last executing test programs: 11m5.944237579s ago: executing program 3 (id=19): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={0x0, 0x0, 0x28}, 0x18) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x2b, 0x0, &(0x7f0000000380)) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x108, 0x100, 0x80, 0x4000}}) 11m5.760427161s ago: executing program 3 (id=20): socket(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x5, 0x0, 'queue1\x00'}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="228292", 0xfff6}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) keyctl$negate(0xd, 0x0, 0x7ff, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000300)={0x0, 0xd9}, &(0x7f0000000140)=ANY=[@ANYBLOB="656e633d72613720686173683d736861332d323503e2a3dca288c4e1477e32b8c2583600"/91], &(0x7f00000004c0)="3bf412a0efcde71ffd6876f1a8faa87e962493c80b294cd72c01456139db649ed741dd95215f0a0eca9c766d11aa8b71849b77294d3aba5e888b95c4a9312322d98124a8a8b5525d7f97269ae870b77ad1c155d4140914018728897fd05f17309abffa1c9b1ea17c4a1e4dafe0fa3b957b0effd6ea1d6f9edd3408e05b34b8cf012faf8a88609406415b236120ee1bca3f3b750afb6e129fd1812e137391b044aac90601589d29c47a0bddcb2879d93d37c77938691944f38aa23636941074317f530b3e0e8ad2a4c7906625f654a2e39864039c3d3e4e6464", 0x0) 11m3.643595345s ago: executing program 3 (id=24): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) gettid() setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x10020, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x200}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000000)='^', 0x1}], 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 10m59.358969424s ago: executing program 3 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001d00)=[{{&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000001080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}, {{&(0x7f00000008c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000001700)="31e7", 0x2}], 0x1}}], 0x2, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000080)=0xffff834b, 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r2, 0x8}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0x3, 0xa}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0a"], 0x208}, 0x40000) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 10m52.57163566s ago: executing program 3 (id=57): mount$tmpfs(0x0, 0x0, 0x0, 0x22c6c3b, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50102000000fdffffff07000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 10m50.410716455s ago: executing program 3 (id=60): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getrlimit(0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r7, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000180)={0x292, @tick=0x65757100, 0x3, {0x1, 0xfc}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5e5, &(0x7f0000000ac0)="$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") shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback, 0xffff}]}, &(0x7f0000000100)=0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYRES16=r8, @ANYBLOB="010027bd7000000000004f0000000e0001006e657464657673696d0000000f0002006e657464657673696d2ffc00080003000000000008000b00000000000600110000000002"], 0x4c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48c4}, 0x20000808) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 10m35.118265208s ago: executing program 32 (id=60): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getrlimit(0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r7, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000180)={0x292, @tick=0x65757100, 0x3, {0x1, 0xfc}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5e5, &(0x7f0000000ac0)="$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") shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback, 0xffff}]}, &(0x7f0000000100)=0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYRES16=r8, @ANYBLOB="010027bd7000000000004f0000000e0001006e657464657673696d0000000f0002006e657464657673696d2ffc00080003000000000008000b00000000000600110000000002"], 0x4c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48c4}, 0x20000808) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 4m7.73528448s ago: executing program 2 (id=2402): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x280000b, 0x31, 0xffffffffffffffff, 0x231ca000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e9, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000480), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@remote, @loopback}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff08004500001c00000000fb02907800000000e000030000009078006400d2"], 0x0) close(r4) capset(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_emit_ethernet(0xdc, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60122d9200a63afffe8000000000000000000000000000bbff0200000000000000000000000000018600907800a41c0000070000000000001f0001010000000500000000261800021006aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b21000000"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) 4m5.601175785s ago: executing program 2 (id=2408): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5c}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0xfffffffffffffc9f, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x2000000000000000, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000300)={"0c7f2ad8d21f8a308de1c37f01efc961", r2, 0x0, {0x7, 0x4}, {0x767, 0x2}, 0x3, [0x0, 0x8, 0xffda, 0x51, 0x7, 0x80, 0x7, 0x7fffffffffffffff, 0x8, 0x3, 0x0, 0x1, 0x2, 0x800, 0x6, 0x8]}) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x2, 0x8, 0xfffffffe, 0xd996}}]}]}}}]}, 0x68}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x1) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0131014010ff"}) sendto$packet(r4, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 4m3.446065239s ago: executing program 2 (id=2417): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0x50, 0x21, 0x1, 0x70bd29, 0x25dfdbfd, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0xfffd, 0xa}, 0x6e6bba}}, 0x50}}, 0x40) 4m3.34288433s ago: executing program 2 (id=2418): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000100)={r1, &(0x7f0000000000)='\\-\x00', 0x80000, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r5, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$KDFONTOP_SET_DEF(r6, 0x4b72, &(0x7f0000002c40)={0x2, 0x0, 0xd, 0x1a, 0x118, &(0x7f0000002840)="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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r7) keyctl$read(0xb, r7, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) 4m2.366103021s ago: executing program 2 (id=2422): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x81a0}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x55, 0x0, &(0x7f0000000180)="b8746999d1f3d6d851d9265d21bc0d32d6b3523d150d97713bbabba59a8a95ae3ad6fb25b88362dc061eaf03a714f7ea7de20f28652cdf5fd85a8786061a208c3a51dc49295361888cac39df7a414983a2c4d60fa0", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085e, &(0x7f00000107c0)={[{@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa34}}, {@acl}]}, 0x2, 0x54c, &(0x7f0000000280)="$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") 4m2.312594482s ago: executing program 2 (id=2423): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) 4m2.279133852s ago: executing program 33 (id=2423): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) 5.542206947s ago: executing program 6 (id=3582): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) set_mempolicy(0x400000000000000, 0x0, 0x4) 5.541153807s ago: executing program 6 (id=3584): socket$packet(0x11, 0x3, 0x300) r0 = msgget$private(0x0, 0x300) msgsnd(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="c70700"], 0x4, 0x800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x4, 0x4, 0x4, 0x1}, 0x50) close(r1) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff09a94c3b652bbe11a5ce7879edaf02afe39ead95", 0x1d, 0x0, 0x0, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r3, r2, 0x0) 5.526550247s ago: executing program 6 (id=3585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000090000000000000000000000000000040000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008ea6091cf9b97197331200d000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xd, 0x1, @perf_config_ext={0x3, 0x7ff}, 0x4, 0x3, 0x0, 0x9, 0x3, 0x8001, 0x3fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r3, 0x8917, &(0x7f0000000040)={'pimreg1\x00'}) prctl$PR_GET_NO_NEW_PRIVS(0x27) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$vcsu(0x0, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071100b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1350) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095", @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYBLOB="e97130258fdf8fd23c42658087b8d4cc3a8bcf27bf3ccf035afa0be601062c886c35fa0ceeae907c821d0a14dec486b836d3c167c92183e7b4b4f4bd0916dd05fdf5a6e9a0103098731ebc414f53a48383360bc33a2dd3d495df2060da6112d448930eb0f335846d204f02ddfa3117ffb7bf3a1c53d83d456df4623cc06a6ea216c0e1825caa0e515d08055c3d544700491a907e6379f18e7cb81a95fb64bfb53fd6f347417a2f70ba703af1e5a2d904"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.609697089s ago: executing program 6 (id=3594): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x6e}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x3, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=r3, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) r5 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x10, r0}, 0x18) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x20040, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xc8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x13, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x9, 0x1, 0x9, 0xc, 0xfffffffffffffff0}, @exit, @exit, @generic={0x5, 0x5, 0x4, 0x1, 0xba5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0x26, r2, 0x8, &(0x7f0000000300)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xf, 0x7, 0xfffffff9}, 0x10, r3, r4, 0x3, &(0x7f0000000640)=[r6, r7, r8], &(0x7f0000000680)=[{0x5, 0x1, 0x8, 0x5}, {0x0, 0x5, 0xf, 0x7}, {0x1, 0x4, 0x2, 0x2}], 0x10, 0xbe8}, 0x94) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4e", 0xd3}, {&(0x7f0000000140)="89a713c2ca38d36f526284d93c6628738a19795b93d3094bc466d4aeef8fd28b41a1bae573446d2c98031cfb54a9813147463227b3fff52baefa47aa293da7d73fcc6398d38020308740d22d9f036b8da97c11cedc998d6d1db8d4d0cc24232366bb18369343a35ce45f8e9eab9c36", 0x6f}], 0x2}}], 0x1, 0x2090) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r9, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x800c050}, 0x8080) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x9, 0x1}, 0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000480)=@sack_info={0x0, 0x1, 0x1}, &(0x7f00000004c0)=0xc) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) 3.037950666s ago: executing program 5 (id=3598): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r4, 0x0, 0xee01) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x18, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r6, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r7, 0x24, 0x0, 0xfffd, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) r9 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="02090fea45e4dc223d000a65b8e0c665ff1cda045ccbf3578c4809258d0eac809ad4c9c55d492ebab801e3a65506a88e17cba7d5719e507a6cdfab225cc40762ffc2e5481b47ea0ce214524698b2e436297f8530ff9ce837d878524bb64e16a4ad5ac4ce42994627878bc02a33d64daf5e0f4b3ff399172827e9732012eeff0fcc845e4d95404207269b32a03cc31cba8990c75b2ff0cf898aaaa333b18d28611e34260992ae999cdee004e5be", 0xad}], 0x1}, 0x0) 2.441265292s ago: executing program 6 (id=3601): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x8a, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000180)=""/110, 0x6e}], 0x2, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0x54, 0x30, 0xb, 0x0, 0x0, {}, [{0x40, 0x1, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xbf2, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x54}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a01010000001c000000000a0000060900020073797a3100000000090001007379"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6(0xa, 0x1, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r7) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x20000, &(0x7f0000000cc0)=ANY=[@ANYBLOB="353ae4a19c5b1302000000616e943d66642c7266646e72f1", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',aname=(/%,cache=mmap,access=', @ANYRESDEC=0x0, @ANYBLOB=',noxattr,uname=,afid=0x0000000000000001,uid<', @ANYRESDEC=r7, @ANYBLOB=',obj_user=GPL\x00,obj_role=\\,defcontext=root,fsuuid=9d35fa95-Q2b0-\f7fa-33bc-3c999cbf,\x00']) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000140)={'ipvlan0\x00', {0x2, 0x4e24, @multicast1}}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x5, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180400ffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702080008000000b70300000000000085000000b10000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xe}, 0x94) sendfile(r9, r8, 0x0, 0x7ffff000) 2.208777215s ago: executing program 5 (id=3604): prctl$PR_SET_DUMPABLE(0x4, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}}, 0x4050) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/213, 0xd5) r3 = socket$inet6(0xa, 0x4, 0x100) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r4, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000016c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001600)={&(0x7f0000001940)={0x74, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x0, 0xa9, @name2}]}, 0xfe66}}, 0x4008801) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001780)={'wpan3\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r9, @ANYBLOB="24002d8005000100020000000500040001004000080002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x74, r5, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x629810660fd63978}]}, 0x74}, 0x1, 0x0, 0x0, 0x40045}, 0x14) kexec_load(0x2, 0x6, &(0x7f00000014c0)=[{&(0x7f0000000080)="76233366857f39a9be349dd05a530c4750f287188d0f5c8e8e50db999c3a9656ce3681d23411fdf7", 0x28, 0x2, 0x9}, {&(0x7f00000002c0)="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", 0x1000, 0x8000000000000000, 0x4}, {&(0x7f00000012c0)="1530d92121c8ba7e542c0379", 0xc, 0x9, 0x9a}, {&(0x7f0000001300)="1e3a1fd4e4eb6fae9d2edd8c6337cd04b493f98107256ac6a805b4ba8985f9c2c8196e8fec4de83f9a2f3d243efa6bbabfa51439b0e4c4bf843f2d7a4864b27095dab1a1144278dc743781397e40e566df2c24ab6450eacac5fd0ed19b3911f8fafe6d6e8a108c640d14f6ddb4dad2aa5643465793117b06d5e0209bd12c55ff572f3e2db888905f42d8f25ebc9d9957a5288422e4eef8d2b8c2b6", 0x9b, 0xa8d, 0x68c}, {&(0x7f00000013c0)="f9f89e60971182d17ea7ada2985f46e693daa0d914139d2b877a568604070790310fcfd942ba1aa92e227f6a77213a3184c7f04662606ff299e18596daf3a87b341c926624a91aafd594e10ae1ded0afe6038174b150627d72986d5e37aec023b289c7dab45be34745b7f27e623c964d6927d1aa4da694d695613283cf3d58d1f19c8daaaf028486e3ece79e8eb5ed78269bd75f7723", 0x96, 0x4fc4, 0x467}, {&(0x7f0000001480)="bb01ebafe9ad946ee0df0b26abb1370eecb25553667ee1aa0cfae378a817a2a689aef5de76708691107ae436a762ab3252f278dee9c00aa7fb8dd4", 0x3b, 0x6, 0x6}], 0x5b40d9fc982b1be6) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$bt_hci(r3, 0x0, 0x14, 0x0, &(0x7f0000d23000)) 2.058522007s ago: executing program 5 (id=3605): r0 = getpid() r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, r0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000005c0)='\b', 0x1, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x2000000e3aa6ea) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4}}, @enum={0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x5}}, @func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f, 0x30, 0x61, 0x61, 0x30, 0x61, 0x5f]}}, 0x0, 0x69, 0x0, 0x1, 0x6}, 0x28) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x8, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) r5 = getegid() setresgid(r5, 0x0, r5) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000010c0), 0x0, 0x4001) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000204e0000", 0x58}], 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cTu&\t\t') setresuid(0x0, 0xee00, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000280), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000280000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000000000000711013000000000084050000000000009500000000000000c425406d7638b19a232fbcc60a8d767e101edb3adb9bfe2cd6063916e6bdde6abe37afa25b23ea19ffca6ab10d4865fd5fbd8975a10757892412c7139997c984c25906a692f6069a7dc45ec5be78e2096499e5715a267fde3d1141cbc5fa2c4191d07bba2ae3749f9fafa5425a1a075c33b009ff75a21bc2d3822fd035bd288418b03a941dc814a62de57c4492072004a031f57bf6dcf45a78976d6655ea44020871e888a2391fd9026bbf3ed1c42a62c35ef9e2220d8fc9dc21bd3bfc687fc0209da1336f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r7 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000140), &(0x7f00000001c0)=0xc) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) 1.923935088s ago: executing program 4 (id=3606): prctl$PR_SET_DUMPABLE(0x4, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}}, 0x4050) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/213, 0xd5) r3 = socket$inet6(0xa, 0x4, 0x100) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r4, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000016c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001600)={&(0x7f0000001940)={0x74, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x0, 0xa9, @name2}]}, 0xfe66}}, 0x4008801) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001780)={'wpan3\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r9, @ANYBLOB="24002d8005000100020000000500040001004000080002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x74, r5, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x629810660fd63978}]}, 0x74}, 0x1, 0x0, 0x0, 0x40045}, 0x14) kexec_load(0x2, 0x6, &(0x7f00000014c0)=[{&(0x7f0000000080)="76233366857f39a9be349dd05a530c4750f287188d0f5c8e8e50db999c3a9656ce3681d23411fdf7", 0x28, 0x2, 0x9}, {&(0x7f00000002c0)="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", 0x1000, 0x8000000000000000, 0x4}, {&(0x7f00000012c0)="1530d92121c8ba7e542c0379", 0xc, 0x9, 0x9a}, {&(0x7f0000001300)="1e3a1fd4e4eb6fae9d2edd8c6337cd04b493f98107256ac6a805b4ba8985f9c2c8196e8fec4de83f9a2f3d243efa6bbabfa51439b0e4c4bf843f2d7a4864b27095dab1a1144278dc743781397e40e566df2c24ab6450eacac5fd0ed19b3911f8fafe6d6e8a108c640d14f6ddb4dad2aa5643465793117b06d5e0209bd12c55ff572f3e2db888905f42d8f25ebc9d9957a5288422e4eef8d2b8c2b6", 0x9b, 0xa8d, 0x68c}, {&(0x7f00000013c0)="f9f89e60971182d17ea7ada2985f46e693daa0d914139d2b877a568604070790310fcfd942ba1aa92e227f6a77213a3184c7f04662606ff299e18596daf3a87b341c926624a91aafd594e10ae1ded0afe6038174b150627d72986d5e37aec023b289c7dab45be34745b7f27e623c964d6927d1aa4da694d695613283cf3d58d1f19c8daaaf028486e3ece79e8eb5ed78269bd75f7723", 0x96, 0x4fc4, 0x467}, {&(0x7f0000001480)="bb01ebafe9ad946ee0df0b26abb1370eecb25553667ee1aa0cfae378a817a2a689aef5de76708691107ae436a762ab3252f278dee9c00aa7fb8dd4", 0x3b, 0x6, 0x6}], 0x5b40d9fc982b1be6) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$bt_hci(r3, 0x0, 0x14, 0x0, &(0x7f0000d23000)) 1.902813448s ago: executing program 1 (id=3607): socket$packet(0x11, 0x3, 0x300) r0 = msgget$private(0x0, 0x300) msgsnd(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="c70700"], 0x4, 0x800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff09a94c3b652bbe11a5ce7879edaf02afe39ead95", 0x1d, 0x0, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r2, r1, 0x0) 1.857856119s ago: executing program 0 (id=3608): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 1.843828869s ago: executing program 1 (id=3609): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) close(0x4) r2 = accept(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) shutdown(r2, 0x1) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r5 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000000c0)=0x30c, 0x4) sendmmsg(r5, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r5, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2002, 0x0) syz_emit_ethernet(0x1e9, &(0x7f0000000340)=ANY=[@ANYRESOCT=r4], &(0x7f0000000b40)={0x0, 0x4, [0xe6d, 0xc06, 0x40, 0x5d0]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0500000001000000400000000500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000e989bc0f21776ca89f862350313a1358cee5cd97d46a9775839e8334e51970d3119ad9c9f8a708a58ee6249fe2fd408e65283f65b2c6de588fbe4bb611d2293047f373c46d1faf5fd799608db714ed3371ec34672f3b64edc7dfbe527a7799b3a6a847abe46309603a4aa047c985d16161aa1f71399c73226912fdd904000000354344ec44d1a221e120cd22a50008f5461d7587e7b3d68ca87a8802d04244ff32d6392d1be86743308542820e607bf71efed320d149ca098f1e5c746799a2c4673d59d807a18c7802b2ece5f98d0983d9150fd0"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000203000000000000000040000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000400000007b8af8ff00000000bfa2000000000000070200ffffffb703000008000000b7040000020000008500000003000000950000000d00000028b77763ff26bb29c00bff6106c9faf21c822ea1034f69e053a108fc66c8eb"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) 1.8042255s ago: executing program 0 (id=3610): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, 0x0, 0xfebc) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r4 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) ptrace(0x4206, r4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) wait4(r4, 0x0, 0x8, &(0x7f0000000380)) 1.74737389s ago: executing program 4 (id=3611): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r4, 0x0, 0xee01) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r6, 0x24, 0x0, 0xfffd, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="02090fea45e4dc223d000a65b8e0c665ff1cda045ccbf3578c4809258d0eac809ad4c9c55d492ebab801e3a65506a88e17cba7d5719e507a6cdfab225cc40762ffc2e5481b47ea0ce214524698b2e436297f8530ff9ce837d878524bb64e16a4ad5ac4ce42994627878bc02a33d64daf5e0f4b3ff399172827e9732012eeff0fcc845e4d95404207269b32a03cc31cba8990c75b2ff0cf898aaaa333b18d28611e34260992ae999cdee004e5be", 0xad}], 0x1}, 0x0) 1.675532031s ago: executing program 5 (id=3612): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0x80000d1}) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x10, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x3f, &(0x7f0000000240)={0x20, 0x8}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.602103202s ago: executing program 1 (id=3613): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = dup(0xffffffffffffffff) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000000)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='highspeed', 0x9) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000380)=0xffffffff, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendto$inet(r4, &(0x7f0000002fc0)='^', 0x1, 0x8054, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0xffffffff}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000040)=""/249, 0x30, 0xf9, 0x6}, 0x28) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB='unhide,utf8,cruft,showassoc,map=normal,map=normal,session=0x0000000000000*2e,check=strict,\x00'], 0x1, 0x55a, &(0x7f0000000b00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x50) 1.375815614s ago: executing program 5 (id=3614): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r4, 0x0, 0xee01) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x18, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r6, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r7, 0x24, 0x0, 0xfffd, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) r9 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="02090fea45e4dc223d000a65b8e0c665ff1cda045ccbf3578c4809258d0eac809ad4c9c55d492ebab801e3a65506a88e17cba7d5719e507a6cdfab225cc40762ffc2e5481b47ea0ce214524698b2e436297f8530ff9ce837d878524bb64e16a4ad5ac4ce42994627878bc02a33d64daf5e0f4b3ff399172827e9732012eeff0fcc845e4d95404207269b32a03cc31cba8990c75b2ff0cf898aaaa333b18d28611e34260992ae999cdee004e5be", 0xad}], 0x1}, 0x0) 1.231459766s ago: executing program 0 (id=3615): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)={0x10, 0x1413, 0x1, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) preadv(r3, &(0x7f00000032c0)=[{&(0x7f0000002f00)=""/154, 0x9a}], 0x1, 0x7, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}, 0xab09}], 0x1, 0x100, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f0000000100), 0xa}, 0x4090, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a834"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmmsg(r6, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x60, 0x1403, 0x1, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x42044045}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_pidfd_open(0x0, 0x0) fsetxattr$trusted_overlay_nlink(r7, &(0x7f00000018c0), 0x0, 0x0, 0x0) 826.10646ms ago: executing program 4 (id=3616): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)={0x10, 0x1413, 0x1, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) preadv(r3, &(0x7f00000032c0)=[{&(0x7f0000002f00)=""/154, 0x9a}], 0x1, 0x7, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}, 0xab09}], 0x1, 0x100, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f0000000100), 0xa}, 0x4090, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d18d"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmmsg(r6, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x60, 0x1403, 0x1, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x42044045}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_pidfd_open(0x0, 0x0) fsetxattr$trusted_overlay_nlink(r7, &(0x7f00000018c0), 0x0, 0x0, 0x0) 696.752502ms ago: executing program 6 (id=3617): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0), 0x0, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000001f18000000c3707bf4400000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28b}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x11000, 0x1, 0x4, 0x8, 0x3, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x2, 0x14, @mcast2}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$eJzs3U1sHFcdAPD/rO18OAl2AxWlSGBRBJGi+iNGZINAJD0hFaM2BS5FDUuysd2svZZ3LdUuh0SotDdUxKXqCVk58CWlUhEtFKkSoohD4cAJgcK9qqlUviQQWjSzs6kbb+yETTyV/ftJTzPzZnfff/Y/M5k3b+INYNcaiYiTEdEXEUcjYiivL+UlLrZL+rrVySszaUmi1XrkrSSSiHh28spM57OSfHog/4B9EXF6NaL01MZ2G8srFyq1WnUxXx5rzi2MNZZX7p+dq0xXp6vz5XJ5vFw+fmLi9m3ro4f3H37u11/4z89f++6Hv/K93zyZxnswX7d+O26XkRjJv5OB2Luuvj+JOH+7GytIut/0RzvXN+Pu6nd+eYdD4iZ9/geXSkXHAABsv/QC4HBEfCy7/h+KvuxqLuLkoa+9PRT/fLzo+AAAAIDetYaG4nPpFAAAANixStkzsElpNH8W4GCUSqOj7Wd4PxCDpVq90Tx6vr40f679rOxwDJTOz9aq4/mzwsMxkKTLE9n8O8vHrluejIi7IuKZof3Z8ujZeu1c0Tc/AAAAYIc7GHH10W+9/MEDN+j/p/48VHSUAAAAQC/S/v+hq4PZn+r6u34+AAAA7Ehp///tb//1t6H/DwAAADtWp///0NRUPDQ11VrNf/9qvj49e2Fm4cSx8dG5pbOjZ+uLC6PT9fp09j/257b+3Fq9vjBxLJaeGGtWG82xxvLKmbn60nzzTPa7XmeqA9uwbcDWHj55tlp0DAAAwPa566Ov/jGJiIuf2Z+V1J58nb467Gx+ABx2r76iAwAK0190AEBh9PGBZIv1+2604uLtjwUAALgzPvkh4/+wWxn/h93L+D/sXsb/YffSxweM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNZarSRaAAAAwI7WWF65UKnVqotmzJgxc22m6DuTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyXPTt5ZaZTtqvNV36xXS1xI2unImK4nf/VvLTX9Me+bLovBiJi8G9J9K97XxIRfT22/e97IkbisSdfbF1+KS2R74c9fiy34OKliLin2/GfpLtFDOd7wfX5L2V7Rm9+8sM0/6u/W18n/9url/wP9tj2yx9J8//g3evr5H/3uPfhoiOgSL9/pugIKNIf1oqOgCKdfqToCCjSlz5ddAQU6fm3io6AV09FxHi3/l8p7RZe6+Vf3//ry+4Q9ebISNr/e/ro+rqN/b/SGz02wybWTkV8NiJWN9z/K3VeMtyXLx3K7gcMJOdna9XxiHhfmsMY2JsuT2zSxuUzS491q3/wdJr/Kz9d+NMLP+uUtP10+s6rSm/07333+85VmpVet5u2tUsR9/Z3y39y7f5vcoP7v++/yTZmXv/G493qJ3+V5v+V5zfPP3dS6/sRn+h6/CfXXpPOjTXnFsYayyv3z85VpqvT1flyuTxeLh8/MTGWnQ7GOieFLobWDny1W/3XH0jz/98p+S9OevwPbp7/7PzfWF65UKnVqouNW2/jX2++vtqt/vBTaf4f+Ob/c/7fk3w5C3BPXvdEpdlcnIjYk3xxY/2xW495p+p8H53vK83/kfu6//vfuf5rn/9LG+7/D+fTdP3IJm0OHH/h6W71H78vG/+7+mLr8kuO/2Kk+T+3xfGfvOv4v/WZ5/7yjx91a/vHe9P8v/ZmZ/w3LWn7nbHgtvT4/1QWzJG8xvXf1m42QUXHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6/0vAAD//wqlOeU=") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000140)="3a5e6c12662fa33da151a21f00997a47aa68d239bff029cf825fb5a5745a52afe5b620895e919ff7681019c5e3ee378f4d6f33918564dbba61b9c1a30f11e8d2c4df6037dc6307aa853607d9267a0baf086f4ba7d665cad3a1c86a97f63ba5b0b997cbf2c6d548e1e6183f8eef79a605f4f7ef6605ab281fd6aad24134206995efaa1796ddaeb8c10b039ad297157733262478f63b72f908fc399bdbd958ed8ff0a32b304bf60fff4fa52932564197e1a2dca9459b68615666d675b52cedf8fe8d62924d3bd638be5a8e55f0d786feb7a9f57648bf80ff07b100dc837f", 0xdd) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x88, @empty, 0x4e22, 0xfffffc01, 'lc\x00', 0x21, 0x9, 0x70}, 0x2c) 606.878013ms ago: executing program 1 (id=3618): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtclass={0x24, 0x28, 0x2, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0xa, 0xffe0}, {0xa, 0x5}}}, 0x24}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f00000000c0)=@udp6=r1, 0x1}, 0x20) recvfrom(r1, &(0x7f00000004c0)=""/182, 0xb6, 0x0, 0x0, 0x0) shutdown(r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_matches\x00') pread64(r2, &(0x7f0000000080)=""/102355, 0x1bbc, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001e00)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000e00)="81d0b6a3c9207ef3117d123e050e4d3423ea36111572871cff3cf211af02927886f3801862d587126852c953b180779fdeaff1a284de850f2f49f53ca5175fe303c3ebd463bf855db5b018ea199acec3d5fb121cb3bda06005a28150e2529ce412e4553ddba47c4c665385e204f4f99772a87c27295f320d7910ca066eca4435046829fd77623206446804efe51960b600fba4778f41a2b2db07243df697bd0832e9c10dbeeea48c229c68ec7a6860e1ba15ccb37f6c239735f6e07cfe98531f4a13ea12bf14fd809d1d313f91b6d5a8574e37fc7d67f2eaebff38c17a54d14e5b2d0c98fc0710d2df17d3c5b889048dc89f5ec9ae6b36a4230e9d139f4d2a30ccc1cab6e13e2f10d305002f5f17b28a8afc1bb3345f9317ab91565c8e09e03fa1a13547d5efecb121151be41c5ec073c2c5ed29b9bee62c0a84949687d5ff0594d77c5e6704c9c1074461dada11b4719322f05d332d04b6e623ab90bf5249921d592c297e0fec310b28fb09baace058af6f7287aec6f99783c37497d31546c8d958632030d4be6922824a1a2098ee31e64cc58509a785a07961a09e4a6e130fe05a4d20675166dff793fc5a0dc919ac04ccf80b05f5dff4fe6ae1bdd519700bbbde4c86abd41ce964cade65c5b2ddf08c40a364ecd2a6a06a066b31b5ed4fa846210157a533a60f5e96c2b7a743c47cbe49f976857f9cbfe91bf16962f89b81158887cc0e0a1327d71362d829369da6af6c510e0f81c93fd8e28540077cda5b58f3d97851afb40e18f009b46df15a206f44b598d2c12fc670c70dbc9783df5a70a934923dd88280fdd6985f701fac208f087d04ef1363ad118772d3d65cae364249c5ba7db1211634f862b09f0c876c7d546b419c062bec6dfe3aab0c4c24674c3088d55d35d961e94d1725184ab42478cbfae7feb6e4edb317bfef327f7cf2f5d22029458f043b51914bba391831e80af37700de07b16b8179e4dfaca9ae2b915a09d3b082424648844ce5b1cfb0e2b4370676e5dee195fa2ed04d3009e8e259b63d1ac61ed9eb096ff5504b15a450a3ea99909847e6821683d3b94f644bf6658056b864290cbe5c52086cd2c2da5697e13c073832a2491db78f61717d56e7b9997e10220c02675c0a2116f6dd2432a990f056e0439a9f0e51b184093e40b64d7cddb29fe3940fdd448cc5469c11a7facf72e3fe737ca58e9ae938ad9b4f79e259be5f421f2337b311b6d1eb89e738325dfdf91911c8cca78b54f1b97f4b280db29b403189b74c0288e25709cdc0e62c395941934462e3e57ee39ffa175048fbf42962ebc877ec3114f29900e6f00f14e52f54574a46ea5ffc210b0d82ab4f42361df610ca39bd947d829f8b8d025d9b03e1b89aaa1ac609bc1b20faf8978a3a1757374ba34803184448f1e61e3bce2f1e3c47c14cbf524ca90d3fbf5e2585abf10b00e2ff27dd1613dde182691150c35d8c5cae441e0b283d0fdd8642ce9534e467e8db541c0713fc1d55144e6de3275cfd6be3c9ad6d6dc73cd70446856a53aae796898653f836d10959c8cdbafeff47f363313ba37d2acfadefbee11d2730829b81ee119a53b8f173136e4a41ffe53368cee10c5efc193852be4dc6e43f2c0bd54fa9cd20e1bcb140c1e3149fbb6dc34b6d02614f27140f457adbe827319060cb961915c45fb97ede53bea638df5179f818754e758973a4e8c9f6af1d3259d99fad0678607ae3c2adc01894ee29a3ae78b9fc3cb7a6bccf288fecb0f44e8d23d93eed730c031321e1346baf1c0f5534fe56ed2f91fb1bd7347a70621131a14f4782d6c58711e398634658f0472f7822f2e908936ba956faf38a8b3094a2aacd313cdff18a668f7523c1ad362482cc3b5a4dc6bdea1635e44a4d5efc31c6996576c389bcb4b6dc621888eda8972955ec3b80de6f08697c0a8a58bd14c4207e55ff578c3efaffcf333b7fb19837b5086c8ad4b3915ab80b4853e490c431fb9863448adae373ba073b4e499b72f98ecf1d62b593436d2f336e35490023caec384b76eb5196702c6ba0d58b16ec9022000244c90996ba53f9a3b68bef0e1f1a390fd83a389985289a2976d453dde84f8f57d3b8bfcf45080638b3664063bdfcdb3eeea942b389b92f9e26325cac962187e7656c834f56f181f7c0dc4bbbf818047e97ea1e651bc3100d71356160722516d0a49fcc1cb0e70e05a370c8043f8965951802b441510026d99a7e178e8e30a68c85cce7f9b79422ab951eb945c05f992472a5f00fc1025b7ed5306c9aca60e5d5ac380f490e005feaa2d7e6122e421a60ed1d80054d1e7d59ec0dc1cf64877e0ab2ae9cab49233ddf11c1c2802d6c9970556529cf986db4299d6733fea8595795ce28538750e1824413538f20dd4c38b7b3eb3ce63ca4003cc7fe16ba22c9342baea727f4149bfc1990936c3413c0a49c8432dba4ea73456db625d5300d054ea1deb94796969f61ece7c49b371d155a65a67c86e0b102ba46fa977bdf1f2ac026acf10a92db9dc87418011b83dd2781537e7e8247ae1070604b7f83839b4992fc970c3994ef8f67f8d768e57e93cbfeb67eaa172d9793a9bbc6bb04b72de337de4f143e6be80dcf4f68862e0cdc1c547fcb723ff3fccbb604df01cdd5541694987a60d5810adcda90f945937dcb6bb02c5783fd975af298c330fbc72e42a6640c4af6b1ebaea41970e4783d56720f54af47919f2711d99960a0bef8e602faa7f3bd1c2313e6ce52fe76fc6364c441bece5958e4083e2c449acc01fc264932397338925b454fb8ae8a958512dbdaa11f33833be621f4e4ce3898422ca4e91c2d2f7138c3355cf5bc985147ea072ba669922cb89dba519ddbb036833694c6ed32bc1b39c0f40fe470f08ffabb46cb58763611fd877bbf463e9d002feeaca6de29c61d88143d9ba8b327eb3a8ea39ed4596b37cfa5bfbd89b8decd2a46cdce2223d26f3d795d369dcc5d22061fc2b40921268891c8c72518acf582c533c52d6403b9ec4ec296e57ec277e02bbcc5ee59952b8299c6f0451bea4cc65ba605a2e23c54cc24a0ad7e69f73c33f9ff07b7a83c7d0fff3803ebd57eb4eefc06cc87189cd97b2e8a57bc33842f7e5903b9469b1f1a98ae2be416424c272ee3972ec4a9166b0669a2f3099d16e671b3142a6964932791b897a964cd129a985754766258acd2e21fe62f4531c3dffa5ac25a11828c83959a075ba3111f59ff84459260833b38ba8040ed9cd3e2ef03c5a313e1fea4e6a85820fc980f2038eea6b5dd10008424de38f29c16bb5fce316d63026c4b7aaef8f82cfeb0e015694cc06a9ba8ec7637257e663b5f1e76a0a2686263e22888c94ef61e2a5ff0e4c6f49ee53eed752fce179324a364ed8cc5f79d4910ecafb781376e9671a655de0df663af580f80562c38bb2db580ac14c1b4abd939d1a199bbffe35138412825bef738b12deaef868b924d6b2010ba24e73a1d08e2e8db98674cbb228722723864304c2f58cfdb33997a6d3036c1f0d2466dc160629974d66eef0400fde5a26047e238e156d0cd71de1d42a4464e7e3df612d5aec686b708f4638147f709de92639ef241c454b8764a9fb8aeee29f60f955662e80ad31f5295909f887e1ae06daef0ffeced461a72dd78049d70b4469ab6bd0081907e3033085fc45ae780e5f3f8105d114d1f9a7aebe6bc2e88f46d7867b137c79641117fa2f0c239b7d93bcfac23d8fc285015e5a3030eea2d0fd0e074c0afe4b19763ac41cb9f0ee3eaa28b8df4e549efef1675d4094cab3119597cc94784064d2c69eb8efcdd7beb3e388be1ebfa79a75cf47409f9784188d50d8548c516fa66360c150e1d5a159038bdb0a6ac6de33647ec9484b60e520705e4e9188fec121db16407b633405e7551ab3d99a113c70345d6c9a2928fb27f66ddde9441e14099fe0d4a80dd5545901bcc322bf218a235df23918422eed9032b8d0d11bca2ab886074d20ef9ca9cc530761d3e79ed90adb4ea8a59fe3392911c30c7de62052a5552da42049610ae013dc7e1320d1277e4e92b02162745f49f1844c5ed53d2b722cfac1d0f86ee18d19913c678ebf7c928197d49392230afd58bbb2ad272c7ecdd26f5fc8efb230b823d3008ce1a768cf4b11b888a7abe3b259e4a70bdfa58e8b63a69c46ecd364a5c122fc3c98ab220af3aa3a0100c6318da0ab5d92d494d5e5cd0e4bdc3ff17a3a078bad37ae6aa55e7db66da2ca141fd797ec582a744f57ed0e6fe6dccf34c7ff95ce4f2e07c3f45219e08913f7261f5de22656df1457b4c98a5de91c886e4c7f3a88b9bd5ccf30f2b888598dcce4876564a40b36d49fbfb8a10778add404575fb7563f23d5debfa7b63940d4d7c29005eb603bc8b00da502a218b597a5dff3078337d78a917445cfb23c4b85f463a56fc807abdf408bbd8fd9cf11f66986f3dfe7eaba763e095970cdb45f6bcc735dc42c8a9a91cdad4019d476c13dad9abafc9b5f96a1bd25fb533f899d374939993c0c9d8e6c6ce9c060b24e523e74fd5a5bc0a9243811b0ba50750b555ab2afbbf3fc98b967500524962c0b94690d2461bf215d962fd064675af71b687c0d2e945b370582e9429cb5cec4b87a8a6ccb024e81c0952778d8de56de65cd377189e7e9953d9ae3a64828d728b8a968e1ced4c3417ad4659ecbe23a98c19e78b41c76c9d012dd461ecc75945379e93b637e4d8af14fbe660da2c324276a5fc41ec924c7bdf5e7b822a7009ace06a4a418ddb9f510af39d5e9fc7de9501ea2eeb09107f96551211ba8b58dd5a086e4596b58cca72c8b2a5b00daaf1b8202d7642547172688b8bbc64068c1ef880ae54ef8764fa0db8e5e8220a6b81b588d2c5110d6b3dcbfa7cd8cc20fcb5080d3b9d6985419ad087aa0bf3d84581ef3627fc4b2d4475be00cf7f9654d32e75b36ec4dc9942cd59529003826cc97a63df0af369c1821ba6ad3facd5c5f3249ca46d4583e3dd6c82e37926490ab6c00e08d312226507d5c3328dc74cd0754420d7abcaa0ad63fb90c816a238ec8532c7152b9aa3f135c757e9f1da90a64b1af38d4adce7a2e468e557d5a8ba0c41af35ac11cb35f8345e567497a32a5559fc1841e471ef8e6c8ba95fd23ef8c16f92a7b472a9bda283bac1b677e5e2d9ec60837493b2b4d0d1032722f1e8dead9a8366e0a14a14de2be315b27c1fefac0835022fab0bb687ca6ce7cc7ec91a500007828c8efbd11987c2b0117571e8fc5a96a341e14c22113de371497326ef117cf8d8ccc69ae4a3dc3d1b4a459e13aeb1431de0568d94ba6b42f369a833602cebe009bbaa2b8b1176859502fcacdd576d67c2cff2e4cc14714bd19f185b7f347b261c3678e2d81c779d355ac93ff5e611c2e4f42cbb62f80bc3df55750ee258767d95d52d56f59c6ca2c41b5f8ba38b36e7f2805bbc6de90d27dd314ceee1d61cfa8caa150baed1e798d93d866ad185682efabd54b897e51d1d7a60c70f30b83bc7e375145b8a8e0c05de820d0ca37a4ee11d314a00c6aaefb7d16ffdd1d1a1fc95ed9d5c1ef37c3d6e0555f752d4a607dfba05735781f8b7daf71099dcfa1cdf4baca72cecf748d3454c464800f38a5aade8edd7d089acb8d9cda3afd410b0daef978d6fcd553390d439835b2db148efd70046115c50706e4e05cdf0f5abbe9f69644a5798e1052cd4ce7e260c39ec4ae460b81099b2f00b833d7bea1eb649d823ef949404f138523d454e78e57c7cea833457d3e16819b74724e065bc173b6700f90bf078e9a66dc9c4afd50c63b686eb300399", 0x1000, r2}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0x3}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)={0x490102, 0x104, 0x13}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000005580)={0x0, 0x0, &(0x7f0000005540)={&(0x7f0000004e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4020080}, 0x4c000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x470, 0x98, 0x340, 0x0, 0x288, 0x1f0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x2, 0x2, 0x71}, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffffff, 0xb06f5130e5eca774], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], @ipv4=@loopback, [0xff000000, 0xffffff00, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0x7f800000, 0xffffffff, 0xffffffff], 0x1, 0x5, 0x3a, 0x4e20, 0x4e22, 0x4e23, 0x4e20, 0x400}, 0xc0, 0x100}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x4, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0xffffff00, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x11, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bb", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x10a, &(0x7f0000000640)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x28, 0x4, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local, {[@timestamp_prespec={0x44, 0x34, 0xf8, 0x3, 0xc, [{@remote, 0x9}, {@multicast2, 0x77d8d49a}, {@empty, 0x3}, {@multicast2, 0x401}, {@local, 0x9}, {@multicast1, 0x5}]}, @timestamp={0x44, 0x1c, 0xc4, 0x0, 0x6, [0x81, 0x1600000, 0x73f, 0x7f, 0x7, 0xe7]}, @timestamp_addr={0x44, 0x3c, 0x91, 0x1, 0x7, [{@empty, 0x3}, {@multicast1, 0x8}, {@loopback, 0x7ff}, {@remote, 0x80000001}, {@multicast1, 0x7fff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x11}, 0xa}]}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@loopback, @rand_addr=0x64010101, @loopback, @multicast2]}]}}}}}}}, 0x0) socket$inet6(0xa, 0x2, 0x3a) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 413.185275ms ago: executing program 4 (id=3619): socket$packet(0x11, 0x3, 0x300) r0 = msgget$private(0x0, 0x300) msgsnd(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="c70700"], 0x4, 0x800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff09a94c3b652bbe11a5ce7879edaf02afe39ead95", 0x1d, 0x0, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r2, r1, 0x0) 397.821395ms ago: executing program 5 (id=3620): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000080)="c2", 0x1}, {&(0x7f0000000400)="fa095595e9cbc9b15167f6bc806c637ff1bbc321a9f8f722db755073620d0883d5e670946e8652dc1f44f1e85df34de13886d01eaf33d7386b7a4e53144596471c7449129a998ae21373d4b256547ceb3724debf13d9f82b8457f250474c98983b986949948fbcac4b8cff2ee96b9a8f93559b8350468c300a2524c2abbf815e90144603944afc3a30a331d4d6d3d998f48e5084c7babf3dc4c8bee2a1634997e854522c7ff1a6d1a52e7d8b696a5a", 0xaf}, {&(0x7f0000000540)="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", 0xfb}], 0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r2, 0x0, 0x1f, 0x8) write(0xffffffffffffffff, 0x0, 0x0) 385.561495ms ago: executing program 4 (id=3621): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = dup(0xffffffffffffffff) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000000)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='highspeed', 0x9) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000380)=0xffffffff, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendto$inet(r4, &(0x7f0000002fc0)='^', 0x1, 0x8054, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0xffffffff}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000040)=""/249, 0x30, 0xf9, 0x6}, 0x28) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB='unhide,utf8,cruft,showassoc,map=normal,map=normal,session=0x0000000000000*2e,check=strict,\x00'], 0x1, 0x55a, &(0x7f0000000b00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x50) 345.155956ms ago: executing program 1 (id=3622): prctl$PR_SET_DUMPABLE(0x4, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}}, 0x4050) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/213, 0xd5) r3 = socket$inet6(0xa, 0x4, 0x100) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r4, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000016c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001600)={&(0x7f0000001940)={0x74, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x0, 0xa9, @name2}]}, 0xfe66}}, 0x4008801) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001780)={'wpan3\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r9, @ANYBLOB="24002d8005000100020000000500040001004000080002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x74, r5, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x629810660fd63978}]}, 0x74}, 0x1, 0x0, 0x0, 0x40045}, 0x14) kexec_load(0x2, 0x6, &(0x7f00000014c0)=[{&(0x7f0000000080)="76233366857f39a9be349dd05a530c4750f287188d0f5c8e8e50db999c3a9656ce3681d23411fdf7", 0x28, 0x2, 0x9}, {&(0x7f00000002c0)="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", 0x1000, 0x8000000000000000, 0x4}, {&(0x7f00000012c0)="1530d92121c8ba7e542c0379", 0xc, 0x9, 0x9a}, {&(0x7f0000001300)="1e3a1fd4e4eb6fae9d2edd8c6337cd04b493f98107256ac6a805b4ba8985f9c2c8196e8fec4de83f9a2f3d243efa6bbabfa51439b0e4c4bf843f2d7a4864b27095dab1a1144278dc743781397e40e566df2c24ab6450eacac5fd0ed19b3911f8fafe6d6e8a108c640d14f6ddb4dad2aa5643465793117b06d5e0209bd12c55ff572f3e2db888905f42d8f25ebc9d9957a5288422e4eef8d2b8c2b6", 0x9b, 0xa8d, 0x68c}, {&(0x7f00000013c0)="f9f89e60971182d17ea7ada2985f46e693daa0d914139d2b877a568604070790310fcfd942ba1aa92e227f6a77213a3184c7f04662606ff299e18596daf3a87b341c926624a91aafd594e10ae1ded0afe6038174b150627d72986d5e37aec023b289c7dab45be34745b7f27e623c964d6927d1aa4da694d695613283cf3d58d1f19c8daaaf028486e3ece79e8eb5ed78269bd75f7723", 0x96, 0x4fc4, 0x467}, {&(0x7f0000001480)="bb01ebafe9ad946ee0df0b26abb1370eecb25553667ee1aa0cfae378a817a2a689aef5de76708691107ae436a762ab3252f278dee9c00aa7fb8dd4", 0x3b, 0x6, 0x6}], 0x5b40d9fc982b1be6) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$bt_hci(r3, 0x0, 0x14, 0x0, &(0x7f0000d23000)) 306.057146ms ago: executing program 0 (id=3623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000045}, 0x4000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) capset(&(0x7f00000002c0)={0x0, r1}, &(0x7f0000000300)={0x5, 0xfffffffa, 0x6, 0xfe, 0xffff, 0xffffffff}) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xfff4, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)='\'', 0x1}], 0x1}, 0x4) 305.211177ms ago: executing program 4 (id=3624): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x8a, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000180)=""/110, 0x6e}], 0x2, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a01010000001c000000000a0000060900020073797a3100000000090001007379"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6(0xa, 0x1, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r7) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x20000, &(0x7f0000000cc0)=ANY=[@ANYBLOB="353ae4a19c5b1302000000616e943d66642c7266646e72f1", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',aname=(/%,cache=mmap,access=', @ANYRESDEC=0x0, @ANYBLOB=',noxattr,uname=,afid=0x0000000000000001,uid<', @ANYRESDEC=r7, @ANYBLOB=',obj_user=GPL\x00,obj_role=\\,defcontext=root,fsuuid=9d35fa95-Q2b0-\f7fa-33bc-3c999cbf,\x00']) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000140)={'ipvlan0\x00', {0x2, 0x4e24, @multicast1}}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x5, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180400ffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702080008000000b70300000000000085000000b10000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xe}, 0x94) sendfile(r9, r8, 0x0, 0x7ffff000) 182.341828ms ago: executing program 1 (id=3625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x80, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0xad, 0xd, 0x2, 0xb7, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x7f, &(0x7f00000004c0)=""/127, 0x40f00, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xc, 0x100, 0xdd}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x1], &(0x7f0000000700)=[{0x4, 0x4, 0x9, 0x3}, {0x1, 0x5, 0xe, 0x4}], 0x10, 0x128}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x102020, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 67.474769ms ago: executing program 0 (id=3626): prctl$PR_SET_DUMPABLE(0x4, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}}, 0x4050) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/213, 0xd5) socket$inet6(0xa, 0x4, 0x100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000016c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001600)={&(0x7f0000001940)={0x74, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x0, 0xa9, @name2}]}, 0xfe66}}, 0x4008801) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001780)={'wpan3\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="24002d8005000100020000000500040001004000080002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x74, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x629810660fd63978}]}, 0x74}, 0x1, 0x0, 0x0, 0x40045}, 0x14) kexec_load(0x2, 0x6, &(0x7f00000014c0)=[{&(0x7f0000000080)="76233366857f39a9be349dd05a530c4750f287188d0f5c8e8e50db999c3a9656ce3681d23411fdf7", 0x28, 0x2, 0x9}, {&(0x7f00000002c0)="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", 0x1000, 0x8000000000000000, 0x4}, {&(0x7f00000012c0)="1530d92121c8ba7e542c0379", 0xc, 0x9, 0x9a}, {&(0x7f0000001300)="1e3a1fd4e4eb6fae9d2edd8c6337cd04b493f98107256ac6a805b4ba8985f9c2c8196e8fec4de83f9a2f3d243efa6bbabfa51439b0e4c4bf843f2d7a4864b27095dab1a1144278dc743781397e40e566df2c24ab6450eacac5fd0ed19b3911f8fafe6d6e8a108c640d14f6ddb4dad2aa5643465793117b06d5e0209bd12c55ff572f3e2db888905f42d8f25ebc9d9957a5288422e4eef8d2b8c2b6", 0x9b, 0xa8d, 0x68c}, {&(0x7f00000013c0)="f9f89e60971182d17ea7ada2985f46e693daa0d914139d2b877a568604070790310fcfd942ba1aa92e227f6a77213a3184c7f04662606ff299e18596daf3a87b341c926624a91aafd594e10ae1ded0afe6038174b150627d72986d5e37aec023b289c7dab45be34745b7f27e623c964d6927d1aa4da694d695613283cf3d58d1f19c8daaaf028486e3ece79e8eb5ed78269bd75f7723", 0x96, 0x4fc4, 0x467}, {&(0x7f0000001480)="bb01ebafe9ad946ee0df0b26abb1370eecb25553667ee1aa0cfae378a817a2a689aef5de76708691107ae436a762ab3252f278dee9c00aa7fb8dd4", 0x3b, 0x6, 0x6}], 0x5b40d9fc982b1be6) 0s ago: executing program 0 (id=3627): r0 = getpid() r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, r0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000005c0)='\b', 0x1, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x2000000e3aa6ea) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4}}, @enum={0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x5}}, @func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f, 0x30, 0x61, 0x61, 0x30, 0x61, 0x5f]}}, 0x0, 0x69, 0x0, 0x1, 0x6}, 0x28) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x8, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) r5 = getegid() setresgid(r5, 0x0, r5) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000010c0), 0x0, 0x4001) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000204e0000", 0x58}], 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cTu&\t\t') setresuid(0x0, 0xee00, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000280), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000280000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000000000000711013000000000084050000000000009500000000000000c425406d7638b19a232fbcc60a8d767e101edb3adb9bfe2cd6063916e6bdde6abe37afa25b23ea19ffca6ab10d4865fd5fbd8975a10757892412c7139997c984c25906a692f6069a7dc45ec5be78e2096499e5715a267fde3d1141cbc5fa2c4191d07bba2ae3749f9fafa5425a1a075c33b009ff75a21bc2d3822fd035bd288418b03a941dc814a62de57c4492072004a031f57bf6dcf45a78976d6655ea44020871e888a2391fd9026bbf3ed1c42a62c35ef9e2220d8fc9dc21bd3bfc687fc0209da1336f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r7 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000140), &(0x7f00000001c0)=0xc) syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) kernel console output (not intermixed with test programs): b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 595.031048][T14969] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3088'. [ 595.049924][T14964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.174610][ T28] audit: type=1400 audit(5971.056:2265): avc: denied { write } for pid=14968 comm="syz.5.3088" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 595.198409][T14629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.247026][T14976] loop1: detected capacity change from 0 to 1024 [ 595.602355][T14976] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 595.639778][T14976] System zones: 0-1, 3-36 [ 595.801778][T14976] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.3090: bad orphan inode 134217728 [ 595.823899][T14976] loop1: lost filesystem error report for type 5 error -117 [ 595.824768][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 595.838613][ C0] EXT4-fs (loop1): initial error at time 5971: ext4_orphan_get:1423 [ 595.846731][ C0] EXT4-fs (loop1): last error at time 5971: ext4_orphan_get:1423 [ 595.868087][ T3867] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 595.884207][T14976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.905053][T14976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3090'. [ 595.914620][T14976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3090'. [ 595.944337][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3092'. [ 595.968093][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3092'. [ 595.968495][ T28] audit: type=1400 audit(5971.946:2266): avc: denied { write } for pid=14975 comm="syz.1.3090" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 595.991493][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3092'. [ 596.007643][ T4891] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.025972][ T4891] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.045583][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3092'. [ 596.046457][ T4891] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.065646][ T4891] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.119804][T13221] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.131146][T14048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.249124][T14995] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 596.271797][T15002] loop5: detected capacity change from 0 to 128 [ 596.303813][T15002] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 596.326423][ T28] audit: type=1400 audit(5972.316:2267): avc: denied { write } for pid=15001 comm="syz.5.3099" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 596.508550][T15008] loop4: detected capacity change from 0 to 128 [ 596.527368][T15008] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 596.909250][ T28] audit: type=1400 audit(5972.726:2268): avc: denied { write } for pid=15007 comm="syz.4.3100" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 596.937248][T15006] EXT4-fs: Ignoring removed nomblk_io_submit option [ 597.701544][ T3867] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 597.894906][T15006] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 597.903716][T15011] set_capacity_and_notify: 1 callbacks suppressed [ 597.903796][T15011] loop0: detected capacity change from 0 to 512 [ 598.462500][T15018] syzkaller0: entered promiscuous mode [ 598.471716][T15018] syzkaller0: entered allmulticast mode [ 598.514377][ T28] audit: type=1400 audit(5974.497:2269): avc: denied { write } for pid=14996 comm="syz.0.3096" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 598.577795][T15035] loop4: detected capacity change from 0 to 128 [ 598.599628][ T28] audit: type=1400 audit(5974.587:2270): avc: denied { write } for pid=15034 comm="syz.4.3104" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 599.359497][T15050] loop1: detected capacity change from 0 to 1024 [ 599.378503][T15051] __nla_validate_parse: 4 callbacks suppressed [ 599.378530][T15051] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3108'. [ 599.422454][T15051] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 599.528901][T15050] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 599.570144][T15050] System zones: 0-1, 3-36 [ 599.703545][T15050] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.3109: bad orphan inode 134217728 [ 599.745196][T15060] loop6: detected capacity change from 0 to 128 [ 599.757203][T15050] loop1: lost filesystem error report for type 5 error -117 [ 599.783404][ T28] audit: type=1400 audit(5975.767:2271): avc: denied { write } for pid=15058 comm="syz.6.3112" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 599.920097][T15050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3109'. [ 599.949231][T15050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3109'. [ 600.126282][ T28] audit: type=1400 audit(5976.107:2272): avc: denied { write } for pid=15049 comm="syz.1.3109" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 600.544281][T15066] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3110'. [ 600.617521][T15066] loop4: detected capacity change from 0 to 512 [ 600.650480][T15066] EXT4-fs: Ignoring removed nomblk_io_submit option [ 600.747130][T15066] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 600.765252][T15078] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 600.795233][T15066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3110'. [ 600.806494][ T28] audit: type=1400 audit(5976.797:2273): avc: denied { relabelto } for pid=15077 comm="syz.6.3115" name="bus" dev="tmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 600.867451][T15075] syzkaller0: entered promiscuous mode [ 600.873150][T15075] syzkaller0: entered allmulticast mode [ 600.881963][ T28] audit: type=1400 audit(5976.797:2274): avc: denied { associate } for pid=15077 comm="syz.6.3115" name="bus" dev="tmpfs" ino=761 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0" [ 600.929281][T15078] loop6: detected capacity change from 0 to 128 [ 601.021708][T15078] syz.6.3115: attempt to access beyond end of device [ 601.021708][T15078] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 601.036046][T15078] syz.6.3115: attempt to access beyond end of device [ 601.036046][T15078] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 601.049663][T15078] syz.6.3115: attempt to access beyond end of device [ 601.049663][T15078] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 601.063387][T15078] syz.6.3115: attempt to access beyond end of device [ 601.063387][T15078] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 601.078364][T15078] syz.6.3115: attempt to access beyond end of device [ 601.078364][T15078] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 601.106025][T15088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.126216][T15078] syz.6.3115: attempt to access beyond end of device [ 601.126216][T15078] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 601.150696][T15088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.168699][T15078] syz.6.3115: attempt to access beyond end of device [ 601.168699][T15078] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 601.203187][T15078] syz.6.3115: attempt to access beyond end of device [ 601.203187][T15078] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 601.339616][T15078] syz.6.3115: attempt to access beyond end of device [ 601.339616][T15078] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 601.492730][T15078] syz.6.3115: attempt to access beyond end of device [ 601.492730][T15078] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 601.989659][T15104] loop5: detected capacity change from 0 to 128 [ 602.018542][T15104] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3120'. [ 602.031912][ T28] audit: type=1400 audit(5978.027:2275): avc: denied { write } for pid=15103 comm="syz.5.3120" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 602.436256][T15110] loop1: detected capacity change from 0 to 128 [ 602.808632][T15112] loop4: detected capacity change from 0 to 8192 [ 602.855950][T15112] loop4: p1 < > p2 p4 < p5 > [ 602.860868][T15112] loop4: partition table partially beyond EOD, truncated [ 602.881413][T15112] loop4: p1 start 134217728 is beyond EOD, truncated [ 602.893794][T15112] loop4: p2 size 591360 extends beyond EOD, truncated [ 602.903067][T15112] loop4: p5 size 591360 extends beyond EOD, truncated [ 603.112934][T15119] hub 8-0:1.0: USB hub found [ 603.118032][T15119] hub 8-0:1.0: 8 ports detected [ 603.548536][T15122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.575542][T15122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.662752][T15125] loop1: detected capacity change from 0 to 128 [ 603.678811][ T28] audit: type=1400 audit(5979.667:2276): avc: denied { write } for pid=15124 comm="syz.1.3126" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 604.035623][T15135] hub 8-0:1.0: USB hub found [ 604.040768][T15135] hub 8-0:1.0: 8 ports detected [ 604.075790][T15135] netlink: 'syz.5.3128': attribute type 36 has an invalid length. [ 604.096393][T15135] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 604.106672][T15135] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 605.080097][T14048] EXT4-fs unmount: 12 callbacks suppressed [ 605.080135][T14048] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 605.100260][T15143] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3131'. [ 606.146900][T15158] loop4: detected capacity change from 0 to 128 [ 606.179190][T15158] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 606.238725][T15158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3133'. [ 607.028520][T15166] netlink: 'syz.5.3132': attribute type 10 has an invalid length. [ 607.037947][T15166] team0: Device ipvlan0 failed to register rx_handler [ 607.047288][T15167] netlink: 'syz.6.3134': attribute type 10 has an invalid length. [ 607.056782][T15167] team0: Device ipvlan0 failed to register rx_handler [ 607.077276][ T28] audit: type=1400 audit(5982.888:2277): avc: denied { write } for pid=15157 comm="syz.4.3133" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 607.641139][T15175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3138'. [ 607.682991][T14629] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 607.708211][T15177] loop5: detected capacity change from 0 to 128 [ 607.757279][T15177] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 607.804304][T15183] loop1: detected capacity change from 0 to 1024 [ 607.819768][T15183] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 607.953827][T15183] EXT4-fs error (device loop1): ext4_quota_enable:7225: comm syz.1.3141: inode #131072: comm syz.1.3141: iget: illegal inode # [ 607.967482][ T28] audit: type=1400 audit(5983.828:2278): avc: denied { write } for pid=15176 comm="syz.5.3140" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 608.030711][T15183] loop1: lost filesystem error report for type 5 error -117 [ 608.030993][T15183] EXT4-fs error (device loop1): ext4_quota_enable:7228: comm syz.1.3141: Bad quota inode: 131072, type: 2 [ 608.038378][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 608.038396][ C0] EXT4-fs (loop1): initial error at time 5984: ext4_quota_enable:7225 [ 608.038424][ C0] EXT4-fs (loop1): last error at time 5984: ext4_quota_enable:7225 [ 608.375406][T15183] loop1: lost filesystem error report for type 5 error -117 [ 608.376032][T15183] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 608.486999][T15192] hub 8-0:1.0: USB hub found [ 608.534472][T15183] EXT4-fs (loop1): mount failed [ 608.575654][T15192] hub 8-0:1.0: 8 ports detected [ 608.707452][T15173] loop6: detected capacity change from 0 to 2048 [ 609.008964][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3145'. [ 609.044751][T15173] EXT4-fs: Ignoring removed nobh option [ 609.068864][ T3867] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 609.773084][T15211] loop5: detected capacity change from 0 to 128 [ 609.785501][T15211] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 609.791653][T15173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.837150][T15211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3150'. [ 609.845838][T15173] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3137'. [ 609.851378][T15209] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 609.869754][ T28] audit: type=1400 audit(5985.859:2279): avc: denied { write } for pid=15210 comm="syz.5.3150" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 610.063006][T15217] hub 8-0:1.0: USB hub found [ 610.067805][T15217] hub 8-0:1.0: 8 ports detected [ 610.078966][T15217] netlink: 'syz.1.3147': attribute type 10 has an invalid length. [ 610.087016][T15217] ipvlan0: entered allmulticast mode [ 610.092622][T15217] veth0_vlan: entered allmulticast mode [ 610.103133][T15217] team0: Device ipvlan0 failed to register rx_handler [ 610.566038][T11990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.906995][ T3867] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 610.976362][T15224] hub 8-0:1.0: USB hub found [ 610.990710][T15224] hub 8-0:1.0: 8 ports detected [ 611.071243][T15228] loop1: detected capacity change from 0 to 128 [ 611.112626][T15228] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 611.175482][T15238] program syz.4.3159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 611.261733][ T28] audit: type=1400 audit(5987.249:2280): avc: denied { write } for pid=15227 comm="syz.1.3156" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 611.401632][T15245] hub 8-0:1.0: USB hub found [ 611.406759][T15245] hub 8-0:1.0: 8 ports detected [ 611.432163][T15242] netlink: 'syz.6.3153': attribute type 36 has an invalid length. [ 611.446824][T15242] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 611.456739][T15242] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 611.493789][T15242] netlink: 'syz.6.3153': attribute type 10 has an invalid length. [ 611.512768][T15242] team0: Device ipvlan0 failed to register rx_handler [ 612.426083][T15255] loop6: detected capacity change from 0 to 1024 [ 612.436296][T14048] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 612.523173][T15255] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 612.530640][T15257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3163'. [ 612.551712][ T28] audit: type=1400 audit(5988.539:2281): avc: denied { bind } for pid=15251 comm="syz.5.3160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 612.554955][T15255] System zones: 0-1, 3-36 [ 612.601021][T15255] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3162: bad orphan inode 134217728 [ 612.615289][T15255] loop6: lost filesystem error report for type 5 error -117 [ 612.619676][T15264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3165'. [ 612.621929][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 612.642664][ C0] EXT4-fs (loop6): initial error at time 5988: ext4_orphan_get:1423 [ 612.650777][ C0] EXT4-fs (loop6): last error at time 5988: ext4_orphan_get:1423 [ 612.655850][T15255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.785319][T15255] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3162'. [ 612.796719][T15255] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3162'. [ 612.817783][ T28] audit: type=1400 audit(5988.809:2282): avc: denied { write } for pid=15254 comm="syz.6.3162" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 613.220234][T15274] hub 8-0:1.0: USB hub found [ 613.225145][T15274] hub 8-0:1.0: 8 ports detected [ 613.265958][T11990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.429519][T15276] hub 8-0:1.0: USB hub found [ 613.436847][T15276] hub 8-0:1.0: 8 ports detected [ 613.598602][ T28] audit: type=1400 audit(5989.589:2283): avc: denied { ioctl } for pid=15281 comm="syz.1.3171" path="socket:[44455]" dev="sockfs" ino=44455 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 613.628612][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3171'. [ 613.805440][T15289] loop6: detected capacity change from 0 to 1024 [ 613.813128][T15289] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 613.826479][T15289] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 613.840208][T15289] EXT4-fs error (device loop6): ext4_get_journal_inode:5896: comm syz.6.3170: inode #1: comm syz.6.3170: iget: illegal inode # [ 613.855588][T15289] loop6: lost filesystem error report for type 5 error -117 [ 613.857173][T15289] EXT4-fs (loop6): no journal found [ 613.865640][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 613.866039][ C1] EXT4-fs (loop6): initial error at time 5989: ext4_get_journal_inode:5896 [ 613.866521][ C1] EXT4-fs (loop6): last error at time 5989: ext4_get_journal_inode:5896 [ 613.899257][T15289] EXT4-fs (loop6): can't get journal size [ 613.913627][T15289] EXT4-fs (loop6): failed to initialize system zone (-22) [ 613.922495][T15289] EXT4-fs (loop6): mount failed [ 614.343476][T15295] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3169'. [ 614.394239][T15298] loop1: detected capacity change from 0 to 2048 [ 614.420469][T15295] loop4: detected capacity change from 0 to 512 [ 614.490904][T15295] EXT4-fs: Ignoring removed nomblk_io_submit option [ 614.526049][T15298] EXT4-fs: Ignoring removed nobh option [ 614.709480][T15289] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3170'. [ 614.753905][T15295] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 614.921066][T15295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3169'. [ 614.986726][T15298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.108721][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3176'. [ 615.215578][T14048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.294930][T15315] macvtap1: entered promiscuous mode [ 615.304183][T15315] macvtap1: entered allmulticast mode [ 615.310171][T15315] dummy0: entered allmulticast mode [ 615.315617][T15315] dummy0: entered promiscuous mode [ 615.322139][T15315] team0: Device macvtap1 failed to register rx_handler [ 615.329426][T15315] dummy0: left allmulticast mode [ 615.344166][ T9] dummy0: left promiscuous mode [ 615.508378][T15324] loop6: detected capacity change from 0 to 1024 [ 615.529837][T15324] EXT4-fs: Ignoring removed mblk_io_submit option [ 615.560411][T15324] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 615.593684][T15324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.653474][T15324] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3183'. [ 615.756525][T15332] FAULT_INJECTION: forcing a failure. [ 615.756525][T15332] name failslab, interval 1, probability 0, space 0, times 0 [ 615.769410][T15332] CPU: 1 UID: 0 PID: 15332 Comm: syz.4.3185 Tainted: G W syzkaller #0 PREEMPT(full) [ 615.769451][T15332] Tainted: [W]=WARN [ 615.769458][T15332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 615.769473][T15332] Call Trace: [ 615.769481][T15332] [ 615.769491][T15332] __dump_stack+0x1d/0x30 [ 615.769523][T15332] dump_stack_lvl+0x95/0xd0 [ 615.769605][T15332] dump_stack+0x15/0x1b [ 615.769632][T15332] should_fail_ex+0x263/0x280 [ 615.769672][T15332] ? br_multicast_new_port_group+0x19e/0xdb0 [ 615.769708][T15332] should_failslab+0x8c/0xb0 [ 615.769814][T15332] __kmalloc_cache_noprof+0x5f/0x400 [ 615.769897][T15332] br_multicast_new_port_group+0x19e/0xdb0 [ 615.769945][T15332] ? br_mdb_config_init+0x5a2/0xcf0 [ 615.769981][T15332] __br_mdb_add+0x5d9/0xab0 [ 615.770022][T15332] br_mdb_add+0x237/0x4b0 [ 615.770114][T15332] ? __pfx_br_mdb_add+0x10/0x10 [ 615.770146][T15332] rtnl_mdb_add+0x1b1/0x2e0 [ 615.770240][T15332] ? mutex_lock+0x57/0x90 [ 615.770269][T15332] ? __pfx_rtnl_mdb_add+0x10/0x10 [ 615.770309][T15332] rtnetlink_rcv_msg+0x6a7/0x720 [ 615.770374][T15332] netlink_rcv_skb+0x123/0x220 [ 615.770413][T15332] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 615.770461][T15332] rtnetlink_rcv+0x1c/0x30 [ 615.770523][T15332] netlink_unicast+0x5a8/0x680 [ 615.770552][T15332] netlink_sendmsg+0x5c8/0x6f0 [ 615.770586][T15332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.770634][T15332] ____sys_sendmsg+0x563/0x5b0 [ 615.770666][T15332] ___sys_sendmsg+0x195/0x1e0 [ 615.770718][T15332] __x64_sys_sendmsg+0xd4/0x160 [ 615.770757][T15332] x64_sys_call+0x194c/0x3020 [ 615.770799][T15332] do_syscall_64+0x12c/0x3b0 [ 615.770832][T15332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.770863][T15332] RIP: 0033:0x7f2295a8cdd9 [ 615.770887][T15332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.770961][T15332] RSP: 002b:00007f22944e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.770987][T15332] RAX: ffffffffffffffda RBX: 00007f2295d05fa0 RCX: 00007f2295a8cdd9 [ 615.771006][T15332] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 615.771024][T15332] RBP: 00007f22944e7090 R08: 0000000000000000 R09: 0000000000000000 [ 615.771042][T15332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.771059][T15332] R13: 00007f2295d06038 R14: 00007f2295d05fa0 R15: 00007ffd8d33c2b8 [ 615.771149][T15332] [ 616.046301][T11990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.152613][T15334] loop1: detected capacity change from 0 to 512 [ 616.184776][T15334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 616.350456][T15339] loop6: detected capacity change from 0 to 512 [ 616.411567][T15339] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 616.455559][ T28] audit: type=1400 audit(5992.350:2284): avc: denied { mounton } for pid=15337 comm="syz.6.3186" path="/148/file0" dev="tmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 616.556087][T15334] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 616.741409][T15348] FAULT_INJECTION: forcing a failure. [ 616.741409][T15348] name failslab, interval 1, probability 0, space 0, times 0 [ 616.785883][T15348] CPU: 1 UID: 0 PID: 15348 Comm: syz.5.3189 Tainted: G W syzkaller #0 PREEMPT(full) [ 616.785926][T15348] Tainted: [W]=WARN [ 616.785933][T15348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 616.785947][T15348] Call Trace: [ 616.785954][T15348] [ 616.786015][T15348] __dump_stack+0x1d/0x30 [ 616.786044][T15348] dump_stack_lvl+0x95/0xd0 [ 616.786071][T15348] dump_stack+0x15/0x1b [ 616.786098][T15348] should_fail_ex+0x263/0x280 [ 616.786142][T15348] should_failslab+0x8c/0xb0 [ 616.786194][T15348] kmem_cache_alloc_noprof+0x66/0x3f0 [ 616.786315][T15348] ? skb_clone+0x151/0x1f0 [ 616.786342][T15348] skb_clone+0x151/0x1f0 [ 616.786449][T15348] __netlink_deliver_tap+0x2c9/0x500 [ 616.786491][T15348] netlink_unicast+0x653/0x680 [ 616.786528][T15348] netlink_sendmsg+0x5c8/0x6f0 [ 616.786639][T15348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.786674][T15348] ____sys_sendmsg+0x563/0x5b0 [ 616.786712][T15348] ___sys_sendmsg+0x195/0x1e0 [ 616.786813][T15348] __x64_sys_sendmsg+0xd4/0x160 [ 616.786852][T15348] x64_sys_call+0x194c/0x3020 [ 616.786941][T15348] do_syscall_64+0x12c/0x3b0 [ 616.786986][T15348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.787022][T15348] RIP: 0033:0x7f1f0791cdd9 [ 616.787064][T15348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.787084][T15348] RSP: 002b:00007f1f06377028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 616.787105][T15348] RAX: ffffffffffffffda RBX: 00007f1f07b95fa0 RCX: 00007f1f0791cdd9 [ 616.787120][T15348] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 616.787170][T15348] RBP: 00007f1f06377090 R08: 0000000000000000 R09: 0000000000000000 [ 616.787188][T15348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.787205][T15348] R13: 00007f1f07b96038 R14: 00007f1f07b95fa0 R15: 00007ffcc4ba1948 [ 616.787248][T15348] [ 617.120533][T15351] FAULT_INJECTION: forcing a failure. [ 617.120533][T15351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.163036][T15351] CPU: 1 UID: 0 PID: 15351 Comm: syz.5.3190 Tainted: G W syzkaller #0 PREEMPT(full) [ 617.163084][T15351] Tainted: [W]=WARN [ 617.163135][T15351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 617.163153][T15351] Call Trace: [ 617.163163][T15351] [ 617.163171][T15351] __dump_stack+0x1d/0x30 [ 617.163263][T15351] dump_stack_lvl+0x95/0xd0 [ 617.163288][T15351] dump_stack+0x15/0x1b [ 617.163316][T15351] should_fail_ex+0x263/0x280 [ 617.163353][T15351] should_fail+0xb/0x20 [ 617.163441][T15351] should_fail_usercopy+0x1a/0x20 [ 617.163479][T15351] _copy_to_iter+0x251/0xea0 [ 617.163530][T15351] ? __rcu_read_unlock+0x4e/0x70 [ 617.163560][T15351] ? igmp6_mcf_seq_show+0xbb/0xf0 [ 617.163604][T15351] ? igmp6_mcf_seq_next+0x2c0/0x2f0 [ 617.163664][T15351] ? __rcu_read_unlock+0x4e/0x70 [ 617.163687][T15351] seq_read_iter+0x776/0x940 [ 617.163798][T15351] seq_read+0x279/0x2c0 [ 617.163834][T15351] ? __pfx_seq_read+0x10/0x10 [ 617.163869][T15351] proc_reg_read+0x128/0x1c0 [ 617.163924][T15351] ? __pfx_proc_reg_read+0x10/0x10 [ 617.163968][T15351] vfs_readv+0x432/0x6e0 [ 617.163996][T15351] ? __pfx_proc_reg_read+0x10/0x10 [ 617.164115][T15351] __x64_sys_preadv+0xfd/0x1c0 [ 617.164160][T15351] x64_sys_call+0x2915/0x3020 [ 617.164193][T15351] do_syscall_64+0x12c/0x3b0 [ 617.164234][T15351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.164271][T15351] RIP: 0033:0x7f1f0791cdd9 [ 617.164289][T15351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.164315][T15351] RSP: 002b:00007f1f06377028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 617.164342][T15351] RAX: ffffffffffffffda RBX: 00007f1f07b95fa0 RCX: 00007f1f0791cdd9 [ 617.164453][T15351] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003 [ 617.164470][T15351] RBP: 00007f1f06377090 R08: 0000000000000100 R09: 0000000000000000 [ 617.164488][T15351] R10: 000000000000005b R11: 0000000000000246 R12: 0000000000000001 [ 617.164505][T15351] R13: 00007f1f07b96038 R14: 00007f1f07b95fa0 R15: 00007ffcc4ba1948 [ 617.164532][T15351] [ 617.498241][T15339] EXT4-fs (loop6): 1 truncate cleaned up [ 617.504911][T15339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.548340][T15339] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.566949][T15327] __nla_validate_parse: 2 callbacks suppressed [ 617.566963][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 617.921575][ T4891] Bluetooth: hci0: Frame reassembly failed (-84) [ 617.938835][T15355] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3191'. [ 617.999951][ T28] audit: type=1400 audit(5993.990:2285): avc: denied { mount } for pid=15354 comm="syz.5.3191" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 618.040916][T15355] loop5: detected capacity change from 0 to 1764 [ 618.065663][T15355] ISOFS: Unable to identify CD-ROM format. [ 618.105826][ T28] audit: type=1400 audit(5994.080:2286): avc: denied { map } for pid=15354 comm="syz.5.3191" path="/578/file0" dev="tmpfs" ino=3161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 618.397775][T15360] hub 8-0:1.0: USB hub found [ 618.402721][T15360] hub 8-0:1.0: 8 ports detected [ 618.698289][T15364] loop1: detected capacity change from 0 to 512 [ 618.811976][T15364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.869029][ T28] audit: type=1400 audit(5994.860:2287): avc: denied { write } for pid=15361 comm="syz.1.3193" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 618.953993][T15371] hub 8-0:1.0: USB hub found [ 618.958929][T15371] hub 8-0:1.0: 8 ports detected [ 618.971309][T15371] netlink: 'syz.4.3194': attribute type 10 has an invalid length. [ 618.979388][T15371] ipvlan0: entered allmulticast mode [ 618.984759][T15371] veth0_vlan: entered allmulticast mode [ 618.993812][T15371] team0: Device ipvlan0 failed to register rx_handler [ 619.530040][T15375] hub 8-0:1.0: USB hub found [ 619.534990][T15375] hub 8-0:1.0: 8 ports detected [ 619.555888][T15375] netlink: 'syz.6.3195': attribute type 10 has an invalid length. [ 619.567009][T15375] team0: Device ipvlan0 failed to register rx_handler [ 619.793039][T14048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.990060][T11861] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 619.996577][ T3990] Bluetooth: hci0: command 0x1003 tx timeout [ 620.141557][T15380] loop5: detected capacity change from 0 to 1024 [ 620.183851][T15380] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 620.197544][T15380] System zones: 0-1, 3-36 [ 620.217081][T15380] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.3198: bad orphan inode 134217728 [ 620.231097][T15380] loop5: lost filesystem error report for type 5 error -117 [ 620.233593][T15380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.329006][T15388] hub 8-0:1.0: USB hub found [ 620.333857][T15388] hub 8-0:1.0: 8 ports detected [ 620.347135][T15388] netlink: 'syz.6.3199': attribute type 10 has an invalid length. [ 620.357436][T15388] team0: Device ipvlan0 failed to register rx_handler [ 620.588421][T15380] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3198'. [ 620.665106][T15380] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3198'. [ 620.781775][ T28] audit: type=1400 audit(5996.770:2288): avc: denied { write } for pid=15379 comm="syz.5.3198" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 620.855213][T15392] loop4: detected capacity change from 0 to 2048 [ 620.880116][T15392] EXT4-fs: Ignoring removed nobh option [ 620.902119][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.959338][T15392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.056846][T14629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.112275][T15405] loop5: detected capacity change from 0 to 128 [ 621.312819][T15411] loop1: detected capacity change from 0 to 1024 [ 621.331218][T15411] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 621.343426][T15411] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 621.357621][T15411] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.3205: inode #1: comm syz.1.3205: iget: illegal inode # [ 621.372915][T15411] loop1: lost filesystem error report for type 5 error -117 [ 621.374881][T15411] EXT4-fs (loop1): no journal found [ 621.383148][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 621.383427][ C1] EXT4-fs (loop1): initial error at time 5997: ext4_get_journal_inode:5896 [ 621.383806][ C1] EXT4-fs (loop1): last error at time 5997: ext4_get_journal_inode:5896 [ 621.418391][T15411] EXT4-fs (loop1): can't get journal size [ 621.429253][T15411] EXT4-fs (loop1): failed to initialize system zone (-22) [ 621.439813][T15411] EXT4-fs (loop1): mount failed [ 621.486742][T15411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3205'. [ 621.566689][ T28] audit: type=1400 audit(5997.561:2289): avc: denied { bind } for pid=15415 comm="syz.0.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 621.596780][ T28] audit: type=1400 audit(5997.591:2290): avc: denied { ioctl } for pid=15415 comm="syz.0.3207" path="socket:[45299]" dev="sockfs" ino=45299 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 621.680027][T15420] netlink: 'syz.5.3209': attribute type 10 has an invalid length. [ 621.690061][T15420] bridge0: port 3(team0) entered disabled state [ 621.697800][T15420] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.705788][T15420] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.751342][T15420] team0: Device bridge0 is already an upper device of the team interface [ 621.779200][T15425] netlink: 'syz.0.3210': attribute type 10 has an invalid length. [ 621.808743][T15425] team0: Device ipvlan0 failed to register rx_handler [ 622.570367][T15433] hub 8-0:1.0: USB hub found [ 622.575429][T15433] hub 8-0:1.0: 8 ports detected [ 622.592143][T15433] netlink: 'syz.1.3212': attribute type 10 has an invalid length. [ 622.602423][T15433] team0: Device ipvlan0 failed to register rx_handler [ 623.267148][T15442] hub 8-0:1.0: USB hub found [ 623.272135][T15442] hub 8-0:1.0: 8 ports detected [ 623.283446][T15442] netlink: 'syz.4.3213': attribute type 10 has an invalid length. [ 623.293952][T15442] team0: Device ipvlan0 failed to register rx_handler [ 623.502389][T15447] loop5: detected capacity change from 0 to 128 [ 623.513707][T15447] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 623.534356][ T28] audit: type=1400 audit(5999.531:2291): avc: denied { write } for pid=15446 comm="syz.5.3218" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 623.642020][T15454] xfrm0 speed is unknown, defaulting to 1000 [ 623.719806][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3219'. [ 623.736958][T15452] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3217'. [ 624.124382][T15454] lo speed is unknown, defaulting to 1000 [ 624.391923][T15468] loop1: detected capacity change from 0 to 1024 [ 624.426190][T15468] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 624.438075][T15468] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 624.450400][T15468] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.3222: inode #1: comm syz.1.3222: iget: illegal inode # [ 624.464981][T15468] loop1: lost filesystem error report for type 5 error -117 [ 624.468000][T15468] EXT4-fs (loop1): no journal found [ 624.476278][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 624.476677][ C0] EXT4-fs (loop1): initial error at time 6000: ext4_get_journal_inode:5896 [ 624.477483][ C0] EXT4-fs (loop1): last error at time 6000: ext4_get_journal_inode:5896 [ 624.510833][T15468] EXT4-fs (loop1): can't get journal size [ 624.520444][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3223'. [ 624.529871][T15468] EXT4-fs (loop1): failed to initialize system zone (-22) [ 624.538107][T15468] EXT4-fs (loop1): mount failed [ 624.616923][T15468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3222'. [ 624.640132][ T28] audit: type=1400 audit(6000.631:2292): avc: denied { accept } for pid=15465 comm="syz.6.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 624.660347][T15473] loop6: detected capacity change from 0 to 1024 [ 624.672812][ T3867] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 624.692685][T15473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.724539][ T28] audit: type=1400 audit(6000.711:2293): avc: denied { write } for pid=15465 comm="syz.6.3223" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 624.757192][T15472] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3223: bg 0: block 112: padding at end of block bitmap is not set [ 624.782383][T15472] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 624.800081][T15472] EXT4-fs (loop6): This should not happen!! Data will be lost [ 624.800081][T15472] [ 624.831724][T15472] EXT4-fs (loop6): Total free blocks count 0 [ 624.841960][T15472] EXT4-fs (loop6): Free/Dirty block details [ 624.857170][T15472] EXT4-fs (loop6): free_blocks=0 [ 624.862591][T15472] EXT4-fs (loop6): dirty_blocks=64 [ 624.868140][T15472] EXT4-fs (loop6): Block reservation details [ 624.877695][T15472] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 624.957554][T15488] loop5: detected capacity change from 0 to 512 [ 624.994983][T15488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.012341][ T28] audit: type=1400 audit(6001.011:2294): avc: denied { write } for pid=15478 comm="syz.5.3225" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 625.049308][T11990] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 625.061691][T11990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 625.095964][ T28] audit: type=1400 audit(6001.091:2295): avc: denied { write } for pid=15493 comm="syz.4.3230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 625.207757][T15498] hub 8-0:1.0: USB hub found [ 625.212840][T15498] hub 8-0:1.0: 8 ports detected [ 625.225113][T15498] netlink: 'syz.1.3228': attribute type 10 has an invalid length. [ 625.235688][T15498] team0: Device ipvlan0 failed to register rx_handler [ 625.437315][T15503] sctp: [Deprecated]: syz.4.3231 (pid 15503) Use of int in max_burst socket option. [ 625.437315][T15503] Use struct sctp_assoc_value instead [ 625.666622][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.875102][T15522] hub 8-0:1.0: USB hub found [ 625.880705][T15522] hub 8-0:1.0: 8 ports detected [ 625.929991][T15522] netlink: 'syz.5.3236': attribute type 10 has an invalid length. [ 625.941755][T15522] team0: Device ipvlan0 failed to register rx_handler [ 626.343636][T15528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3239'. [ 626.409132][T15529] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.416535][T15529] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.464463][T15529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.477946][T15529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.506097][T15529] ipvlan0: left allmulticast mode [ 626.511412][T15529] veth0_vlan: left allmulticast mode [ 626.529655][ T4859] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.538738][ T4859] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.552374][ T4859] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.569022][ T4859] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.960812][T15537] loop5: detected capacity change from 0 to 2048 [ 626.997103][ T4859] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.021688][T15537] loop5: p1 < > p4 < > [ 627.054638][ T4859] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.137277][ T4859] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.146622][ T4859] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.292394][T15550] loop5: detected capacity change from 0 to 164 [ 627.299172][T15550] iso9660: Bad value for 'session' [ 627.506611][T15556] loop6: detected capacity change from 0 to 512 [ 627.620598][T15556] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.684519][ T28] audit: type=1400 audit(6003.652:2296): avc: denied { write } for pid=15542 comm="syz.6.3244" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 628.443014][T15564] loop5: detected capacity change from 0 to 2048 [ 628.451996][T15564] EXT4-fs: Ignoring removed nobh option [ 628.466232][T15560] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3249'. [ 628.493534][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3249'. [ 628.538506][ T28] audit: type=1400 audit(6004.532:2297): avc: denied { create } for pid=15565 comm="syz.1.3252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 628.586576][T15564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 628.613216][ T28] audit: type=1400 audit(6004.612:2298): avc: denied { ioctl } for pid=15565 comm="syz.1.3252" path="socket:[44952]" dev="sockfs" ino=44952 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 628.655989][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.739928][T15574] loop5: detected capacity change from 0 to 512 [ 628.788357][T15574] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 628.844812][T15574] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 628.873141][T15574] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3253: Corrupt directory, running e2fsck is recommended [ 628.923166][T15574] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 628.959310][T15574] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.3253: corrupted in-inode xattr: invalid ea_ino [ 629.006931][T15574] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 629.007141][T15574] EXT4-fs (loop5): Remounting filesystem read-only [ 629.016352][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 629.016382][ C1] EXT4-fs (loop5): initial error at time 6005: ext4_iget_extra_inode:5128: inode 15 [ 629.016433][ C1] EXT4-fs (loop5): last error at time 6005: ext4_iget_extra_inode:5128: inode 15 [ 629.134853][T15574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.218153][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.288407][T11990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.352708][T15590] syzkaller0: entered promiscuous mode [ 629.360107][T15593] loop5: detected capacity change from 0 to 128 [ 629.376760][T15590] syzkaller0: entered allmulticast mode [ 629.389692][T15593] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 629.408457][T15593] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3259'. [ 629.631672][T15603] loop1: detected capacity change from 0 to 2048 [ 629.642685][T15603] EXT4-fs: Ignoring removed nobh option [ 629.684523][T15603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.001312][T14048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.148249][T15615] hub 8-0:1.0: USB hub found [ 630.153089][T15615] hub 8-0:1.0: 8 ports detected [ 630.171380][T15615] netlink: 'syz.4.3266': attribute type 10 has an invalid length. [ 630.231441][T15615] team0: Device ipvlan0 failed to register rx_handler [ 630.645425][T15620] loop6: detected capacity change from 0 to 128 [ 630.801202][T15625] netlink: 'syz.0.3267': attribute type 10 has an invalid length. [ 630.811616][T15625] team0: Device ipvlan0 failed to register rx_handler [ 630.912697][T15620] FAT-fs (loop6): Directory bread(block 32) failed [ 630.945870][T15620] FAT-fs (loop6): Directory bread(block 33) failed [ 631.011946][T15620] FAT-fs (loop6): Directory bread(block 34) failed [ 631.018555][T15620] FAT-fs (loop6): Directory bread(block 35) failed [ 631.025239][T15620] FAT-fs (loop6): Directory bread(block 36) failed [ 631.031838][T15620] FAT-fs (loop6): Directory bread(block 37) failed [ 631.038408][T15620] FAT-fs (loop6): Directory bread(block 38) failed [ 631.044975][T15620] FAT-fs (loop6): Directory bread(block 39) failed [ 631.051542][T15620] FAT-fs (loop6): Directory bread(block 40) failed [ 631.058599][T15620] FAT-fs (loop6): Directory bread(block 41) failed [ 631.395324][ T3867] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 631.420070][T15632] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3272'. [ 631.475461][ T4859] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.491720][ T4859] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.505693][ T4859] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.514917][ T4859] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.534300][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3272'. [ 631.566799][T15638] syzkaller0: entered promiscuous mode [ 631.581157][T15638] syzkaller0: entered allmulticast mode [ 631.667867][T15646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3276'. [ 631.692280][T15646] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3276'. [ 631.951431][T15645] wireguard0: entered promiscuous mode [ 631.957744][T15645] wireguard0: entered allmulticast mode [ 632.184184][T15643] syz.4.3275 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 632.396905][T15662] hub 8-0:1.0: USB hub found [ 632.401903][T15662] hub 8-0:1.0: 8 ports detected [ 632.426668][ T28] audit: type=1400 audit(6008.422:2299): avc: denied { listen } for pid=15663 comm="syz.5.3282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 632.556969][T15665] loop6: detected capacity change from 0 to 128 [ 632.653773][T15665] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 632.824365][T15665] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3281'. [ 633.009061][T15670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3284'. [ 633.022591][ T68] bond0: (slave bond_slave_0): interface is now down [ 633.030007][ T68] bond0: (slave bond_slave_1): interface is now down [ 633.037540][ T68] bond0: now running without any active interface! [ 633.237365][ T4859] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.266042][ T4859] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.579876][T15686] netlink: 'syz.0.3286': attribute type 10 has an invalid length. [ 633.704241][T15686] team0: Device ipvlan0 failed to register rx_handler [ 633.746199][ T4859] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.768272][T15688] 9p: Bad value for 'wfdno' [ 633.814205][ T4859] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.890217][T15682] syzkaller0: entered promiscuous mode [ 633.909016][T15682] syzkaller0: entered allmulticast mode [ 633.926318][T15688] loop1: detected capacity change from 0 to 512 [ 633.963304][ T4859] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.999007][T15688] EXT4-fs: Ignoring removed mblk_io_submit option [ 634.062723][ T4859] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.109340][T11990] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 634.149287][T15688] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 634.177988][ T4859] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.211763][ T4859] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.230506][T15688] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 634.253457][T15688] EXT4-fs (loop1): orphan cleanup on readonly fs [ 634.262089][T15674] xfrm0 speed is unknown, defaulting to 1000 [ 634.336296][T15688] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3288: bg 0: block 361: padding at end of block bitmap is not set [ 634.362070][T15688] loop1: lost filesystem error report for type 5 error -117 [ 634.368081][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 634.373831][T15688] EXT4-fs (loop1): Remounting filesystem read-only [ 634.375461][ C1] EXT4-fs (loop1): initial error at time 6010: ext4_validate_block_bitmap:441 [ 634.383744][T15688] EXT4-fs (loop1): 1 truncate cleaned up [ 634.388413][ C1] [ 634.388439][ C1] EXT4-fs (loop1): last error at time 6010: ext4_validate_block_bitmap:441 [ 634.484507][ T4859] team0: left allmulticast mode [ 634.493272][ T4859] team_slave_0: left allmulticast mode [ 634.507293][T15716] hub 8-0:1.0: USB hub found [ 634.512041][T15716] hub 8-0:1.0: 8 ports detected [ 634.558962][T15688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 634.586522][ T4859] team_slave_1: left allmulticast mode [ 634.615519][ T4859] bond0: left allmulticast mode [ 634.994833][ T4859] bond_slave_0: left allmulticast mode [ 635.001882][T15688] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3288'. [ 635.011521][ T4859] bond_slave_1: left allmulticast mode [ 635.019720][ T4859] team0: left promiscuous mode [ 635.032507][ T4859] team_slave_0: left promiscuous mode [ 635.044328][ T4859] team_slave_1: left promiscuous mode [ 635.052163][ T4859] bond0: left promiscuous mode [ 635.057288][ T4859] bond_slave_0: left promiscuous mode [ 635.063171][ T4859] bond_slave_1: left promiscuous mode [ 635.069201][ T4859] bridge0: port 3(team0) entered disabled state [ 635.076439][T14048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 635.088998][T15721] netlink: 'syz.6.3294': attribute type 10 has an invalid length. [ 635.097221][T15720] hub 8-0:1.0: USB hub found [ 635.101993][T15720] hub 8-0:1.0: 8 ports detected [ 635.168805][ T4859] bridge_slave_1: left allmulticast mode [ 635.208060][ T4859] bridge_slave_1: left promiscuous mode [ 635.225562][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.282699][ T4859] bridge_slave_0: left allmulticast mode [ 635.293894][ T4859] bridge_slave_0: left promiscuous mode [ 635.300370][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.331592][ T28] audit: type=1400 audit(6011.333:2300): avc: denied { write } for pid=15717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.179132][T15735] hub 8-0:1.0: USB hub found [ 636.184086][T15735] hub 8-0:1.0: 8 ports detected [ 636.213032][T15737] hub 8-0:1.0: USB hub found [ 636.218921][T15737] hub 8-0:1.0: 8 ports detected [ 636.290830][ T28] audit: type=1400 audit(6012.293:2301): avc: denied { write } for pid=15739 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.944447][T15756] loop4: detected capacity change from 0 to 512 [ 637.780874][T15756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.794341][ T28] audit: type=1400 audit(6013.793:2302): avc: denied { write } for pid=15746 comm="syz.4.3299" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 639.079711][ T4859] team0: Port device bond0 removed [ 639.086790][ T4859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.097637][ T4859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.107034][ T4859] bond0 (unregistering): Released all slaves [ 639.114726][ T4859] bond1 (unregistering): Released all slaves [ 639.123728][ T4859] bond2 (unregistering): Released all slaves [ 639.132685][ T4859] bond3 (unregistering): Released all slaves [ 639.141574][ T4859] bond4 (unregistering): Released all slaves [ 639.150450][ T4859] bond5 (unregistering): Released all slaves [ 639.159424][ T4859] bond6 (unregistering): Released all slaves [ 639.169693][ T4859] bond7 (unregistering): Released all slaves [ 639.180740][T15721] ipvlan0: entered allmulticast mode [ 639.186156][T15721] veth0_vlan: entered allmulticast mode [ 639.192331][T15721] team0: Device ipvlan0 failed to register rx_handler [ 639.220137][T15674] lo speed is unknown, defaulting to 1000 [ 639.220146][ T3412] xfrm0 speed is unknown, defaulting to 1000 [ 639.220167][ T3412] syz0: Port: 1 Link DOWN [ 639.231248][ T4885] smc: removing ib device syz0 [ 639.247001][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 639.318162][T14629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.407805][T15763] syzkaller0: entered promiscuous mode [ 639.431819][T15763] syzkaller0: entered allmulticast mode [ 639.704232][ T28] audit: type=1400 audit(6015.704:2303): avc: denied { write } for pid=15774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.730186][T15790] loop6: detected capacity change from 0 to 1024 [ 639.754397][T15768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3302'. [ 639.771804][T15768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3302'. [ 639.777536][T15790] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 639.801430][T15790] System zones: 0-1, 3-36 [ 639.826041][T15790] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3304: bad orphan inode 134217728 [ 639.829918][ T28] audit: type=1400 audit(6015.824:2304): avc: denied { write } for pid=15795 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.851310][T15790] loop6: lost filesystem error report for type 5 error -117 [ 639.864574][T15790] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.905182][ T4859] hsr_slave_0: left promiscuous mode [ 639.913787][T15782] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3304'. [ 639.923221][ T4859] hsr_slave_1: left promiscuous mode [ 639.930083][T15782] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3304'. [ 639.931519][ T4859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.950842][ T4859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.963588][ T4859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.973680][ T4859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.998596][ T4859] veth1_macvtap: left promiscuous mode [ 640.016475][ T28] audit: type=1400 audit(6016.014:2305): avc: denied { write } for pid=15781 comm="syz.6.3304" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 640.043815][ T4859] veth0_macvtap: left promiscuous mode [ 640.049704][ T4859] veth1_vlan: left promiscuous mode [ 640.058091][ T4859] veth0_vlan: left promiscuous mode [ 640.193867][ T4859] team0 (unregistering): Port device team_slave_1 removed [ 640.212204][ T4859] team0 (unregistering): Port device team_slave_0 removed [ 640.302136][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 640.315260][T15674] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.328059][T15674] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.340711][T15674] bridge_slave_0: entered allmulticast mode [ 640.356017][T15674] bridge_slave_0: entered promiscuous mode [ 640.377346][T15674] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.394634][T15674] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.403329][T15674] bridge_slave_1: entered allmulticast mode [ 640.410276][T15674] bridge_slave_1: entered promiscuous mode [ 640.490633][T15674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.515044][T15808] hub 8-0:1.0: USB hub found [ 640.520115][T15808] hub 8-0:1.0: 8 ports detected [ 640.598055][T15674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.742143][T15674] team0: Port device team_slave_0 added [ 640.803121][T15674] team0: Port device team_slave_1 added [ 640.940507][T15674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.978305][T15674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.020156][T15674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.048001][T15674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.055585][T15674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.114609][T15674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.129675][ T28] audit: type=1400 audit(6017.134:2306): avc: denied { write } for pid=15809 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.172164][ T4859] IPVS: stop unused estimator thread 0... [ 641.213399][ T28] audit: type=1400 audit(6017.184:2307): avc: denied { associate } for pid=15833 comm="syz.4.3308" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 641.244485][T11990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.265823][T15674] hsr_slave_0: entered promiscuous mode [ 641.288486][ T28] audit: type=1400 audit(6017.294:2308): avc: denied { write } for pid=15836 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.295596][T15674] hsr_slave_1: entered promiscuous mode [ 641.336412][T15674] debugfs: 'hsr0' already exists in 'hsr' [ 641.342840][T15674] Cannot create hsr debugfs directory [ 642.299246][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 642.309818][T15842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3311'. [ 642.328118][T15842] xfrm0 speed is unknown, defaulting to 1000 [ 642.662475][T15849] netlink: 'syz.1.3310': attribute type 10 has an invalid length. [ 642.689159][T15847] hub 8-0:1.0: USB hub found [ 642.694516][T15847] hub 8-0:1.0: 8 ports detected [ 642.718312][T15847] netlink: 'syz.6.3309': attribute type 10 has an invalid length. [ 642.730326][T15850] netlink: 'syz.4.3312': attribute type 10 has an invalid length. [ 642.765782][T15849] team0: Device ipvlan0 failed to register rx_handler [ 642.787200][T15847] team0: Device ipvlan0 failed to register rx_handler [ 642.798459][T15850] team0: Device ipvlan0 failed to register rx_handler [ 642.820554][T15842] xfrm0 speed is unknown, defaulting to 1000 [ 642.942207][T15842] xfrm0 speed is unknown, defaulting to 1000 [ 643.051421][T15855] syzkaller0: entered promiscuous mode [ 643.059334][T15842] infiniband syz0: set active [ 643.074100][T15842] infiniband syz0: added xfrm0 [ 643.082909][T15855] syzkaller0: entered allmulticast mode [ 643.092219][T15842] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 643.092441][T15842] infiniband syz0: Couldn't open port 1 [ 643.094027][T15858] loop4: detected capacity change from 0 to 2048 [ 643.125426][T15760] xfrm0 speed is unknown, defaulting to 1000 [ 643.150479][T15842] RDS/IB: syz0: added [ 643.151583][T15858] EXT4-fs: Ignoring removed nobh option [ 643.175477][T15842] smc: adding ib device syz0 with port count 1 [ 643.200043][T15842] smc: ib device syz0 port 1 has no pnetid [ 643.233862][T15842] xfrm0 speed is unknown, defaulting to 1000 [ 643.243031][T15867] loop6: detected capacity change from 0 to 1024 [ 643.243738][ T28] audit: type=1400 audit(6019.244:2309): avc: denied { write } for pid=15859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.253149][T15760] xfrm0 speed is unknown, defaulting to 1000 [ 643.351402][ T28] audit: type=1400 audit(6019.354:2310): avc: denied { write } for pid=15881 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.359423][T15858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.389518][T15842] xfrm0 speed is unknown, defaulting to 1000 [ 643.423497][T15867] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 643.467743][T15842] xfrm0 speed is unknown, defaulting to 1000 [ 643.474510][T15674] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 643.478664][T15867] System zones: 0-1, 3-36 [ 643.494427][T15674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 643.494878][T15867] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3316: bad orphan inode 134217728 [ 643.513960][T15674] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 643.526156][T15674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 643.538322][T15674] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 643.548822][T14629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.567462][T15867] loop6: lost filesystem error report for type 5 error -117 [ 643.569035][T15867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.662394][T15867] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3316'. [ 643.685814][T15867] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3316'. [ 643.712071][ T28] audit: type=1400 audit(6019.714:2311): avc: denied { write } for pid=15887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.755042][ T28] audit: type=1400 audit(6019.754:2312): avc: denied { write } for pid=15902 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.786502][ T28] audit: type=1400 audit(6019.754:2313): avc: denied { write } for pid=15865 comm="syz.6.3316" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 643.842761][T15674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 643.854527][T15674] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 643.882001][T15893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3318'. [ 643.930036][T15674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 643.942227][T15842] xfrm0 speed is unknown, defaulting to 1000 [ 644.025601][T15674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.055894][T15674] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.082764][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.089932][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.133372][T15842] xfrm0 speed is unknown, defaulting to 1000 [ 644.140733][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.147915][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.167092][ T28] audit: type=1400 audit(6020.164:2314): avc: denied { write } for pid=15917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.270915][ T28] audit: type=1400 audit(6020.275:2315): avc: denied { write } for pid=15928 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.294574][T15908] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 644.500382][T15674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.763351][T15674] veth0_vlan: entered promiscuous mode [ 644.786819][T15674] veth1_vlan: entered promiscuous mode [ 644.829320][T15674] veth0_macvtap: entered promiscuous mode [ 644.837824][T15674] veth1_macvtap: entered promiscuous mode [ 644.854573][T15674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.923937][T15992] netlink: 'syz.4.3320': attribute type 10 has an invalid length. [ 644.987714][T15674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.432078][T15999] netlink: 'syz.0.3321': attribute type 10 has an invalid length. [ 645.549136][T15992] team0: Device ipvlan0 failed to register rx_handler [ 645.564787][T15999] team0: Device ipvlan0 failed to register rx_handler [ 645.577557][ T4870] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.609092][ T4870] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.872612][T11990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.884696][T16008] loop4: detected capacity change from 0 to 1764 [ 645.898307][ T4870] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.925541][T16008] ISOFS: Unable to identify CD-ROM format. [ 645.931647][ T4870] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.973410][T16014] loop6: detected capacity change from 0 to 2048 [ 645.983286][T16014] EXT4-fs: Ignoring removed nobh option [ 646.014987][T16014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.097826][T11990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.107126][T16003] lo speed is unknown, defaulting to 1000 [ 646.133666][T16003] xfrm0 speed is unknown, defaulting to 1000 [ 646.253102][T16034] loop5: detected capacity change from 0 to 4096 [ 646.285281][T16026] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3327'. [ 646.340949][T16026] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 646.604796][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 646.604817][ T28] audit: type=1400 audit(6022.605:2323): avc: denied { read } for pid=16048 comm="syz.1.3333" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 646.608383][T16042] FAULT_INJECTION: forcing a failure. [ 646.608383][T16042] name failslab, interval 1, probability 0, space 0, times 0 [ 646.620153][ T28] audit: type=1400 audit(6022.615:2324): avc: denied { open } for pid=16048 comm="syz.1.3333" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 646.648537][T16042] CPU: 0 UID: 0 PID: 16042 Comm: syz.5.3330 Tainted: G W syzkaller #0 PREEMPT(full) [ 646.648657][T16042] Tainted: [W]=WARN [ 646.648679][T16042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 646.648723][T16042] Call Trace: [ 646.648754][T16042] [ 646.648786][T16042] __dump_stack+0x1d/0x30 [ 646.648961][T16042] dump_stack_lvl+0x95/0xd0 [ 646.649038][T16042] dump_stack+0x15/0x1b [ 646.649183][T16042] should_fail_ex+0x263/0x280 [ 646.649308][T16042] ? tcf_exts_init_ex+0x9a/0x380 [ 646.649398][T16042] should_failslab+0x8c/0xb0 [ 646.649508][T16042] __kmalloc_cache_noprof+0x5f/0x400 [ 646.649701][T16042] tcf_exts_init_ex+0x9a/0x380 [ 646.649790][T16042] route4_change+0x22c/0x1060 [ 646.649898][T16042] tc_new_tfilter+0xfc0/0x1200 [ 646.650034][T16042] ? __pfx_tc_new_tfilter+0x10/0x10 [ 646.650175][T16042] rtnetlink_rcv_msg+0x64b/0x720 [ 646.650296][T16042] netlink_rcv_skb+0x123/0x220 [ 646.650425][T16042] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 646.650555][T16042] rtnetlink_rcv+0x1c/0x30 [ 646.650680][T16042] netlink_unicast+0x5a8/0x680 [ 646.650863][T16042] netlink_sendmsg+0x5c8/0x6f0 [ 646.650988][T16042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.651094][T16042] ____sys_sendmsg+0x563/0x5b0 [ 646.651182][T16042] ___sys_sendmsg+0x195/0x1e0 [ 646.651357][T16042] __x64_sys_sendmsg+0xd4/0x160 [ 646.651454][T16042] x64_sys_call+0x194c/0x3020 [ 646.651551][T16042] do_syscall_64+0x12c/0x3b0 [ 646.651650][T16042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.651811][T16042] RIP: 0033:0x7faa8454cdd9 [ 646.651874][T16042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.651947][T16042] RSP: 002b:00007faa82f9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.652048][T16042] RAX: ffffffffffffffda RBX: 00007faa847c5fa0 RCX: 00007faa8454cdd9 [ 646.652101][T16042] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000003 [ 646.652152][T16042] RBP: 00007faa82f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 646.652217][T16042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.652260][T16042] R13: 00007faa847c6038 R14: 00007faa847c5fa0 R15: 00007ffe812d7768 [ 646.652389][T16042] [ 646.773880][T16052] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98 [ 646.937876][T16049] loop1: detected capacity change from 0 to 2048 [ 646.978309][T16049] Alternate GPT is invalid, using primary GPT. [ 646.984735][T16049] loop1: p1 p2 p3 [ 647.140552][T16060] loop4: detected capacity change from 0 to 2048 [ 647.157750][T16060] EXT4-fs: Ignoring removed nobh option [ 647.180103][T16057] loop5: detected capacity change from 0 to 1024 [ 647.202393][T16060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.252051][T16067] netlink: 'syz.1.3337': attribute type 10 has an invalid length. [ 647.263468][T16067] team0: Device ipvlan0 failed to register rx_handler [ 647.330786][T16057] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 647.343253][T16057] System zones: 0-1, 3-36 [ 647.379635][T16057] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.3334: bad orphan inode 134217728 [ 647.435346][T16057] loop5: lost filesystem error report for type 5 error -117 [ 647.438398][T14629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.455805][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 647.462406][ C0] EXT4-fs (loop5): initial error at time 6023: ext4_orphan_get:1423 [ 647.470504][ C0] EXT4-fs (loop5): last error at time 6023: ext4_orphan_get:1423 [ 647.512398][T16057] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.700998][T16057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3334'. [ 647.716872][T16057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3334'. [ 647.846362][ T28] audit: type=1400 audit(6023.835:2325): avc: denied { write } for pid=16054 comm="syz.5.3334" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 648.091350][T16075] netlink: 'syz.1.3339': attribute type 10 has an invalid length. [ 648.137714][T16075] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.151964][T16075] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.190926][T16075] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.199422][T16075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.214911][T16075] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.224028][T16075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.322438][T16075] team0: Port device bridge0 added [ 648.350751][T15674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.400863][T16079] syzkaller0: entered promiscuous mode [ 648.406971][T16079] syzkaller0: entered allmulticast mode [ 648.459377][T16082] loop5: detected capacity change from 0 to 164 [ 648.466398][T16082] iso9660: Bad value for 'session' [ 648.654927][T16086] loop4: detected capacity change from 0 to 128 [ 648.687925][T16086] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 648.787983][ T28] audit: type=1400 audit(6024.795:2326): avc: denied { write } for pid=16085 comm="syz.4.3343" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 652.404746][T16115] netlink: 'syz.0.3347': attribute type 10 has an invalid length. [ 652.413962][T16115] team0: Device ipvlan0 failed to register rx_handler [ 652.479580][T16117] netlink: 'syz.5.3349': attribute type 10 has an invalid length. [ 652.487889][T16117] ipvlan0: entered allmulticast mode [ 652.493485][T16117] veth0_vlan: entered allmulticast mode [ 652.503219][T16117] team0: Device ipvlan0 failed to register rx_handler [ 652.644141][T14629] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 652.830429][T16118] syzkaller0: entered promiscuous mode [ 652.836027][T16118] syzkaller0: entered allmulticast mode [ 653.040380][T16138] hub 8-0:1.0: USB hub found [ 653.059063][T16138] hub 8-0:1.0: 8 ports detected [ 653.225846][T16141] loop6: detected capacity change from 0 to 512 [ 653.299386][T16141] EXT4-fs (loop6): 1 orphan inode deleted [ 653.312674][T16141] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.359571][T11990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.421452][T16149] loop6: detected capacity change from 0 to 128 [ 653.447972][T16149] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 653.567126][T16149] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3360'. [ 653.613572][ T28] audit: type=1400 audit(6029.606:2327): avc: denied { write } for pid=16148 comm="syz.6.3360" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 653.918880][T16157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3362'. [ 654.041566][T16157] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 654.079419][T16160] loop4: detected capacity change from 0 to 4096 [ 654.157604][T16160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.197432][T16164] loop5: detected capacity change from 0 to 2048 [ 654.222694][T16160] EXT4-fs error (device loop4): ext4_get_first_dir_block:3557: inode #12: block 80: comm syz.4.3363: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 654.250117][ T28] audit: type=1400 audit(6030.216:2328): avc: denied { write } for pid=16159 comm="syz.4.3363" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 654.321113][T16160] EXT4-fs error (device loop4): ext4_get_first_dir_block:3560: inode #12: comm syz.4.3363: directory missing '..' [ 654.338736][T16164] EXT4-fs: Ignoring removed nobh option [ 654.348313][ T28] audit: type=1400 audit(6030.216:2329): avc: denied { write } for pid=16159 comm="syz.4.3363" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 654.383540][ T28] audit: type=1400 audit(6030.216:2330): avc: denied { add_name } for pid=16159 comm="syz.4.3363" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 654.432976][ T28] audit: type=1400 audit(6030.216:2331): avc: denied { write } for pid=16159 comm="syz.4.3363" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 654.471802][T14629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.482732][T11990] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 654.487402][ T28] audit: type=1400 audit(6030.216:2332): avc: denied { write } for pid=16159 comm="syz.4.3363" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 654.514259][ T28] audit: type=1400 audit(6030.216:2333): avc: denied { write } for pid=16159 comm="syz.4.3363" name="file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 654.527532][T16184] netlink: 'syz.1.3368': attribute type 10 has an invalid length. [ 654.548022][ T28] audit: type=1400 audit(6030.216:2334): avc: denied { write } for pid=16159 comm="syz.4.3363" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 654.548069][ T28] audit: type=1400 audit(6030.216:2335): avc: denied { rename } for pid=16159 comm="syz.4.3363" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 654.548104][ T28] audit: type=1400 audit(6030.216:2336): avc: denied { reparent } for pid=16159 comm="syz.4.3363" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 654.556404][T16164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.581575][T16184] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.652574][T16184] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.682125][T16190] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 654.745138][T15674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.861822][T16201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3373'. [ 654.878509][T16201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3373'. [ 655.139289][T16212] loop5: detected capacity change from 0 to 512 [ 655.228579][T16212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.611487][T16216] loop1: detected capacity change from 0 to 512 [ 655.828898][T16216] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 655.943722][T16216] FAULT_INJECTION: forcing a failure. [ 655.943722][T16216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.982728][T16216] CPU: 0 UID: 0 PID: 16216 Comm: syz.1.3375 Tainted: G W syzkaller #0 PREEMPT(full) [ 655.982781][T16216] Tainted: [W]=WARN [ 655.982791][T16216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 655.982807][T16216] Call Trace: [ 655.982815][T16216] [ 655.982826][T16216] __dump_stack+0x1d/0x30 [ 655.982863][T16216] dump_stack_lvl+0x95/0xd0 [ 655.982892][T16216] dump_stack+0x15/0x1b [ 655.982973][T16216] should_fail_ex+0x263/0x280 [ 655.983046][T16216] should_fail+0xb/0x20 [ 655.983213][T16216] should_fail_usercopy+0x1a/0x20 [ 655.983253][T16216] _copy_to_user+0x20/0xa0 [ 655.983326][T16216] simple_read_from_buffer+0xb5/0x130 [ 655.983445][T16216] proc_fail_nth_read+0x10e/0x150 [ 655.983526][T16216] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 655.983558][T16216] vfs_read+0x1ab/0x7f0 [ 655.983606][T16216] ? __rcu_read_unlock+0x6b/0x70 [ 655.983636][T16216] ? __fget_files+0x184/0x1c0 [ 655.983663][T16216] ? mutex_lock+0x57/0x90 [ 655.983760][T16216] ksys_read+0xdc/0x1a0 [ 655.983847][T16216] __x64_sys_read+0x40/0x50 [ 655.983879][T16216] x64_sys_call+0x2886/0x3020 [ 655.983918][T16216] do_syscall_64+0x12c/0x3b0 [ 655.984020][T16216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.984066][T16216] RIP: 0033:0x7f28e3e1d60e [ 655.984089][T16216] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 655.984116][T16216] RSP: 002b:00007f28e28b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 655.984140][T16216] RAX: ffffffffffffffda RBX: 00007f28e28b76c0 RCX: 00007f28e3e1d60e [ 655.984154][T16216] RDX: 000000000000000f RSI: 00007f28e28b70a0 RDI: 0000000000000005 [ 655.984168][T16216] RBP: 00007f28e28b7090 R08: 0000000000000000 R09: 0000000000000000 [ 655.984244][T16216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 655.984257][T16216] R13: 00007f28e40d6038 R14: 00007f28e40d5fa0 R15: 00007ffcfba67178 [ 655.984289][T16216] [ 657.308764][T15674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.368556][T16229] loop4: detected capacity change from 0 to 128 [ 657.400213][T16229] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 657.416964][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3378'. [ 657.478532][T16229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3379'. [ 657.519553][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3383'. [ 657.558155][T16239] netlink: 'syz.1.3382': attribute type 10 has an invalid length. [ 658.125659][T16251] loop5: detected capacity change from 0 to 4096 [ 658.171511][T16251] EXT4-fs: Ignoring removed nomblk_io_submit option [ 658.214970][T16251] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 658.364978][T16251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.393026][T14629] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 658.514648][T16267] loop1: detected capacity change from 0 to 1024 [ 658.564629][ T1040] IPVS: starting estimator thread 0... [ 658.601947][T16267] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 658.616345][T16267] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 658.632528][T16267] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.3387: inode #1: comm syz.1.3387: iget: illegal inode # [ 658.646845][T16267] loop1: lost filesystem error report for type 5 error -117 [ 658.647879][T16267] EXT4-fs (loop1): no journal found [ 658.655688][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 658.655867][ C1] EXT4-fs (loop1): initial error at time 6034: ext4_get_journal_inode:5896 [ 658.656588][ C1] EXT4-fs (loop1): last error at time 6034: ext4_get_journal_inode:5896 [ 658.689194][T16267] EXT4-fs (loop1): can't get journal size [ 658.708973][T16267] EXT4-fs (loop1): failed to initialize system zone (-22) [ 658.717954][T16267] EXT4-fs (loop1): mount failed [ 658.783949][T16268] IPVS: using max 2160 ests per chain, 108000 per kthread [ 659.473656][T16267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3387'. [ 659.747221][T15674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.534749][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 660.534775][ T28] audit: type=1400 audit(6036.397:2343): avc: denied { create } for pid=16271 comm="syz.4.3389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 660.743048][ T28] audit: type=1400 audit(6036.417:2344): avc: denied { sys_admin } for pid=16271 comm="syz.4.3389" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 661.080564][T16274] VFS: Mount too revealing [ 661.638981][T16279] loop6: detected capacity change from 0 to 1024 [ 661.768613][T16286] netlink: 'syz.5.3392': attribute type 10 has an invalid length. [ 661.802837][T16286] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.810202][T16286] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.858202][T16286] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.865382][T16286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.872794][T16286] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.879923][T16286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.915305][T16279] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 661.991831][T16286] team0: Port device bridge0 added [ 662.006898][T16279] System zones: 0-1, 3-36 [ 662.028692][T16291] loop1: detected capacity change from 0 to 1024 [ 662.079804][T16279] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3391: bad orphan inode 134217728 [ 662.095067][T16291] EXT4-fs: Ignoring removed bh option [ 662.141241][T16291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.183925][T16279] loop6: lost filesystem error report for type 5 error -117 [ 662.184643][T16279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.313367][ T28] audit: type=1400 audit(6038.278:2345): avc: denied { setattr } for pid=16290 comm="syz.1.3395" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 662.349876][T14048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.359920][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3391'. [ 662.387394][ T28] audit: type=1400 audit(6038.278:2346): avc: denied { watch watch_reads } for pid=16290 comm="syz.1.3395" path="/97/file1" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 662.462904][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3391'. [ 662.473766][ T28] audit: type=1400 audit(6038.278:2347): avc: denied { write } for pid=16290 comm="syz.1.3395" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 662.532482][ T28] audit: type=1400 audit(6038.278:2348): avc: denied { create } for pid=16290 comm="syz.1.3395" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 662.581706][T16305] loop5: detected capacity change from 0 to 512 [ 662.640829][ T28] audit: type=1400 audit(6038.278:2349): avc: denied { read write } for pid=16290 comm="syz.1.3395" name="bus" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 662.701545][ T28] audit: type=1400 audit(6038.278:2350): avc: denied { open } for pid=16290 comm="syz.1.3395" path="/97/file1/bus" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 662.734674][T16305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.779856][T11990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.798299][ T28] audit: type=1400 audit(6038.288:2351): avc: denied { ioctl } for pid=16290 comm="syz.1.3395" path="/97/file1/bus" dev="loop1" ino=19 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 662.839452][ T28] audit: type=1400 audit(6038.288:2352): avc: denied { write } for pid=16290 comm="syz.1.3395" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 663.005247][T16318] netlink: 'syz.6.3399': attribute type 10 has an invalid length. [ 663.024852][T16318] team0: Port device bridge0 added [ 663.102228][T16309] loop1: detected capacity change from 0 to 2048 [ 663.120979][T16309] EXT4-fs: Ignoring removed nobh option [ 663.212861][T16309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 663.280979][T14048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.325064][T15674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.540189][T16327] loop1: detected capacity change from 0 to 164 [ 663.547909][T16327] iso9660: Bad value for 'session' [ 663.703893][T16328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3403'. [ 665.342334][T16363] loop5: detected capacity change from 0 to 164 [ 665.349285][T16363] iso9660: Bad value for 'session' [ 665.391885][T16365] netlink: 'syz.0.3412': attribute type 10 has an invalid length. [ 665.404123][T16365] team0: Device ipvlan0 failed to register rx_handler [ 665.700967][T16369] netlink: 'syz.4.3415': attribute type 10 has an invalid length. [ 665.754653][T16369] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.766202][T16369] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.845666][T16372] loop5: detected capacity change from 0 to 512 [ 665.942507][T16372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.989935][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 665.989956][ T28] audit: type=1400 audit(6041.988:2357): avc: denied { write } for pid=16366 comm="syz.5.3414" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 665.992408][T16369] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.030538][T16369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.041715][T16369] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.050535][T16369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.101483][T16369] team0: Port device bridge0 added [ 666.166809][T16376] syzkaller0: entered promiscuous mode [ 666.172883][T16376] syzkaller0: entered allmulticast mode [ 666.204184][T16381] netlink: 'syz.0.3418': attribute type 10 has an invalid length. [ 666.222716][T16381] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.238684][T16381] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.259178][T16381] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.266771][T16381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.275740][T16381] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.285549][T16381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.399924][T16381] team0: Port device bridge0 added [ 666.510297][T15674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.584985][T16392] loop5: detected capacity change from 0 to 512 [ 666.595195][T16392] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.3421: corrupted in-inode xattr: bad e_name length [ 666.610322][T16392] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 666.612336][T16392] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3421: couldn't read orphan inode 15 (err -117) [ 666.622519][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 666.635972][T16392] loop5: lost filesystem error report for type 5 error -117 [ 666.640238][ C0] EXT4-fs (loop5): initial error at time 6042: ext4_iget_extra_inode:5128 [ 666.641718][T16392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.647600][ C0] : inode 15 [ 666.647618][ C0] EXT4-fs (loop5): last error at time 6042: ext4_orphan_get:1402 [ 666.670507][T16392] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.3421: dx entry: limit 0 != root limit 125 [ 666.671468][ C0] [ 666.693966][T16392] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3421: Corrupt directory, running e2fsck is recommended [ 666.707092][T16392] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.3421: path /23/file7: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 666.806351][T15674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.886888][T16406] loop4: detected capacity change from 0 to 512 [ 666.919416][T16406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.946339][ T28] audit: type=1400 audit(6042.938:2358): avc: denied { write } for pid=16395 comm="syz.4.3422" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 667.059316][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3425'. [ 667.128136][T16415] netlink: 'syz.0.3426': attribute type 10 has an invalid length. [ 667.149032][T16415] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.156270][T16415] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.329209][T16423] hub 8-0:1.0: USB hub found [ 667.334082][T16423] hub 8-0:1.0: 8 ports detected [ 667.346112][T16423] netlink: 'syz.1.3427': attribute type 10 has an invalid length. [ 667.357023][T16423] team0: Device ipvlan0 failed to register rx_handler [ 667.467996][T16422] syzkaller0: entered promiscuous mode [ 667.474353][T16422] syzkaller0: entered allmulticast mode [ 667.589517][T16427] loop6: detected capacity change from 0 to 128 [ 667.695042][T16427] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 667.770270][ T28] audit: type=1400 audit(6043.769:2359): avc: denied { write } for pid=16426 comm="syz.6.3430" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 667.929128][T14629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.942808][ T28] audit: type=1400 audit(6043.949:2360): avc: denied { watch } for pid=16431 comm="syz.0.3432" path="/128" dev="tmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 668.061987][T16439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3435'. [ 668.116783][T16439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 668.161013][T16443] netlink: 'syz.4.3436': attribute type 10 has an invalid length. [ 668.181185][T16446] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 668.230756][ T28] audit: type=1400 audit(6044.229:2361): avc: denied { write } for pid=16437 comm="syz.1.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 668.253116][T16446] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 668.271448][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3437'. [ 668.341971][ T28] audit: type=1400 audit(6044.339:2362): avc: denied { ioctl } for pid=16437 comm="syz.1.3435" path="socket:[48631]" dev="sockfs" ino=48631 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 668.569095][T16439] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 668.588920][T16439] bond3 (unregistering): Released all slaves [ 668.612434][T16443] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.622263][T16443] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.798546][T16458] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 668.842408][T16475] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 668.953548][T16489] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3443'. [ 669.071419][T11990] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 669.115832][T16502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3447'. [ 669.138475][T16502] team1: entered promiscuous mode [ 669.143794][T16502] team1: entered allmulticast mode [ 669.149732][T16502] 8021q: adding VLAN 0 to HW filter on device team1 [ 669.159229][T16503] loop1: detected capacity change from 0 to 164 [ 669.166211][T16503] iso9660: Bad value for 'session' [ 669.248884][T16506] hub 8-0:1.0: USB hub found [ 669.253718][T16506] hub 8-0:1.0: 8 ports detected [ 669.265030][T16506] netlink: 'syz.6.3446': attribute type 10 has an invalid length. [ 669.280240][T16505] netlink: 'syz.0.3445': attribute type 10 has an invalid length. [ 669.305250][T16506] team0: Device ipvlan0 failed to register rx_handler [ 669.324679][ T3454] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 669.376176][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3447'. [ 669.385593][T16475] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 669.397172][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3447'. [ 669.653933][T16505] team0: Device ipvlan0 failed to register rx_handler [ 669.801066][T16517] loop5: detected capacity change from 0 to 512 [ 669.892142][T16517] EXT4-fs: Ignoring removed nobh option [ 669.918699][T16517] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 670.042297][T16512] syzkaller0: entered promiscuous mode [ 670.048055][T16512] syzkaller0: entered allmulticast mode [ 670.068356][T16524] loop6: detected capacity change from 0 to 128 [ 670.214333][T16526] loop1: detected capacity change from 0 to 512 [ 670.273721][T16526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.295122][ T28] audit: type=1400 audit(6046.289:2363): avc: denied { write } for pid=16520 comm="syz.1.3450" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 672.484302][T16536] loop5: detected capacity change from 0 to 512 [ 672.611771][ T4883] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 673.574127][ T4883] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 673.770660][T16536] EXT4-fs warning (device loop5): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop5. [ 673.908632][T14048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.792185][T16544] netlink: 'syz.0.3454': attribute type 10 has an invalid length. [ 674.801924][T16544] team0: Device ipvlan0 failed to register rx_handler [ 674.850190][T16546] hub 8-0:1.0: USB hub found [ 674.855279][T16546] hub 8-0:1.0: 8 ports detected [ 674.866633][T16546] netlink: 'syz.5.3456': attribute type 10 has an invalid length. [ 674.877032][T16546] team0: Device ipvlan0 failed to register rx_handler [ 674.919708][T15760] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 674.958794][T16548] loop1: detected capacity change from 0 to 128 [ 674.971653][T16548] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 675.295219][T16555] hub 8-0:1.0: USB hub found [ 675.300167][T16555] hub 8-0:1.0: 8 ports detected [ 675.317868][T16555] netlink: 'syz.4.3457': attribute type 10 has an invalid length. [ 675.328388][T16555] team0: Device ipvlan0 failed to register rx_handler [ 675.430180][ T28] audit: type=1400 audit(6051.430:2364): avc: denied { write } for pid=16547 comm="syz.1.3455" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 676.210483][T14048] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 676.246201][T16569] program syz.6.3463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 677.099031][T16570] hub 8-0:1.0: USB hub found [ 677.104419][T16570] hub 8-0:1.0: 8 ports detected [ 677.116279][T16570] netlink: 'syz.5.3459': attribute type 10 has an invalid length. [ 677.125677][T16570] team0: Device ipvlan0 failed to register rx_handler [ 677.136359][T16574] netlink: 'syz.4.3461': attribute type 10 has an invalid length. [ 677.146017][T16574] team0: Device ipvlan0 failed to register rx_handler [ 677.570691][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 677.596373][T16585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3465'. [ 677.606379][T16584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.615390][T16584] team0: Port device bond0 added [ 677.621200][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3465'. [ 677.646138][T16584] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3466'. [ 677.661909][T16585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3465'. [ 677.678384][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3465'. [ 677.760533][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3468'. [ 677.891666][T16602] hub 8-0:1.0: USB hub found [ 677.896605][T16602] hub 8-0:1.0: 8 ports detected [ 677.907917][T16602] netlink: 'syz.6.3469': attribute type 10 has an invalid length. [ 677.916723][T16602] team0: Device ipvlan0 failed to register rx_handler [ 678.578347][T16616] loop1: detected capacity change from 0 to 128 [ 678.633762][T16616] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 678.675321][ T28] audit: type=1400 audit(6054.680:2365): avc: denied { write } for pid=16615 comm="syz.1.3472" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 678.726592][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3474'. [ 679.308513][T16635] loop4: detected capacity change from 0 to 1024 [ 679.338095][T16635] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 679.351334][T16635] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 679.366217][T16635] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: comm syz.4.3476: inode #1: comm syz.4.3476: iget: illegal inode # [ 679.380583][T16635] loop4: lost filesystem error report for type 5 error -117 [ 679.382548][T16635] EXT4-fs (loop4): no journal found [ 679.390497][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 679.390818][ C1] EXT4-fs (loop4): initial error at time 6055: ext4_get_journal_inode:5896 [ 679.391057][ C1] EXT4-fs (loop4): last error at time 6055: ext4_get_journal_inode:5896 [ 679.422749][T16635] EXT4-fs (loop4): can't get journal size [ 679.463989][T16635] EXT4-fs (loop4): failed to initialize system zone (-22) [ 679.474077][T16635] EXT4-fs (loop4): mount failed [ 679.939967][T16635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3476'. [ 680.003921][ T28] audit: type=1400 audit(6056.011:2366): avc: denied { write } for pid=14048 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 680.046934][T16643] netlink: 264 bytes leftover after parsing attributes in process `syz.6.3479'. [ 680.104349][ T28] audit: type=1400 audit(6056.101:2367): avc: denied { write } for pid=14048 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 680.967335][T14048] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 681.027854][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3480'. [ 681.174735][T16663] netlink: 'syz.0.3485': attribute type 10 has an invalid length. [ 681.185206][T16663] team0: Device ipvlan0 failed to register rx_handler [ 681.411424][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aee2400: rx timeout, send abort [ 681.604228][T16672] loop5: detected capacity change from 0 to 512 [ 681.911406][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810d4fc200: rx timeout, send abort [ 681.919709][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aee2400: abort rx timeout. Force session deactivation [ 682.145729][T16692] netlink: 'syz.0.3493': attribute type 10 has an invalid length. [ 682.156309][T16692] team0: Device ipvlan0 failed to register rx_handler [ 682.265270][T16693] loop4: detected capacity change from 0 to 1024 [ 682.325207][T16693] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 682.337753][T16693] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 682.350895][T16693] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: comm syz.4.3492: inode #1: comm syz.4.3492: iget: illegal inode # [ 682.365250][T16693] loop4: lost filesystem error report for type 5 error -117 [ 682.369784][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 682.383614][ C0] EXT4-fs (loop4): initial error at time 6058: ext4_get_journal_inode:5896 [ 682.392281][ C0] EXT4-fs (loop4): last error at time 6058: ext4_get_journal_inode:5896 [ 682.411011][T16693] EXT4-fs (loop4): no journal found [ 682.417474][T16693] EXT4-fs (loop4): can't get journal size [ 682.419668][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810d4fc200: abort rx timeout. Force session deactivation [ 682.442452][T16693] EXT4-fs (loop4): failed to initialize system zone (-22) [ 682.450132][T16693] EXT4-fs (loop4): mount failed [ 683.813203][T16690] hub 8-0:1.0: USB hub found [ 683.857745][T16694] netlink: 'syz.6.3489': attribute type 10 has an invalid length. [ 683.881427][T16690] hub 8-0:1.0: 8 ports detected [ 683.895725][T16694] team0: Device ipvlan0 failed to register rx_handler [ 684.024536][T16709] netlink: 'syz.0.3497': attribute type 10 has an invalid length. [ 684.106229][T16709] team0: Device ipvlan0 failed to register rx_handler [ 684.529547][T16720] hub 8-0:1.0: USB hub found [ 684.534495][T16720] hub 8-0:1.0: 8 ports detected [ 684.546700][T16720] netlink: 'syz.4.3500': attribute type 10 has an invalid length. [ 684.556921][T16720] team0: Device ipvlan0 failed to register rx_handler [ 685.061300][T16722] syzkaller0: entered promiscuous mode [ 685.080060][T16722] syzkaller0: entered allmulticast mode [ 685.407962][T16729] loop4: detected capacity change from 0 to 164 [ 685.414836][T16729] iso9660: Bad value for 'session' [ 685.545540][T16732] loop6: detected capacity change from 0 to 1024 [ 685.557289][T16734] loop1: detected capacity change from 0 to 2048 [ 685.660271][T16741] hub 8-0:1.0: USB hub found [ 685.665252][T16741] hub 8-0:1.0: 8 ports detected [ 685.677003][T16741] netlink: 'syz.5.3508': attribute type 10 has an invalid length. [ 685.687796][T16741] team0: Device ipvlan0 failed to register rx_handler [ 685.731999][T16732] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 685.746024][T16732] System zones: 0-1, 3-36 [ 685.774117][T16732] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3505: bad orphan inode 134217728 [ 685.787145][T16732] loop6: lost filesystem error report for type 5 error -117 [ 685.791798][T16732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.879274][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 685.927722][T16734] EXT4-fs: Ignoring removed nobh option [ 686.167770][T16732] __nla_validate_parse: 2 callbacks suppressed [ 686.167792][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3505'. [ 686.169571][T16734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 686.213226][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3505'. [ 686.251674][T14048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.273698][ T28] audit: type=1400 audit(6062.282:2368): avc: denied { write } for pid=16731 comm="syz.6.3505" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 686.530885][ T28] audit: type=1400 audit(6062.492:2369): avc: denied { create } for pid=16746 comm="syz.0.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 686.572128][T16758] netlink: 'syz.5.3512': attribute type 10 has an invalid length. [ 686.587444][T16758] team0: Device ipvlan0 failed to register rx_handler [ 686.620239][ T28] audit: type=1400 audit(6062.502:2370): avc: denied { bind } for pid=16746 comm="syz.0.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 688.278243][T16761] program syz.4.3513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 688.559756][T16762] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3510'. [ 688.633136][T16762] loop1: detected capacity change from 0 to 512 [ 688.655827][T11990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.669668][T16762] EXT4-fs: Ignoring removed nomblk_io_submit option [ 688.755526][T16762] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 688.785592][T16776] qrtr: Invalid version 0 [ 688.817848][T16777] netlink: 'syz.0.3516': attribute type 10 has an invalid length. [ 688.863794][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3517'. [ 688.886611][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3510'. [ 688.896306][ T28] audit: type=1400 audit(6064.902:2371): avc: denied { ioctl } for pid=16770 comm="syz.6.3515" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 688.906557][T16777] team0: Device ipvlan0 failed to register rx_handler [ 689.029736][T16785] hub 8-0:1.0: USB hub found [ 689.035178][T16785] hub 8-0:1.0: 8 ports detected [ 689.048365][T16785] netlink: 'syz.4.3519': attribute type 10 has an invalid length. [ 689.512508][T16785] team0: Device ipvlan0 failed to register rx_handler [ 689.852686][T16797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3523'. [ 689.864248][T16797] syz0: rxe_newlink: already configured on xfrm0 [ 689.924726][T16798] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3522'. [ 689.963295][T16798] loop4: detected capacity change from 0 to 512 [ 689.984356][T16798] EXT4-fs: Ignoring removed nomblk_io_submit option [ 690.064289][T16798] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 690.109657][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3522'. [ 690.120547][T16811] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3528'. [ 690.137144][T16812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=16812 comm=syz.5.3527 [ 690.210171][T16816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3529'. [ 691.646950][T16823] hub 8-0:1.0: USB hub found [ 691.652267][T16823] hub 8-0:1.0: 8 ports detected [ 691.664502][T16823] netlink: 'syz.1.3530': attribute type 10 has an invalid length. [ 691.674896][T16823] team0: Device ipvlan0 failed to register rx_handler [ 691.995237][T16832] netlink: 'syz.0.3531': attribute type 10 has an invalid length. [ 692.004418][T16832] team0: Device ipvlan0 failed to register rx_handler [ 692.321748][T16835] hub 8-0:1.0: USB hub found [ 692.326618][T16835] hub 8-0:1.0: 8 ports detected [ 692.336181][T16835] netlink: 'syz.6.3533': attribute type 10 has an invalid length. [ 692.344909][T16835] team0: Device ipvlan0 failed to register rx_handler [ 692.497793][T16837] hub 8-0:1.0: USB hub found [ 692.502824][T16837] hub 8-0:1.0: 8 ports detected [ 692.521684][T16837] netlink: 'syz.1.3534': attribute type 10 has an invalid length. [ 692.699675][T16841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3535'. [ 692.718967][T16837] team0: Device ipvlan0 failed to register rx_handler [ 692.833647][T16844] loop4: detected capacity change from 0 to 164 [ 692.840687][T16844] iso9660: Bad value for 'session' [ 692.874738][T16841] syz0: rxe_newlink: already configured on xfrm0 [ 693.091988][T16829] loop5: detected capacity change from 0 to 2048 [ 693.112086][T16829] EXT4-fs: Ignoring removed nobh option [ 693.280780][T16829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.372601][T15674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.401183][T16863] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3542'. [ 693.541435][T16865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3543'. [ 693.581299][T16865] syz0: rxe_newlink: already configured on xfrm0 [ 693.633229][T16863] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3542'. [ 693.644719][T16863] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3542'. [ 693.692944][ T28] audit: type=1400 audit(6069.703:2372): avc: denied { setopt } for pid=16872 comm="syz.5.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 693.714314][T16873] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3546'. [ 693.731301][T16873] netlink: 'syz.5.3546': attribute type 6 has an invalid length. [ 693.745618][T16873] netlink: 127868 bytes leftover after parsing attributes in process `syz.5.3546'. [ 693.800081][T16880] netlink: 'syz.6.3549': attribute type 10 has an invalid length. [ 694.120983][T16889] loop1: detected capacity change from 0 to 256 [ 694.148288][T16889] FAT-fs (loop1): Directory bread(block 64) failed [ 694.165503][T16889] FAT-fs (loop1): Directory bread(block 65) failed [ 694.172509][T16889] FAT-fs (loop1): Directory bread(block 66) failed [ 694.179311][T16889] FAT-fs (loop1): Directory bread(block 67) failed [ 694.186168][T16889] FAT-fs (loop1): Directory bread(block 68) failed [ 694.193079][T16889] FAT-fs (loop1): Directory bread(block 69) failed [ 694.200867][T16889] FAT-fs (loop1): Directory bread(block 70) failed [ 694.207705][T16889] FAT-fs (loop1): Directory bread(block 71) failed [ 694.214580][T16889] FAT-fs (loop1): Directory bread(block 72) failed [ 694.221500][T16889] FAT-fs (loop1): Directory bread(block 73) failed [ 694.228901][T16892] netlink: 'syz.4.3554': attribute type 10 has an invalid length. [ 694.274851][T16889] bio_check_eod: 84 callbacks suppressed [ 694.274867][T16889] syz.1.3553: attempt to access beyond end of device [ 694.274867][T16889] loop1: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 694.379691][ T4883] kworker/u8:18: attempt to access beyond end of device [ 694.379691][ T4883] loop1: rw=1, sector=1232, nr_sectors = 24 limit=256 [ 694.394648][ T4883] kworker/u8:18: attempt to access beyond end of device [ 694.394648][ T4883] loop1: rw=1, sector=1288, nr_sectors = 544 limit=256 [ 694.411300][ T4883] kworker/u8:18: attempt to access beyond end of device [ 694.411300][ T4883] loop1: rw=1, sector=1864, nr_sectors = 1476 limit=256 [ 694.621141][T16899] hub 8-0:1.0: USB hub found [ 694.626134][T16899] hub 8-0:1.0: 8 ports detected [ 694.643026][T16899] netlink: 'syz.6.3556': attribute type 10 has an invalid length. [ 694.652662][T16899] team0: Device ipvlan0 failed to register rx_handler [ 694.743905][T16904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16904 comm=syz.1.3558 [ 694.760615][T16904] netlink: 'syz.1.3558': attribute type 11 has an invalid length. [ 694.979633][T16909] all: renamed from bridge_slave_1 (while UP) [ 695.152014][T16919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=16919 comm=syz.1.3562 [ 695.456851][T16929] loop5: detected capacity change from 0 to 4096 [ 695.505732][ T28] audit: type=1400 audit(6071.513:2373): avc: denied { read } for pid=16921 comm="syz.5.3564" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 695.706377][ T28] audit: type=1400 audit(6071.513:2374): avc: denied { open } for pid=16921 comm="syz.5.3564" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 695.967240][T16939] netlink: 'syz.4.3567': attribute type 10 has an invalid length. [ 696.463296][T16962] loop5: detected capacity change from 0 to 512 [ 696.518788][T16962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.561107][ T28] audit: type=1400 audit(6072.543:2375): avc: denied { write } for pid=16948 comm="syz.5.3572" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 697.904910][T16975] validate_nla: 1 callbacks suppressed [ 697.905033][T16975] netlink: 'syz.1.3579': attribute type 10 has an invalid length. [ 697.935170][T16979] IPv6: sit1: Disabled Multicast RS [ 697.948299][T16980] hub 8-0:1.0: USB hub found [ 697.953187][T16980] hub 8-0:1.0: 8 ports detected [ 697.965920][T16980] netlink: 'syz.4.3577': attribute type 10 has an invalid length. [ 697.982365][T16979] sit1: entered allmulticast mode [ 697.988341][T15674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.004048][T16980] team0: Device ipvlan0 failed to register rx_handler [ 698.200366][T17002] loop4: detected capacity change from 0 to 2048 [ 698.220782][T17002] EXT4-fs: Ignoring removed nobh option [ 698.349619][T17002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.633798][T17010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3590'. [ 698.802988][T17013] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 699.801040][T14629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.901059][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3591'. [ 700.019939][T17026] hub 8-0:1.0: USB hub found [ 700.024896][T17026] hub 8-0:1.0: 8 ports detected [ 700.041758][T17026] netlink: 'syz.4.3589': attribute type 10 has an invalid length. [ 700.051781][T17026] team0: Device ipvlan0 failed to register rx_handler [ 700.251373][T16480] kernel read not supported for file [fscontext] (pid: 16480 comm: kworker/1:26) [ 700.654376][T17047] hub 8-0:1.0: USB hub found [ 700.659497][T17047] hub 8-0:1.0: 8 ports detected [ 700.671759][T17047] netlink: 'syz.5.3598': attribute type 10 has an invalid length. [ 700.683011][T17047] team0: Device ipvlan0 failed to register rx_handler [ 701.236689][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 701.282294][T17058] loop6: detected capacity change from 0 to 1024 [ 701.382703][T17058] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 701.411973][T17058] System zones: 0-1, 3-36 [ 701.419527][T17058] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3601: bad orphan inode 134217728 [ 701.432499][T17058] loop6: lost filesystem error report for type 5 error -117 [ 701.438646][T17058] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.453040][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3603'. [ 701.473462][T17058] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3601'. [ 701.492238][T17058] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3601'. [ 701.528300][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3604'. [ 701.598460][ T28] audit: type=1400 audit(6077.604:2376): avc: denied { write } for pid=17057 comm="syz.6.3601" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 701.623585][T17062] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 701.833759][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3606'. [ 702.034389][T17096] hub 8-0:1.0: USB hub found [ 702.039328][T17096] hub 8-0:1.0: 8 ports detected [ 702.052476][T17096] netlink: 'syz.4.3611': attribute type 10 has an invalid length. [ 702.062905][T17096] team0: Device ipvlan0 failed to register rx_handler [ 702.286948][T17100] loop1: detected capacity change from 0 to 164 [ 702.293915][T17100] iso9660: Bad value for 'session' [ 702.572371][T17104] hub 8-0:1.0: USB hub found [ 702.577466][T17104] hub 8-0:1.0: 8 ports detected [ 702.589319][T17104] netlink: 'syz.5.3614': attribute type 10 has an invalid length. [ 702.599862][T17104] team0: Device ipvlan0 failed to register rx_handler [ 702.795542][T17106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3615'. [ 702.928424][T11990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.944523][T17110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3616'. [ 703.024730][T17109] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 703.053216][T17106] syz0: rxe_newlink: already configured on xfrm0 [ 703.171877][T17113] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3618'. [ 703.234376][T17121] loop6: detected capacity change from 0 to 512 [ 703.267148][T17123] loop4: detected capacity change from 0 to 164 [ 703.274009][T17123] iso9660: Bad value for 'session' [ 703.282055][T17121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.325784][ T28] audit: type=1400 audit(6079.335:2377): avc: denied { write } for pid=17112 comm="syz.6.3617" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 703.404441][T17131] loop4: detected capacity change from 0 to 1024 [ 703.457408][T17131] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 703.474142][T17131] System zones: 0-1, 3-36 [ 703.487149][T17131] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.3624: bad orphan inode 134217728 [ 703.505123][T17131] loop4: lost filesystem error report for type 5 error -117 [ 703.505838][T17131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.584546][ T28] audit: type=1400 audit(6079.595:2378): avc: denied { write } for pid=17127 comm="syz.4.3624" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 703.671873][T17131] ================================================================== [ 703.680046][T17131] BUG: KCSAN: data-race in filemap_read / filemap_read [ 703.686981][T17131] [ 703.689336][T17131] write to 0xffff88810f41c760 of 8 bytes by task 17153 on cpu 1: [ 703.697090][T17131] filemap_read+0x98d/0xa10 [ 703.701658][T17131] generic_file_read_iter+0x79/0x330 [ 703.707012][T17131] ext4_file_read_iter+0x1cc/0x290 [ 703.712185][T17131] copy_splice_read+0x471/0x6c0 [ 703.717093][T17131] splice_direct_to_actor+0x28f/0x670 [ 703.722542][T17131] do_splice_direct+0x119/0x1a0 [ 703.727453][T17131] do_sendfile+0x382/0x650 [ 703.731991][T17131] __x64_sys_sendfile64+0x105/0x150 [ 703.737254][T17131] x64_sys_call+0x2dc4/0x3020 [ 703.741991][T17131] do_syscall_64+0x12c/0x3b0 [ 703.746733][T17131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.752693][T17131] [ 703.755053][T17131] write to 0xffff88810f41c760 of 8 bytes by task 17131 on cpu 0: [ 703.762807][T17131] filemap_read+0x98d/0xa10 [ 703.767380][T17131] generic_file_read_iter+0x79/0x330 [ 703.772744][T17131] ext4_file_read_iter+0x1cc/0x290 [ 703.777919][T17131] copy_splice_read+0x471/0x6c0 [ 703.782845][T17131] splice_direct_to_actor+0x28f/0x670 [ 703.788295][T17131] do_splice_direct+0x119/0x1a0 [ 703.793298][T17131] do_sendfile+0x382/0x650 [ 703.797794][T17131] __x64_sys_sendfile64+0x105/0x150 [ 703.803052][T17131] x64_sys_call+0x2dc4/0x3020 [ 703.807873][T17131] do_syscall_64+0x12c/0x3b0 [ 703.812595][T17131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.818537][T17131] [ 703.820889][T17131] value changed: 0x0000000000000079 -> 0x000000000000007a [ 703.828030][T17131] [ 703.830388][T17131] Reported by Kernel Concurrency Sanitizer on: [ 703.836673][T17131] CPU: 0 UID: 0 PID: 17131 Comm: syz.4.3624 Tainted: G W syzkaller #0 PREEMPT(full) [ 703.847760][T17131] Tainted: [W]=WARN [ 703.851602][T17131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 703.861869][T17131] ================================================================== [ 703.957867][T11990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.079663][T14629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.