read+0xdc/0x1a0 [ 418.902739][T15524] __x64_sys_read+0x40/0x50 [ 418.902759][T15524] x64_sys_call+0x2886/0x3020 [ 418.902843][T15524] do_syscall_64+0x12c/0x370 [ 418.902865][T15524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.902885][T15524] RIP: 0033:0x7fc6cae3cfce [ 418.902902][T15524] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 418.902953][T15524] RSP: 002b:00007fc6c98d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 418.902975][T15524] RAX: ffffffffffffffda RBX: 00007fc6c98d76c0 RCX: 00007fc6cae3cfce [ 418.902988][T15524] RDX: 000000000000000f RSI: 00007fc6c98d70a0 RDI: 0000000000000004 [ 418.903000][T15524] RBP: 00007fc6c98d7090 R08: 0000000000000000 R09: 0000000000000000 [ 418.903012][T15524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.903025][T15524] R13: 00007fc6cb0f6038 R14: 00007fc6cb0f5fa0 R15: 00007ffc249d3fb8 [ 418.903105][T15524] [ 419.249659][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3534'. [ 419.323821][ T28] audit: type=1400 audit(1773855074.143:8316): avc: denied { write } for pid=15542 comm="syz.8.3536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 419.488072][ T28] audit: type=1400 audit(1773855074.303:8317): avc: denied { create } for pid=15542 comm="syz.8.3536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 419.657887][ T28] audit: type=1400 audit(1773855074.473:8318): avc: denied { ioctl } for pid=15557 comm="syz.0.3539" path="socket:[49738]" dev="sockfs" ino=49738 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 419.720537][T15558] loop0: detected capacity change from 0 to 2048 [ 419.736583][T15558] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 419.767064][T15558] loop0: detected capacity change from 0 to 512 [ 419.768407][ T28] audit: type=1400 audit(1773855074.583:8319): avc: denied { lock } for pid=15557 comm="syz.0.3539" path="socket:[49739]" dev="sockfs" ino=49739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 419.775123][T15558] msdos: Bad value for 'uid' [ 419.803767][T15558] msdos: Bad value for 'uid' [ 420.039006][T15566] loop7: detected capacity change from 0 to 256 [ 420.237674][T15572] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 422.315693][T15544] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.367321][T15583] loop7: detected capacity change from 0 to 1024 [ 422.376937][T15582] loop4: detected capacity change from 0 to 128 [ 422.384503][T15583] EXT4-fs: Invalid want_extra_isize 1025 [ 422.538589][ T28] audit: type=1400 audit(1773855077.263:8320): avc: denied { view } for pid=15588 comm="syz.7.3548" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 422.598611][T15584] syzkaller0: entered promiscuous mode [ 422.604249][T15584] syzkaller0: entered allmulticast mode [ 422.688838][T15604] netlink: 'syz.8.3549': attribute type 9 has an invalid length. [ 422.697062][T15604] netlink: 'syz.8.3549': attribute type 7 has an invalid length. [ 422.705228][T15604] netlink: 'syz.8.3549': attribute type 8 has an invalid length. [ 422.733223][T15601] loop4: detected capacity change from 0 to 1024 [ 422.744080][T15601] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 422.764395][ T28] audit: type=1400 audit(1773855077.553:8321): avc: denied { mounton } for pid=15579 comm="syz.4.3547" path="/137/file0" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 423.064858][T15609] loop7: detected capacity change from 0 to 512 [ 423.155603][T15609] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.349100][T15615] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3553'. [ 423.463110][T12276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.527232][T15617] vlan2: entered promiscuous mode [ 423.546474][T15617] vlan2: entered allmulticast mode [ 423.593063][T15617] hsr_slave_1: entered allmulticast mode [ 423.617371][T15582] loop4: detected capacity change from 0 to 128 [ 423.662357][T15617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3554'. [ 423.751494][T15622] loop5: detected capacity change from 0 to 1024 [ 423.764120][T15582] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 423.778737][T15582] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.856269][T15622] EXT4-fs: inline encryption not supported [ 423.883823][T13130] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 423.893275][T15622] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 423.906754][T15622] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.3556: lblock 2 mapped to illegal pblock 2 (length 1) [ 423.921349][T15622] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 423.921445][T15622] EXT4-fs (loop5): Remounting filesystem read-only [ 423.930549][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 423.930569][ C1] EXT4-fs (loop5): initial error at time 1773855078: ext4_map_blocks:776: inode 3: block 2 [ 423.930616][ C1] EXT4-fs (loop5): last error at time 1773855078: ext4_map_blocks:776: inode 3: block 2 [ 424.004277][T15622] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 424.012837][T15622] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 424.021963][T15622] EXT4-fs (loop5): 1 orphan inode deleted [ 424.028140][T15622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.041495][T15622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.224897][ T28] audit: type=1400 audit(1773855079.043:8322): avc: denied { unmount } for pid=13130 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 424.269908][T15629] netlink: 'syz.8.3559': attribute type 2 has an invalid length. [ 424.493835][T15642] loop8: detected capacity change from 0 to 512 [ 424.558940][ T28] audit: type=1400 audit(1773855079.323:8323): avc: denied { mounton } for pid=15641 comm="syz.8.3563" path="/file0" dev="ramfs" ino=48602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 424.790961][T15640] loop4: detected capacity change from 0 to 32768 [ 424.804673][T15639] loop5: detected capacity change from 0 to 512 [ 424.811390][T15639] EXT4-fs: Ignoring removed nomblk_io_submit option [ 424.818700][T15639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 424.827281][T15639] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 424.846217][T15639] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.3561: Allocating blocks 41-42 which overlap fs metadata [ 424.860006][T15639] loop5: lost filesystem error report for type 5 error -117 [ 424.860153][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 424.873951][ C0] EXT4-fs (loop5): initial error at time 1773855079: ext4_mb_mark_diskspace_used:4222 [ 424.883533][ C0] EXT4-fs (loop5): last error at time 1773855079: ext4_mb_mark_diskspace_used:4222 [ 424.892905][T15639] EXT4-fs (loop5): Remounting filesystem read-only [ 424.894318][T15655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.899473][T15639] Quota error (device loop5): write_blk: dquota write failed [ 424.915278][T15639] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 424.924447][T15639] Quota error (device loop5): write_blk: dquota write failed [ 424.932000][T15639] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 424.941966][T15639] EXT4-fs (loop5): 1 truncate cleaned up [ 424.948063][T15639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.963788][T15655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.986722][T15659] loop0: detected capacity change from 0 to 512 [ 425.001176][T15640] loop4: p1 p3 < > [ 425.029648][T15659] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 425.072879][T15659] EXT4-fs (loop0): orphan cleanup on readonly fs [ 425.100778][T15659] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #11: block 7: comm syz.0.3568: lblock 7 mapped to illegal pblock 7 (length 1) [ 425.160175][T15659] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 425.170226][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 425.185863][ C1] EXT4-fs (loop0): initial error at time 1773855079: ext4_map_blocks:776: inode 11: block 7 [ 425.195963][ C1] EXT4-fs (loop0): last error at time 1773855079: ext4_map_blocks:776: inode 11: block 7 [ 425.206649][T15659] EXT4-fs (loop0): 1 orphan inode deleted [ 425.214042][ T6895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.229819][T15659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 425.283343][T12521] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.364606][T12530] udevd[12530]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 425.375076][T13500] udevd[13500]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 425.406561][T15678] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.3574'. [ 425.411762][T13500] udevd[13500]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 425.417340][T12530] udevd[12530]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 425.716180][T15691] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.3578: Invalid inode bitmap blk 4 in block_group 0 [ 425.732080][T15691] loop5: lost filesystem error report for type 5 error -117 [ 425.732794][T15691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.853979][T15696] vlan2: entered promiscuous mode [ 425.859091][T15696] vlan2: entered allmulticast mode [ 425.873582][T15696] hsr_slave_1: entered allmulticast mode [ 425.880067][ T6895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.892071][T15680] EXT4-fs: Ignoring removed nomblk_io_submit option [ 425.899255][T15680] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 425.907719][T15680] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 425.930102][T15680] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.3575: Allocating blocks 41-42 which overlap fs metadata [ 425.934939][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3579'. [ 425.943819][T15680] loop8: lost filesystem error report for type 5 error -117 [ 425.957130][T15680] EXT4-fs (loop8): Remounting filesystem read-only [ 425.964466][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 425.964489][ C1] EXT4-fs (loop8): initial error at time 1773855080: ext4_mb_mark_diskspace_used:4222 [ 425.964517][ C1] EXT4-fs (loop8): last error at time 1773855080: ext4_mb_mark_diskspace_used:4222 [ 425.996597][T15680] EXT4-fs (loop8): 1 truncate cleaned up [ 426.003940][T15680] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.028197][T15704] FAT-fs (loop5): count of clusters too big (178174) [ 426.058826][T15704] FAT-fs (loop5): Can't find a valid FAT filesystem [ 426.206988][T15713] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3584'. [ 426.328889][T15285] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.534996][T15726] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3588'. [ 426.568070][T15728] gretap1: entered promiscuous mode [ 426.581987][T15725] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3588'. [ 426.615879][T15725] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 426.628848][T15725] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.725996][T15735] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3592'. [ 427.203698][T15285] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.663876][T15760] hub 8-0:1.0: USB hub found [ 427.668700][T15760] hub 8-0:1.0: 8 ports detected [ 427.677283][T15760] netlink: 'syz.5.3598': attribute type 36 has an invalid length. [ 427.692701][T15760] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 427.737286][T15763] netlink: 'syz.5.3598': attribute type 10 has an invalid length. [ 427.756239][T15760] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 427.835516][T15754] set_capacity_and_notify: 4 callbacks suppressed [ 427.835535][T15754] loop8: detected capacity change from 0 to 512 [ 427.848901][T15754] EXT4-fs: Ignoring removed nomblk_io_submit option [ 427.856056][T15754] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 427.864524][T15754] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 427.886946][T15754] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.3596: Allocating blocks 41-42 which overlap fs metadata [ 427.900750][T15754] loop8: lost filesystem error report for type 5 error -117 [ 427.901040][T15754] EXT4-fs (loop8): Remounting filesystem read-only [ 427.914824][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 427.914845][ C0] EXT4-fs (loop8): initial error at time 1773855082: ext4_mb_mark_diskspace_used:4222 [ 427.914879][ C0] EXT4-fs (loop8): last error at time 1773855082: ext4_mb_mark_diskspace_used:4222 [ 427.940235][T15754] __quota_error: 8 callbacks suppressed [ 427.940250][T15754] Quota error (device loop8): write_blk: dquota write failed [ 427.953175][T15754] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 427.962381][T15754] Quota error (device loop8): write_blk: dquota write failed [ 427.969947][T15754] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 427.979885][T15754] EXT4-fs (loop8): 1 truncate cleaned up [ 427.985966][T15754] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.277586][T15285] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.529237][T15776] random: crng reseeded on system resumption [ 428.577095][T15781] loop8: detected capacity change from 0 to 128 [ 428.585341][T15779] loop5: detected capacity change from 0 to 1024 [ 428.608695][T15779] EXT4-fs: Invalid want_extra_isize 1025 [ 428.656316][T15781] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 428.727461][T15784] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3605'. [ 428.746849][T15781] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.793002][T15784] loop5: detected capacity change from 0 to 164 [ 428.824441][T15784] ISOFS: Bad logical zone size 2816 [ 428.846696][T15285] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 428.940378][T15792] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 428.959266][T15792] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 428.976457][ T28] audit: type=1326 audit(1773855083.803:8328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15783 comm="syz.5.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49bac799 code=0x7ffc0000 [ 429.020554][ T28] audit: type=1326 audit(1773855083.803:8329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15783 comm="syz.5.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49bac799 code=0x7ffc0000 [ 429.090327][ T28] audit: type=1326 audit(1773855083.803:8330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15783 comm="syz.5.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdf49bac799 code=0x7ffc0000 [ 429.154746][ T28] audit: type=1326 audit(1773855083.803:8331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15783 comm="syz.5.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49bac799 code=0x7ffc0000 [ 429.208876][ T28] audit: type=1326 audit(1773855083.803:8332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15783 comm="syz.5.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49bac799 code=0x7ffc0000 [ 429.408487][T15806] lo speed is unknown, defaulting to 1000 [ 429.442927][T15806] dummy0 speed is unknown, defaulting to 1000 [ 429.463636][T15807] syzkaller0: entered promiscuous mode [ 429.475091][T15807] 0: reclassify loop, rule prio 0, protocol 800 [ 429.502490][T15807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 429.509835][T15807] IPv6: NLM_F_CREATE should be set when creating new route [ 429.517346][T15807] IPv6: NLM_F_CREATE should be set when creating new route [ 429.524642][T15807] IPv6: NLM_F_CREATE should be set when creating new route [ 429.800651][T15809] loop4: detected capacity change from 0 to 512 [ 429.807366][T15809] EXT4-fs: Ignoring removed nomblk_io_submit option [ 429.814193][T15809] /dev/loop4: Can't open blockdev [ 429.873583][ T28] audit: type=1400 audit(1773855084.693:8333): avc: denied { firmware_load } for pid=15819 comm="syz.5.3615" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 429.928861][T15806] loop0: detected capacity change from 0 to 1024 [ 430.022762][T15806] EXT4-fs: Ignoring removed nobh option [ 430.054168][T15806] EXT4-fs: Mount option(s) incompatible with ext2 [ 430.089214][T15827] random: crng reseeded on system resumption [ 430.101198][T15826] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3615'. [ 430.397669][T15836] sctp: [Deprecated]: syz.4.3619 (pid 15836) Use of int in maxseg socket option. [ 430.397669][T15836] Use struct sctp_assoc_value instead [ 430.966571][T15841] loop8: detected capacity change from 0 to 512 [ 430.973227][T15841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 430.981240][T15841] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 430.989671][T15841] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 431.021115][T15841] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.3621: Allocating blocks 41-42 which overlap fs metadata [ 431.034929][T15841] loop8: lost filesystem error report for type 5 error -117 [ 431.035608][T15841] EXT4-fs (loop8): Remounting filesystem read-only [ 431.042924][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 431.042946][ C0] EXT4-fs (loop8): initial error at time 1773855085: ext4_mb_mark_diskspace_used:4222 [ 431.042976][ C0] EXT4-fs (loop8): last error at time 1773855085: ext4_mb_mark_diskspace_used:4222 [ 431.074891][T15841] EXT4-fs (loop8): 1 truncate cleaned up [ 431.081093][T15841] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.244894][T15857] loop4: detected capacity change from 0 to 512 [ 431.269376][T15857] /dev/loop4: Can't open blockdev [ 431.351030][T15285] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.373405][T15865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3611'. [ 431.451252][T15869] loop4: detected capacity change from 0 to 256 [ 431.467286][T15869] FAT-fs (loop4): count of clusters too big (178174) [ 431.494485][T15869] FAT-fs (loop4): Can't find a valid FAT filesystem [ 431.742310][T15877] loop8: detected capacity change from 0 to 8192 [ 431.897763][T15872] EXT4-fs: Ignoring removed nomblk_io_submit option [ 431.904950][T15884] random: crng reseeded on system resumption [ 431.943182][T15872] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 431.951679][T15872] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 431.961276][T13500] loop8: p1 p2 p3 p4 [ 431.965876][T13500] loop8: p1 size 196608 extends beyond EOD, truncated [ 432.001182][T13500] loop8: p2 size 150994944 extends beyond EOD, truncated [ 432.010107][T15872] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.3628: Allocating blocks 41-42 which overlap fs metadata [ 432.023900][T15872] loop7: lost filesystem error report for type 5 error -117 [ 432.024149][T15872] EXT4-fs (loop7): Remounting filesystem read-only [ 432.031458][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 432.031477][ C1] EXT4-fs (loop7): initial error at time 1773855086: ext4_mb_mark_diskspace_used:4222 [ 432.031497][ C1] EXT4-fs (loop7): last error at time 1773855086: ext4_mb_mark_diskspace_used:4222 [ 432.063543][T15872] EXT4-fs (loop7): 1 truncate cleaned up [ 432.069765][T15872] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.097799][T13500] loop8: p3 size 66846464 extends beyond EOD, truncated [ 432.120991][T13500] loop8: p4 size 479744 extends beyond EOD, truncated [ 432.138669][T15877] loop8: p1 p2 p3 p4 [ 432.145130][T15877] loop8: p1 size 196608 extends beyond EOD, truncated [ 432.155890][T15877] loop8: p2 size 150994944 extends beyond EOD, truncated [ 432.164182][T15877] loop8: p3 size 66846464 extends beyond EOD, truncated [ 432.172206][T15877] loop8: p4 size 479744 extends beyond EOD, truncated [ 432.281364][T12650] udevd[12650]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 432.301013][T13501] udevd[13501]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 432.311428][T13500] udevd[13500]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 432.330288][ T9662] udevd[9662]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 432.464949][T15911] netlink: 'syz.0.3634': attribute type 9 has an invalid length. [ 432.472836][T15911] netlink: 'syz.0.3634': attribute type 7 has an invalid length. [ 432.480700][T15911] netlink: 'syz.0.3634': attribute type 8 has an invalid length. [ 432.495776][T15909] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 432.514861][T13500] udevd[13500]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 432.531183][T12530] udevd[12530]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 432.544123][ T9662] udevd[9662]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 432.556707][T13501] udevd[13501]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 432.569907][T15909] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 432.843918][T15913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 432.879256][T15913] ext4 filesystem being mounted at /154/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.897191][T15913] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.3641: Failed to acquire dquot type 0 [ 433.269785][T12276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.281852][T13130] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 433.291161][T15285] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 433.311445][T15918] netlink: 'syz.5.3643': attribute type 8 has an invalid length. [ 433.637405][T15936] random: crng reseeded on system resumption [ 433.969749][T15937] hub 8-0:1.0: USB hub found [ 433.974526][T15937] hub 8-0:1.0: 8 ports detected [ 433.985628][T15937] netlink: 'syz.5.3645': attribute type 36 has an invalid length. [ 433.999822][T15937] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 434.010938][T15937] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 434.024148][T15937] netlink: 'syz.5.3645': attribute type 10 has an invalid length. [ 434.096427][T15935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23060 sclass=netlink_route_socket pid=15935 comm=syz.7.3644 [ 434.223924][T15922] set_capacity_and_notify: 3 callbacks suppressed [ 434.224006][T15922] loop8: detected capacity change from 0 to 512 [ 434.260714][T15935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15935 comm=syz.7.3644 [ 434.529547][T15922] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 434.657669][T15922] EXT4-fs (loop8): 1 orphan inode deleted [ 434.698909][T15922] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.804110][T15954] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3650'. [ 434.813259][T15954] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3650'. [ 434.840452][T15947] loop5: detected capacity change from 0 to 512 [ 434.847105][T15947] EXT4-fs: Ignoring removed nomblk_io_submit option [ 434.855694][T15947] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 434.864168][T15947] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 434.908045][T15947] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.3649: Allocating blocks 41-42 which overlap fs metadata [ 434.921863][T15947] loop5: lost filesystem error report for type 5 error -117 [ 434.922014][T15947] EXT4-fs (loop5): Remounting filesystem read-only [ 434.935901][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 434.935929][ C1] EXT4-fs (loop5): initial error at time 1773855089: ext4_mb_mark_diskspace_used:4222 [ 434.935949][ C1] EXT4-fs (loop5): last error at time 1773855089: ext4_mb_mark_diskspace_used:4222 [ 434.961455][T15947] __quota_error: 15 callbacks suppressed [ 434.961472][T15947] Quota error (device loop5): write_blk: dquota write failed [ 434.974497][T15947] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 434.983780][T15947] Quota error (device loop5): write_blk: dquota write failed [ 434.991207][T15947] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 435.001189][T15947] EXT4-fs (loop5): 1 truncate cleaned up [ 435.007260][T15947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.084091][T15966] loop0: detected capacity change from 0 to 512 [ 435.095529][T15285] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.105589][T15966] EXT4-fs: Ignoring removed bh option [ 435.111120][T15966] EXT4-fs: Ignoring removed mblk_io_submit option [ 435.120864][T15966] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 435.136247][T15966] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 435.155754][T15966] EXT4-fs (loop0): orphan cleanup on readonly fs [ 435.171720][T15966] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 435.189607][T15966] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 435.196981][T15966] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3652: Invalid block bitmap block 0 in block_group 0 [ 435.239628][T15966] loop0: lost filesystem error report for type 5 error -117 [ 435.239763][T15966] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 435.247161][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 435.247205][ C1] EXT4-fs (loop0): last error at time 1773855090: ext4_read_block_bitmap_nowait:483 [ 435.301390][T15966] loop0: lost filesystem error report for type 5 error -117 [ 435.305057][T15966] EXT4-fs (loop0): 1 orphan inode deleted [ 435.318949][ T6895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.319123][T15966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 435.412651][ T28] audit: type=1400 audit(1773855090.233:8339): avc: denied { setopt } for pid=15965 comm="syz.0.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 435.434951][T15980] FAULT_INJECTION: forcing a failure. [ 435.434951][T15980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.455508][T15980] CPU: 0 UID: 0 PID: 15980 Comm: syz.5.3656 Tainted: G W syzkaller #0 PREEMPT(full) [ 435.455543][T15980] Tainted: [W]=WARN [ 435.455551][T15980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.455565][T15980] Call Trace: [ 435.455573][T15980] [ 435.455581][T15980] __dump_stack+0x1d/0x30 [ 435.455652][T15980] dump_stack_lvl+0x95/0xd0 [ 435.455789][T15980] dump_stack+0x15/0x1b [ 435.455809][T15980] should_fail_ex+0x263/0x280 [ 435.455887][T15980] should_fail+0xb/0x20 [ 435.455910][T15980] should_fail_usercopy+0x1a/0x20 [ 435.455941][T15980] _copy_from_iter+0xcf/0xea0 [ 435.455975][T15980] ? __alloc_skb+0x4f6/0x690 [ 435.456004][T15980] ? __alloc_skb+0x200/0x690 [ 435.456093][T15980] netlink_sendmsg+0x4ae/0x6f0 [ 435.456130][T15980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.456221][T15980] ____sys_sendmsg+0x563/0x5b0 [ 435.456258][T15980] ___sys_sendmsg+0x195/0x1e0 [ 435.456323][T15980] __x64_sys_sendmsg+0xd4/0x160 [ 435.456359][T15980] x64_sys_call+0x194c/0x3020 [ 435.456428][T15980] do_syscall_64+0x12c/0x370 [ 435.456451][T15980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.456496][T15980] RIP: 0033:0x7fdf49bac799 [ 435.456564][T15980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.456581][T15980] RSP: 002b:00007fdf48607028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.456604][T15980] RAX: ffffffffffffffda RBX: 00007fdf49e25fa0 RCX: 00007fdf49bac799 [ 435.456621][T15980] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 435.456653][T15980] RBP: 00007fdf48607090 R08: 0000000000000000 R09: 0000000000000000 [ 435.456665][T15980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.456677][T15980] R13: 00007fdf49e26038 R14: 00007fdf49e25fa0 R15: 00007ffc96e59e18 [ 435.456727][T15980] [ 435.520232][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 435.703799][T12521] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.913226][T15985] random: crng reseeded on system resumption [ 435.960841][T15993] loop7: detected capacity change from 0 to 512 [ 435.982914][ T28] audit: type=1400 audit(1773855090.803:8340): avc: denied { cpu } for pid=15994 comm="syz.8.3663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 436.007280][T15993] tipc: Started in network mode [ 436.012570][T15996] loop8: detected capacity change from 0 to 1024 [ 436.024119][T15993] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 436.033238][T15996] EXT4-fs: Ignoring removed orlov option [ 436.033791][T15993] tipc: Enabled bearer , priority 10 [ 436.051004][T15996] EXT4-fs (loop8): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 436.085482][T15996] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.133271][T16006] bond_slave_0: entered promiscuous mode [ 436.139064][T16006] bond_slave_1: entered promiscuous mode [ 436.145284][T16006] vlan2: entered promiscuous mode [ 436.150539][T16006] bond0: entered promiscuous mode [ 436.152313][ T28] audit: type=1400 audit(1773855090.973:8341): avc: denied { watch } for pid=15994 comm="syz.8.3663" path="/38/file1/file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 436.181341][ T28] audit: type=1400 audit(1773855090.973:8342): avc: denied { setattr } for pid=15994 comm="syz.8.3663" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 436.205017][ T28] audit: type=1400 audit(1773855091.003:8343): avc: denied { setattr } for pid=15994 comm="syz.8.3663" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 436.246983][T15993] loop7: detected capacity change from 0 to 1024 [ 436.257975][T15993] EXT4-fs: Ignoring removed orlov option [ 436.265679][T15993] EXT4-fs (loop7): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 436.282475][T15285] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.303638][T15993] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.317297][T16012] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3666'. [ 436.371983][T15993] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=15993 comm=syz.7.3662 [ 436.423513][ T28] audit: type=1400 audit(1773855091.243:8344): avc: denied { accept } for pid=16015 comm="syz.4.3668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 436.459905][T12276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.479450][T16014] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 436.506120][T16022] loop7: detected capacity change from 0 to 256 [ 436.617546][T16022] FAT-fs (loop7): count of clusters too big (178174) [ 436.653630][T16022] FAT-fs (loop7): Can't find a valid FAT filesystem [ 436.656966][T16025] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 436.813742][T16041] loop8: detected capacity change from 0 to 256 [ 436.834055][T16041] vfat: Unknown parameter '0x0000000000000003…¬…Ó}W°Îk¸ç1KšÔŽ4œ#)©ë5m_ÆúÔðp𠨓Y€òWNk8íLÚà@lë^çÔ¤&ëì¹i7àO%–¹ÎKËrv¨Y¤(·‹/Y–øÂà'k£cáûªDè²G¥`(þI“³ý£gèò÷b¨6>sWè' [ 436.915758][T16046] syzkaller1: entered promiscuous mode [ 436.921392][T16046] syzkaller1: entered allmulticast mode [ 437.001113][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3677'. [ 437.150262][ T6677] tipc: Node number set to 10070698 [ 437.190757][T16051] loop0: detected capacity change from 0 to 764 [ 437.331385][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3680'. [ 437.469505][T16062] random: crng reseeded on system resumption [ 438.020400][T16074] loop7: detected capacity change from 0 to 128 [ 438.029818][T16074] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 438.042460][T16074] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.056968][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 438.057002][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 438.392259][T16088] netlink: 'syz.8.3691': attribute type 2 has an invalid length. [ 438.784052][T16087] EXT4-fs: Ignoring removed nomblk_io_submit option [ 438.793973][T16087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 438.802585][T16087] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 438.849987][T16087] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.3689: Allocating blocks 41-42 which overlap fs metadata [ 438.863809][T16087] loop0: lost filesystem error report for type 5 error -117 [ 438.865000][T16087] EXT4-fs (loop0): Remounting filesystem read-only [ 438.872339][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 438.872360][ C1] EXT4-fs (loop0): initial error at time 1773855093: ext4_mb_mark_diskspace_used:4222 [ 438.872387][ C1] EXT4-fs (loop0): last error at time 1773855093: ext4_mb_mark_diskspace_used:4222 [ 438.904796][T16087] EXT4-fs (loop0): 1 truncate cleaned up [ 438.916511][T16087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.221335][T12521] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.419359][T16119] FAULT_INJECTION: forcing a failure. [ 439.419359][T16119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.532405][T16119] CPU: 1 UID: 0 PID: 16119 Comm: syz.4.3700 Tainted: G W syzkaller #0 PREEMPT(full) [ 439.532504][T16119] Tainted: [W]=WARN [ 439.532511][T16119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.532526][T16119] Call Trace: [ 439.532535][T16119] [ 439.532605][T16119] __dump_stack+0x1d/0x30 [ 439.532632][T16119] dump_stack_lvl+0x95/0xd0 [ 439.532654][T16119] dump_stack+0x15/0x1b [ 439.532705][T16119] should_fail_ex+0x263/0x280 [ 439.532736][T16119] should_fail+0xb/0x20 [ 439.532768][T16119] should_fail_usercopy+0x1a/0x20 [ 439.532850][T16119] _copy_from_user+0x1c/0xb0 [ 439.532883][T16119] ___sys_recvmsg+0xaa/0x3b0 [ 439.532944][T16119] do_recvmmsg+0x1ef/0x560 [ 439.533070][T16119] ? fput+0x8f/0xc0 [ 439.533100][T16119] __x64_sys_recvmmsg+0xe5/0x170 [ 439.533135][T16119] x64_sys_call+0x80f/0x3020 [ 439.533210][T16119] do_syscall_64+0x12c/0x370 [ 439.533238][T16119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.533263][T16119] RIP: 0033:0x7f729d64c799 [ 439.533290][T16119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.533386][T16119] RSP: 002b:00007f729c09f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 439.533409][T16119] RAX: ffffffffffffffda RBX: 00007f729d8c5fa0 RCX: 00007f729d64c799 [ 439.533426][T16119] RDX: 040000000000012d RSI: 0000200000000080 RDI: 0000000000000003 [ 439.533442][T16119] RBP: 00007f729c09f090 R08: 0000000000000000 R09: 0000000000000000 [ 439.533454][T16119] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 439.533522][T16119] R13: 00007f729d8c6038 R14: 00007f729d8c5fa0 R15: 00007fff1b090ea8 [ 439.533543][T16119] [ 439.837051][T16124] set_capacity_and_notify: 2 callbacks suppressed [ 439.837071][T16124] loop5: detected capacity change from 0 to 764 [ 439.860590][T16124] iso9660: Unknown parameter '0xffffffffffffffffÿÿÿÿ' [ 440.206849][T12276] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 440.271473][T16138] FAULT_INJECTION: forcing a failure. [ 440.271473][T16138] name failslab, interval 1, probability 0, space 0, times 0 [ 440.298118][T16138] CPU: 1 UID: 0 PID: 16138 Comm: syz.8.3705 Tainted: G W syzkaller #0 PREEMPT(full) [ 440.298215][T16138] Tainted: [W]=WARN [ 440.298223][T16138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 440.298235][T16138] Call Trace: [ 440.298241][T16138] [ 440.298249][T16138] __dump_stack+0x1d/0x30 [ 440.298275][T16138] dump_stack_lvl+0x95/0xd0 [ 440.298307][T16138] dump_stack+0x15/0x1b [ 440.298360][T16138] should_fail_ex+0x263/0x280 [ 440.298390][T16138] should_failslab+0x8c/0xb0 [ 440.298412][T16138] __kmalloc_noprof+0xb8/0x4e0 [ 440.298433][T16138] ? nla_strdup+0x78/0xc0 [ 440.298470][T16138] nla_strdup+0x78/0xc0 [ 440.298522][T16138] nf_tables_newtable+0x3ba/0xea0 [ 440.298561][T16138] nfnetlink_rcv+0xc1e/0x1720 [ 440.298636][T16138] netlink_unicast+0x5c0/0x690 [ 440.298664][T16138] netlink_sendmsg+0x5c8/0x6f0 [ 440.298698][T16138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.298735][T16138] ____sys_sendmsg+0x563/0x5b0 [ 440.298766][T16138] ___sys_sendmsg+0x195/0x1e0 [ 440.298867][T16138] __x64_sys_sendmsg+0xd4/0x160 [ 440.298971][T16138] x64_sys_call+0x194c/0x3020 [ 440.298998][T16138] do_syscall_64+0x12c/0x370 [ 440.299037][T16138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.299080][T16138] RIP: 0033:0x7fcf32bbc799 [ 440.299099][T16138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.299116][T16138] RSP: 002b:00007fcf3160f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.299135][T16138] RAX: ffffffffffffffda RBX: 00007fcf32e35fa0 RCX: 00007fcf32bbc799 [ 440.299176][T16138] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000001b [ 440.299188][T16138] RBP: 00007fcf3160f090 R08: 0000000000000000 R09: 0000000000000000 [ 440.299201][T16138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.299213][T16138] R13: 00007fcf32e36038 R14: 00007fcf32e35fa0 R15: 00007ffed3b22018 [ 440.299232][T16138] [ 440.611140][T16150] loop0: detected capacity change from 0 to 512 [ 440.653289][T16158] loop8: detected capacity change from 0 to 256 [ 440.718830][T16158] FAT-fs (loop8): count of clusters too big (178174) [ 440.746402][T16158] FAT-fs (loop8): Can't find a valid FAT filesystem [ 440.804906][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 440.804922][ T28] audit: type=1400 audit(1773855095.623:8353): avc: denied { ioctl } for pid=16166 comm="syz.5.3714" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=50612 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 440.941438][ T28] audit: type=1400 audit(1773855095.753:8354): avc: denied { ioctl } for pid=16166 comm="syz.5.3714" path="socket:[50613]" dev="sockfs" ino=50613 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 440.972689][T16148] loop4: detected capacity change from 0 to 512 [ 440.979309][T16148] EXT4-fs: Ignoring removed nomblk_io_submit option [ 440.986022][T16148] /dev/loop4: Can't open blockdev [ 441.186711][T16182] veth0_to_team: entered promiscuous mode [ 441.270055][T16186] loop8: detected capacity change from 0 to 256 [ 441.323259][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3717'. [ 441.354051][T16188] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3718'. [ 441.480674][T16196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=16196 comm=syz.5.3722 [ 441.542808][T16199] batadv0: entered promiscuous mode [ 441.548252][T16199] vlan2: entered promiscuous mode [ 441.590407][ T28] audit: type=1400 audit(1773855096.413:8355): avc: denied { append } for pid=16198 comm="syz.4.3723" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 441.615992][T16202] loop8: detected capacity change from 0 to 1024 [ 441.661614][T16204] loop5: detected capacity change from 0 to 2048 [ 441.680687][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3726'. [ 441.692803][T16202] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.732986][T16204] loop5: p1 < > p4 [ 441.766044][T16204] loop5: p4 start 42180 is beyond EOD, truncated [ 441.865931][T15285] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.896736][T16215] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3729'. [ 441.910553][T16215] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3729'. [ 441.938456][T16218] loop8: detected capacity change from 0 to 128 [ 441.989691][T16213] loop4: detected capacity change from 0 to 256 [ 442.001161][T16213] FAT-fs (loop4): Directory bread(block 1285) failed [ 442.007938][T16213] FAT-fs (loop4): Directory bread(block 1286) failed [ 442.014695][T16213] FAT-fs (loop4): Directory bread(block 1287) failed [ 442.021864][T16213] FAT-fs (loop4): Directory bread(block 1288) failed [ 442.040594][T16220] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3730'. [ 442.062358][T16213] FAT-fs (loop4): Directory bread(block 1285) failed [ 442.069119][T16213] FAT-fs (loop4): Directory bread(block 1286) failed [ 442.076151][T16213] FAT-fs (loop4): Directory bread(block 1287) failed [ 442.082982][T16213] FAT-fs (loop4): Directory bread(block 1288) failed [ 442.105971][T16213] usb usb1: usbfs: process 16213 (syz.4.3728) did not claim interface 0 before use [ 442.273741][T16229] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3732'. [ 442.456637][T16240] loop7: detected capacity change from 0 to 512 [ 442.467374][T16240] msdos: Unknown parameter 'ÿÿÿÿ' [ 442.601584][T16240] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.651217][T16240] EXT4-fs (loop7): shut down requested (1) [ 442.657217][ T28] audit: type=1400 audit(1773855097.473:8356): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 442.661896][T16240] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 442.679364][ T28] audit: type=1400 audit(1773855097.473:8357): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.710105][ T28] audit: type=1400 audit(1773855097.473:8358): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.710217][T16240] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 442.740778][ T28] audit: type=1400 audit(1773855097.473:8359): avc: denied { add_name } for pid=2980 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.750652][T16240] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 442.762358][ T28] audit: type=1400 audit(1773855097.473:8360): avc: denied { create } for pid=2980 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 442.793883][ T28] audit: type=1400 audit(1773855097.473:8361): avc: denied { append open } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 442.817487][ T28] audit: type=1400 audit(1773855097.473:8362): avc: denied { getattr } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 442.852288][T15285] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fff0000) [ 442.860204][T15285] FAT-fs (loop8): Filesystem has been set read-only [ 442.872064][T12276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.942301][T16245] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3739'. [ 442.981141][T16245] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 443.012543][T16245] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 443.135894][T16252] coredump: 515(syz.4.3739): Core dump to core aborted: cannot preserve file permissions [ 443.195994][T16261] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3746'. [ 443.212512][ T4057] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.276647][ T4057] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.301359][T16264] FAULT_INJECTION: forcing a failure. [ 443.301359][T16264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.323940][ T4057] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.327904][T16275] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3749'. [ 443.343849][T16264] CPU: 1 UID: 0 PID: 16264 Comm: syz.0.3747 Tainted: G W syzkaller #0 PREEMPT(full) [ 443.343879][T16264] Tainted: [W]=WARN [ 443.343886][T16264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 443.343898][T16264] Call Trace: [ 443.343904][T16264] [ 443.343987][T16264] __dump_stack+0x1d/0x30 [ 443.344013][T16264] dump_stack_lvl+0x95/0xd0 [ 443.344038][T16264] dump_stack+0x15/0x1b [ 443.344069][T16264] should_fail_ex+0x263/0x280 [ 443.344107][T16264] should_fail+0xb/0x20 [ 443.344153][T16264] should_fail_usercopy+0x1a/0x20 [ 443.344252][T16264] _copy_to_user+0x20/0xa0 [ 443.344353][T16264] move_addr_to_user+0xf4/0x1a0 [ 443.344382][T16264] ____sys_recvmsg+0x140/0x280 [ 443.344419][T16264] ___sys_recvmsg+0x11f/0x3b0 [ 443.344492][T16264] do_recvmmsg+0x1ef/0x560 [ 443.344530][T16264] ? fput+0x8f/0xc0 [ 443.344557][T16264] __x64_sys_recvmmsg+0xe5/0x170 [ 443.344641][T16264] x64_sys_call+0x80f/0x3020 [ 443.344671][T16264] do_syscall_64+0x12c/0x370 [ 443.344743][T16264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.344768][T16264] RIP: 0033:0x7fc6cae7c799 [ 443.344786][T16264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.344882][T16264] RSP: 002b:00007fc6c98d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 443.344912][T16264] RAX: ffffffffffffffda RBX: 00007fc6cb0f5fa0 RCX: 00007fc6cae7c799 [ 443.344927][T16264] RDX: 040000000000012d RSI: 0000200000000080 RDI: 0000000000000003 [ 443.344940][T16264] RBP: 00007fc6c98d7090 R08: 0000000000000000 R09: 0000000000000000 [ 443.345008][T16264] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 443.345023][T16264] R13: 00007fc6cb0f6038 R14: 00007fc6cb0f5fa0 R15: 00007ffc249d3fb8 [ 443.345084][T16264] [ 443.545282][ T4057] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.556869][T16262] lo speed is unknown, defaulting to 1000 [ 443.563437][T16262] dummy0 speed is unknown, defaulting to 1000 [ 443.651470][T16275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.705891][T16275] dvmrp0: entered allmulticast mode [ 443.712402][ T4057] bridge_slave_1: left allmulticast mode [ 443.718200][ T4057] bridge_slave_1: left promiscuous mode [ 443.731993][ T4057] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.744489][T13130] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 443.754590][ T4057] bridge_slave_0: left allmulticast mode [ 443.760462][ T4057] bridge_slave_0: left promiscuous mode [ 443.766376][ T4057] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.872981][ T4057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.883394][ T4057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.893317][ T4057] bond0 (unregistering): Released all slaves [ 443.935532][T16262] chnl_net:caif_netlink_parms(): no params data found [ 444.001088][ T4057] hsr_slave_0: left promiscuous mode [ 444.021475][ T4057] hsr_slave_1: left promiscuous mode [ 444.034939][ T4057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.042935][ T4057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.053630][ T4057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.061492][ T4057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.082009][ T4057] veth1_macvtap: left promiscuous mode [ 444.087552][ T4057] veth0_macvtap: left promiscuous mode [ 444.096943][ T4057] veth1_vlan: left promiscuous mode [ 444.105300][ T4057] veth0_vlan: left promiscuous mode [ 444.122921][T16307] EXT4-fs: Ignoring removed orlov option [ 444.129625][T16307] EXT4-fs: Ignoring removed bh option [ 444.140608][T16307] EXT4-fs (loop4): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 444.182086][T16307] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 444.230861][ T4057] team0 (unregistering): Port device team_slave_1 removed [ 444.241426][ T4057] team0 (unregistering): Port device team_slave_0 removed [ 444.314706][T16262] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.322849][T12276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.326454][T16262] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.342515][T16262] bridge_slave_0: entered allmulticast mode [ 444.351081][T16262] bridge_slave_0: entered promiscuous mode [ 444.379526][T16262] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.406700][T16262] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.450472][T16262] bridge_slave_1: entered allmulticast mode [ 444.460690][T16346] netlink: 'syz.5.3758': attribute type 3 has an invalid length. [ 444.479235][T16262] bridge_slave_1: entered promiscuous mode [ 444.487947][T16347] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 444.559336][T16262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.576393][T16347] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3753: Invalid block bitmap block 0 in block_group 0 [ 444.590312][T16356] EXT4-fs: Invalid want_extra_isize 1025 [ 444.597439][T16262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.629314][T16353] SET target dimension over the limit! [ 444.647396][T16347] loop4: lost filesystem error report for type 5 error -117 [ 444.650142][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 444.663921][ C0] EXT4-fs (loop4): initial error at time 1773855099: ext4_read_block_bitmap_nowait:483 [ 444.673598][ C0] EXT4-fs (loop4): last error at time 1773855099: ext4_read_block_bitmap_nowait:483 [ 444.673933][T16262] team0: Port device team_slave_0 added [ 444.700155][T16262] team0: Port device team_slave_1 added [ 444.716293][T16347] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.3753: Failed to acquire dquot type 0 [ 444.717879][T16262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.735186][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.789697][T16262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.800392][T16347] loop4: lost filesystem error report for type 5 error -117 [ 444.800647][T16347] EXT4-fs error (device loop4): ext4_free_blocks:6724: comm syz.4.3753: Freeing blocks not in datazone - block = 0, count = 4096 [ 444.850007][T16347] loop4: lost filesystem error report for type 5 error -117 [ 444.850340][T16347] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.3753: Invalid inode bitmap blk 0 in block_group 0 [ 444.876607][ T4857] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:9: Failed to release dquot type 0 [ 444.899572][ T4857] loop4: lost filesystem error report for type 5 error -117 [ 444.956625][T16347] loop4: lost filesystem error report for type 5 error -117 [ 444.986258][T16262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.001027][T16347] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 445.019627][T16347] loop4: lost filesystem error report for type 5 error -117 [ 445.019853][T16347] EXT4-fs (loop4): 1 orphan inode deleted [ 445.025072][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.035677][T16347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.134295][T16381] netlink: 'syz.0.3765': attribute type 9 has an invalid length. [ 445.142525][T16381] netlink: 'syz.0.3765': attribute type 7 has an invalid length. [ 445.150501][T16381] netlink: 'syz.0.3765': attribute type 8 has an invalid length. [ 445.162524][T16262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.203008][T16262] hsr_slave_0: entered promiscuous mode [ 445.209448][T16262] hsr_slave_1: entered promiscuous mode [ 445.215610][T16262] debugfs: 'hsr0' already exists in 'hsr' [ 445.221480][T16262] Cannot create hsr debugfs directory [ 445.295681][ T4057] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.450882][ T4057] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.470524][T16401] set_capacity_and_notify: 7 callbacks suppressed [ 445.470540][T16401] loop7: detected capacity change from 0 to 1024 [ 445.643153][T16401] EXT4-fs: inline encryption not supported [ 445.690912][ T4057] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.740743][T16401] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 445.811563][T16401] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 2: comm syz.7.3766: lblock 2 mapped to illegal pblock 2 (length 1) [ 445.866259][T16401] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 445.866381][T16401] EXT4-fs (loop7): Remounting filesystem read-only [ 445.875453][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 445.875469][ C0] EXT4-fs (loop7): initial error at time 1773855100: ext4_map_blocks:776: inode 3: block 2 [ 445.875507][ C0] EXT4-fs (loop7): last error at time 1773855100: ext4_map_blocks:776: inode 3: block 2 [ 445.985569][ T4057] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.070306][T16401] __quota_error: 5 callbacks suppressed [ 446.070320][T16401] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 446.103544][T16401] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 446.122619][T16401] EXT4-fs (loop7): 1 orphan inode deleted [ 446.139033][T16401] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.211449][T16262] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 446.224837][T16262] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 446.242254][T16262] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 446.255621][T16262] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 446.306123][T16262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.317834][T16262] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.336867][T16262] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 446.351443][T16262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.390675][T16401] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.403478][T13130] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.413487][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.420596][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.435203][T16442] __nla_validate_parse: 11 callbacks suppressed [ 446.435368][T16442] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3769'. [ 446.477380][T16442] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3769'. [ 446.489336][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.496531][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.523526][T16442] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3769'. [ 446.534443][T16442] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3769'. [ 446.598037][T16262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.614001][T16467] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3770'. [ 446.638964][T16471] vlan3: entered promiscuous mode [ 446.648157][T16471] bond0: entered promiscuous mode [ 446.653515][T16471] bond_slave_0: entered promiscuous mode [ 446.659523][T16471] bond_slave_1: entered promiscuous mode [ 446.668951][T16474] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3772'. [ 446.768322][ T4057] bridge_slave_1: left allmulticast mode [ 446.780155][ T4057] bridge_slave_1: left promiscuous mode [ 446.789069][ T4057] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.804270][T16488] loop5: detected capacity change from 0 to 512 [ 446.840759][T16488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 446.847774][T16488] ext4: Bad value for 'mb_optimize_scan' [ 446.887302][T16488] Invalid ELF header type: 2 != 1 [ 446.887339][ T28] audit: type=1400 audit(1773855101.703:8365): avc: denied { module_load } for pid=16487 comm="syz.5.3775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 447.055237][ T4057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.064304][ T4057] bond_slave_0: left promiscuous mode [ 447.071363][ T4057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.081017][ T4057] bond_slave_1: left promiscuous mode [ 447.087764][ T4057] bond0 (unregistering): Released all slaves [ 447.096230][ T4057] bond1 (unregistering): Released all slaves [ 447.108051][T16479] vlan2: entered allmulticast mode [ 447.113568][T16479] veth0_to_bond: entered allmulticast mode [ 447.189170][ T4057] hsr_slave_0: left promiscuous mode [ 447.206612][ T4057] hsr_slave_1: left promiscuous mode [ 447.226873][ T4057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.248900][ T4057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.266071][ T4057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.293929][ T4057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.316916][ T4057] veth1_macvtap: left promiscuous mode [ 447.329056][ T4057] veth0_macvtap: left promiscuous mode [ 447.341468][ T4057] veth1_vlan: left promiscuous mode [ 447.354895][ T4057] veth0_vlan: left promiscuous mode [ 447.520380][ T4057] team0 (unregistering): Port device team_slave_1 removed [ 447.532240][ T4057] team0 (unregistering): Port device team_slave_0 removed [ 447.622515][ T9] lo speed is unknown, defaulting to 1000 [ 447.644715][ T9] infiniband syz2: ib_query_port failed (-19) [ 447.694308][T16262] veth0_vlan: entered promiscuous mode [ 447.703899][T16262] veth1_vlan: entered promiscuous mode [ 447.757953][T16262] veth0_macvtap: entered promiscuous mode [ 447.772125][T16262] veth1_macvtap: entered promiscuous mode [ 447.803042][T16262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.808523][T16538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3780'. [ 447.826345][T16262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.844685][ T41] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.855696][ T41] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.885208][ T41] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.905078][ T41] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.954386][ T28] audit: type=1400 audit(1773855102.773:8366): avc: denied { ioctl } for pid=16518 comm="syz.7.3779" path="socket:[52080]" dev="sockfs" ino=52080 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 447.984395][ T28] audit: type=1400 audit(1773855102.803:8367): avc: denied { ioctl } for pid=16518 comm="syz.7.3779" path="socket:[52084]" dev="sockfs" ino=52084 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 448.048785][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3781'. [ 448.176069][T16566] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3782'. [ 448.373778][T13130] syz_tun (unregistering): left promiscuous mode [ 448.386899][T16575] loop5: detected capacity change from 0 to 164 [ 448.397302][T16575] iso9660: Unknown parameter '’' [ 448.514209][ T28] audit: type=1326 audit(1773855103.323:8368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16583 comm="syz.0.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cae7c799 code=0x7ffc0000 [ 448.598123][ T28] audit: type=1326 audit(1773855103.323:8369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16583 comm="syz.0.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cae7c799 code=0x7ffc0000 [ 448.639821][T16593] batman_adv: batadv0: Adding interface: dummy0 [ 448.662182][T16593] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.719461][ T28] audit: type=1326 audit(1773855103.323:8370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16583 comm="syz.0.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6cae7c799 code=0x7ffc0000 [ 448.740320][T16593] batman_adv: batadv0: Interface activated: dummy0 [ 448.762132][ T28] audit: type=1326 audit(1773855103.323:8371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16583 comm="syz.0.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cae7c799 code=0x7ffc0000 [ 448.786054][ T28] audit: type=1326 audit(1773855103.323:8372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16583 comm="syz.0.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cae7c799 code=0x7ffc0000 [ 448.821925][T16593] batadv0: mtu less than device minimum [ 448.829580][T16593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.842167][T16593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.855970][T16593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.869805][T16593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.882610][T16593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.896058][T16593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.908982][T16593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.922182][T16593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.935790][T16593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 449.022100][ T3825] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.108644][ T3825] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.259575][ T3825] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.270022][T16618] loop7: detected capacity change from 0 to 256 [ 449.280655][T16618] FAT-fs (loop7): count of clusters too big (178174) [ 449.291349][T16618] FAT-fs (loop7): Can't find a valid FAT filesystem [ 449.359841][T16627] random: crng reseeded on system resumption [ 449.411428][ T3825] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.707205][T16606] dummy0 speed is unknown, defaulting to 1000 [ 450.498241][T16641] loop0: detected capacity change from 0 to 1024 [ 450.507209][T16640] netlink: 340 bytes leftover after parsing attributes in process `syz.5.3799'. [ 450.553628][T16641] EXT4-fs: Invalid want_extra_isize 1025 [ 450.581413][T16606] chnl_net:caif_netlink_parms(): no params data found [ 450.729513][T16655] loop9: detected capacity change from 0 to 2048 [ 450.782444][T16657] loop0: detected capacity change from 0 to 1024 [ 450.822316][T16655] EXT4-fs: Ignoring removed nobh option [ 450.869293][T16657] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 450.895711][ T3825] bridge_slave_1: left allmulticast mode [ 450.907518][T16655] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=c842c028, mo2=0002] [ 450.923555][T16657] System zones: 0-1, 3-36 [ 450.926220][ T3825] bridge_slave_1: left promiscuous mode [ 450.934703][T16655] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.947280][ T3825] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.947980][T16657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.977904][ T3825] bridge_slave_0: left allmulticast mode [ 450.989017][ T3825] bridge_slave_0: left promiscuous mode [ 451.000469][T16262] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.009949][ T3825] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.208781][ T3825] ip6gretap0 (unregistering): left promiscuous mode [ 451.435774][ T3825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.449102][ T3825] bond_slave_0: left promiscuous mode [ 451.502600][ T3825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.612588][ T3825] bond_slave_1: left promiscuous mode [ 451.637023][ T3825] bond0 (unregistering): Released all slaves [ 451.661002][ T3825] bond1 (unregistering): Released all slaves [ 451.711843][T16606] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.718951][T16606] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.734008][T16606] bridge_slave_0: entered allmulticast mode [ 451.748736][T16606] bridge_slave_0: entered promiscuous mode [ 451.772341][ T3825] hsr_slave_0: left promiscuous mode [ 451.796232][T16697] loop7: detected capacity change from 0 to 128 [ 451.802871][ T3825] hsr_slave_1: left promiscuous mode [ 451.808619][ T3825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.817016][T16697] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 451.817134][ T3825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.833073][T16697] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 451.846962][ T3825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.854538][ T3825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.866902][ T3825] veth1_macvtap: left promiscuous mode [ 451.867899][T12276] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 451.873038][ T3825] veth0_macvtap: left promiscuous mode [ 451.887315][ T3825] veth1_vlan: left promiscuous mode [ 451.892797][ T3825] veth0_vlan: left promiscuous mode [ 452.020364][T16702] __nla_validate_parse: 2 callbacks suppressed [ 452.020384][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3809'. [ 452.052320][ T3825] team0 (unregistering): Port device team_slave_1 removed [ 452.062200][ T3825] team0 (unregistering): Port device team_slave_0 removed [ 452.092797][T16606] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.100172][T16606] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.107969][T16606] bridge_slave_1: entered allmulticast mode [ 452.115702][T16606] bridge_slave_1: entered promiscuous mode [ 452.143866][T16704] random: crng reseeded on system resumption [ 452.156370][T16606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.169198][T16606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.198435][T16606] team0: Port device team_slave_0 added [ 452.207573][T16606] team0: Port device team_slave_1 added [ 452.233117][T16606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.243850][T16606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.270647][T16606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.283662][T16606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.291316][T16606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.317744][T16606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.359456][T16606] hsr_slave_0: entered promiscuous mode [ 452.382013][T16606] hsr_slave_1: entered promiscuous mode [ 452.388652][T16606] debugfs: 'hsr0' already exists in 'hsr' [ 452.395066][T16606] Cannot create hsr debugfs directory [ 452.485237][T12521] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.508421][T16708] netdevsim netdevsim9 netdevsim0: IPsec offload requires 128 bit authentication [ 452.519793][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3812'. [ 452.563652][T16713] vlan3: entered promiscuous mode [ 452.764516][T16746] loop0: detected capacity change from 0 to 128 [ 452.841618][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3822'. [ 452.887241][T16746] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 452.997052][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 453.077182][ T28] audit: type=1400 audit(1773855107.753:8398): avc: denied { getopt } for pid=16745 comm="syz.0.3821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 453.523350][T16772] syzkaller1: entered promiscuous mode [ 453.528925][T16772] syzkaller1: entered allmulticast mode [ 453.990779][T16606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 454.012731][T16606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 454.021651][T16606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 454.035462][T16606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 454.067444][ T28] audit: type=1400 audit(1773855108.863:8399): avc: denied { write } for pid=16782 comm="syz.9.3830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 454.142730][T16606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.177209][T16606] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.194689][T15916] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.201839][T15916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.214361][T15916] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.221534][T15916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.273025][T16606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 454.284829][T16606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 454.456483][T16803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3831'. [ 454.509900][T16606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.704998][T16606] veth0_vlan: entered promiscuous mode [ 454.714636][T16606] veth1_vlan: entered promiscuous mode [ 454.733483][T16606] veth0_macvtap: entered promiscuous mode [ 454.744499][T16606] veth1_macvtap: entered promiscuous mode [ 454.755887][T16606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.767937][T16606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.781105][T14795] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.790642][T14795] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.799485][T14795] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.811095][T14795] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.096819][T16849] random: crng reseeded on system resumption [ 455.164274][T16846] loop7: detected capacity change from 0 to 2048 [ 455.190029][T16852] batadv0: entered promiscuous mode [ 455.231478][T16852] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 455.350964][T16852] batadv0: left promiscuous mode [ 455.511290][T16846] loop7: p1 < > p3 [ 455.520733][T16846] loop7: partition table partially beyond EOD, truncated [ 455.532736][T16846] loop7: p1 start 262144 is beyond EOD, truncated [ 455.544811][T16846] loop7: p3 size 134217728 extends beyond EOD, truncated [ 455.558359][T16866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3837'. [ 455.613175][T13500] udevd[13500]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 455.650538][T16859] loop9: detected capacity change from 0 to 512 [ 455.757178][T16874] loop0: detected capacity change from 0 to 512 [ 455.780069][T16859] EXT4-fs (loop9): 1 orphan inode deleted [ 455.822309][T16859] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.907298][T16874] EXT4-fs (loop0): 1 orphan inode deleted [ 455.934311][T16905] SELinux: Context system_u:object_r:systemd_notify_exec_t:s0 is not valid (left unmapped). [ 455.945455][ T28] audit: type=1400 audit(1773855110.753:8400): avc: denied { relabelfrom } for pid=16900 comm="syz.1.3844" name="SCTP" dev="sockfs" ino=54531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 456.001114][T16896] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3842'. [ 456.032571][T16874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.061841][ T28] audit: type=1400 audit(1773855110.803:8401): avc: denied { relabelto } for pid=16900 comm="syz.1.3844" name="SCTP" dev="sockfs" ino=54531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 456.125549][ T28] audit: type=1400 audit(1773855110.903:8402): avc: denied { map } for pid=16903 comm="syz.7.3845" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 456.157562][ T28] audit: type=1400 audit(1773855110.903:8403): avc: denied { execute } for pid=16903 comm="syz.7.3845" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 456.204826][T16262] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.314025][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3849'. [ 456.453130][T12521] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.664995][T16961] random: crng reseeded on system resumption [ 456.843375][T16963] netlink: 'syz.0.3853': attribute type 5 has an invalid length. [ 456.950530][T16963] loop0: detected capacity change from 0 to 512 [ 456.973740][T16966] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3854'. [ 457.022107][T16963] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 457.055853][T16969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3854'. [ 457.174830][T16963] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.3853: corrupted in-inode xattr: invalid ea_ino [ 457.195426][T16963] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 457.195658][T16963] EXT4-fs (loop0): Remounting filesystem read-only [ 457.204938][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 457.205000][ C0] EXT4-fs (loop0): initial error at time 1773855112: ext4_iget_extra_inode:5025: inode 15 [ 457.205033][ C0] EXT4-fs (loop0): last error at time 1773855112: ext4_iget_extra_inode:5025: inode 15 [ 457.238449][T16963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.365268][T16987] loop9: detected capacity change from 0 to 128 [ 457.376943][T16989] loop5: detected capacity change from 0 to 1024 [ 457.396161][T16989] EXT4-fs: inline encryption not supported [ 457.405696][T16987] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 457.418203][T16989] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 457.428969][T16987] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.469360][T16989] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.3858: lblock 2 mapped to illegal pblock 2 (length 1) [ 457.498398][T16989] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 457.499014][T16989] EXT4-fs (loop5): Remounting filesystem read-only [ 457.508224][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 457.508244][ C1] EXT4-fs (loop5): initial error at time 1773855112: ext4_map_blocks:776: inode 3: block 2 [ 457.508277][ C1] EXT4-fs (loop5): last error at time 1773855112: ext4_map_blocks:776: inode 3: block 2 [ 457.544172][T16989] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 457.553753][T16989] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 457.565562][T16989] EXT4-fs (loop5): 1 orphan inode deleted [ 457.570769][T16987] dummy0 speed is unknown, defaulting to 1000 [ 457.595103][T16989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.608725][T12521] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.619318][T16989] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.697560][T16262] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 457.791246][ T28] audit: type=1400 audit(1773855112.593:8404): avc: denied { map } for pid=17011 comm="syz.5.3862" path="socket:[53872]" dev="sockfs" ino=53872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 458.180174][T17053] syzkaller1: entered promiscuous mode [ 458.185787][T17053] syzkaller1: entered allmulticast mode [ 458.560568][T17054] random: crng reseeded on system resumption [ 458.698650][T17059] loop7: detected capacity change from 0 to 128 [ 458.825445][ T3349] hid-generic 0D27:70BD25:25DFDBFD.0006: item fetching failed at offset 0/1 [ 458.853396][ T28] audit: type=1400 audit(1773855113.643:8405): avc: denied { read } for pid=17060 comm="syz.5.3872" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 458.876830][ T28] audit: type=1400 audit(1773855113.643:8406): avc: denied { open } for pid=17060 comm="syz.5.3872" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 458.919599][ T28] audit: type=1400 audit(1773855113.643:8407): avc: denied { ioctl } for pid=17060 comm="syz.5.3872" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 458.997832][ T3349] hid-generic 0D27:70BD25:25DFDBFD.0006: probe with driver hid-generic failed with error -22 [ 459.032269][T17069] FAULT_INJECTION: forcing a failure. [ 459.032269][T17069] name failslab, interval 1, probability 0, space 0, times 0 [ 459.070266][T17069] CPU: 1 UID: 0 PID: 17069 Comm: syz.7.3873 Tainted: G W syzkaller #0 PREEMPT(full) [ 459.070302][T17069] Tainted: [W]=WARN [ 459.070326][T17069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.070340][T17069] Call Trace: [ 459.070349][T17069] [ 459.070358][T17069] __dump_stack+0x1d/0x30 [ 459.070387][T17069] dump_stack_lvl+0x95/0xd0 [ 459.070412][T17069] dump_stack+0x15/0x1b [ 459.070472][T17069] should_fail_ex+0x263/0x280 [ 459.070535][T17069] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 459.070567][T17069] should_failslab+0x8c/0xb0 [ 459.070587][T17069] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 459.070628][T17069] ? debugfs_alloc_inode+0x34/0x40 [ 459.070658][T17069] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 459.070766][T17069] debugfs_alloc_inode+0x34/0x40 [ 459.070797][T17069] alloc_inode+0x40/0x170 [ 459.070830][T17069] new_inode+0x1d/0xe0 [ 459.070853][T17069] __debugfs_create_file+0x97/0x2b0 [ 459.070886][T17069] debugfs_create_file_full+0x3f/0x60 [ 459.070923][T17069] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 459.071005][T17069] ref_tracker_dir_debugfs+0x10e/0x220 [ 459.071065][T17069] alloc_netdev_mqs+0x1a7/0xa40 [ 459.071166][T17069] rtnl_create_link+0x239/0x720 [ 459.071198][T17069] rtnl_newlink_create+0x174/0x650 [ 459.071225][T17069] ? security_capable+0x7b/0x90 [ 459.071252][T17069] ? netlink_ns_capable+0x86/0xa0 [ 459.071283][T17069] rtnl_newlink+0x10a0/0x1330 [ 459.071309][T17069] ? css_rstat_updated+0xbb/0x280 [ 459.071345][T17069] ? __memcg_slab_free_hook+0x14b/0x240 [ 459.071376][T17069] ? __rcu_read_unlock+0x4e/0x70 [ 459.071401][T17069] ? avc_has_perm_noaudit+0xab/0x130 [ 459.071434][T17069] ? cred_has_capability+0x224/0x2a0 [ 459.071525][T17069] ? selinux_capable+0x31/0x40 [ 459.071553][T17069] ? security_capable+0x7b/0x90 [ 459.071580][T17069] ? ns_capable+0x7c/0xb0 [ 459.071598][T17069] ? __pfx_rtnl_newlink+0x10/0x10 [ 459.071649][T17069] rtnetlink_rcv_msg+0x64b/0x720 [ 459.071671][T17069] netlink_rcv_skb+0x123/0x220 [ 459.071745][T17069] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 459.071770][T17069] rtnetlink_rcv+0x1c/0x30 [ 459.071787][T17069] netlink_unicast+0x5c0/0x690 [ 459.071860][T17069] netlink_sendmsg+0x5c8/0x6f0 [ 459.071907][T17069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.071990][T17069] ____sys_sendmsg+0x563/0x5b0 [ 459.072029][T17069] ___sys_sendmsg+0x195/0x1e0 [ 459.072066][T17069] __x64_sys_sendmsg+0xd4/0x160 [ 459.072096][T17069] x64_sys_call+0x194c/0x3020 [ 459.072175][T17069] do_syscall_64+0x12c/0x370 [ 459.072343][T17069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.072395][T17069] RIP: 0033:0x7f05f9dfc799 [ 459.072423][T17069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.072443][T17069] RSP: 002b:00007f05f884f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.072466][T17069] RAX: ffffffffffffffda RBX: 00007f05fa075fa0 RCX: 00007f05f9dfc799 [ 459.072483][T17069] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 459.072570][T17069] RBP: 00007f05f884f090 R08: 0000000000000000 R09: 0000000000000000 [ 459.072582][T17069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.072601][T17069] R13: 00007f05fa076038 R14: 00007f05fa075fa0 R15: 00007ffceb7f5e78 [ 459.072622][T17069] [ 459.072692][T17069] debugfs: out of free dentries, can not create file 'netdev@ffff88810dd6e560' [ 460.518190][T17158] loop5: detected capacity change from 0 to 512 [ 460.681586][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3883'. [ 461.116747][T17189] random: crng reseeded on system resumption [ 461.604316][T17219] loop7: detected capacity change from 0 to 512 [ 461.657206][T17219] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.781461][T17226] loop5: detected capacity change from 0 to 256 [ 463.301605][T17219] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.346528][ T28] audit: type=1400 audit(1773855118.163:8408): avc: denied { lock } for pid=17206 comm="syz.7.3889" path="socket:[54820]" dev="sockfs" ino=54820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 463.550534][T12276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.773650][T17269] loop7: detected capacity change from 0 to 512 [ 463.897278][T17269] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 463.952423][T17269] EXT4-fs (loop7): orphan cleanup on readonly fs [ 464.011635][T17269] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #11: block 7: comm syz.7.3903: lblock 7 mapped to illegal pblock 7 (length 1) [ 464.030296][T17269] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 464.040147][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 464.051471][T17269] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 464.055741][ C1] EXT4-fs (loop7): initial error at time 1773855118: ext4_map_blocks:776: inode 11: block 7 [ 464.055776][ C1] EXT4-fs (loop7): last error at time 1773855118: ext4_map_blocks:776: inode 11: block 7 [ 464.140780][T17269] EXT4-fs (loop7): 1 orphan inode deleted [ 464.160693][T17269] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 464.215628][T12276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.217960][T17298] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 464.336409][T17304] loop1: detected capacity change from 0 to 512 [ 464.459297][T17304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.472314][T17304] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.601705][T16606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.614637][T17335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3913'. [ 465.138671][T17372] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3917'. [ 465.451450][T17401] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3918'. [ 465.539082][T17404] loop9: detected capacity change from 0 to 1764 [ 465.647683][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3923'. [ 465.657173][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3923'. [ 465.666438][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3923'. [ 465.675785][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3923'. [ 465.805128][T17421] netlink: 'syz.9.3923': attribute type 9 has an invalid length. [ 465.813672][T17421] netlink: 'syz.9.3923': attribute type 7 has an invalid length. [ 465.821657][T17421] netlink: 'syz.9.3923': attribute type 8 has an invalid length. [ 465.936011][T17411] loop0: detected capacity change from 0 to 8192 [ 466.155960][T17426] loop0: detected capacity change from 0 to 512 [ 466.204425][T17426] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 466.259509][T17426] EXT4-fs (loop0): 1 orphan inode deleted [ 466.281513][T17426] EXT4-fs (loop0): 1 truncate cleaned up [ 466.325374][T17426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.418531][T17426] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #12: block 7: comm syz.0.3929: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 466.439637][T17426] EXT4-fs (loop0): Remounting filesystem read-only [ 466.459133][T12521] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.712704][T17457] loop0: detected capacity change from 0 to 256 [ 466.725125][T17460] loop7: detected capacity change from 0 to 1024 [ 466.753184][T17460] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.780397][T17457] FAT-fs (loop0): count of clusters too big (178174) [ 466.787225][T17457] FAT-fs (loop0): Can't find a valid FAT filesystem [ 466.875056][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3936'. [ 467.014952][T12276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.327075][T17512] loop9: detected capacity change from 0 to 256 [ 467.341317][T17512] vfat: Bad value for 'tz' [ 467.462652][ T28] audit: type=1400 audit(1773855122.283:8409): avc: denied { write } for pid=17529 comm="syz.0.3944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 467.518130][ T28] audit: type=1400 audit(1773855122.333:8410): avc: denied { create } for pid=17529 comm="syz.0.3944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 467.613827][T17512] loop9: detected capacity change from 0 to 1024 [ 467.642954][T17512] EXT4-fs: Ignoring removed orlov option [ 467.655410][T17512] EXT4-fs: Ignoring removed bh option [ 467.715182][T17512] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.734609][ T28] audit: type=1400 audit(1773855122.553:8411): avc: denied { remount } for pid=17511 comm="syz.9.3943" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 467.735111][T17512] ext4: Unknown parameter 'GPL' [ 467.829457][T17560] loop1: detected capacity change from 0 to 256 [ 467.839372][T17560] FAT-fs (loop1): count of clusters too big (178174) [ 467.847457][T17560] FAT-fs (loop1): Can't find a valid FAT filesystem [ 467.877117][T17562] 9p: Bad value for 'wfdno' [ 467.967508][ T28] audit: type=1400 audit(1773855122.783:8412): avc: denied { write } for pid=17563 comm="syz.1.3948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 468.196408][T16262] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.321874][T17583] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3954'. [ 468.760419][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 468.975586][T17601] loop1: detected capacity change from 0 to 8192 [ 469.020514][T13500] loop1: p1 < > p2 < > p3 p4 < > [ 469.025795][T13500] loop1: partition table partially beyond EOD, truncated [ 469.033517][T13500] loop1: p1 start 67108864 is beyond EOD, truncated [ 469.041381][T13500] loop1: p3 start 100859904 is beyond EOD, truncated [ 469.051987][T17601] loop1: p1 < > p2 < > p3 p4 < > [ 469.060395][T17601] loop1: partition table partially beyond EOD, truncated [ 469.067938][T17601] loop1: p1 start 67108864 is beyond EOD, truncated [ 469.081784][T17601] loop1: p3 start 100859904 is beyond EOD, truncated [ 469.091717][ T28] audit: type=1400 audit(1773855123.913:8413): avc: denied { bind } for pid=17600 comm="syz.1.3961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 469.236223][T17606] netlink: 'syz.1.3963': attribute type 1 has an invalid length. [ 469.244917][T17606] net_ratelimit: 10 callbacks suppressed [ 469.244931][T17606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.273851][T13500] udevd[13500]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 469.277651][T12530] udevd[12530]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 469.315052][ T28] audit: type=1400 audit(1773855124.133:8414): avc: denied { listen } for pid=17604 comm="syz.1.3963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 469.325866][T17606] team0: Port device vlan2 added [ 469.877680][T17627] loop9: detected capacity change from 0 to 512 [ 470.056975][T17627] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 470.215004][T16262] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.285809][T17637] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3969'. [ 470.449604][T17642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3972'. [ 470.455868][T17650] loop0: detected capacity change from 0 to 512 [ 470.467012][T17647] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3974'. [ 470.483350][T17647] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3974'. [ 470.491108][T17655] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3976'. [ 470.505314][T17650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.518382][T17642] hsr_slave_1 (unregistering): left promiscuous mode [ 470.520991][ T28] audit: type=1400 audit(1773855125.333:8415): avc: denied { append } for pid=17649 comm="syz.0.3975" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.541360][T17650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3975'. [ 470.558367][T17650] netlink: 'syz.0.3975': attribute type 1 has an invalid length. [ 470.581086][T17657] team0: Port device team_slave_0 removed [ 470.621697][T12521] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.633311][T17647] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3974'. [ 470.636184][T17637] dummy0 speed is unknown, defaulting to 1000 [ 470.860373][T17668] netlink: 'syz.5.3979': attribute type 36 has an invalid length. [ 470.913410][T17671] netlink: 'syz.5.3979': attribute type 10 has an invalid length. [ 470.944399][T17668] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 470.955117][T17668] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 471.386800][T17678] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3982'. [ 471.612276][T17690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3988'. [ 471.840275][ T28] audit: type=1400 audit(1773855126.663:8416): avc: denied { ioctl } for pid=17701 comm="syz.1.3993" path="socket:[56456]" dev="sockfs" ino=56456 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 471.937213][T17706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3995'. [ 472.078101][ T35] hid_parser_main: 91 callbacks suppressed [ 472.078119][ T35] hid-generic 0000:0003:0001.0007: unknown main item tag 0x0 [ 472.122189][ T35] hid-generic 0000:0003:0001.0007: unknown main item tag 0x0 [ 472.139855][ T35] hid-generic 0000:0003:0001.0007: hidraw0: HID v0.03 Device [syz0] on syz1 [ 472.435895][T17729] ip6gretap0: entered promiscuous mode [ 472.464514][T17729] syz_tun: entered promiscuous mode [ 472.610858][ T28] audit: type=1400 audit(1773855127.423:8417): avc: denied { listen } for pid=17739 comm="syz.1.4006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 472.643507][T17742] loop9: detected capacity change from 0 to 512 [ 472.650939][ T28] audit: type=1400 audit(1773855127.423:8418): avc: denied { accept } for pid=17739 comm="syz.1.4006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 472.781067][T17742] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.816887][T17742] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.514722][T17771] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 473.760256][ T28] audit: type=1400 audit(1773855128.573:8419): avc: denied { ioctl } for pid=17778 comm="syz.0.4020" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 473.811827][T17780] netlink: 'syz.1.4019': attribute type 9 has an invalid length. [ 473.820016][T17780] netlink: 'syz.1.4019': attribute type 7 has an invalid length. [ 473.828046][T17780] netlink: 'syz.1.4019': attribute type 8 has an invalid length. [ 474.645160][T17792] vlan3: entered promiscuous mode [ 475.337592][T17812] tmpfs: Bad value for 'mpol' [ 475.348811][ T28] audit: type=1326 audit(1773855130.153:8420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17811 comm="syz.9.4032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9eb25c799 code=0x7ffc0000 [ 475.402492][T17818] __nla_validate_parse: 3 callbacks suppressed [ 475.402508][T17818] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4034'. [ 475.432202][ T28] audit: type=1326 audit(1773855130.153:8421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17811 comm="syz.9.4032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9eb25c799 code=0x7ffc0000 [ 475.468309][T17818] loop7: detected capacity change from 0 to 256 [ 475.486628][ T28] audit: type=1326 audit(1773855130.153:8422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17811 comm="syz.9.4032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd9eb25c799 code=0x7ffc0000 [ 475.489601][T17818] FAT-fs (loop7): Directory bread(block 64) failed [ 475.538978][ T28] audit: type=1326 audit(1773855130.153:8423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17811 comm="syz.9.4032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9eb25c799 code=0x7ffc0000 [ 475.590336][T17818] FAT-fs (loop7): Directory bread(block 65) failed [ 475.593090][ T28] audit: type=1326 audit(1773855130.203:8424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17811 comm="syz.9.4032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9eb25c799 code=0x7ffc0000 [ 475.610190][T17818] FAT-fs (loop7): Directory bread(block 66) failed [ 475.680980][T17818] FAT-fs (loop7): Directory bread(block 67) failed [ 475.687547][T17818] FAT-fs (loop7): Directory bread(block 68) failed [ 475.740194][T17818] FAT-fs (loop7): Directory bread(block 69) failed [ 475.747376][T17818] FAT-fs (loop7): Directory bread(block 70) failed [ 475.756056][T17818] FAT-fs (loop7): Directory bread(block 71) failed [ 475.793722][T17818] FAT-fs (loop7): Directory bread(block 72) failed [ 475.802530][T17818] FAT-fs (loop7): Directory bread(block 73) failed [ 475.851713][ T28] audit: type=1400 audit(1773855130.653:8425): avc: denied { checkpoint_restore } for pid=17833 comm="syz.9.4042" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 475.879077][ C0] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 475.900461][T17818] syz.7.4034: attempt to access beyond end of device [ 475.900461][T17818] loop7: rw=8388608, sector=1740, nr_sectors = 4 limit=256 [ 475.961556][T17838] loop0: detected capacity change from 0 to 1024 [ 475.968303][T17838] EXT4-fs: Invalid want_extra_isize 1025 [ 476.100935][T17842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4045'. [ 476.110177][T17842] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4045'. [ 476.712086][ T28] audit: type=1400 audit(1773855131.533:8426): avc: denied { write } for pid=17860 comm="syz.7.4052" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 477.080092][T17862] ================================================================== [ 477.081922][T17882] batadv0: entered promiscuous mode [ 477.088200][T17862] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 477.101427][T17862] [ 477.103750][T17862] write to 0xffff888100a70ee8 of 8 bytes by task 17861 on cpu 0: [ 477.110746][T17882] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 477.111452][T17862] filemap_splice_read+0x523/0x780 [ 477.111479][T17862] splice_direct_to_actor+0x26e/0x670 [ 477.111499][T17862] do_splice_direct+0x119/0x1a0 [ 477.121988][T17882] batadv0: left promiscuous mode [ 477.123413][T17862] do_sendfile+0x382/0x650 [ 477.142906][T17862] __x64_sys_sendfile64+0x105/0x150 [ 477.148116][T17862] x64_sys_call+0x2dc4/0x3020 [ 477.152804][T17862] do_syscall_64+0x12c/0x370 [ 477.157408][T17862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.163308][T17862] [ 477.165629][T17862] write to 0xffff888100a70ee8 of 8 bytes by task 17862 on cpu 1: [ 477.173530][T17862] filemap_splice_read+0x523/0x780 [ 477.178841][T17862] splice_direct_to_actor+0x26e/0x670 [ 477.184308][T17862] do_splice_direct+0x119/0x1a0 [ 477.189165][T17862] do_sendfile+0x382/0x650 [ 477.193598][T17862] __x64_sys_sendfile64+0x105/0x150 [ 477.198801][T17862] x64_sys_call+0x2dc4/0x3020 [ 477.203501][T17862] do_syscall_64+0x12c/0x370 [ 477.208120][T17862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.214034][T17862] [ 477.216353][T17862] value changed: 0x0000000000f0c000 -> 0x0000000000f91000 [ 477.223463][T17862] [ 477.225782][T17862] Reported by Kernel Concurrency Sanitizer on: [ 477.231937][T17862] CPU: 1 UID: 60929 PID: 17862 Comm: syz.7.4052 Tainted: G W syzkaller #0 PREEMPT(full) [ 477.243243][T17862] Tainted: [W]=WARN [ 477.247053][T17862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 477.257109][T17862] ================================================================== [ 477.428707][T17892] syzkaller1: entered promiscuous mode [ 477.434305][T17892] syzkaller1: entered allmulticast mode