last executing test programs: 42.185947747s ago: executing program 2 (id=108): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x73a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x57, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x23) set_tid_address(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) 42.087135506s ago: executing program 2 (id=110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200730500310000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x19196, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd}]}) r5 = pidfd_getfd(r1, r4, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x188, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_hsr\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x200}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}, @IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xc0}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xd}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_team\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300ea000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000079100800070000009500000000000000e063a2bd32f1c03ee109ac4474b3eed269f63fe8d7bf76a0a95a47b26cf82c5295e6d0eb0eb665b32b3ae9c11360252a342fc35fc91b50074f000000000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) fstat(r8, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r9) setfsuid(r9) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000580)={{{@in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x100, 0x4e20, 0x7, 0x0, 0x20, 0xa0, 0x4, r7, r9}, {0x0, 0xee8, 0xd, 0x2, 0x401, 0x6, 0x1, 0x8}, {0x7e, 0xb1, 0x8c, 0x4}, 0x9f78, 0x6e6bb2, 0x2, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d2, 0x33}, 0xa, @in=@private=0xa010101, 0x34ff, 0x1, 0x1, 0x0, 0x6, 0x6, 0xd}}, 0xe8) 41.934252379s ago: executing program 2 (id=114): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x8, 0xe79, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x0) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async, rerun: 32) r4 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) (rerun: 32) write$cgroup_type(r4, &(0x7f00000009c0), 0xd4ba0ff) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x448, 0x20a, 0x278, 0x448, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x0, 0xe}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e20], [0x4e24, 0x4e23], [0x0, 0x0, 0x684, 0x8, 0x8000, 0x1, 0x1, 0x80, 0x8, 0x10001, 0xd, 0xd979, 0x8, 0x3, 0xcb, 0x8, 0x2040, 0x8, 0x2, 0x8, 0xafa, 0x8, 0x9, 0x2, 0x2, 0x8, 0x3ff, 0x2, 0xe7b, 0x8, 0x9, 0x80000001, 0x3, 0x4e41, 0x8, 0x8, 0x2, 0x1000, 0x6, 0x200, 0x3, 0x7f, 0x7, 0x6, 0x0, 0x2, 0x4, 0x7, 0x8000, 0x9, 0x6, 0x9, 0x7, 0xb, 0x565, 0x8001, 0x4, 0x6, 0xc72, 0x81, 0xffff, 0x3ff, 0x6, 0x7fff], 0x4, [{0x9, 0x3, 0x6}, {0xa0, 0x40, 0xe}, {0x8, 0xff, 0x5}, {0x5, 0x1, 0x10}], 0x4, 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r5, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000180)=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={r7, &(0x7f0000000700), 0x0}, 0x20) (async, rerun: 32) unlink(&(0x7f0000000100)='./file0/file1\x00') (async, rerun: 32) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0/file1\x00') (async) lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="2ea2a5447c6e093fcc265b000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x24040060) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xe, &(0x7f0000000600)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0xfffffff8}, @printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000180)='GPL\x00', 0x5}, 0x94) 41.834540378s ago: executing program 2 (id=117): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = getegid() r2 = getgid() lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000380)) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x218004, &(0x7f00000003c0)={[{@block_validity}, {}, {@resgid={'resgid', 0x3d, r7}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setgroups(0x8, &(0x7f00000003c0)=[r1, r2, r3, 0x0, r4, r5, 0x0, r7]) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$XFS_IOC_GETVERSION(r10, 0x80087601, &(0x7f0000000040)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000005f0001"], 0x18}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 41.57689368s ago: executing program 2 (id=123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000ff0100200000000000008500000020000000180100102020702500000000002020207b1aae628cd9efa8fe408c6eb7d6f8ff13000000bfa100000000000007010000f80400ffb702000000c2e500b70300000000510a36506916ca413de8e95d28de3c15552d91cf4dc0cadb71bce6f24f2bba86dfa4cb54ec3a946f54ac50ef8550ea124b785593abe1f74826476065da98851327d8ba056fc62704c525b132b3c990f5e4c914bc8e777e9f41fe87fd1b40f33f78d455bc53840f198b4bf71cce6e7a5b5e18e0f7f700000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000000004c900200040000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r2, &(0x7f0000000d40)=""/43, 0x2b) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000240)={&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/36, 0x24}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0x1000097, @remote, 0x4, 0x3}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r7, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x20, 0xca, 0x0, 0x0) 41.277339426s ago: executing program 2 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$eJzs3c9vHFcdAPDvbLxufji1SzlAJUqBoqSC7MY1bS0OJUgITpUQ5R6MvbGsrL2Rd93GViScvwAJIUBwggsXJP4AJBSJC0eEFAnOIBWBEDhwQAIy1cyOHdeZ3WzSza5/fD7SZN68+fF9bzYznjfzNBPAifVSRFyJiPtpmr4SEdNFfqUYYrs7ZMvd27m1mA1JpOnb/0giKfJ2t5UU43PFaqcj4htfi/h28nDc9ubW9YVms7FeTNc7qzfq7c2tSyurC8uN5cba3Nzs6/NvzL82f3ko9TwfEW9+5S8/+O7Pv/rmrz//7p+v/u1iVu2YKubvr8djyHbRRL8FulWv5vtiV7bC+hMEO6wm8hoWzpQtkaZpej+d3pdzeyQlAwDgoOwC9iMR8emIeCWm41T/y1kAAADgCEq/NBX/S7pPaEpM9sgHAAAAjpBK3gc2qdSKvgBTUanUat0+vB+Ns5Vmq9353LXWxtrS3R9PRcRMVCvXVpqNy0Vf4ZmoJtn0bJ5+MP3qgem5iHguIr4/fSafri22mkvjvvkBAAAAJ8S5A+3/f0932/8AAADAMTPzcFZlHOUAAAAAnp6S9j8AAABwzGj/AwAAwLH29bfeyoZ09/vXS+9sblxvvXNpqdG+XlvdWKwtttZv1JZbreX8nX2r+9c9VbK9Zqt14wuxtnGz3mm0O/X25tbV1dbGWufqygc+gQ0AAACM0HOfvPPHJCK2v3gmHzKT4y4UMBITe6mkGJcc/X96tjt+b0SFAkai7B7+Qe89M4KCACM38URrpYOcNoBDrjruAgBjlzxifs/OO78rxp8abnkAAIDhu/Dx3s//+38DYNsnAuCIcxDDyXXgQV46Pa6CACOXP/8ftMOviwU4VqoD9QAEjrMP/fz/kdL0sQoEAAAM3VQ+JJVacXtvKiqVWi3ifP5ZgGpybaXZuBwRz0bEH6arz2TTs/maySPbDAAAAAAAAAAAAAAAAAAAAAAAAABAV5omkfZzpe9cAAAA4AiIqPw1+U33Xf4Xpl+eOnh/YDL5T/5J4MmIePcnb//w5kKnsz6b5f9zL7/zoyL/1XHcwQAAAAAO2m2n77bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY7u3cWry3cyv9786txVHG/fuXI2JmL34+dOdMxOl8fDqqEXH2X0lM7FsviYhTQ4i/fTsiPlYWP8mKtReyLP6Zpx8/Zoq9UBb/3BDiw0l2Jzv/XCk7/irxUj4uP/4mIj4w/aR6n/9i7/x3qsfxf37AGC/c/WW9Z/zbES9MlJ9/duMnD8VPinFloPjf+ubWVq956U8jLkR5/P3R6p3VG/X25talldWF5cZyY21ubvb1+TfmX5u/XL+20mwU/5bG+N4nfnW/X/3P9og/07P+3TK9PFDtI/5/9+bO8z3+XmXxL36mJP5vf1Ys8XD8SrGtzxbpbP6F3fR2N73fi7/4/Yv96r/0oP7VwX7/bsyL/av94AccxoECAAxNe3Pr+kKz2Vg/Conqk6yVtdLLZj1f7IEPX7DJw7J/JB4z8Z2hbjBN07TH/6g7ETHIdpI4DLslT4z3vAQAAAzfg4v+cZcEAAAAAAAAAAAAAAAAAAAATq4hvjNssvQ1eyVvFtjeSyXeDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBrvBwAA//9pfNv4") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000001000)={&(0x7f0000000000)=""/4088, 0x80000001, 0xff8}, 0x0) sigaltstack(0x0, &(0x7f0000001280)={0x0}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x13bb711e) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x83079, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001040)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000840)='map_files\x00') getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) r5 = socket(0x1, 0x80802, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x10000001}) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x1) r8 = add_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r8) epoll_pwait(r6, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000ffffff7f00000000fdffffffc40a0000e8ffffff0800000000000000d1124f79fc42f18506e248c100b8133c91d8ae150309cef957d9ec3e6f000970c54912eba6c151e2a67076f7e5a47a0456718b973ace17a365667fe5abbdb232775042161f9cb2367841146c2647cde10633e8f3b2dfa7902b1f0bca53cdff0478111697504ad26ce86c1664d8e08707ec993f909f8de69e043a9660aa41411fb09ebcbefffacae1f57e7ba2ffc1b98f2bc5f5d0dada4d97fa5638095031a74ef6ade2"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a3200000000140000001100"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 41.252914888s ago: executing program 32 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$eJzs3c9vHFcdAPDvbLxufji1SzlAJUqBoqSC7MY1bS0OJUgITpUQ5R6MvbGsrL2Rd93GViScvwAJIUBwggsXJP4AJBSJC0eEFAnOIBWBEDhwQAIy1cyOHdeZ3WzSza5/fD7SZN68+fF9bzYznjfzNBPAifVSRFyJiPtpmr4SEdNFfqUYYrs7ZMvd27m1mA1JpOnb/0giKfJ2t5UU43PFaqcj4htfi/h28nDc9ubW9YVms7FeTNc7qzfq7c2tSyurC8uN5cba3Nzs6/NvzL82f3ko9TwfEW9+5S8/+O7Pv/rmrz//7p+v/u1iVu2YKubvr8djyHbRRL8FulWv5vtiV7bC+hMEO6wm8hoWzpQtkaZpej+d3pdzeyQlAwDgoOwC9iMR8emIeCWm41T/y1kAAADgCEq/NBX/S7pPaEpM9sgHAAAAjpBK3gc2qdSKvgBTUanUat0+vB+Ns5Vmq9353LXWxtrS3R9PRcRMVCvXVpqNy0Vf4ZmoJtn0bJ5+MP3qgem5iHguIr4/fSafri22mkvjvvkBAAAAJ8S5A+3/f0932/8AAADAMTPzcFZlHOUAAAAAnp6S9j8AAABwzGj/AwAAwLH29bfeyoZ09/vXS+9sblxvvXNpqdG+XlvdWKwtttZv1JZbreX8nX2r+9c9VbK9Zqt14wuxtnGz3mm0O/X25tbV1dbGWufqygc+gQ0AAACM0HOfvPPHJCK2v3gmHzKT4y4UMBITe6mkGJcc/X96tjt+b0SFAkai7B7+Qe89M4KCACM38URrpYOcNoBDrjruAgBjlzxifs/OO78rxp8abnkAAIDhu/Dx3s//+38DYNsnAuCIcxDDyXXgQV46Pa6CACOXP/8ftMOviwU4VqoD9QAEjrMP/fz/kdL0sQoEAAAM3VQ+JJVacXtvKiqVWi3ifP5ZgGpybaXZuBwRz0bEH6arz2TTs/maySPbDAAAAAAAAAAAAAAAAAAAAAAAAABAV5omkfZzpe9cAAAA4AiIqPw1+U33Xf4Xpl+eOnh/YDL5T/5J4MmIePcnb//w5kKnsz6b5f9zL7/zoyL/1XHcwQAAAAAO2m2n77bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY7u3cWry3cyv9786txVHG/fuXI2JmL34+dOdMxOl8fDqqEXH2X0lM7FsviYhTQ4i/fTsiPlYWP8mKtReyLP6Zpx8/Zoq9UBb/3BDiw0l2Jzv/XCk7/irxUj4uP/4mIj4w/aR6n/9i7/x3qsfxf37AGC/c/WW9Z/zbES9MlJ9/duMnD8VPinFloPjf+ubWVq956U8jLkR5/P3R6p3VG/X25talldWF5cZyY21ubvb1+TfmX5u/XL+20mwU/5bG+N4nfnW/X/3P9og/07P+3TK9PFDtI/5/9+bO8z3+XmXxL36mJP5vf1Ys8XD8SrGtzxbpbP6F3fR2N73fi7/4/Yv96r/0oP7VwX7/bsyL/av94AccxoECAAxNe3Pr+kKz2Vg/Conqk6yVtdLLZj1f7IEPX7DJw7J/JB4z8Z2hbjBN07TH/6g7ETHIdpI4DLslT4z3vAQAAAzfg4v+cZcEAAAAAAAAAAAAAAAAAAAATq4hvjNssvQ1eyVvFtjeSyXeDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBrvBwAA//9pfNv4") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000001000)={&(0x7f0000000000)=""/4088, 0x80000001, 0xff8}, 0x0) sigaltstack(0x0, &(0x7f0000001280)={0x0}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x13bb711e) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x83079, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001040)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000840)='map_files\x00') getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) r5 = socket(0x1, 0x80802, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x10000001}) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x1) r8 = add_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r8) epoll_pwait(r6, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000ffffff7f00000000fdffffffc40a0000e8ffffff0800000000000000d1124f79fc42f18506e248c100b8133c91d8ae150309cef957d9ec3e6f000970c54912eba6c151e2a67076f7e5a47a0456718b973ace17a365667fe5abbdb232775042161f9cb2367841146c2647cde10633e8f3b2dfa7902b1f0bca53cdff0478111697504ad26ce86c1664d8e08707ec993f909f8de69e043a9660aa41411fb09ebcbefffacae1f57e7ba2ffc1b98f2bc5f5d0dada4d97fa5638095031a74ef6ade2"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a3200000000140000001100"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 36.950736403s ago: executing program 1 (id=158): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) 36.847253702s ago: executing program 1 (id=159): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_stall_count', 0xa1613beb2cd94f26, 0x80) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000080)="fa2d56fd5ebae79f72f1a08dd31858a43a2a1ab27e689b712891a318890043e557894c8894e7141f32e2aa81348838eda61fbdd6a87ff55c5e43f808b52c2c93307de880ab8c5ef466fc2f00fefdbde4efbea3b2bfa91c347d95af0c011badeb8a253ba0e099ad336211f1a1aaa0e8231ae58ef9d158618143c1f0afe5c178d63e144e", 0x83}, 0x1, 0x0, 0x0, 0x880}, 0x30) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}]}, 0x54}}, 0x40010) bind$xdp(r0, &(0x7f0000000340)={0x2c, 0x8, 0x0, 0xd, r0}, 0x10) write$UHID_DESTROY(r0, &(0x7f0000000380), 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'gre0\x00', r1, 0x80, 0x7800, 0x5, 0xfffffff7, {{0xe, 0x4, 0x3, 0xc, 0x38, 0x66, 0x0, 0x6e, 0x4, 0x0, @private=0xfa, @multicast1, {[@lsrr={0x83, 0x23, 0x60, [@loopback, @private=0xa010101, @rand_addr=0x64010100, @remote, @loopback, @loopback, @multicast2, @multicast2]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000d80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000780)={0x590, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r6}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xa, 0x89, 0x5, 0x7}, {0x40, 0x4, 0xf1, 0x65280000}]}}}]}}, {{0x8, 0x1, r7}, {0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r9}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}]}}]}, 0x590}, 0x1, 0x0, 0x0, 0x4040080}, 0x4040800) getsockname$inet6(r0, &(0x7f0000000dc0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000e00)=0x1c) pread64(0xffffffffffffffff, &(0x7f0000000e40)=""/226, 0xe2, 0x8b7c) syz_genetlink_get_family_id$team(&(0x7f0000000f40), r0) setsockopt$inet_group_source_req(r0, 0x0, 0x3, &(0x7f0000000f80)={0x8, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}}, {{0x2, 0x4e22, @remote}}}, 0x108) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000010c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000020c0)={0xffffffffffffeac3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1c, "5ab2cd10f7de60"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000030c0)={r10, r11, "0d135a35ad952c68b1ddeae75bd8916898c2e835a1a419d7eb392f40a77ea0cbba8f5730a88238ab44a862f09ec457bdf049b7670ce0b2c65e625d15418c2d364ab5cd41f93e8ddf6cbcb19ad16b22644548f2fc9a78601b27d198ec8234e1d68ebf5e503853732c3687b1ef2a22ac001c37c58b4d92c48e02d5767dc485d7a2ee5678d8a564c70e43c8e570f5f4388be1ae09bd889befa30a6998eb22be05f8bc1c6135bc9b6a0bfaa381c79f99c909d2a2e9adc0385972596c18ab26b31cd77b265ddd7ea6ced874e19350e98db11d0982173fbb9a3031896104a86218940d13f841bdf698b2f3aa14d9c932a56824965e015a07821afd30c52088eee2cd24", "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"}) madvise(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x65) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000040c0)=0x0) timer_create(0x2, &(0x7f0000004100)={0x0, 0xd, 0x4, @tid=r12}, &(0x7f0000004140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000004180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SNAPSHOT_SET_SWAP_AREA(r13, 0x400c330d, &(0x7f00000041c0)={0x24b, 0xfffffc01}) setsockopt$inet6_tcp_TCP_MD5SIG(r13, 0x6, 0xe, &(0x7f0000004200)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x2b, 0x0, "cec72fc18a196c3a110618cebc9b38ffac2a5d560b6bad141be3aceb625e7335b9cab02e31b1740b77595b75aa0646b1f4f4be6e32eddfc2d9f7979b22d989a507bd0a28cf8d9e15420c11dc721be343"}, 0xd8) ioctl$F2FS_IOC_MOVE_RANGE(r13, 0xc020f509, &(0x7f0000004340)={0xffffffffffffffff, 0x0, 0xffffffffffffffff}) 36.742322741s ago: executing program 1 (id=160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200730500310000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x19196, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd}]}) r5 = pidfd_getfd(r1, r4, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x188, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_hsr\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x200}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}, @IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xc0}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xd}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_team\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300ea000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000079100800070000009500000000000000e063a2bd32f1c03ee109ac4474b3eed269f63fe8d7bf76a0a95a47b26cf82c5295e6d0eb0eb665b32b3ae9c11360252a342fc35fc91b50074f000000000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) fstat(r8, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r9) setfsuid(r9) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000580)={{{@in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x100, 0x4e20, 0x7, 0x0, 0x20, 0xa0, 0x4, r7, r9}, {0x0, 0xee8, 0xd, 0x2, 0x401, 0x6, 0x1, 0x8}, {0x7e, 0xb1, 0x8c, 0x4}, 0x9f78, 0x6e6bb2, 0x2, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d2, 0x33}, 0xa, @in=@private=0xa010101, 0x34ff, 0x1, 0x1, 0x0, 0x6, 0x6, 0xd}}, 0xe8) 36.305927159s ago: executing program 1 (id=165): mkdir(0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x208}, 0x40000) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r1, &(0x7f0000000080)="cc", 0x1, 0x200980) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, r3, 0x603, 0x70bd2f, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x42000}, 0x4000054) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000180)={0x54, r3, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x70}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xfe}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x8010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x20, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) sendfile(r0, r0, 0x0, 0x8) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0x9e2, 0x4) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010020bd70100600010007000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') clock_gettime(0x6, &(0x7f0000000240)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r11, 0xc018937c, &(0x7f0000000800)={{0x1, 0x1, 0x18, r4, {0x4}}, './file1\x00'}) read$nci(r14, &(0x7f00000009c0)=""/253, 0xfd) clock_settime(0x0, &(0x7f0000000040)={r12, r13+10000000}) 35.943235171s ago: executing program 1 (id=170): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c000c"], 0x68}}, 0x24040800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a300000000008"], 0xe8}}, 0x0) mlock(&(0x7f0000259000/0x4000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000325000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x181000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'vxcan1\x00', 0x400}) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000000)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @empty}, 'lo\x00'}) 35.631339068s ago: executing program 1 (id=178): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x100000c, 0x185}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0xfffffee4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5d}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x9c000, &(0x7f0000000140)={@_ha_fsid={[0x5, 0x32]}, {0x7, 0x6c, 0x1, 0xe18d}}, 0xf3e, &(0x7f00000001c0), &(0x7f0000000200)=0x80000000}, {[0x0, 0x1, 0x200, 0x9]}, 0x1, 0x58, &(0x7f0000000280)=""/88}) io_uring_enter(r1, 0x221c, 0x7621, 0x12, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4000010) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x3) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, 0x0) 35.616009989s ago: executing program 33 (id=178): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x100000c, 0x185}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0xfffffee4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5d}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x9c000, &(0x7f0000000140)={@_ha_fsid={[0x5, 0x32]}, {0x7, 0x6c, 0x1, 0xe18d}}, 0xf3e, &(0x7f00000001c0), &(0x7f0000000200)=0x80000000}, {[0x0, 0x1, 0x200, 0x9]}, 0x1, 0x58, &(0x7f0000000280)=""/88}) io_uring_enter(r1, 0x221c, 0x7621, 0x12, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4000010) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x3) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, 0x0) 2.602534754s ago: executing program 5 (id=546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @fwd={0x3}]}, {0x0, [0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x52}, 0x28) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x5, @empty, 0x8000003}, 0x1c) 2.555581278s ago: executing program 3 (id=547): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000100000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000640000008500000006000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1003, &(0x7f0000001cc0)=""/4099, 0x40f00, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2.521364281s ago: executing program 6 (id=548): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0x0) ptrace$pokeuser(0x6, r5, 0x388, 0x8001) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c0500", 0x17}], 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x4, 0x8a81}, 0x106200, 0x10004, 0x20da, 0x6, 0x1, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) kexec_load(0x4, 0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18030000ffffffff0000000004100000851000000600001956ca26641fe1cf18000000000000001800040000b053d994000000000000009500000000000000440300"/85], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x23}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_LOG_PREFIX={0xc, 0x2, 0x1, 0x0, 'nl80211\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x6}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x31}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xbc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) 2.369362694s ago: executing program 5 (id=549): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x7, 0xa401) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000180)={0x1, 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x4802, 0x40) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200), &(0x7f0000000240)=0x4) modify_ldt$write(0x1, &(0x7f0000000140)={0x3, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) syncfs(r2) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2.368823034s ago: executing program 3 (id=550): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f0000000000)={0x9, 0x8, 0xffffffff, 0xe59, 0x10001}) 2.267292593s ago: executing program 3 (id=551): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0xef, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 1.589833812s ago: executing program 5 (id=553): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x2a000, 0x1000, 0x0, 0x1}, 0x20) time(0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x8, 0x0, 0x7ffc1ffb}]}) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) io_setup(0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000a40)=[{0x3, 0x1, {0x0, 0xf0, 0x4}, {0x2, 0xf1}, 0x0, 0x1}, {0x1, 0x0, {0x2, 0x0, 0x3}, {0x1, 0x0, 0x4}, 0xfe, 0xff}, {0x0, 0x0, {0x1, 0x1, 0x3}, {0x0, 0xff, 0x3}, 0xfe, 0xfd}, {0x3, 0x1, {0x2, 0x1}, {0x2, 0xf0}, 0x2, 0xfe}, {0x2, 0x2, {0x0, 0x0, 0x4}, {0x2, 0xf0, 0x1}, 0xfe, 0xff}, {0x3, 0x0, {0x1, 0x1, 0x4}, {0x2, 0xf0, 0x2}, 0x1}, {0x0, 0x3, {0x2, 0x1, 0x2}, {0x3, 0xff, 0x1}, 0xff, 0xfd}], 0xe0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x12, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001422, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x40) open$dir(&(0x7f0000000140)='./file0\x00', 0x46263, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) r5 = syz_usb_connect$uac1(0x1, 0xc5, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x3, 0x30, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x6}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x1, 0x3, "849260"}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x5, 0x2, [0x2, 0x8]}, @selector_unit={0xa, 0x24, 0x5, 0x1, 0x7, "e287cf0897"}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x2, 0x3, [0x8, 0x1, 0x8], 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x3b, 0x1002}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x4, 0x7f, 0xb7, "c9d27b02fa2b561e9f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x80, 0x1, 0xa, {0x7, 0x25, 0x1, 0x2, 0xc0, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0xb1b, 0x6, "6db76c998d877f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0xfc, 0x1, {0x7, 0x25, 0x1, 0x0, 0x9, 0x4}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x0, 0x3, 0x4, 0xff, 0x2}, 0xcd, &(0x7f0000000200)={0x5, 0xf, 0xcd, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x98, 0x3, 0x7, 0x400, 0x5}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "e9737ad8292feb5270b0a0ce3d371c71"}, @ptm_cap={0x3}, @generic={0x93, 0x10, 0x1, "a137ce4109e9111c0c2269d3326a86b8ae97b8197975751a40d2ef1b960d7d02da0d409eced6352e1d19488abe7dad7c4de69d1e11da78ec8999fdc2ac5a5ad1efbaab4973a74d41025c93108be38a7d521dafdc8802c55d3eea464fe7e36fd26d8683d215491552ef1566d9c97384313e747bc2febc08b576431a348064116f16d9f868a86023d62234c30d3f823616"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x3, 0xf000, 0x4, [0xc0]}]}, 0x3, [{0x28, &(0x7f0000000300)=@string={0x28, 0x3, "ab281ee314384c84a2edd29fd5bb5f2015e06a6478b8f6d81ecb80d0459f36ad6930b2014668"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc1a}}, {0xad, &(0x7f0000000380)=@string={0xad, 0x3, "bf3c27ddaf5a6019a88a7f963cf826e82534fa97e563b81141593af8eeeed9b897d43af30911b03f091e52201fa729018cd9d46349388bcd65bbc584690817864c0d88b72f8b61a12f49a0ae88c0f3fab784893965b2aa4ec227d4084070071b181bc13f9f68b71e486bacba501f14c3cbd203c2da17d5426428d2f7112e4121f0bdcdeefaa6e2633bb4ec93c12f86845e3e17ddbb0d85f37ed656542aeff6e2a2469db451968bd0380ab0"}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000740)={0x14, &(0x7f0000000540)={0x0, 0x23, 0xd9, {0xd9, 0x5, "b93d567c7bf70621d746ddef2abd7d9d0926d4c520fb4be512f47287d8b4ee6b4f4b5d7a7479b5a3c0d6a9fa1735424650040e8f8ecd4d03f100382a4f78cd5a0aaeb6d55d3ff0eec538f26ded0d1468a156d76a906722811db820695e9ab30c4e6d5f6587c2c78dd59b84549b845c100517d83db9c80398202978c000bc52272d009c44f1edeaef1e28c57f9e03fc4507477efd3a67ab4a5b5091682acab273d66da362ee54eb654ec8ab3836a2ad31705b5a8cc8bc907cd7842891c575271d96f4f96a6c0ad103e401e75e714a3bcb4399c8d99f5585"}}, &(0x7f0000000640)={0x0, 0x3, 0xbe, @string={0xbe, 0x3, "7b87dcaf573c0486384b577c8ae3bb219bf09fdfe86ca45fef2c3bd3627003bcc1a3ad6447942ee0f6510827b6064c3e47122bf9ed9dc8d3cf99a6e2a9d90c3b2e1404cc85ed95a633a77f1efb5b09c476ee1ac734c2d08eb8e9f577a17dde5f715b5076c7b5167ea568c6b5ac51230e4d833cdb998ce5cc30aa4e093064a22f0fcee6dbc76dbe445e595ba3d8dbab0e58fa2a368677f50a8da5a6dcc6222027426e2431cb6438ee1e242c7c511702978b818c97c663ae0574a4ef31"}}}, &(0x7f0000000980)={0x44, &(0x7f0000000780)={0x20, 0x14, 0x2c, "181605ab74f81ce8c107ab99bf93d75d86394e1e5f0a04732e909b0b28f22ec6bcc5a22c168e47e3e594cf47"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8f}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000840)={0x20, 0x81, 0x2, "d561"}, &(0x7f0000000880)={0x20, 0x82, 0x1, "15"}, &(0x7f00000008c0)={0x20, 0x83, 0x2, "0f9c"}, &(0x7f0000000b40)=ANY=[@ANYBLOB="208402000b000f72d972dd0e9b3c5272aa537ab9eae491ce8e92adfb7c294d58992e8121d56fa0988fd54c3575232a4969b6936ec3180c7a9646b4bc3e99664d29f27dea72106ad93651e0d154cd0f04b2c04001da310ac9f614ac020afaebd283d12346a7fdcf"], &(0x7f0000000940)={0x20, 0x85, 0x3, "a6e3f6"}}) ptrace(0x4207, r3) time(&(0x7f0000000900)) 1.588004622s ago: executing program 6 (id=554): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000500)) r1 = syz_io_uring_setup(0x16ba, &(0x7f00000000c0)={0x0, 0xeae8, 0x400, 0x6, 0x399}, &(0x7f00000004c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r1, 0x2afd, 0x308b, 0xc, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r4, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000200010004"], 0x408100) 1.318488196s ago: executing program 6 (id=556): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xf, 0x5, 0xfffffff9}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@newtfilter={0x15dc, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x15b0, 0x2, [@TCA_U32_ACT={0x1230, 0x7, [@m_xt={0x122c, 0x5, 0x0, 0x0, {{0x7}, {0x1144, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x102a, 0x6, {0xfffb, 'nat\x00', 0x43, 0x0, "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"}}, @TCA_IPT_TARG={0x45, 0x6, {0x401, 'security\x00', 0xa, 0x1000, "6c3b8a5900d6b5612b61e93cf29313775e8a52fc8b3c8ee2286aa4"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TARG={0x8f, 0x6, {0x1000, 'raw\x00', 0x5, 0x0, "0e2b1e06449b5c7207c876b4084935577c567ebb50ca52002d456619a1ed892773fd992149178c2b4bc6260ce5d7e0444ef12cd66b22e208105f44a11e3977c517dcceaa1bdabaacb7e074281c3ffa9ee628d8b2d17b89e6225cd018f320ba575d5873de19"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}]}, {0xc4, 0x6, "b3c80cc44f88749007910388ff0e5c2e3665a61753855342d1dc45cf1486c19a7d7c556bd61ae715819ce856d90ddd7f4bcf909445396687c0e96bb5d9e33d93581a4a6aa89dabaeafce229a07fed2921fb598003b66de44b3158e1cd09845fcb4c2a66aeb0ec0774b6c917aef79155cd28c18bbf257ad09167c4a42d98e0be4ca6fa6b2f1644674474200938afa7e43d5daaffe0ddad53baf3f004220d3efcc6fa62db187b25f63c2baa107e7e51ff3bb5d3131e9fc014a27aff5a582e8092c"}, {0xc}, {0xc}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x374, 0x5, {0xb, 0x8, 0x9, 0x7, 0x0, 0xefdf, 0x2, 0x84c, [{0xc000000, 0x9, 0x2, 0x3}, {0x0, 0x8000, 0x1, 0x32ec}, {0x9, 0x8, 0x7, 0x4}, {0x4, 0x2, 0xc5f5, 0x7fffffff}, {0xd, 0xa0d, 0x24, 0x9}, {0x9, 0x8001, 0x7, 0x1c00}, {0xfcb5, 0x0, 0x0, 0xc551}, {0x9, 0xffffffe1, 0xd, 0x6}, {0x499, 0x7, 0x9, 0x7fff}, {0x9, 0x0, 0x80000001, 0x4}, {0x8, 0xa48e, 0x7d39876a, 0x7}, {0x7, 0x400, 0x3, 0xffffffff}, {0x101, 0xe, 0x4, 0x2}, {0x3, 0x8b8, 0x1000, 0x9}, {0xffff, 0x7, 0x2, 0x9}, {0x3, 0x8, 0x5c, 0x4}, {0xfffffffa, 0x3, 0x4, 0x3}, {0xffffffff, 0x6, 0x80, 0x4}, {0x4, 0x2, 0x4, 0xa}, {0x2, 0x0, 0xf53, 0x8}, {0x8, 0xe, 0x7, 0xc793}, {0x4, 0x7, 0xe0ed, 0x3}, {0xe, 0x9, 0xbb, 0x8}, {0x80, 0xa0, 0x1b09, 0x5}, {0x6, 0x7, 0x7ff, 0x9}, {0x8, 0xb38, 0x1, 0x8}, {0x400, 0x5b, 0x8}, {0x2, 0x7, 0x0, 0x4}, {0xc8f, 0x7}, {0xfffffff0, 0x80000001, 0x1, 0x6}, {0x2, 0x2, 0x10, 0x880}, {0x20, 0xf0, 0x3134, 0x8}, {0x6422, 0x6, 0x0, 0x4}, {0x8, 0xb56, 0x1003}, {0xfe8c, 0xea81aae, 0xff, 0x2}, {0x1, 0x1ff, 0x1, 0x3}, {0x6, 0x4, 0x4d, 0x653}, {0x1, 0xe7, 0x401, 0xd}, {0x0, 0xffffff50, 0xfffffff9, 0x2}, {0x8, 0x9, 0x5, 0x9}, {0x3, 0x3, 0xfffffff8, 0x1}, {0x0, 0x1, 0x464, 0x7fffffff}, {0x1ff, 0x0, 0x5, 0x5}, {0x3ca7, 0x3, 0x2, 0x4}, {0x4, 0x8c, 0xfffffffd, 0x2}, {0x1, 0x350f, 0x4, 0x5}, {0x1431, 0x10000, 0x52d, 0xfff}, {0x6, 0x3, 0x6, 0x1000}, {0x3, 0x9, 0x58b, 0x8000}, {0x7, 0x3, 0xe, 0x6}, {0x101, 0x7, 0x1, 0xffffffff}, {0x6, 0x5, 0x5, 0x4}, {0x100, 0x5, 0x401, 0x1779}, {0x781db9f6, 0x7ff, 0xfffffff8, 0x2ae}]}}]}}]}, 0x15dc}}, 0x24040084) 1.304421167s ago: executing program 6 (id=557): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff14) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, 0x0, 0x0) 1.173171208s ago: executing program 0 (id=559): pipe2$9p(&(0x7f0000000000), 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x4000010, r0, 0x6c974000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) listen(r2, 0x5) r3 = socket(0x28, 0x5, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004180)=@newtaction={0x14, 0x30, 0x2, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) ptrace(0x10, r1) 1.091092255s ago: executing program 0 (id=561): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth0_to_batadv\x00', @random="0200073bcd1e"}) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r6, 0x8) sendmmsg$inet_sctp(r6, &(0x7f0000003c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="12000000000000008400000006"], 0x18, 0x40000}], 0x1, 0x24040054) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x98, 0x3a0, 0x138, 0x138, 0x98, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ip={@rand_addr=0x64010101, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'batadv0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x8, 0x30, 0x34, 0xfffffffffffffb9a}, &(0x7f00000005c0)=0x18) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000600)={r10, 0x6}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x200}}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000200), 0x4) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @loopback}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) close_range(r0, 0xffffffffffffffff, 0x2) 1.051343889s ago: executing program 0 (id=563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000000d0a01030000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 919.27533ms ago: executing program 4 (id=565): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* f'], 0xa) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x52}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x108}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7ff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40014) r3 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r5 = syz_io_uring_setup(0xa49, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xff, 0x20000, 0xfffffffffffffffc, 0x1b}) 861.166825ms ago: executing program 6 (id=566): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a300000000008"], 0xe8}}, 0x0) mlock(&(0x7f0000259000/0x4000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000325000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x181000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'vxcan1\x00', 0x400}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000000)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r1) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @empty}, 'lo\x00'}) 809.15548ms ago: executing program 5 (id=567): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000500)) r1 = syz_io_uring_setup(0x16ba, &(0x7f00000000c0)={0x0, 0xeae8, 0x400, 0x6, 0x399}, &(0x7f00000004c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r1, 0x2afd, 0x308b, 0xc, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000200010004"], 0x408100) 735.404516ms ago: executing program 4 (id=568): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff9d, 0x0, 0x0, 0x0, 0x7c, 0x4000084}, 0x20000040) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x2000000}, 0x40) 667.112562ms ago: executing program 4 (id=569): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) open_tree(0xffffffffffffff9c, 0x0, 0x89001) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xb825, 0x0, 0x7fc, 0x6, 0x6, 0x7ffff, 0x7}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x80081272, 0xfffffffffffffffe) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x18, r5, 0x1, 0x4070bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x4800) 569.71716ms ago: executing program 5 (id=570): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb1, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x7, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$igmp6(0xa, 0x3, 0x2) fcntl$lock(r3, 0x24, &(0x7f00000002c0)={0x1, 0x3, 0xbd, 0x3ff}) 451.477191ms ago: executing program 3 (id=571): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) 451.049971ms ago: executing program 3 (id=572): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x48) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x101, 0x2002) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x210600, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {0x36}}) 174.743215ms ago: executing program 0 (id=573): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async, rerun: 64) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0) r0 = socket(0x28, 0x801, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfc, 0x7fff0029}]}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c15"]) (rerun: 32) r4 = socket(0x10, 0x2, 0x0) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="08000000000053c35476deb1a64d7cbc4a4cd6bd420000000088a795f23a232ca4"], 0x50) (rerun: 32) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000001c40)='./file0\x00', 0x4002, &(0x7f0000001d00)={[], [{@smackfshat={'smackfshat', 0x3d, 'memory.events\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '[+'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x63, 0x61, 0x37, 0x33, 0x66, 0x34, 0x63], 0x2d, [0x38, 0x39, 0x6f, 0x35], 0x2d, [0x63, 0x34, 0x66, 0x36], 0x2d, [0x61, 0x30, 0x64, 0x61], 0x2d, [0x32, 0x65, 0x33, 0x38, 0x31, 0x65, 0x39, 0x62]}}}, {@euid_lt}, {@measure}]}, 0x1, 0xbe9, &(0x7f0000001040)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r7, 0x0, 0x88000cc, 0x0) (async, rerun: 64) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async, rerun: 64) ioctl$sock_bt_hci(r8, 0x400448e7, 0x0) (async, rerun: 64) fcntl$setpipe(r6, 0x407, 0x100004) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) (async, rerun: 32) sendto$inet6(r4, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e020409430008003b000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160018000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) (rerun: 32) 145.349627ms ago: executing program 4 (id=574): r0 = epoll_create1(0x0) unshare(0x40400) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x10}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r2 = fcntl$dupfd(r0, 0x406, r0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x1c, 0x0, 0x0, 0x4b414b75, 0x10000, @value=r2}, 0x28) 104.088141ms ago: executing program 4 (id=575): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x10000, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x6, 0x2000000000003ff}, 0x0, 0x32, 0x43a1bd76, 0x5, 0x3, 0x1, 0x2, 0x0, 0x20, 0x0, 0x6}, r0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x4000004) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666953682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) 103.369371ms ago: executing program 6 (id=576): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff14) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, 0x0, 0x0) 43.003087ms ago: executing program 3 (id=577): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x2a000, 0x1000, 0x0, 0x1}, 0x20) time(0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x8, 0x0, 0x7ffc1ffb}]}) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) io_setup(0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000a40)=[{0x3, 0x1, {0x0, 0xf0, 0x4}, {0x2, 0xf1}, 0x0, 0x1}, {0x1, 0x0, {0x2, 0x0, 0x3}, {0x1, 0x0, 0x4}, 0xfe, 0xff}, {0x0, 0x0, {0x1, 0x1, 0x3}, {0x0, 0xff, 0x3}, 0xfe, 0xfd}, {0x3, 0x1, {0x2, 0x1}, {0x2, 0xf0}, 0x2, 0xfe}, {0x2, 0x2, {0x0, 0x0, 0x4}, {0x2, 0xf0, 0x1}, 0xfe, 0xff}, {0x3, 0x0, {0x1, 0x1, 0x4}, {0x2, 0xf0, 0x2}, 0x1}, {0x0, 0x3, {0x2, 0x1, 0x2}, {0x3, 0xff, 0x1}, 0xff, 0xfd}], 0xe0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x12, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001422, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x40) open$dir(&(0x7f0000000140)='./file0\x00', 0x46263, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) r5 = syz_usb_connect$uac1(0x1, 0xc5, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x3, 0x30, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x6}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x1, 0x3, "849260"}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x5, 0x2, [0x2, 0x8]}, @selector_unit={0xa, 0x24, 0x5, 0x1, 0x7, "e287cf0897"}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x2, 0x3, [0x8, 0x1, 0x8], 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x3b, 0x1002}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x4, 0x7f, 0xb7, "c9d27b02fa2b561e9f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x80, 0x1, 0xa, {0x7, 0x25, 0x1, 0x2, 0xc0, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0xb1b, 0x6, "6db76c998d877f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0xfc, 0x1, {0x7, 0x25, 0x1, 0x0, 0x9, 0x4}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x0, 0x3, 0x4, 0xff, 0x2}, 0xcd, &(0x7f0000000200)={0x5, 0xf, 0xcd, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x98, 0x3, 0x7, 0x400, 0x5}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "e9737ad8292feb5270b0a0ce3d371c71"}, @ptm_cap={0x3}, @generic={0x93, 0x10, 0x1, "a137ce4109e9111c0c2269d3326a86b8ae97b8197975751a40d2ef1b960d7d02da0d409eced6352e1d19488abe7dad7c4de69d1e11da78ec8999fdc2ac5a5ad1efbaab4973a74d41025c93108be38a7d521dafdc8802c55d3eea464fe7e36fd26d8683d215491552ef1566d9c97384313e747bc2febc08b576431a348064116f16d9f868a86023d62234c30d3f823616"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x3, 0xf000, 0x4, [0xc0]}]}, 0x3, [{0x28, &(0x7f0000000300)=@string={0x28, 0x3, "ab281ee314384c84a2edd29fd5bb5f2015e06a6478b8f6d81ecb80d0459f36ad6930b2014668"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc1a}}, {0xad, &(0x7f0000000380)=@string={0xad, 0x3, "bf3c27ddaf5a6019a88a7f963cf826e82534fa97e563b81141593af8eeeed9b897d43af30911b03f091e52201fa729018cd9d46349388bcd65bbc584690817864c0d88b72f8b61a12f49a0ae88c0f3fab784893965b2aa4ec227d4084070071b181bc13f9f68b71e486bacba501f14c3cbd203c2da17d5426428d2f7112e4121f0bdcdeefaa6e2633bb4ec93c12f86845e3e17ddbb0d85f37ed656542aeff6e2a2469db451968bd0380ab0"}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000740)={0x14, &(0x7f0000000540)={0x0, 0x23, 0xd9, {0xd9, 0x5, "b93d567c7bf70621d746ddef2abd7d9d0926d4c520fb4be512f47287d8b4ee6b4f4b5d7a7479b5a3c0d6a9fa1735424650040e8f8ecd4d03f100382a4f78cd5a0aaeb6d55d3ff0eec538f26ded0d1468a156d76a906722811db820695e9ab30c4e6d5f6587c2c78dd59b84549b845c100517d83db9c80398202978c000bc52272d009c44f1edeaef1e28c57f9e03fc4507477efd3a67ab4a5b5091682acab273d66da362ee54eb654ec8ab3836a2ad31705b5a8cc8bc907cd7842891c575271d96f4f96a6c0ad103e401e75e714a3bcb4399c8d99f5585"}}, &(0x7f0000000640)={0x0, 0x3, 0xbe, @string={0xbe, 0x3, "7b87dcaf573c0486384b577c8ae3bb219bf09fdfe86ca45fef2c3bd3627003bcc1a3ad6447942ee0f6510827b6064c3e47122bf9ed9dc8d3cf99a6e2a9d90c3b2e1404cc85ed95a633a77f1efb5b09c476ee1ac734c2d08eb8e9f577a17dde5f715b5076c7b5167ea568c6b5ac51230e4d833cdb998ce5cc30aa4e093064a22f0fcee6dbc76dbe445e595ba3d8dbab0e58fa2a368677f50a8da5a6dcc6222027426e2431cb6438ee1e242c7c511702978b818c97c663ae0574a4ef31"}}}, &(0x7f0000000980)={0x44, &(0x7f0000000780)={0x20, 0x14, 0x2c, "181605ab74f81ce8c107ab99bf93d75d86394e1e5f0a04732e909b0b28f22ec6bcc5a22c168e47e3e594cf47"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8f}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000840)={0x20, 0x81, 0x2, "d561"}, &(0x7f0000000880)={0x20, 0x82, 0x1, "15"}, &(0x7f00000008c0)={0x20, 0x83, 0x2, "0f9c"}, &(0x7f0000000b40)=ANY=[@ANYBLOB="208402000b000f72d972dd0e9b3c5272aa537ab9eae491ce8e92adfb7c294d58992e8121d56fa0988fd54c3575232a4969b6936ec3180c7a9646b4bc3e99664d29f27dea72106ad93651e0d154cd0f04b2c04001da310ac9f614ac020afaebd283d12346a7fdcf"], &(0x7f0000000940)={0x20, 0x85, 0x3, "a6e3f6"}}) ptrace(0x4207, r3) time(&(0x7f0000000900)) 42.520047ms ago: executing program 5 (id=578): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x40004) recvmmsg(r2, &(0x7f0000000000), 0x0, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$kcm(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x3, 0x80, 0x3, 0x7, 0x7ffd, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f000000aa40), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f000000aa80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f000000af00)={0x0, 0x0, &(0x7f000000aec0)={&(0x7f000000aac0)={0x24, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x80) mmap(&(0x7f00006aa000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xfbd8f000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='\x00', 0x52, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3638919e178389777d715e4daffbe0cc32aded742429e0ff6b95eedbeee750d5193411b770539f09cb29c22f3a1507d93643aafc88aadc859e3e4f758642d45bffcdee0ae4296933e00baf3474e752d392586846d197b23c3de36c6242c8ead9088decbae3bb86bd0ee7a121c63830965f71f1eb8a43f2a995f5394b5553aa2a0e93d85646e2fc452c5b0c6ffbd7f15190d6974094be62f48b5b856f3d754d025edf8c9833f2299d9a9acfa07c65b615c48c292eef"], 0xff, 0x2e7, &(0x7f00000006c0)="$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") creat(0x0, 0x38) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(0x0, 0x60840, 0x1d2) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x175) read(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) 42.345307ms ago: executing program 0 (id=579): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000010000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000640000008500000006000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1003, &(0x7f0000001cc0)=""/4099, 0x40f00, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 19.986309ms ago: executing program 4 (id=580): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0xa}, 0x14, 0x1ff, 0x11004, 0xe, 0x1, 0x7578, 0x0, 0x0, 0xfffffffd, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x4054) r1 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x2, 0x32, 0x1c, 0x7, 0x400009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0xff, 0x0, 0xc779, 0x445a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000200), 0x4}, 0x1081, 0x80000001, 0x6, 0x3, 0xfffffffffffffff5, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0xa45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf87c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x1000414, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRES8], 0x1, 0x801, &(0x7f0000001540)="$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") utimes(&(0x7f0000000000)='./file1\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x14, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095", @ANYRES32=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x1, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b7000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r4, @ANYRESHEX], 0x2c}}, 0x844) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001"], 0x48) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x0, 0x0, 0x0, 0x6, 0x1006, &(0x7f0000002cc0)=""/4102, 0x40f00, 0x4}, 0x94) ioctl$TCSETAF(r9, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x0, 0xb9ff, 0x9}) write$binfmt_aout(r9, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000dc0)={0x0, 0xffff, 0x0, 0x0, 0x17}) 0s ago: executing program 0 (id=581): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0xef, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) kernel console output (not intermixed with test programs): an-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.961527][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.972258][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.983833][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.993024][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.036517][ T3318] hsr_slave_0: entered promiscuous mode [ 37.042601][ T3318] hsr_slave_1: entered promiscuous mode [ 37.048616][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 37.054404][ T3318] Cannot create hsr debugfs directory [ 37.075897][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.100889][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.110246][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.129310][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.170234][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.181341][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.192883][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.206449][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.232783][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.263039][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.270999][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.279960][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.289296][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.315131][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.332877][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.342152][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.351788][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.360640][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.382414][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.392246][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.410055][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.417170][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.425946][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.433003][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.442387][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.449528][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.468354][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.475436][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.502299][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.543533][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.557816][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.572694][ T2626] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.579871][ T2626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.600304][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.631551][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.638646][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.652005][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.659085][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.668452][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.675667][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.689286][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.718319][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.748103][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.773414][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.780594][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.791679][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.798874][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.811249][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.827943][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.838674][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.877496][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.892381][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.911722][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.951604][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.008686][ T3320] veth0_vlan: entered promiscuous mode [ 38.038296][ T3320] veth1_vlan: entered promiscuous mode [ 38.080958][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.091637][ T3317] veth0_vlan: entered promiscuous mode [ 38.100246][ T3314] veth0_vlan: entered promiscuous mode [ 38.111454][ T3314] veth1_vlan: entered promiscuous mode [ 38.120279][ T3317] veth1_vlan: entered promiscuous mode [ 38.140628][ T3313] veth0_vlan: entered promiscuous mode [ 38.153041][ T3314] veth0_macvtap: entered promiscuous mode [ 38.163616][ T3313] veth1_vlan: entered promiscuous mode [ 38.179617][ T3317] veth0_macvtap: entered promiscuous mode [ 38.187190][ T3320] veth0_macvtap: entered promiscuous mode [ 38.196170][ T3317] veth1_macvtap: entered promiscuous mode [ 38.204726][ T3320] veth1_macvtap: entered promiscuous mode [ 38.211345][ T3314] veth1_macvtap: entered promiscuous mode [ 38.231083][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.239612][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.254073][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.263695][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.272943][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.282102][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.298146][ T3313] veth0_macvtap: entered promiscuous mode [ 38.310042][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.326334][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.335203][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.346425][ T3313] veth1_macvtap: entered promiscuous mode [ 38.357462][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.366302][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.383248][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 38.383262][ T28] audit: type=1400 audit(1771733792.309:85): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.mlnw4X/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.415424][ T3318] veth0_vlan: entered promiscuous mode [ 38.420983][ T28] audit: type=1400 audit(1771733792.309:86): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.425524][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.444951][ T28] audit: type=1400 audit(1771733792.309:87): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.mlnw4X/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.457683][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.479260][ T28] audit: type=1400 audit(1771733792.309:88): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.508070][ T28] audit: type=1400 audit(1771733792.309:89): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.mlnw4X/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.536709][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.552196][ T28] audit: type=1400 audit(1771733792.319:90): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.mlnw4X/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.556471][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.588461][ T28] audit: type=1400 audit(1771733792.319:91): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.610865][ T3318] veth1_vlan: entered promiscuous mode [ 38.611530][ T28] audit: type=1400 audit(1771733792.379:92): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.641074][ T28] audit: type=1400 audit(1771733792.379:93): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=3971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.666615][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.675533][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.690334][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.702662][ T28] audit: type=1400 audit(1771733792.619:94): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.705603][ T3318] veth0_macvtap: entered promiscuous mode [ 38.745513][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.786486][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.800895][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.816786][ T3318] veth1_macvtap: entered promiscuous mode [ 38.827102][ T3489] loop3: detected capacity change from 0 to 512 [ 38.834681][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.855055][ T3489] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 38.860802][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.880696][ C0] hrtimer: interrupt took 37837 ns [ 38.893519][ T3490] loop3: detected capacity change from 0 to 512 [ 38.902088][ T3490] EXT4-fs: inline encryption not supported [ 38.915155][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.938390][ T3492] FAULT_INJECTION: forcing a failure. [ 38.938390][ T3492] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 38.957860][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.964398][ T3492] CPU: 1 UID: 0 PID: 3492 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(full) [ 38.964498][ T3492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 38.964545][ T3492] Call Trace: [ 38.964557][ T3492] [ 38.964640][ T3492] __dump_stack+0x1d/0x30 [ 38.964713][ T3492] dump_stack_lvl+0x95/0xd0 [ 38.964842][ T3492] dump_stack+0x15/0x1b [ 38.964902][ T3492] should_fail_ex+0x263/0x280 [ 38.965012][ T3492] should_fail_alloc_page+0xf2/0x100 [ 38.965106][ T3492] __alloc_frozen_pages_noprof+0x108/0x360 [ 38.965319][ T3492] alloc_pages_mpol+0xb3/0x260 [ 38.965451][ T3492] vma_alloc_folio_noprof+0x1a9/0x300 [ 38.965530][ T3492] handle_mm_fault+0x111f/0x3020 [ 38.965623][ T3492] ? mt_find+0x291/0x3d0 [ 38.965730][ T3492] ? irqentry_exit+0x91/0x520 [ 38.965825][ T3492] do_user_addr_fault+0x3fd/0x1050 [ 38.965920][ T3492] ? irqentry_exit+0x91/0x520 [ 38.965992][ T3492] exc_page_fault+0x62/0xa0 [ 38.966094][ T3492] asm_exc_page_fault+0x26/0x30 [ 38.966148][ T3492] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 38.966244][ T3492] Code: 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 38.966344][ T3492] RSP: 0018:ffffc90001ca7d38 EFLAGS: 00050206 [ 38.966394][ T3492] RAX: ffff888104f19af8 RBX: 0000000000001000 RCX: 0000000000000240 [ 38.966431][ T3492] RDX: 0000000000000000 RSI: ffff88811ba00dc0 RDI: 0000200000002000 [ 38.966521][ T3492] RBP: ffff88811ba00000 R08: 000000000000084a R09: 0000000000000000 [ 38.966556][ T3492] R10: 000188811ba00000 R11: 000188811ba00fff R12: 0000200000002240 [ 38.966601][ T3492] R13: 00007ffffffff000 R14: 0000200000001240 R15: ffff88811ba00000 [ 38.966648][ T3492] _copy_to_user+0x7c/0xa0 [ 38.966696][ T3492] pagemap_read+0x3ac/0x610 [ 38.966856][ T3492] ? __pfx_pagemap_read+0x10/0x10 [ 38.966925][ T3492] vfs_read+0x1ab/0x7f0 [ 38.967024][ T3492] ? __rcu_read_unlock+0x4e/0x70 [ 38.967079][ T3492] ? __fget_files+0x184/0x1c0 [ 38.967216][ T3492] __x64_sys_pread64+0xfd/0x150 [ 38.967317][ T3492] x64_sys_call+0x27b5/0x3020 [ 38.967450][ T3492] do_syscall_64+0x12c/0x370 [ 38.967541][ T3492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.967598][ T3492] RIP: 0033:0x7ff0b08fc629 [ 38.967658][ T3492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.967778][ T3492] RSP: 002b:00007ff0af34f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 38.967881][ T3492] RAX: ffffffffffffffda RBX: 00007ff0b0b75fa0 RCX: 00007ff0b08fc629 [ 38.967919][ T3492] RDX: 00000000ffffff8c RSI: 0000200000001240 RDI: 0000000000000006 [ 38.967961][ T3492] RBP: 00007ff0af34f090 R08: 0000000000000000 R09: 0000000000000000 [ 38.967993][ T3492] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 38.968085][ T3492] R13: 00007ff0b0b76038 R14: 00007ff0b0b75fa0 R15: 00007ffc3829fe68 [ 38.968208][ T3492] [ 39.274333][ T3490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.287135][ T3490] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.303229][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.336336][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.390612][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.400406][ T3503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'. [ 39.414452][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.423289][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.436117][ T3500] loop0: detected capacity change from 0 to 4096 [ 39.482406][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.492014][ T3500] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 39.514404][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.519645][ T3500] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 39.549198][ T3500] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 39.627189][ T3500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 39.643258][ T3500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 39.731035][ T3512] loop1: detected capacity change from 0 to 4096 [ 39.786144][ T3512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.847459][ T3526] loop0: detected capacity change from 0 to 512 [ 39.868005][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.893465][ T3528] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 39.902009][ T3526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.924943][ T3526] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.947101][ T3530] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 40.082168][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.167824][ T3560] capability: warning: `syz.1.20' uses deprecated v2 capabilities in a way that may be insecure [ 41.181546][ T3560] loop1: detected capacity change from 0 to 512 [ 41.189362][ T3556] Zero length message leads to an empty skb [ 42.072586][ T3589] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 42.522816][ T3595] loop1: detected capacity change from 0 to 512 [ 42.554300][ T3597] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.31'. [ 42.593998][ T3544] syz.2.18 (3544) used greatest stack depth: 9944 bytes left [ 42.599651][ T3601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.610242][ T3595] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 42.628105][ T3595] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800e01c, mo2=0003] [ 42.666580][ T3595] System zones: 0-1, 15-15, 18-18, 34-34 [ 42.672469][ T3595] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.682718][ T3601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.728055][ T3597] loop3: detected capacity change from 0 to 32768 [ 42.741308][ T3595] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 42.758572][ T3595] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 42.766323][ T3595] EXT4-fs (loop1): 1 truncate cleaned up [ 42.784337][ T3595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.805300][ T3302] loop3: p1 p3 < p5 p6 > [ 42.820061][ T3597] loop3: p1 p3 < p5 p6 > [ 42.825054][ T3545] syz.2.18 (3545) used greatest stack depth: 6904 bytes left [ 42.866449][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.704380][ T3629] Illegal XDP return value 4294967294 on prog (id 13) dev N/A, expect packet loss! [ 43.825804][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 43.825820][ T28] audit: type=1400 audit(1771733797.759:203): avc: denied { sqpoll } for pid=3630 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 43.936865][ T28] audit: type=1400 audit(1771733797.869:204): avc: denied { create } for pid=3638 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.978353][ T1031] IPVS: starting estimator thread 0... [ 43.989028][ T28] audit: type=1400 audit(1771733797.869:205): avc: denied { bind } for pid=3638 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.073951][ T3640] IPVS: using max 2448 ests per chain, 122400 per kthread [ 44.078608][ T28] audit: type=1400 audit(1771733797.869:206): avc: denied { listen } for pid=3638 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.153895][ T28] audit: type=1400 audit(1771733797.869:207): avc: denied { write } for pid=3638 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.200840][ T28] audit: type=1400 audit(1771733797.869:208): avc: denied { create } for pid=3638 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.252655][ T28] audit: type=1400 audit(1771733797.909:209): avc: denied { setopt } for pid=3623 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.273837][ T36] IPVS: stop unused estimator thread 0... [ 44.314588][ T28] audit: type=1400 audit(1771733797.959:210): avc: denied { cmd } for pid=3641 comm="syz.2.47" path="socket:[4908]" dev="sockfs" ino=4908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.519793][ T3671] SELinux: syz.3.57 (3671) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 44.532858][ T3672] loop1: detected capacity change from 0 to 512 [ 44.580923][ T3665] loop2: detected capacity change from 0 to 512 [ 44.599559][ T3672] EXT4-fs (loop1): failed to initialize system zone (-117) [ 44.618162][ T28] audit: type=1326 audit(1771733798.529:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b779c629 code=0x7ffc0000 [ 44.651821][ T3672] EXT4-fs (loop1): mount failed [ 44.677102][ T28] audit: type=1326 audit(1771733798.529:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f96b775cece code=0x7ffc0000 [ 44.700767][ T3665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.725827][ T3665] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.777090][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.191492][ T3712] loop2: detected capacity change from 0 to 128 [ 45.227903][ T3712] FAT-fs (loop2): bogus logical sector size 65535 [ 45.244236][ T3712] FAT-fs (loop2): Can't find a valid FAT filesystem [ 45.308242][ T3715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 45.338637][ T3715] macvlan2: entered promiscuous mode [ 45.354063][ T3715] macvlan2: entered allmulticast mode [ 45.361587][ T3715] veth0_virt_wifi: entered allmulticast mode [ 45.444843][ T3721] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.470097][ T3721] bridge_slave_1: left allmulticast mode [ 45.486790][ T3721] bridge_slave_1: left promiscuous mode [ 45.500223][ T3721] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.524250][ T3721] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 45.850817][ T3734] loop0: detected capacity change from 0 to 128 [ 45.857543][ T3734] vfat: Unknown parameter '' [ 45.894649][ T3732] netlink: 256 bytes leftover after parsing attributes in process `syz.1.73'. [ 45.904823][ T3732] loop1: detected capacity change from 0 to 128 [ 45.911935][ T3732] FAT-fs (loop1): bogus number of reserved sectors [ 45.918521][ T3732] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 45.967741][ T3732] FAT-fs (loop1): Can't find a valid FAT filesystem [ 46.058977][ T3740] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 46.102148][ T3742] loop4: detected capacity change from 0 to 4096 [ 46.111256][ T3742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.163226][ T3749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.163287][ T3749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.188784][ T3751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 46.201081][ T3751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'. [ 46.220797][ T3748] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.257243][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.266497][ T3756] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 46.406766][ T3765] loop2: detected capacity change from 0 to 1024 [ 46.417763][ T3765] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 46.427795][ T3765] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 46.442656][ T3765] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #32: comm syz.2.87: iget: special inode unallocated [ 46.458821][ T3765] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 46.459357][ T3765] EXT4-fs (loop2): Remounting filesystem read-only [ 46.468658][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 46.468680][ C0] EXT4-fs (loop2): initial error at time 1771733800: ext4_get_journal_inode:5863: inode 32 [ 46.468714][ C0] EXT4-fs (loop2): last error at time 1771733800: ext4_get_journal_inode:5863: inode 32 [ 46.501516][ T3765] EXT4-fs (loop2): no journal found [ 46.507085][ T3765] EXT4-fs (loop2): can't get journal size [ 46.513553][ T3765] EXT4-fs (loop2): filesystem is read-only [ 46.520018][ T3765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 46.632485][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.688304][ T3786] loop4: detected capacity change from 0 to 512 [ 46.714031][ T3786] ext4: Unknown parameter 'dioread_lock"dax' [ 46.774557][ T3786] loop4: detected capacity change from 0 to 1024 [ 46.784637][ T3786] EXT4-fs: Ignoring removed orlov option [ 46.806541][ T3786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.857705][ T3798] loop0: detected capacity change from 0 to 4096 [ 46.883125][ T3798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.925508][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.123100][ T3804] Invalid ELF header magic: != ELF [ 47.174958][ T3814] xt_TPROXY: Can be used only with -p tcp or -p udp [ 47.182583][ T3814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.192419][ T3814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.200980][ T3814] usb usb1: usbfs: process 3814 (syz.2.101) did not claim interface 0 before use [ 47.239614][ T3819] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.256349][ T3819] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.103: invalid indirect mapped block 4294967295 (level 0) [ 47.270464][ T3819] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 47.270697][ T3819] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.103: invalid indirect mapped block 4294967295 (level 1) [ 47.279905][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 47.279963][ C1] EXT4-fs (loop1): initial error at time 1771733801: ext4_free_branches:1023: inode 16 [ 47.280017][ C1] EXT4-fs (loop1): last error at time 1771733801: ext4_free_branches:1023: inode 16 [ 47.319774][ T3819] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 47.320327][ T3819] EXT4-fs (loop1): 1 orphan inode deleted [ 47.335413][ T3819] EXT4-fs (loop1): 1 truncate cleaned up [ 47.341605][ T3819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.355500][ T3819] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.103: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 47.387117][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.518847][ T3822] tipc: Started in network mode [ 47.523761][ T3822] tipc: Node identity @, cluster identity 4711 [ 47.593371][ T3827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.602119][ T3827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.611215][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.634382][ T3830] netlink: 'syz.4.107': attribute type 16 has an invalid length. [ 47.642137][ T3830] netlink: 'syz.4.107': attribute type 17 has an invalid length. [ 47.676438][ T3830] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.686874][ T3830] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.907596][ T3838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 48.048075][ T3844] process 'syz.0.113' launched './file1' with NULL argv: empty string added [ 48.074379][ T3847] IPv6: Can't replace route, no match found [ 48.210859][ T3860] EXT4-fs: Ignoring removed orlov option [ 48.263472][ T3860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.348449][ T3870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.408200][ T3870] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.516631][ T3883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'. [ 48.676993][ T3872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.851162][ T3907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.131'. [ 48.872758][ T3907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.131'. [ 48.885962][ T28] kauditd_printk_skb: 680 callbacks suppressed [ 48.885976][ T28] audit: type=1400 audit(1771733802.819:893): avc: denied { write } for pid=3903 comm="syz.4.131" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.894768][ T3907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.131'. [ 48.931129][ T28] audit: type=1400 audit(1771733802.859:894): avc: denied { read } for pid=3903 comm="syz.4.131" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.964728][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.973796][ T28] audit: type=1400 audit(1771733802.859:895): avc: denied { open } for pid=3903 comm="syz.4.131" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.003218][ T2626] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.061177][ T3909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.066982][ T28] audit: type=1400 audit(1771733802.989:896): avc: denied { write } for pid=3915 comm="syz.4.135" name="netlink" dev="proc" ino=4026532397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 49.114177][ T2626] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.150069][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.176375][ T3920] atomic_op ffff88811a73f528 conn xmit_atomic 0000000000000000 [ 49.191812][ T3920] netlink: 'syz.4.137': attribute type 21 has an invalid length. [ 49.224761][ T2626] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.245065][ T28] audit: type=1400 audit(1771733803.179:897): avc: denied { ioctl } for pid=3921 comm="syz.0.136" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x453f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.296727][ T2626] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.315957][ T3927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 49.348119][ T3893] chnl_net:caif_netlink_parms(): no params data found [ 49.481846][ T3893] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.497176][ T3893] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.504508][ T3893] bridge_slave_0: entered allmulticast mode [ 49.510972][ T3893] bridge_slave_0: entered promiscuous mode [ 49.517873][ T3893] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.535294][ T28] audit: type=1326 audit(1771733803.469:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.1.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975694c629 code=0x7ffc0000 [ 49.535342][ T28] audit: type=1326 audit(1771733803.469:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.1.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975694c629 code=0x7ffc0000 [ 49.535370][ T28] audit: type=1326 audit(1771733803.469:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.1.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f975690cece code=0x7ffc0000 [ 49.558034][ T3893] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.562769][ T28] audit: type=1400 audit(1771733803.469:901): avc: denied { read open } for pid=3941 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.600465][ T3893] bridge_slave_1: entered allmulticast mode [ 49.617123][ T3944] netlink: 'syz.1.141': attribute type 63 has an invalid length. [ 49.660895][ T3945] set_capacity_and_notify: 4 callbacks suppressed [ 49.660926][ T3945] loop0: detected capacity change from 0 to 256 [ 49.689428][ T28] audit: type=1400 audit(1771733803.469:902): avc: denied { getattr } for pid=3941 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.852154][ T3945] FAT-fs (loop0): Directory bread(block 64) failed [ 49.858950][ T3945] FAT-fs (loop0): Directory bread(block 65) failed [ 49.865670][ T3945] FAT-fs (loop0): Directory bread(block 66) failed [ 49.872293][ T3945] FAT-fs (loop0): Directory bread(block 67) failed [ 49.878920][ T3945] FAT-fs (loop0): Directory bread(block 68) failed [ 49.885531][ T3945] FAT-fs (loop0): Directory bread(block 69) failed [ 49.892256][ T3945] FAT-fs (loop0): Directory bread(block 70) failed [ 49.898821][ T3945] FAT-fs (loop0): Directory bread(block 71) failed [ 49.905445][ T3945] FAT-fs (loop0): Directory bread(block 72) failed [ 49.912130][ T3945] FAT-fs (loop0): Directory bread(block 73) failed [ 50.182737][ T3956] FAULT_INJECTION: forcing a failure. [ 50.182737][ T3956] name failslab, interval 1, probability 0, space 0, times 0 [ 50.408111][ T3956] CPU: 0 UID: 0 PID: 3956 Comm: syz.4.144 Not tainted syzkaller #0 PREEMPT(full) [ 50.408208][ T3956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 50.408220][ T3956] Call Trace: [ 50.408225][ T3956] [ 50.408231][ T3956] __dump_stack+0x1d/0x30 [ 50.408261][ T3956] dump_stack_lvl+0x95/0xd0 [ 50.408343][ T3956] dump_stack+0x15/0x1b [ 50.408368][ T3956] should_fail_ex+0x263/0x280 [ 50.408387][ T3956] should_failslab+0x8c/0xb0 [ 50.408408][ T3956] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 50.408445][ T3956] ? __d_alloc+0x37/0x340 [ 50.408474][ T3956] __d_alloc+0x37/0x340 [ 50.408503][ T3956] ? preempt_schedule_irq+0x2d/0x50 [ 50.408525][ T3956] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 50.408553][ T3956] d_alloc_parallel+0x54/0xce0 [ 50.408690][ T3956] ? __rcu_read_unlock+0x4e/0x70 [ 50.408709][ T3956] ? __d_lookup+0x316/0x340 [ 50.408812][ T3956] path_openat+0x8b9/0x2050 [ 50.408874][ T3956] ? path_openat+0x1ab2/0x2050 [ 50.408906][ T3956] do_file_open+0x16c/0x290 [ 50.408946][ T3956] do_open_execat+0xab/0x240 [ 50.409046][ T3956] alloc_bprm+0x25/0x350 [ 50.409123][ T3956] do_execveat_common+0x104/0x720 [ 50.409163][ T3956] ? do_getname+0x102/0x1c0 [ 50.409185][ T3956] __x64_sys_execveat+0x76/0xa0 [ 50.409230][ T3956] x64_sys_call+0x2a33/0x3020 [ 50.409261][ T3956] do_syscall_64+0x12c/0x370 [ 50.409299][ T3956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.409319][ T3956] RIP: 0033:0x7ff0b08fc629 [ 50.409333][ T3956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.409359][ T3956] RSP: 002b:00007ff0af34f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 50.409382][ T3956] RAX: ffffffffffffffda RBX: 00007ff0b0b75fa0 RCX: 00007ff0b08fc629 [ 50.409397][ T3956] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffffff [ 50.409442][ T3956] RBP: 00007ff0af34f090 R08: 0000000000000100 R09: 0000000000000000 [ 50.409523][ T3956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.409538][ T3956] R13: 00007ff0b0b76038 R14: 00007ff0b0b75fa0 R15: 00007ffc3829fe68 [ 50.409556][ T3956] [ 50.596290][ T3893] bridge_slave_1: entered promiscuous mode [ 50.662554][ T3944] lo: entered promiscuous mode [ 50.672846][ T3944] lo: entered allmulticast mode [ 50.826694][ T3893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.859862][ T3893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.897994][ T3893] team0: Port device team_slave_0 added [ 50.915048][ T3893] team0: Port device team_slave_1 added [ 50.954100][ T3893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.965886][ T3893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.028083][ T3964] loop4: detected capacity change from 0 to 4096 [ 51.034537][ T3893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.085134][ T3964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.098410][ T3893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.124130][ T3893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.191652][ T3893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.221988][ T3951] loop3: detected capacity change from 0 to 2048 [ 51.250719][ T3893] hsr_slave_0: entered promiscuous mode [ 51.256900][ T3893] hsr_slave_1: entered promiscuous mode [ 51.262785][ T3893] debugfs: 'hsr0' already exists in 'hsr' [ 51.268834][ T3893] Cannot create hsr debugfs directory [ 51.320803][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.379739][ T2626] bridge_slave_1: left allmulticast mode [ 51.388719][ T2626] bridge_slave_1: left promiscuous mode [ 51.394621][ T2626] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.402648][ T2626] bridge_slave_0: left allmulticast mode [ 51.410136][ T2626] bridge_slave_0: left promiscuous mode [ 51.418053][ T2626] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.528803][ T3951] Alternate GPT is invalid, using primary GPT. [ 51.548912][ T3951] loop3: p2 p3 p7 [ 51.550191][ T2626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.561243][ T3974] __nla_validate_parse: 1 callbacks suppressed [ 51.561280][ T3974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 51.577831][ T2626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.591096][ T2626] bond0 (unregistering): Released all slaves [ 51.735221][ T3893] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 51.777440][ T2626] hsr_slave_0: left promiscuous mode [ 51.783208][ T2626] hsr_slave_1: left promiscuous mode [ 51.797832][ T2626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.806084][ T2626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.813658][ T2626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.826806][ T2626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.844931][ T2626] veth1_macvtap: left promiscuous mode [ 51.850596][ T2626] veth0_macvtap: left promiscuous mode [ 51.858452][ T2626] veth1_vlan: left promiscuous mode [ 51.864139][ T2626] veth0_vlan: left promiscuous mode [ 51.975326][ T2626] team0 (unregistering): Port device team_slave_1 removed [ 51.985204][ T2626] team0 (unregistering): Port device team_slave_0 removed [ 52.033895][ T3893] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 52.043125][ T3893] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 52.052970][ T3893] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.106732][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 52.244476][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 52.276852][ T4018] netlink: 'syz.1.155': attribute type 16 has an invalid length. [ 52.284659][ T4018] netlink: 'syz.1.155': attribute type 17 has an invalid length. [ 52.329990][ T4018] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.450072][ T3893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.486478][ T4023] netlink: 40 bytes leftover after parsing attributes in process `syz.3.156'. [ 52.529495][ T3893] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.568161][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.575310][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.648276][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.655479][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.930347][ T3893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.217198][ T4065] mmap: syz.3.157 (4065) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.238953][ T4066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 53.450721][ T3893] veth0_vlan: entered promiscuous mode [ 53.487603][ T3893] veth1_vlan: entered promiscuous mode [ 53.553166][ T3893] veth0_macvtap: entered promiscuous mode [ 53.603043][ T3893] veth1_macvtap: entered promiscuous mode [ 53.620907][ T3893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.632262][ T3893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.658633][ T83] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.684072][ T4097] loop1: detected capacity change from 0 to 512 [ 53.694389][ T4094] syz_tun: entered allmulticast mode [ 53.701306][ T4097] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.713614][ T4094] loop0: detected capacity change from 0 to 256 [ 53.714476][ T2626] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.731304][ T2626] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.740791][ T4097] EXT4-fs (loop1): 1 truncate cleaned up [ 53.775216][ T4097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.799976][ T2626] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.901368][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 53.901384][ T28] audit: type=1400 audit(1771733807.829:943): avc: denied { connect } for pid=4096 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.944616][ T4110] loop4: detected capacity change from 0 to 512 [ 53.962271][ T28] audit: type=1400 audit(1771733807.889:944): avc: denied { mounton } for pid=4109 comm="syz.4.168" path="/41/file0/file1" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.978606][ T3318] EXT4-fs error (device loop1): ext4_lookup:1785: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 53.991117][ T4093] syz_tun: left allmulticast mode [ 54.003374][ T3318] EXT4-fs (loop1): Remounting filesystem read-only [ 54.073182][ T28] audit: type=1400 audit(1771733807.949:945): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.096450][ T4119] netlink: 64 bytes leftover after parsing attributes in process `syz.4.171'. [ 54.126840][ T28] audit: type=1400 audit(1771733807.959:946): avc: denied { connect } for pid=4103 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.156206][ T4112] syz.5.169 (4112) used obsolete PPPIOCDETACH ioctl [ 54.161665][ T28] audit: type=1400 audit(1771733808.029:947): avc: denied { ioctl } for pid=4113 comm="syz.4.171" path="socket:[6921]" dev="sockfs" ino=6921 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.246901][ T28] audit: type=1400 audit(1771733808.179:948): avc: denied { connect } for pid=4130 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.269794][ T4107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.313925][ T28] audit: type=1400 audit(1771733808.199:949): avc: denied { name_connect } for pid=4130 comm="syz.4.177" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 54.352771][ T4134] netlink: 'syz.4.179': attribute type 3 has an invalid length. [ 54.372014][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.393316][ T4134] netlink: 32 bytes leftover after parsing attributes in process `syz.4.179'. [ 54.412699][ T4137] netlink: 'syz.5.181': attribute type 4 has an invalid length. [ 54.430633][ T28] audit: type=1400 audit(1771733808.359:950): avc: denied { read } for pid=4138 comm="syz.4.182" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 54.470094][ T28] audit: type=1400 audit(1771733808.359:951): avc: denied { open } for pid=4138 comm="syz.4.182" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 54.507940][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.532886][ T4149] netlink: 64 bytes leftover after parsing attributes in process `syz.3.184'. [ 54.542887][ T28] audit: type=1400 audit(1771733808.389:952): avc: denied { ioctl } for pid=4138 comm="syz.4.182" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 54.593460][ T4149] lo speed is unknown, defaulting to 1000 [ 54.599596][ T4149] lo speed is unknown, defaulting to 1000 [ 54.605888][ T4149] lo speed is unknown, defaulting to 1000 [ 54.612228][ T4149] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 54.619849][ T4149] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 54.636484][ T4141] netlink: 'syz.5.181': attribute type 4 has an invalid length. [ 54.671363][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.705712][ T4149] lo speed is unknown, defaulting to 1000 [ 54.731432][ T4149] lo speed is unknown, defaulting to 1000 [ 54.755483][ T4149] lo speed is unknown, defaulting to 1000 [ 54.780442][ T4149] lo speed is unknown, defaulting to 1000 [ 54.801996][ T4149] lo speed is unknown, defaulting to 1000 [ 54.857953][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.979168][ T4166] loop3: detected capacity change from 0 to 512 [ 55.017568][ T4166] EXT4-fs (loop3): 1 truncate cleaned up [ 55.027035][ T4166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.164188][ T50] bridge_slave_0: left allmulticast mode [ 55.183966][ T50] bridge_slave_0: left promiscuous mode [ 55.213675][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.476351][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.500693][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.517626][ T50] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 55.534392][ T50] bond0 (unregistering): Released all slaves [ 55.603562][ T4140] chnl_net:caif_netlink_parms(): no params data found [ 55.647873][ T50] tipc: Left network mode [ 55.792376][ T50] hsr_slave_0: left promiscuous mode [ 55.817885][ T50] hsr_slave_1: left promiscuous mode [ 55.844017][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.883848][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.956340][ T4225] loop4: detected capacity change from 0 to 256 [ 55.963154][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.997880][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.036599][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.076793][ T50] veth1_macvtap: left promiscuous mode [ 56.082391][ T50] veth0_macvtap: left promiscuous mode [ 56.088033][ T50] veth1_vlan: left promiscuous mode [ 56.093265][ T50] veth0_vlan: left promiscuous mode [ 56.144023][ T4231] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 56.178420][ T4231] xt_policy: output policy not valid in PREROUTING and INPUT [ 56.238559][ T50] team0 (unregistering): Port device team_slave_1 removed [ 56.251980][ T50] team0 (unregistering): Port device team_slave_0 removed [ 56.330835][ T4140] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.339740][ T4140] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.347099][ T4140] bridge_slave_0: entered allmulticast mode [ 56.353625][ T4140] bridge_slave_0: entered promiscuous mode [ 56.362279][ T4140] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.369526][ T4140] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.376906][ T4140] bridge_slave_1: entered allmulticast mode [ 56.383421][ T4140] bridge_slave_1: entered promiscuous mode [ 56.508954][ T4140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.546371][ T4246] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 56.581969][ T4140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.616016][ T4140] team0: Port device team_slave_0 added [ 56.622959][ T4140] team0: Port device team_slave_1 added [ 56.648459][ T4140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.656094][ T4258] FAULT_INJECTION: forcing a failure. [ 56.656094][ T4258] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.669264][ T4140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.697067][ T4258] CPU: 0 UID: 0 PID: 4258 Comm: syz.3.202 Not tainted syzkaller #0 PREEMPT(full) [ 56.697101][ T4258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 56.697182][ T4258] Call Trace: [ 56.697190][ T4258] [ 56.697200][ T4258] __dump_stack+0x1d/0x30 [ 56.697268][ T4258] dump_stack_lvl+0x95/0xd0 [ 56.697299][ T4258] dump_stack+0x15/0x1b [ 56.697328][ T4258] should_fail_ex+0x263/0x280 [ 56.697357][ T4258] should_fail+0xb/0x20 [ 56.697442][ T4258] should_fail_usercopy+0x1a/0x20 [ 56.697472][ T4258] _copy_from_iter+0xcf/0xea0 [ 56.697504][ T4258] ? alloc_pages_mpol+0x217/0x260 [ 56.697587][ T4258] copy_page_from_iter+0x178/0x2a0 [ 56.697615][ T4258] tun_get_user+0xbbd/0x27c0 [ 56.697736][ T4258] ? ref_tracker_alloc+0x1eb/0x2f0 [ 56.697771][ T4258] tun_chr_write_iter+0x15e/0x210 [ 56.697817][ T4258] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 56.697955][ T4258] vfs_write+0x5a6/0x9f0 [ 56.698062][ T4258] ksys_write+0xdc/0x1a0 [ 56.698104][ T4258] __x64_sys_write+0x40/0x50 [ 56.698211][ T4258] x64_sys_call+0x27e1/0x3020 [ 56.698246][ T4258] do_syscall_64+0x12c/0x370 [ 56.698362][ T4258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.698388][ T4258] RIP: 0033:0x7f96b775cece [ 56.698434][ T4258] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 56.698456][ T4258] RSP: 002b:00007f96b61eefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.698479][ T4258] RAX: ffffffffffffffda RBX: 00007f96b61ef6c0 RCX: 00007f96b775cece [ 56.698493][ T4258] RDX: 00000000000000ce RSI: 0000200000000b00 RDI: 00000000000000c8 [ 56.698506][ T4258] RBP: 00007f96b61ef090 R08: 0000000000000000 R09: 0000000000000000 [ 56.698521][ T4258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.698561][ T4258] R13: 00007f96b7a16038 R14: 00007f96b7a15fa0 R15: 00007ffc0ffcc978 [ 56.698586][ T4258] [ 56.698627][ T4140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.904674][ T4140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.911640][ T4140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.946225][ T4140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.981942][ T4274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 57.007007][ T4140] hsr_slave_0: entered promiscuous mode [ 57.013219][ T4140] hsr_slave_1: entered promiscuous mode [ 57.039475][ T4274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4274 comm=syz.3.206 [ 57.081714][ T4281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.208'. [ 57.094438][ T4274] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 57.180248][ T4296] netlink: 40 bytes leftover after parsing attributes in process `syz.0.212'. [ 57.245590][ T4140] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 57.289672][ T4140] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 57.312193][ T4140] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 57.335094][ T4140] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 57.503025][ T4312] loop3: detected capacity change from 0 to 1024 [ 57.564228][ T4311] loop5: detected capacity change from 0 to 4096 [ 57.637482][ T4305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.707869][ T4311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.735197][ T4312] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 57.814759][ T4312] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.858804][ T4312] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 57.875087][ T3893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.877392][ T4312] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.905419][ T4312] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.214: Inode bitmap for bg 0 marked uninitialized [ 57.912633][ T4140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.928767][ T4312] loop3: lost filesystem error report for type 5 error -117 [ 57.933907][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 57.947685][ C0] EXT4-fs (loop3): initial error at time 1771733811: ext4_read_inode_bitmap:167 [ 57.956776][ C0] EXT4-fs (loop3): last error at time 1771733811: ext4_read_inode_bitmap:167 [ 57.969512][ T4140] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.976256][ T4312] EXT4-fs (loop3): Remounting filesystem read-only [ 57.983800][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.990886][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.005975][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.013173][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.033672][ T4140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.044311][ T4140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.056691][ T4312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.109345][ T4328] loop5: detected capacity change from 0 to 128 [ 58.131741][ T4328] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.145243][ T4328] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.169300][ T4330] FAULT_INJECTION: forcing a failure. [ 58.169300][ T4330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.182576][ T4330] CPU: 1 UID: 0 PID: 4330 Comm: syz.4.217 Not tainted syzkaller #0 PREEMPT(full) [ 58.182610][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 58.182622][ T4330] Call Trace: [ 58.182632][ T4330] [ 58.182639][ T4330] __dump_stack+0x1d/0x30 [ 58.182666][ T4330] dump_stack_lvl+0x95/0xd0 [ 58.182687][ T4330] dump_stack+0x15/0x1b [ 58.182771][ T4330] should_fail_ex+0x263/0x280 [ 58.182798][ T4330] should_fail+0xb/0x20 [ 58.182814][ T4330] should_fail_usercopy+0x1a/0x20 [ 58.182915][ T4330] _copy_to_user+0x20/0xa0 [ 58.182939][ T4330] simple_read_from_buffer+0xb5/0x130 [ 58.182963][ T4330] proc_fail_nth_read+0x10e/0x150 [ 58.183041][ T4330] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.183083][ T4330] vfs_read+0x1ab/0x7f0 [ 58.183123][ T4330] ? __rcu_read_unlock+0x4e/0x70 [ 58.183142][ T4330] ? __fget_files+0x184/0x1c0 [ 58.183166][ T4330] ? mutex_lock+0x57/0x90 [ 58.183197][ T4330] ksys_read+0xdc/0x1a0 [ 58.183252][ T4330] __x64_sys_read+0x40/0x50 [ 58.183280][ T4330] x64_sys_call+0x2886/0x3020 [ 58.183317][ T4330] do_syscall_64+0x12c/0x370 [ 58.183359][ T4330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.183385][ T4330] RIP: 0033:0x7ff0b08bcece [ 58.183400][ T4330] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 58.183416][ T4330] RSP: 002b:00007ff0af34efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.183433][ T4330] RAX: ffffffffffffffda RBX: 00007ff0af34f6c0 RCX: 00007ff0b08bcece [ 58.183513][ T4330] RDX: 000000000000000f RSI: 00007ff0af34f0a0 RDI: 0000000000000004 [ 58.183573][ T4330] RBP: 00007ff0af34f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.183585][ T4330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.183596][ T4330] R13: 00007ff0b0b76038 R14: 00007ff0b0b75fa0 R15: 00007ffc3829fe68 [ 58.183614][ T4330] [ 58.380127][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.434696][ T4337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.219'. [ 58.447348][ T4334] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 58.454800][ T4337] FAULT_INJECTION: forcing a failure. [ 58.454800][ T4337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.514860][ T4337] CPU: 1 UID: 0 PID: 4337 Comm: syz.4.219 Not tainted syzkaller #0 PREEMPT(full) [ 58.514891][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 58.514953][ T4337] Call Trace: [ 58.514960][ T4337] [ 58.514969][ T4337] __dump_stack+0x1d/0x30 [ 58.515007][ T4337] dump_stack_lvl+0x95/0xd0 [ 58.515049][ T4337] dump_stack+0x15/0x1b [ 58.515156][ T4337] should_fail_ex+0x263/0x280 [ 58.515182][ T4337] should_fail+0xb/0x20 [ 58.515207][ T4337] should_fail_usercopy+0x1a/0x20 [ 58.515239][ T4337] _copy_to_user+0x20/0xa0 [ 58.515329][ T4337] simple_read_from_buffer+0xb5/0x130 [ 58.515358][ T4337] proc_fail_nth_read+0x10e/0x150 [ 58.515398][ T4337] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.515507][ T4337] vfs_read+0x1ab/0x7f0 [ 58.515544][ T4337] ? __rcu_read_unlock+0x4e/0x70 [ 58.515635][ T4337] ? __fget_files+0x184/0x1c0 [ 58.515662][ T4337] ? mutex_lock+0x57/0x90 [ 58.515693][ T4337] ksys_read+0xdc/0x1a0 [ 58.515730][ T4337] __x64_sys_read+0x40/0x50 [ 58.515853][ T4337] x64_sys_call+0x2886/0x3020 [ 58.515888][ T4337] do_syscall_64+0x12c/0x370 [ 58.515930][ T4337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.515981][ T4337] RIP: 0033:0x7ff0b08bcece [ 58.515998][ T4337] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 58.516019][ T4337] RSP: 002b:00007ff0af34efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.516122][ T4337] RAX: ffffffffffffffda RBX: 00007ff0af34f6c0 RCX: 00007ff0b08bcece [ 58.516176][ T4337] RDX: 000000000000000f RSI: 00007ff0af34f0a0 RDI: 0000000000000003 [ 58.516191][ T4337] RBP: 00007ff0af34f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.516249][ T4337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.516280][ T4337] R13: 00007ff0b0b76038 R14: 00007ff0b0b75fa0 R15: 00007ffc3829fe68 [ 58.516302][ T4337] [ 58.517299][ T3893] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.686510][ T4351] netlink: 'syz.0.220': attribute type 1 has an invalid length. [ 58.759424][ T4140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.834478][ T4365] netlink: 40 bytes leftover after parsing attributes in process `syz.3.225'. [ 58.844475][ T4367] capability: warning: `syz.4.223' uses 32-bit capabilities (legacy support in use) [ 58.866122][ T4369] loop5: detected capacity change from 0 to 512 [ 58.896766][ T4369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.923847][ T4369] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.985312][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 58.985327][ T28] audit: type=1400 audit(1771733812.919:989): avc: denied { read append open } for pid=4368 comm="syz.5.226" path="/14/file0/memory.events.local" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.021587][ T4374] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 59.035759][ T4382] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 59.058492][ T4382] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 59.074414][ T28] audit: type=1400 audit(1771733812.949:990): avc: denied { mac_admin } for pid=4362 comm="syz.3.225" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.120388][ T28] audit: type=1400 audit(1771733812.969:991): avc: denied { firmware_load } for pid=4380 comm="syz.4.228" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 59.145587][ T28] audit: type=1400 audit(1771733812.979:992): avc: denied { relabelto } for pid=4362 comm="syz.3.225" name="32" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 59.147893][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.171576][ T28] audit: type=1400 audit(1771733812.979:993): avc: denied { associate } for pid=4362 comm="syz.3.225" name="32" dev="tmpfs" ino=186 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 59.178800][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.218554][ T28] audit: type=1400 audit(1771733813.149:994): avc: denied { write } for pid=4368 comm="syz.5.226" path="/14/file0/bus" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.269223][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.279897][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.280367][ T28] audit: type=1400 audit(1771733813.209:995): avc: denied { ioctl } for pid=4368 comm="syz.5.226" path="/14/file0/bus" dev="loop5" ino=19 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.354313][ T30] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.363231][ T30] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.391600][ T30] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.404296][ T30] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.441591][ T4140] veth0_vlan: entered promiscuous mode [ 59.449840][ T4140] veth1_vlan: entered promiscuous mode [ 59.468508][ T4140] veth0_macvtap: entered promiscuous mode [ 59.477525][ T4140] veth1_macvtap: entered promiscuous mode [ 59.491021][ T4140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.500978][ T3893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.506940][ T4140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.522042][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.536895][ T30] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.553155][ T30] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.583223][ T30] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.592547][ T4392] netlink: 68 bytes leftover after parsing attributes in process `syz.5.229'. [ 59.601916][ T4392] netlink: 48 bytes leftover after parsing attributes in process `syz.5.229'. [ 59.626414][ T4392] netlink: 'syz.5.229': attribute type 2 has an invalid length. [ 59.656489][ T4395] netlink: 64 bytes leftover after parsing attributes in process `syz.6.180'. [ 59.677082][ T4395] FAULT_INJECTION: forcing a failure. [ 59.677082][ T4395] name failslab, interval 1, probability 0, space 0, times 0 [ 59.691340][ T4395] CPU: 1 UID: 0 PID: 4395 Comm: syz.6.180 Not tainted syzkaller #0 PREEMPT(full) [ 59.691362][ T4395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 59.691373][ T4395] Call Trace: [ 59.691378][ T4395] [ 59.691383][ T4395] __dump_stack+0x1d/0x30 [ 59.691410][ T4395] dump_stack_lvl+0x95/0xd0 [ 59.691442][ T4395] dump_stack+0x15/0x1b [ 59.691544][ T4395] should_fail_ex+0x263/0x280 [ 59.691562][ T4395] should_failslab+0x8c/0xb0 [ 59.691581][ T4395] __kmalloc_noprof+0xb8/0x4e0 [ 59.691603][ T4395] ? alloc_port_data+0xc0/0x230 [ 59.691639][ T4395] ? __pfx_pm_suspend_timer_fn+0x10/0x10 [ 59.691674][ T4395] alloc_port_data+0xc0/0x230 [ 59.691700][ T4395] ib_device_set_netdev+0xb1/0x450 [ 59.691728][ T4395] ? device_initialize+0x1f0/0x200 [ 59.691805][ T4395] ? mutex_init_generic+0x4c/0x60 [ 59.691822][ T4395] ? ib_set_device_ops+0x2d69/0x2dd0 [ 59.691905][ T4395] siw_newlink+0x32c/0x680 [ 59.691930][ T4395] nldev_newlink+0x3a8/0x430 [ 59.692072][ T4395] ? __pfx_nldev_newlink+0x10/0x10 [ 59.692097][ T4395] rdma_nl_rcv+0x477/0x5b0 [ 59.692205][ T4395] ? selinux_nlmsg_lookup+0x99/0x890 [ 59.692244][ T4395] netlink_unicast+0x5c0/0x690 [ 59.692318][ T4395] netlink_sendmsg+0x5c8/0x6f0 [ 59.692351][ T4395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.692381][ T4395] ____sys_sendmsg+0x5af/0x600 [ 59.692474][ T4395] ___sys_sendmsg+0x195/0x1e0 [ 59.692558][ T4395] __x64_sys_sendmsg+0xd4/0x160 [ 59.692593][ T4395] x64_sys_call+0x194c/0x3020 [ 59.692666][ T4395] do_syscall_64+0x12c/0x370 [ 59.692704][ T4395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.692728][ T4395] RIP: 0033:0x7f31ac37c629 [ 59.692745][ T4395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.692830][ T4395] RSP: 002b:00007f31aadd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.692849][ T4395] RAX: ffffffffffffffda RBX: 00007f31ac5f5fa0 RCX: 00007f31ac37c629 [ 59.692944][ T4395] RDX: 0000000000000810 RSI: 0000200000000240 RDI: 0000000000000008 [ 59.692955][ T4395] RBP: 00007f31aadd7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.692969][ T4395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.692983][ T4395] R13: 00007f31ac5f6038 R14: 00007f31ac5f5fa0 R15: 00007ffef5df27d8 [ 59.693005][ T4395] [ 59.850136][ T28] audit: type=1400 audit(1771733813.779:996): avc: denied { setopt } for pid=4401 comm="syz.5.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.885542][ T4402] IPVS: stopping master sync thread 4403 ... [ 59.951330][ T4403] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 59.967271][ T4402] loop5: detected capacity change from 0 to 512 [ 59.985781][ T4402] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.008665][ T4402] EXT4-fs (loop5): filesystem is read-only [ 60.029241][ T28] audit: type=1400 audit(1771733813.949:997): avc: denied { remove_name } for pid=3314 comm="syz-executor" name="pids.events" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 60.057257][ T4402] netlink: 72 bytes leftover after parsing attributes in process `syz.5.232'. [ 60.079719][ T28] audit: type=1400 audit(1771733813.949:998): avc: denied { rmdir } for pid=3314 comm="syz-executor" name="32" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 60.409316][ T4431] loop6: detected capacity change from 0 to 4096 [ 60.441976][ T4431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.494373][ T4140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.516460][ T4443] netlink: 56 bytes leftover after parsing attributes in process `syz.3.246'. [ 60.593193][ T4453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.624206][ T4453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.850296][ T4465] FAULT_INJECTION: forcing a failure. [ 60.850296][ T4465] name failslab, interval 1, probability 0, space 0, times 0 [ 60.864724][ T4465] CPU: 1 UID: 0 PID: 4465 Comm: syz.3.255 Not tainted syzkaller #0 PREEMPT(full) [ 60.864750][ T4465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 60.864760][ T4465] Call Trace: [ 60.864836][ T4465] [ 60.864896][ T4465] __dump_stack+0x1d/0x30 [ 60.864925][ T4465] dump_stack_lvl+0x95/0xd0 [ 60.865001][ T4465] dump_stack+0x15/0x1b [ 60.865025][ T4465] should_fail_ex+0x263/0x280 [ 60.865049][ T4465] ? hash_ipmac_create+0x21b/0x740 [ 60.865070][ T4465] should_failslab+0x8c/0xb0 [ 60.865165][ T4465] __kmalloc_cache_noprof+0x5f/0x410 [ 60.865186][ T4465] hash_ipmac_create+0x21b/0x740 [ 60.865243][ T4465] ? __nla_parse+0x40/0x60 [ 60.865268][ T4465] ? __pfx_hash_ipmac_create+0x10/0x10 [ 60.865322][ T4465] ip_set_create+0x3cf/0x970 [ 60.865361][ T4465] ? __nla_parse+0x40/0x60 [ 60.865381][ T4465] nfnetlink_rcv_msg+0x509/0x5d0 [ 60.865503][ T4465] netlink_rcv_skb+0x123/0x220 [ 60.865531][ T4465] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 60.865555][ T4465] nfnetlink_rcv+0x167/0x1720 [ 60.865574][ T4465] ? xas_load+0x413/0x430 [ 60.865611][ T4465] ? xas_load+0x413/0x430 [ 60.865641][ T4465] ? __rcu_read_unlock+0x4e/0x70 [ 60.865663][ T4465] ? xa_load+0xb1/0xe0 [ 60.865680][ T4465] ? __account_obj_stock+0x211/0x350 [ 60.865720][ T4465] ? strlen+0x19/0x40 [ 60.865735][ T4465] ? perf_trace_kmem_cache_alloc+0x68/0x1c0 [ 60.865774][ T4465] ? security_inode_alloc+0x37/0x100 [ 60.865810][ T4465] ? __rcu_read_unlock+0x4e/0x70 [ 60.865829][ T4465] ? avc_has_perm_noaudit+0xab/0x130 [ 60.865849][ T4465] ? _raw_spin_lock_bh+0x56/0xb0 [ 60.865867][ T4465] ? strlen+0x19/0x40 [ 60.865914][ T4465] ? selinux_nlmsg_lookup+0x99/0x890 [ 60.865948][ T4465] ? __rcu_read_unlock+0x33/0x70 [ 60.866036][ T4465] ? __netlink_lookup+0x276/0x2b0 [ 60.866071][ T4465] netlink_unicast+0x5c0/0x690 [ 60.866167][ T4465] netlink_sendmsg+0x5c8/0x6f0 [ 60.866193][ T4465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.866279][ T4465] ____sys_sendmsg+0x5af/0x600 [ 60.866368][ T4465] ___sys_sendmsg+0x195/0x1e0 [ 60.866409][ T4465] __x64_sys_sendmsg+0xd4/0x160 [ 60.866436][ T4465] x64_sys_call+0x194c/0x3020 [ 60.866518][ T4465] do_syscall_64+0x12c/0x370 [ 60.866551][ T4465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.866575][ T4465] RIP: 0033:0x7f96b779c629 [ 60.866657][ T4465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.866676][ T4465] RSP: 002b:00007f96b61ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.866693][ T4465] RAX: ffffffffffffffda RBX: 00007f96b7a15fa0 RCX: 00007f96b779c629 [ 60.866705][ T4465] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 60.866715][ T4465] RBP: 00007f96b61ef090 R08: 0000000000000000 R09: 0000000000000000 [ 60.866725][ T4465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.866760][ T4465] R13: 00007f96b7a16038 R14: 00007f96b7a15fa0 R15: 00007ffc0ffcc978 [ 60.866777][ T4465] [ 61.408811][ T4476] loop3: detected capacity change from 0 to 128 [ 61.428561][ T4476] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 61.441322][ T4476] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.144428][ T4499] loop6: detected capacity change from 0 to 512 [ 62.154333][ T4499] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.206032][ T4502] __nla_validate_parse: 2 callbacks suppressed [ 62.206050][ T4502] netlink: 88 bytes leftover after parsing attributes in process `syz.4.267'. [ 62.228861][ T4499] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 62.237150][ T4499] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 62.241073][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 62.248548][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.281822][ T4499] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 62.304948][ T4499] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 62.321336][ T4507] netlink: 'syz.6.266': attribute type 4 has an invalid length. [ 62.329819][ T4499] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 62.338041][ T4499] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 62.494167][ T4499] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 62.516569][ T4499] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 62.562008][ T4499] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 62.605369][ T4499] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 62.705346][ T2626] kworker/u8:7: attempt to access beyond end of device [ 62.705346][ T2626] loop6: rw=1, sector=17179852714, nr_sectors = 56 limit=512 [ 62.787724][ T4521] loop6: detected capacity change from 0 to 4096 [ 62.799837][ T4521] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.845103][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 62.871762][ T4140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.943682][ T4531] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 63.493251][ T4581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4581 comm=syz.5.290 [ 63.628923][ T4584] loop3: detected capacity change from 0 to 1024 [ 63.636465][ T4584] EXT4-fs: Ignoring removed nobh option [ 63.642464][ T4584] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.669583][ T4584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.709149][ T4585] loop5: detected capacity change from 0 to 1024 [ 63.718944][ T4585] EXT4-fs: Ignoring removed bh option [ 63.730568][ T4585] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.744100][ T4588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.288'. [ 63.833501][ T4590] netlink: 12 bytes leftover after parsing attributes in process `syz.6.291'. [ 63.882975][ T4585] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.998485][ T4585] EXT4-fs (loop5): orphan cleanup on readonly fs [ 64.053911][ T4585] EXT4-fs error (device loop5): ext4_quota_enable:7192: comm syz.5.290: inode #2304: comm syz.5.290: iget: illegal inode # [ 64.144658][ T4585] loop5: lost filesystem error report for type 5 error -117 [ 64.144963][ T4585] EXT4-fs error (device loop5): ext4_quota_enable:7195: comm syz.5.290: Bad quota inode: 2304, type: 2 [ 64.163459][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 64.163479][ C1] EXT4-fs (loop5): initial error at time 1771733818: ext4_quota_enable:7192 [ 64.163504][ C1] EXT4-fs (loop5): last error at time 1771733818: ext4_quota_enable:7192 [ 64.442822][ T4585] loop5: lost filesystem error report for type 5 error -117 [ 64.443730][ T4585] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 64.624976][ T4585] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 64.641281][ T4585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.839563][ T3893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.214971][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.271559][ T4638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 65.338821][ T4638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.304'. [ 65.428425][ T4647] FAULT_INJECTION: forcing a failure. [ 65.428425][ T4647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.441992][ T4647] CPU: 0 UID: 0 PID: 4647 Comm: syz.3.305 Not tainted syzkaller #0 PREEMPT(full) [ 65.442033][ T4647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 65.442048][ T4647] Call Trace: [ 65.442056][ T4647] [ 65.442065][ T4647] __dump_stack+0x1d/0x30 [ 65.442119][ T4647] dump_stack_lvl+0x95/0xd0 [ 65.442143][ T4647] dump_stack+0x15/0x1b [ 65.442162][ T4647] should_fail_ex+0x263/0x280 [ 65.442182][ T4647] should_fail+0xb/0x20 [ 65.442198][ T4647] should_fail_usercopy+0x1a/0x20 [ 65.442284][ T4647] _copy_from_user+0x1c/0xb0 [ 65.442363][ T4647] ___sys_sendmsg+0xc1/0x1e0 [ 65.442403][ T4647] __x64_sys_sendmsg+0xd4/0x160 [ 65.442514][ T4647] x64_sys_call+0x194c/0x3020 [ 65.442544][ T4647] do_syscall_64+0x12c/0x370 [ 65.442609][ T4647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.442632][ T4647] RIP: 0033:0x7f96b779c629 [ 65.442645][ T4647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.442662][ T4647] RSP: 002b:00007f96b61ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.442737][ T4647] RAX: ffffffffffffffda RBX: 00007f96b7a15fa0 RCX: 00007f96b779c629 [ 65.442752][ T4647] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 65.442763][ T4647] RBP: 00007f96b61ef090 R08: 0000000000000000 R09: 0000000000000000 [ 65.442775][ T4647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.442789][ T4647] R13: 00007f96b7a16038 R14: 00007f96b7a15fa0 R15: 00007ffc0ffcc978 [ 65.442884][ T4647] [ 65.737556][ T4651] loop4: detected capacity change from 0 to 1024 [ 65.794390][ T4651] EXT4-fs: Ignoring removed orlov option [ 65.800252][ T4651] EXT4-fs: Ignoring removed nobh option [ 65.835747][ T4666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.309'. [ 65.847670][ T4662] loop6: detected capacity change from 0 to 1024 [ 65.854412][ T4662] ======================================================= [ 65.854412][ T4662] WARNING: The mand mount option has been deprecated and [ 65.854412][ T4662] and is ignored by this kernel. Remove the mand [ 65.854412][ T4662] option from the mount to silence this warning. [ 65.854412][ T4662] ======================================================= [ 65.857195][ T4651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.889695][ T4662] EXT4-fs: Ignoring removed orlov option [ 65.971823][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 65.971835][ T28] audit: type=1400 audit(1771733819.899:1040): avc: denied { ioctl } for pid=4650 comm="syz.4.306" path="/76/file1/file1" dev="loop4" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.005845][ T4662] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.031379][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.041614][ T28] audit: type=1400 audit(1771733819.969:1041): avc: denied { watch watch_reads } for pid=4660 comm="syz.6.310" path="/20/file1" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.092925][ T4140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.261023][ T4698] loop6: detected capacity change from 0 to 128 [ 66.276623][ T4701] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4701 comm=syz.5.319 [ 66.322038][ T4701] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4701 comm=syz.5.319 [ 66.442606][ T4701] netlink: 2 bytes leftover after parsing attributes in process `syz.5.319'. [ 66.474020][ T4719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 66.789072][ T28] audit: type=1400 audit(1771733820.719:1042): avc: denied { shutdown } for pid=4727 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.918358][ T28] audit: type=1326 audit(1771733820.739:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b779c629 code=0x7ffc0000 [ 66.956900][ T28] audit: type=1326 audit(1771733820.739:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b779c629 code=0x7ffc0000 [ 66.980857][ T28] audit: type=1326 audit(1771733820.739:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96b779c629 code=0x7ffc0000 [ 67.025667][ T28] audit: type=1326 audit(1771733820.739:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b779c629 code=0x7ffc0000 [ 67.049380][ T28] audit: type=1326 audit(1771733820.739:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b779c629 code=0x7ffc0000 [ 67.073644][ T28] audit: type=1326 audit(1771733820.739:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96b779c629 code=0x7ffc0000 [ 67.097496][ T28] audit: type=1326 audit(1771733820.739:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b779c629 code=0x7ffc0000 [ 67.257433][ T4752] __nla_validate_parse: 1 callbacks suppressed [ 67.257465][ T4752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.329'. [ 67.352016][ T4753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.361167][ T4753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.494111][ T4762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.332'. [ 68.355902][ T4788] netlink: 'syz.3.341': attribute type 8 has an invalid length. [ 68.390095][ T4788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.341'. [ 68.406959][ T4790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'. [ 68.504907][ T4788] bond0: entered promiscuous mode [ 68.510835][ T4788] bond_slave_0: entered promiscuous mode [ 68.519847][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.521249][ T4788] bond_slave_1: entered promiscuous mode [ 68.533105][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.553993][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.562802][ T4788] gretap0: entered promiscuous mode [ 68.564707][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.570588][ T4788] hsr1: entered promiscuous mode [ 68.593968][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.624160][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.644246][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.651679][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.685767][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.693299][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.722051][ T4813] loop4: detected capacity change from 0 to 1024 [ 68.734170][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 68.792104][ T4813] EXT4-fs: Ignoring removed orlov option [ 68.811128][ T4813] EXT4-fs: Ignoring removed nobh option [ 68.859940][ T4813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.923263][ T4830] loop3: detected capacity change from 0 to 512 [ 68.952248][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.973142][ T4830] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.000611][ T4830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.028942][ T4833] loop5: detected capacity change from 0 to 8192 [ 69.030821][ T4830] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.074152][ T4839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.359'. [ 69.095702][ T4830] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.356: iget: bad i_size value: 2533274857506816 [ 69.120971][ T4842] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.356: iget: bad i_size value: 2533274857506816 [ 69.158967][ T4845] netlink: 84 bytes leftover after parsing attributes in process `syz.5.361'. [ 69.187827][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.281929][ T4856] loop5: detected capacity change from 0 to 512 [ 69.324129][ T4856] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 69.402142][ T4873] FAULT_INJECTION: forcing a failure. [ 69.402142][ T4873] name failslab, interval 1, probability 0, space 0, times 0 [ 69.415428][ T4873] CPU: 0 UID: 0 PID: 4873 Comm: syz.4.363 Not tainted syzkaller #0 PREEMPT(full) [ 69.415450][ T4873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.415464][ T4873] Call Trace: [ 69.415487][ T4873] [ 69.415495][ T4873] __dump_stack+0x1d/0x30 [ 69.415569][ T4873] dump_stack_lvl+0x95/0xd0 [ 69.415589][ T4873] dump_stack+0x15/0x1b [ 69.415614][ T4873] should_fail_ex+0x263/0x280 [ 69.415638][ T4873] should_failslab+0x8c/0xb0 [ 69.415672][ T4873] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 69.415691][ T4873] ? __d_alloc+0x37/0x340 [ 69.415721][ T4873] __d_alloc+0x37/0x340 [ 69.415774][ T4873] d_alloc_pseudo+0x1e/0x80 [ 69.415802][ T4873] alloc_file_pseudo+0x91/0x190 [ 69.415841][ T4873] anon_inode_getfd+0xbf/0x190 [ 69.415913][ T4873] bpf_enable_stats+0xc5/0x110 [ 69.415933][ T4873] __sys_bpf+0x609/0x7e0 [ 69.416025][ T4873] __x64_sys_bpf+0x41/0x50 [ 69.416135][ T4873] x64_sys_call+0x10cb/0x3020 [ 69.416165][ T4873] do_syscall_64+0x12c/0x370 [ 69.416198][ T4873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.416297][ T4873] RIP: 0033:0x7ff0b08fc629 [ 69.416314][ T4873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.416333][ T4873] RSP: 002b:00007ff0af30d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.416350][ T4873] RAX: ffffffffffffffda RBX: 00007ff0b0b76180 RCX: 00007ff0b08fc629 [ 69.416361][ T4873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000020 [ 69.416371][ T4873] RBP: 00007ff0af30d090 R08: 0000000000000000 R09: 0000000000000000 [ 69.416519][ T4873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.416532][ T4873] R13: 00007ff0b0b76218 R14: 00007ff0b0b76180 R15: 00007ffc3829fe68 [ 69.416554][ T4873] [ 69.732305][ T4856] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 69.904237][ T4856] EXT4-fs (loop5): 1 truncate cleaned up [ 69.973995][ T4856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.442807][ T4899] loop3: detected capacity change from 0 to 4096 [ 70.491039][ T4899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.520952][ T4906] netlink: 32 bytes leftover after parsing attributes in process `syz.6.371'. [ 70.544212][ T4906] netlink: 64 bytes leftover after parsing attributes in process `syz.6.371'. [ 71.102735][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.133732][ T4911] loop4: detected capacity change from 0 to 128 [ 71.143966][ T4911] FAT-fs (loop4): bogus logical sector size 2134 [ 71.150413][ T4911] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 71.206091][ T4911] FAT-fs (loop4): Can't find a valid FAT filesystem [ 71.215115][ T28] kauditd_printk_skb: 251 callbacks suppressed [ 71.215126][ T28] audit: type=1326 audit(1771733825.139:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4855 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe8aeecc629 code=0x7ffc0000 [ 71.265241][ T4921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'. [ 71.276320][ T4911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.374'. [ 71.290869][ T4911] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 71.313691][ T3893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.314979][ T28] audit: type=1400 audit(1771733825.199:1302): avc: denied { create } for pid=4915 comm="syz.6.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.342484][ T28] audit: type=1400 audit(1771733825.239:1303): avc: denied { create } for pid=4919 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.488961][ T28] audit: type=1400 audit(1771733825.419:1304): avc: denied { allowed } for pid=4931 comm="syz.6.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.730478][ T4954] loop4: detected capacity change from 0 to 4096 [ 71.771453][ T4954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.862048][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.042776][ T28] audit: type=1326 audit(1771733825.969:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b08fc629 code=0x7ffc0000 [ 72.102356][ T28] audit: type=1326 audit(1771733825.969:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b08fc629 code=0x7ffc0000 [ 72.172739][ T28] audit: type=1326 audit(1771733825.969:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff0b08fc629 code=0x7ffc0000 [ 72.374542][ T28] audit: type=1326 audit(1771733825.969:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b08fc629 code=0x7ffc0000 [ 72.437746][ T28] audit: type=1326 audit(1771733825.969:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7ff0b08fc629 code=0x7ffc0000 [ 72.513977][ T28] audit: type=1326 audit(1771733825.969:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b08fc629 code=0x7ffc0000 [ 72.714499][ T4985] loop6: detected capacity change from 0 to 512 [ 72.740126][ T4985] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.389: couldn't read orphan inode 26 (err -116) [ 72.790932][ T4985] loop6: lost filesystem error report for type 5 error -116 [ 72.791513][ T4985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.813992][ T4985] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.840675][ T4985] EXT4-fs (loop6): shut down requested (0) [ 72.908941][ T4140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.964327][ T4995] __nla_validate_parse: 3 callbacks suppressed [ 72.964340][ T4995] netlink: 4 bytes leftover after parsing attributes in process `syz.6.392'. [ 73.126214][ T5007] loop6: detected capacity change from 0 to 4096 [ 73.157574][ T5007] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.183213][ T5009] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 73.189851][ T5009] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 73.255132][ T4140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.266246][ T5009] vhci_hcd vhci_hcd.0: Device attached [ 73.393475][ T5009] loop4: detected capacity change from 0 to 128 [ 73.448245][ T5011] vhci_hcd: connection closed [ 73.448443][ T36] vhci_hcd vhci_hcd.4: stop threads [ 73.476685][ T36] vhci_hcd vhci_hcd.4: release socket [ 73.502421][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 73.508181][ T3388] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 73.877897][ T5042] loop6: detected capacity change from 0 to 512 [ 73.906517][ T5042] EXT4-fs (loop6): orphan cleanup on readonly fs [ 73.915103][ T5044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.923625][ T5044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.986972][ T5042] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.407: ea_inode with extended attributes [ 74.046792][ T5042] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 74.046995][ T5042] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.407: error while reading EA inode 11 err=-117 [ 74.056190][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 74.056225][ C0] EXT4-fs (loop6): initial error at time 1771733827: ext4_xattr_inode_iget:441: inode 11 [ 74.056266][ C0] EXT4-fs (loop6): last error at time 1771733827: ext4_xattr_inode_iget:441: inode 11 [ 74.103443][ T5042] loop6: lost filesystem error report for type 5 error -117 [ 74.103698][ T5042] EXT4-fs (loop6): 1 orphan inode deleted [ 74.120463][ T5042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.313451][ T5054] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5054 comm=syz.4.411 [ 74.459748][ T5055] loop4: detected capacity change from 0 to 1024 [ 74.515900][ T5055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.833700][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.891477][ T4140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.043036][ T5079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.419'. [ 75.066928][ T5077] loop6: detected capacity change from 0 to 2048 [ 75.075136][ T5077] EXT4-fs: Ignoring removed orlov option [ 75.096315][ T5077] EXT4-fs: Ignoring removed oldalloc option [ 75.103694][ T5077] EXT4-fs (loop6): filesystem too large to mount safely on this system [ 75.129938][ T5077] 9p: Bad value for 'rfdno' [ 75.162692][ T5077] xfrm0 speed is unknown, defaulting to 1000 [ 75.186290][ T5077] xfrm0 speed is unknown, defaulting to 1000 [ 75.194378][ T5077] xfrm0 speed is unknown, defaulting to 1000 [ 75.245374][ T5087] loop4: detected capacity change from 0 to 128 [ 75.322159][ T5096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.330991][ T5096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.550491][ T5101] bridge1: entered promiscuous mode [ 75.563941][ T5101] bridge1: entered allmulticast mode [ 75.806968][ T5113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'. [ 75.886054][ T5117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.434'. [ 75.921773][ T5077] infiniband syz0: set active [ 75.926638][ T3517] xfrm0 speed is unknown, defaulting to 1000 [ 75.932901][ T5077] infiniband syz0: added xfrm0 [ 75.953379][ T5077] RDS/IB: syz0: added [ 75.968825][ T5077] smc: adding ib device syz0 with port count 1 [ 75.975138][ T5077] smc: ib device syz0 port 1 has no pnetid [ 75.981346][ T3517] xfrm0 speed is unknown, defaulting to 1000 [ 75.987603][ T5077] xfrm0 speed is unknown, defaulting to 1000 [ 76.020332][ T5128] netlink: 16 bytes leftover after parsing attributes in process `syz.5.439'. [ 76.110073][ T5077] xfrm0 speed is unknown, defaulting to 1000 [ 76.203063][ T5133] loop3: detected capacity change from 0 to 512 [ 76.220440][ T5077] xfrm0 speed is unknown, defaulting to 1000 [ 76.301722][ T5077] xfrm0 speed is unknown, defaulting to 1000 [ 76.333258][ T5133] EXT4-fs: Ignoring removed nobh option [ 76.355242][ T5133] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.366559][ T5133] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.441: EA inode hash validation failed [ 76.379677][ T5133] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 76.509404][ T5138] loop5: detected capacity change from 0 to 128 [ 76.539803][ T5133] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.441: corrupted inode contents [ 76.573943][ T28] kauditd_printk_skb: 165 callbacks suppressed [ 76.574035][ T28] audit: type=1400 audit(1771733830.439:1476): avc: denied { ioctl } for pid=5134 comm="syz.5.442" path="socket:[10750]" dev="sockfs" ino=10750 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.617604][ T10] IPVS: starting estimator thread 0... [ 76.649492][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 76.657788][ T5138] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 76.671591][ T5138] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.720925][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 76.771447][ T5133] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.773091][ T5133] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.441: mark_inode_dirty error [ 76.782526][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 76.782603][ C0] EXT4-fs (loop3): initial error at time 1771733830: ext4_do_update_inode:5569: inode 15 [ 76.782825][ C0] EXT4-fs (loop3): last error at time 1771733830: ext4_do_update_inode:5569: inode 15 [ 76.821670][ T5140] IPVS: using max 2640 ests per chain, 132000 per kthread [ 76.852445][ T5077] xfrm0 speed is unknown, defaulting to 1000 [ 76.889964][ T5133] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.907814][ T5133] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.441: corrupted inode contents [ 76.934953][ T5133] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.961174][ T5133] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.441: mark_inode_dirty error [ 76.984184][ T5133] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.985130][ T5133] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.441: mark inode dirty (error -117) [ 77.009059][ T5133] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.009705][ T5133] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 77.031624][ T5133] EXT4-fs (loop3): 1 orphan inode deleted [ 77.059560][ T5133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.072702][ T28] audit: type=1400 audit(1771733830.999:1477): avc: denied { read } for pid=5145 comm="syz.6.444" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 77.101525][ T28] audit: type=1400 audit(1771733830.999:1478): avc: denied { open } for pid=5145 comm="syz.6.444" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 77.249057][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.278332][ T28] audit: type=1326 audit(1771733831.209:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ac37c629 code=0x7ffc0000 [ 77.327770][ T28] audit: type=1326 audit(1771733831.229:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31ac37c629 code=0x7ffc0000 [ 77.369431][ T5155] loop3: detected capacity change from 0 to 4096 [ 77.375929][ T28] audit: type=1326 audit(1771733831.229:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ac37c629 code=0x7ffc0000 [ 77.404899][ T5155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.443305][ T28] audit: type=1326 audit(1771733831.229:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f31ac37c629 code=0x7ffc0000 [ 77.448985][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.466926][ T28] audit: type=1326 audit(1771733831.229:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ac37c629 code=0x7ffc0000 [ 77.511087][ T28] audit: type=1326 audit(1771733831.229:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f31ac37c629 code=0x7ffc0000 [ 77.534470][ T28] audit: type=1326 audit(1771733831.229:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ac37c629 code=0x7ffc0000 [ 78.011942][ T5174] atomic_op ffff888122d3a928 conn xmit_atomic 0000000000000000 [ 78.020814][ T5174] netlink: 'syz.0.453': attribute type 21 has an invalid length. [ 78.363256][ T5189] loop6: detected capacity change from 0 to 4096 [ 78.378239][ T5189] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.433301][ T4140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.547253][ T5161] loop3: detected capacity change from 0 to 512 [ 78.570748][ T5161] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.583988][ T3580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.651424][ T3893] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.660561][ T3388] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 78.669119][ T5161] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 78.689455][ T5161] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.448: attempt to clear invalid blocks 2 len 1 [ 78.735085][ T5161] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 78.736352][ T5161] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, [ 78.746721][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 78.746760][ C0] EXT4-fs (loop3): initial error at time 1771733832: ext4_clear_blocks:876: inode 13 [ 78.747062][ C0] EXT4-fs (loop3): last error at time 1771733832: ext4_clear_blocks:876: inode 13 [ 78.759321][ T5201] loop5: detected capacity change from 0 to 512 [ 78.759782][ T5201] EXT4-fs: Ignoring removed bh option [ 78.766365][ T5161] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 78.844946][ T5201] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.461: dx entry: limit 0 != root limit 125 [ 78.857834][ T5161] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.448: invalid indirect mapped block 1819239214 (level 0) [ 78.873931][ T5201] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.461: Corrupt directory, running e2fsck is recommended [ 78.887905][ T5161] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 78.898124][ T5161] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.448: invalid indirect mapped block 1819239214 (level 1) [ 78.924154][ T5201] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 8: comm syz.5.461: lblock 11 mapped to illegal pblock 8 (length 1) [ 78.953918][ T5201] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 78.954102][ T5201] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 78.971297][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 78.971322][ C0] EXT4-fs (loop5): initial error at time 1771733832: ext4_map_blocks:776: inode 2: block 8 [ 78.971387][ C0] EXT4-fs (loop5): last error at time 1771733832: ext4_map_blocks:776: inode 2: block 8 [ 79.008791][ T5161] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.011967][ T5161] EXT4-fs (loop3): 1 truncate cleaned up [ 79.053727][ T5201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.089460][ T5205] loop4: detected capacity change from 0 to 8192 [ 79.103274][ T5161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.162084][ T5161] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work [ 79.196166][ T3893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.290391][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.508941][ T5219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 79.625724][ T5219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 79.875606][ T5227] loop3: detected capacity change from 0 to 512 [ 79.938149][ T5227] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.052557][ T5227] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.074448][ T5227] EXT4-fs error (device loop3): ext4_quota_enable:7188: comm syz.3.471: Bad quota inum: 2, type: 2 [ 80.114139][ T5227] loop3: lost filesystem error report for type 5 error -117 [ 80.117321][ T5227] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 80.124742][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 80.124757][ C0] EXT4-fs (loop3): last error at time 1771733834: ext4_quota_enable:7188 [ 80.257491][ T5227] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 80.282474][ T5227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.321606][ T5231] syzkaller0: entered promiscuous mode [ 80.344161][ T5231] syzkaller0: entered allmulticast mode [ 80.394885][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.518218][ T5235] netlink: 'syz.5.474': attribute type 15 has an invalid length. [ 80.554764][ T5235] netlink: 666 bytes leftover after parsing attributes in process `syz.5.474'. [ 81.235472][ T5265] loop6: detected capacity change from 0 to 764 [ 81.246618][ T5265] rock: directory entry would overflow storage [ 81.265895][ T5265] rock: sig=0x4654, size=5, remaining=4 [ 81.553147][ T5283] loop3: detected capacity change from 0 to 1024 [ 81.604479][ T5283] EXT4-fs: inline encryption not supported [ 81.610359][ T5283] EXT4-fs: Ignoring removed nobh option [ 81.664443][ T5283] EXT4-fs: Ignoring removed bh option [ 81.734402][ T5283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.794937][ T5283] audit_log_lost: 13 callbacks suppressed [ 81.794952][ T5283] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 81.849984][ T5283] audit: out of memory in audit_log_start [ 81.915436][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.999264][ T5295] geneve2: entered promiscuous mode [ 82.637860][ T5304] netlink: 60 bytes leftover after parsing attributes in process `syz.0.498'. [ 82.653959][ T5304] netlink: 60 bytes leftover after parsing attributes in process `syz.0.498'. [ 82.669762][ T5286] netlink: 'syz.4.493': attribute type 16 has an invalid length. [ 82.677873][ T5286] netlink: 'syz.4.493': attribute type 3 has an invalid length. [ 82.686651][ T5286] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.493'. [ 83.017999][ T5316] loop3: detected capacity change from 0 to 128 [ 83.034176][ T5316] msdos: Unknown parameter 'dotsKËodots' [ 83.053014][ T28] audit: type=1326 audit(1771733836.979:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b08fc629 code=0x7ffc0000 [ 83.108725][ T5316] loop3: detected capacity change from 0 to 512 [ 83.120994][ T28] audit: type=1326 audit(1771733837.019:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff0b08fc629 code=0x7ffc0000 [ 83.178403][ T5316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.179746][ T28] audit: type=1326 audit(1771733837.019:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b08fc629 code=0x7ffc0000 [ 83.214344][ T5316] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.220926][ T5314] loop4: detected capacity change from 0 to 512 [ 83.243498][ T5314] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.253985][ T28] audit: type=1326 audit(1771733837.029:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0b08fc629 code=0x7ffc0000 [ 83.277255][ T28] audit: type=1326 audit(1771733837.029:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b08fc629 code=0x7ffc0000 [ 83.316102][ T5316] syz_tun: entered promiscuous mode [ 83.323899][ T28] audit: type=1326 audit(1771733837.029:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff0b08fc629 code=0x7ffc0000 [ 83.354116][ T5314] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.368721][ T5316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.503'. [ 83.383904][ T5316] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 83.424399][ T28] audit: type=1326 audit(1771733837.029:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b08fc629 code=0x7ffc0000 [ 83.448567][ T5314] EXT4-fs (loop4): 1 truncate cleaned up [ 83.490540][ T5314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.514233][ T28] audit: type=1326 audit(1771733837.039:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b08fc629 code=0x7ffc0000 [ 83.614287][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.690677][ T5328] loop3: detected capacity change from 0 to 1024 [ 83.749665][ T5328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.863576][ T5328] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 83.951182][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.014340][ T5340] macvlan0: entered allmulticast mode [ 84.029482][ T5340] macvlan0 (unregistering): left allmulticast mode [ 84.055431][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.080870][ T5345] loop3: detected capacity change from 0 to 512 [ 84.107512][ T5345] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.122523][ T5345] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 84.147452][ T5347] loop4: detected capacity change from 0 to 2048 [ 84.171369][ T5347] EXT4-fs: Ignoring removed orlov option [ 84.195813][ T5347] EXT4-fs: Ignoring removed oldalloc option [ 84.227952][ T5354] loop6: detected capacity change from 0 to 1024 [ 84.240782][ T5347] EXT4-fs (loop4): filesystem too large to mount safely on this system [ 84.249438][ T5354] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 84.408850][ T5357] can0: slcan on ttyS3. [ 84.474255][ T5357] can0 (unregistered): slcan off ttyS3. [ 84.543236][ T5354] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 84.606841][ T5354] EXT4-fs error (device loop6): ext4_get_journal_inode:5863: inode #32: comm syz.6.514: iget: special inode unallocated [ 84.684615][ T5354] loop6: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 84.685339][ T5354] EXT4-fs (loop6): Remounting filesystem read-only [ 84.694618][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 84.694638][ C1] EXT4-fs (loop6): initial error at time 1771733838: ext4_get_journal_inode:5863: inode 32 [ 84.694693][ C1] EXT4-fs (loop6): last error at time 1771733838: ext4_get_journal_inode:5863: inode 32 [ 84.806932][ T5354] EXT4-fs (loop6): no journal found [ 84.812169][ T5354] EXT4-fs (loop6): can't get journal size [ 84.830916][ T5347] 9p: Bad value for 'rfdno' [ 84.839104][ T5347] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 84.877414][ T5354] EXT4-fs (loop6): filesystem is read-only [ 84.895776][ T5354] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 85.085021][ T4140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.230124][ T5374] ±ÿ: renamed from team_slave_1 (while UP) [ 85.254066][ T5374] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=257 sclass=netlink_xfrm_socket pid=5374 comm=syz.4.521 [ 85.495723][ T5388] netlink: 152 bytes leftover after parsing attributes in process `syz.5.526'. [ 85.526778][ T5388] netlink: 6 bytes leftover after parsing attributes in process `syz.5.526'. [ 85.675761][ T5394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.528'. [ 86.064645][ T5409] loop5: detected capacity change from 0 to 256 [ 86.135809][ T5409] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.165921][ T5409] FAT-fs (loop5): Filesystem has been set read-only [ 86.184956][ T5409] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.275291][ T5409] netlink: 36 bytes leftover after parsing attributes in process `syz.5.532'. [ 86.738619][ T5433] xfrm0 speed is unknown, defaulting to 1000 [ 87.052612][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 87.052625][ T28] audit: type=1400 audit(1771733840.979:1538): avc: denied { accept } for pid=5434 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 87.107632][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 87.393568][ T28] audit: type=1400 audit(1771733841.319:1539): avc: denied { bind } for pid=5450 comm="syz.6.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.454073][ T28] audit: type=1400 audit(1771733841.319:1540): avc: denied { listen } for pid=5450 comm="syz.6.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.504109][ T28] audit: type=1400 audit(1771733841.329:1541): avc: denied { write } for pid=5450 comm="syz.6.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.583155][ T28] audit: type=1400 audit(1771733841.329:1542): avc: denied { setopt } for pid=5450 comm="syz.6.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.648335][ T5463] loop5: detected capacity change from 0 to 128 [ 87.667874][ T28] audit: type=1400 audit(1771733841.329:1543): avc: denied { accept } for pid=5450 comm="syz.6.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.763126][ T2626] kworker/u8:7: attempt to access beyond end of device [ 87.763126][ T2626] loop5: rw=1, sector=145, nr_sectors = 16 limit=128 [ 87.823416][ T2626] kworker/u8:7: attempt to access beyond end of device [ 87.823416][ T2626] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 87.986702][ T2626] kworker/u8:7: attempt to access beyond end of device [ 87.986702][ T2626] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 88.142716][ T2626] kworker/u8:7: attempt to access beyond end of device [ 88.142716][ T2626] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 88.156174][ T2626] kworker/u8:7: attempt to access beyond end of device [ 88.156174][ T2626] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 88.169654][ T2626] kworker/u8:7: attempt to access beyond end of device [ 88.169654][ T2626] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 88.182991][ T2626] kworker/u8:7: attempt to access beyond end of device [ 88.182991][ T2626] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 88.196316][ T2626] kworker/u8:7: attempt to access beyond end of device [ 88.196316][ T2626] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 88.209765][ T2626] kworker/u8:7: attempt to access beyond end of device [ 88.209765][ T2626] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 88.235451][ T2626] kworker/u8:7: attempt to access beyond end of device [ 88.235451][ T2626] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 88.434010][ T28] audit: type=1326 audit(1771733842.359:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.5.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8aeecc629 code=0x7ffc0000 [ 88.493309][ T28] audit: type=1326 audit(1771733842.359:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.5.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe8aeecc629 code=0x7ffc0000 [ 88.540726][ T5484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.550276][ T28] audit: type=1326 audit(1771733842.359:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.5.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8aeecc629 code=0x7ffc0000 [ 88.573902][ T5484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.593648][ T28] audit: type=1326 audit(1771733842.389:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.5.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe8aeecc629 code=0x7ffc0000 [ 88.690347][ T5489] xfrm0 speed is unknown, defaulting to 1000 [ 88.938418][ T5507] loop4: detected capacity change from 0 to 1024 [ 88.964560][ T5507] EXT4-fs: inline encryption not supported [ 88.978092][ T5507] EXT4-fs: old and new quota format mixing [ 89.032847][ T5511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.563'. [ 89.912303][ T5551] xfrm0 speed is unknown, defaulting to 1000 [ 89.999079][ T5562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.012387][ T5559] loop4: detected capacity change from 0 to 764 [ 90.033746][ T5562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.044529][ T5559] Symlink component flag not implemented [ 90.050503][ T5559] Symlink component flag not implemented (116) [ 90.086234][ T3001] ================================================================== [ 90.094348][ T3001] BUG: KCSAN: data-race in __d_drop / fast_dput [ 90.100619][ T3001] [ 90.102959][ T3001] write to 0xffff88811b47c310 of 8 bytes by task 3302 on cpu 0: [ 90.110600][ T3001] __d_drop+0x14d/0x240 [ 90.114777][ T3001] __dentry_kill+0x122/0x460 [ 90.119421][ T3001] finish_dput+0x2b/0x200 [ 90.123779][ T3001] dput+0x52/0x60 [ 90.127442][ T3001] lookup_one_qstr_excl+0x15a/0x250 [ 90.132677][ T3001] filename_unlinkat+0x149/0x410 [ 90.137631][ T3001] __se_sys_unlink+0x2b/0xe0 [ 90.142261][ T3001] __x64_sys_unlink+0x1f/0x30 [ 90.146965][ T3001] x64_sys_call+0x2eb6/0x3020 [ 90.151660][ T3001] do_syscall_64+0x12c/0x370 [ 90.156272][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.162178][ T3001] [ 90.164517][ T3001] read to 0xffff88811b47c310 of 8 bytes by task 3001 on cpu 1: [ 90.172071][ T3001] fast_dput+0x5f/0x2c0 [ 90.176242][ T3001] dput+0x24/0x60 [ 90.179887][ T3001] filename_unlinkat+0x217/0x410 [ 90.184828][ T3001] __se_sys_unlink+0x2b/0xe0 [ 90.189432][ T3001] __x64_sys_unlink+0x1f/0x30 [ 90.194147][ T3001] x64_sys_call+0x2eb6/0x3020 [ 90.198845][ T3001] do_syscall_64+0x12c/0x370 [ 90.203459][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.209371][ T3001] [ 90.211693][ T3001] value changed: 0xffff8882379df4e8 -> 0x0000000000000000 [ 90.218828][ T3001] [ 90.221155][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 90.227307][ T3001] CPU: 1 UID: 0 PID: 3001 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 90.236193][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.246251][ T3001] ================================================================== [ 90.304836][ T3408] IPVS: starting estimator thread 0... [ 90.413950][ T5565] IPVS: using max 2640 ests per chain, 132000 per kthread