last executing test programs: 8m29.77068549s ago: executing program 32 (id=61): socket(0x840000000002, 0x3, 0xff) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000240)={0x9317, 0x1, [{0x1, 0x1}]}) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe94, 0x0, 0xffffffffffffffff, 0xfffffffffffffe7d}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m20.124143091s ago: executing program 33 (id=390): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{0x1d, 0x0, 0x1, 0xffffffff}, {0x5}, {0x6, 0x6}]}) unshare(0x60600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 7m8.851887394s ago: executing program 34 (id=468): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 6m29.702481162s ago: executing program 35 (id=782): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000000)={0xa}) (async) quotactl$Q_GETNEXTQUOTA(0xffffffff00001200, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000140)) (async) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r1) (async) r4 = add_key$user(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000580)="2cd1a3ba29693f785ffab0a62aaf57f832b275d29a0a0a60cf3d74ba3f047f03f1633ee0fe407db4206185181ce5d4ef749a7810787b17af7038115db709a76e41efa21b7c5bb301393eb9e1f7fc488fa66e34ed7ac76dad5bc59cb3620ebef16b4e53f3a5a79eef92d016feaccb577d6a0aee6264072e51d8056d8a4c2791a8620a6e64270bf25b10f9c1ce6b7a2d6f370ff92792425e32bf83a2cecf8f0bedea3a9652fc858d3e1467fe0d51dce778db42eaf4ecd58b8dbb7156", 0xbb, 0xfffffffffffffffe) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) (async) fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r4, r6, r8) (async) keyctl$invalidate(0x15, r4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r9, 0xb08, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xffffff7f, 0x5c}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x219d7e4282c3c8eb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x1) keyctl$unlink(0x9, r4, 0xfffffffffffffffb) (async) sched_setscheduler(r5, 0x0, &(0x7f00000008c0)=0x2) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x60, 0x1403, 0x400, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x40) (async) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/keys\x00', 0x0, 0x0) (async) lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x1008, &(0x7f0000000c00)={'trans=unix,', {[{@access_client}, {@access_client}, {@cachetag={'cachetag', 0x3d, '/selinux/avc/cache_stats\x00'}}, {@cache_loose}, {@dfltuid={'dfltuid', 0x3d, r7}}], [{@uid_eq={'uid', 0x3d, r12}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@euid_lt={'euid<', r6}}, {@obj_role={'obj_role', 0x3d, 'syz'}}, {@uid_gt={'uid>', r7}}]}}) write$P9_RREADDIR(r1, &(0x7f0000000d00)={0xe4, 0x29, 0x2, {0x9, [{{0x40, 0x1, 0x6}, 0x6, 0x4, 0x7, './file0'}, {{0x10, 0x0, 0x5}, 0x3, 0x7, 0x7, './file0'}, {{0x1, 0x1, 0x1}, 0x5b8, 0x8, 0x7, './file0'}, {{0x40, 0x2, 0x3}, 0x5, 0x5, 0x7, './file0'}, {{0x21, 0x3, 0x5}, 0x6, 0x1, 0x7, './file0'}, {{0x0, 0x4, 0x8}, 0x5, 0xca, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x5, 0x1, 0x7, './file0'}]}}, 0xe4) (async) r13 = openat$cgroup_ro(r3, &(0x7f0000000e00)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000e80)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001300)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000012c0)={&(0x7f0000000ec0)=@newqdisc={0x3d4, 0x24, 0x0, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xb, 0x5}, {0x2, 0x2}, {0xffe8, 0x1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x150, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x10, 0x1000, 0x9, 0x1, 0xfffffffc, 0x80000000, 0x5}}, {0xe, 0x2, [0xf5d, 0x1, 0x400, 0x400, 0x6]}}, {{0x1c, 0x1, {0x0, 0x8a, 0x100, 0x2, 0x2, 0x7, 0x8, 0x4}}, {0xc, 0x2, [0x0, 0x7ff, 0x3, 0x7]}}, {{0x1c, 0x1, {0x3, 0x7, 0x1, 0x0, 0x1, 0x8001, 0x4, 0x8}}, {0x14, 0x2, [0x0, 0x7, 0x777, 0x8, 0x5, 0xff60, 0xa7, 0x7]}}, {{0x1c, 0x1, {0x1, 0xfc, 0x8000, 0x2e2b, 0x1, 0xe01, 0x9, 0x4}}, {0xc, 0x2, [0x0, 0x400, 0x401, 0x8a]}}, {{0x1c, 0x1, {0x1, 0x4, 0x6, 0x390f4, 0x2, 0x7fa, 0x0, 0x6}}, {0x10, 0x2, [0x8, 0x3, 0x80, 0x0, 0x2e23, 0xe]}}, {{0x1c, 0x1, {0x3, 0x2, 0x2, 0x8, 0x1, 0x3, 0x0, 0x2}}, {0x8, 0x2, [0x6, 0x100]}}, {{0x1c, 0x1, {0x80, 0x2b, 0xd2a, 0x4, 0x2, 0x3ff, 0x5, 0x4}}, {0xc, 0x2, [0x5, 0x4, 0x7, 0x4]}}, {{0x1c, 0x1, {0x8, 0xff, 0xfffc, 0xff, 0x1, 0x3, 0x4, 0x3}}, {0xa, 0x2, [0x7, 0xc0, 0x64]}}]}, @TCA_RATE={0x6, 0x5, {0x8, 0xd}}, @qdisc_kind_options=@q_gred={{0x9}, {0x188, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x8}, @TCA_GRED_PARMS={0x38, 0x1, {0x5, 0xc1e, 0x2, 0x2, 0x3, 0xff, 0x81d, 0x0, 0x3, 0x974, 0x1a, 0x18, 0x2, 0x4, 0x0, 0x5}}, @TCA_GRED_DPS={0x10, 0x3, {0xf, 0xe, 0x0, 0x2}}, @TCA_GRED_DPS={0x10, 0x3, {0x6, 0xb, 0x0, 0x5}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x9}, @TCA_GRED_DPS={0x10, 0x3, {0x4, 0x1, 0x0, 0x5}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x39423}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x1, 0x8, 0xc290, 0x1, 0xa8b, 0x2, 0x6}}, {0x10, 0x2, [0x5, 0x4, 0xba6, 0x9, 0xe, 0xffff]}}, {{0x1c, 0x1, {0x40, 0x2, 0x800, 0x6, 0x2, 0x8, 0x0, 0x4}}, {0xc, 0x2, [0x1, 0x3, 0x2db, 0x0]}}, {{0x1c, 0x1, {0xc, 0x0, 0x3, 0x2, 0x1, 0x800, 0x9, 0x9}}, {0x16, 0x2, [0x9, 0x3, 0x0, 0x8, 0xfff0, 0x7, 0xfff6, 0x78, 0x9]}}]}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x4, 0xb, 0x2}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffe}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000000) getsockname$packet(r2, &(0x7f0000001340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001380)=0x14) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) r16 = signalfd(r1, &(0x7f0000001640)={[0x80]}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001700)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x1a, 0x21, &(0x7f00000013c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000001500)='syzkaller\x00', 0xb8, 0xc5, &(0x7f0000001540)=""/197, 0x41000, 0x40, '\x00', r15, @fallback=0x36, r16, 0x8, &(0x7f0000001680)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000016c0)={0x2, 0xd, 0xa2, 0x3}, 0x10, r17, r11, 0x2, &(0x7f00000017c0)=[r2, r3, r2, r3, r2, 0xffffffffffffffff, r13], &(0x7f0000001800)=[{0x3, 0x1, 0xa, 0x6}, {0x5, 0x3, 0x6, 0x9}], 0x10, 0x8}, 0x94) 3m27.230030785s ago: executing program 0 (id=1985): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) madvise(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x10) munlockall() socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xc6, &(0x7f0000000400)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0xe000, @multicast1, {[@end, @end, @ra={0x94, 0x4, 0x1}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "f3a8158d6d54b6b7112c8fd4cf25640fe1c3358efc3132bc396d53a720c1c132", "087b052307ebaf31655328c967f626fdb1edb9cae417df1b09c8bf7992599bfda8f8a7e6132e2fbb996f9a83d1b720a2", "45de7917db88d48e3ac3ed0e86e5ea1ce17bd189c6815f49ba679c03", {"eb5deef50731ff6d7bbb9ec294e612c9", "e97f55a20a02ae02d0fe6c4c92ed355e"}}}}}}}, 0x0) io_uring_setup(0x7, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) socket$kcm(0x10, 0x2, 0x4) syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') r1 = socket$phonet(0x23, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000002880)={&(0x7f0000002680)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40c0) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x0, 0x7a}, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0x1a1) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r2, &(0x7f0000001300)=ANY=[@ANYBLOB="10000000f1000000", @ANYRES8=r2], 0x0) 3m26.882799243s ago: executing program 0 (id=1988): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000003040)={0x8, {"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", 0x1000}}, 0xd31) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x0, 0x0) 3m26.655122755s ago: executing program 0 (id=1989): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='check=relaxed,unhide\x00uid=', @ANYRESHEX=0x0, @ANYBLOB=',overriderockperm,map=normal,uid=', @ANYRESHEX=0x0, @ANYBLOB="41757466382c686964652c757466382c6f76657272696465726f636b7065726d2c63727566742c6d61703d6e6f726d616c2c6e6f636f6d70726573732c636865636b3d72ed6c617865642c7375626a5f726f6c653d757466382c00"], 0x2, 0x6c3, &(0x7f0000001b80)="$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") io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000300)=[@ioring_restriction_register_op={0x0, 0x26}], 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = msgget$private(0x0, 0x100) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r2, r2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000980)=0xe8) stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000a80)=0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000ac0)={{0x1, r2, r3, r4, r5, 0x40, 0x9}, 0x0, 0x0, 0x40, 0x4, 0x6, 0x7, 0x7, 0x3, 0x1, 0x0, r6, r7}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r10 = dup2(r9, r9) ioctl$BLKTRACESETUP(r10, 0x301, &(0x7f0000000000)={'\x00', 0x1c00, 0xda3, 0x7fff, 0x5, 0x11}) getuid() r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @empty}}, {{0x2, 0x4e21, @empty}}]}, 0x18c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0xa, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x1200, 0x1000, 0x80, 0x0, 0xa, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766016e6f3d", @ANYRESHEX=r8, @ANYBLOB=',version=9p2000.u,\x00']) write$UHID_INPUT(r8, &(0x7f0000000b40)={0x8, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x4, 0x0) 3m26.245542966s ago: executing program 0 (id=1990): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x81008, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xabca, 0x5, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x100000, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x14}, 0x0, 0x0, &(0x7f0000000140)=""/88, 0x0}, 0x58) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x679, 0x0, 0x8a}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001480)={0x4000000a}) close(r2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x4c142, 0x12) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open$cgroup(0x0, r3, 0x0, r3, 0xd) r4 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x80, 0xffffffff, 0x10b}) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7fffffff, 0x42000) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000280)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) 3m25.832313788s ago: executing program 0 (id=1993): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/2) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x284040, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0x3) (async) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000000c0)) (async) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000500)={0x3, 0x1, 0x1b, 0x1b, 0x1e9, &(0x7f0000000100)}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000540)=0x2) (async) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)=0x0) r3 = perf_event_open$cgroup(&(0x7f0000000640)={0x898317762bb6160b, 0x80, 0x1, 0x23, 0x0, 0x6, 0x0, 0xffff, 0x40, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x1, @perf_config_ext={0x6, 0x5}, 0x8, 0x6, 0x17, 0x6, 0x5, 0x2057, 0x2, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x8, 0x0, 0x0, 0x6, 0x0, 0x2a, 0x52048, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x7, 0x47}, 0x8548, 0x1, 0x7, 0xc, 0x3, 0x5, 0x1, 0x0, 0xdc, 0x0, 0xffffffffffffffff}, r2, 0x6, r3, 0x3) socket$inet6(0xa, 0x80000, 0x1f18) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r5, 0x5605) (async) r6 = syz_open_dev$loop(&(0x7f00000006c0), 0x3, 0x80002) ioctl$IOC_PR_PREEMPT_ABORT(r6, 0x401870cc, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x4}) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000740), 0x2, 0x0) close(r7) (async) io_setup(0xb0, &(0x7f0000000780)=0x0) io_destroy(r8) ioctl$BLKROTATIONAL(r6, 0x127e, &(0x7f00000007c0)) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$FIOCLEX(r1, 0x5451) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x80, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000840)={'bond_slave_1\x00', @multicast}) (async) syz_open_dev$evdev(&(0x7f0000000880), 0x6, 0x4000) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000a40)={r11, &(0x7f0000000900)="f10db2c50c6f07c5a8cf136125747b740cf93ed8ced7adacda8944f53a22c2efdfeac4a8319db798d0b726e957deb7f6ea029b6e72bee7ad0f085f656a60cde0eb7b00fcf0ffba8e8aa514c81de7e5fe230bd21f6ed02f73131f9ea05aaf8bf53a95bae9a48eb7e70ee126bec435e9d4ee02d9129127dbbb80973cb38fe2e8e615a3481a5a805220526c926d39dc1b54580fe3e73ad0072462edc15394dffcdbedb02b3956b6b44a78b4120944f8947aa1589080b09fb6a27a048866a6aebc1a41e1c6afc31caf8ad64ca6312c7c05ea2c901c6fc9bd660281af87305daba980781817a5689af8625cb8dfe4c7f8e3a138c96b1726a186d973", &(0x7f0000000a00), 0x4}, 0x20) (async) recvmsg(r9, &(0x7f0000001080)={&(0x7f0000000a80)=@rc={0x1f, @none}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000b00)=""/219, 0xdb}, {&(0x7f0000000c00)=""/229, 0xe5}, {&(0x7f0000000d00)=""/112, 0x70}, {&(0x7f0000000d80)=""/70, 0x46}, {&(0x7f0000000e00)=""/164, 0xa4}, {&(0x7f0000000ec0)=""/26, 0x1a}], 0x6, &(0x7f0000000f80)=""/200, 0xc8}, 0x100) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) 3m25.79585638s ago: executing program 36 (id=1993): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/2) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x284040, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0x3) (async) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000000c0)) (async) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000500)={0x3, 0x1, 0x1b, 0x1b, 0x1e9, &(0x7f0000000100)}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000540)=0x2) (async) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)=0x0) r3 = perf_event_open$cgroup(&(0x7f0000000640)={0x898317762bb6160b, 0x80, 0x1, 0x23, 0x0, 0x6, 0x0, 0xffff, 0x40, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x1, @perf_config_ext={0x6, 0x5}, 0x8, 0x6, 0x17, 0x6, 0x5, 0x2057, 0x2, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x8, 0x0, 0x0, 0x6, 0x0, 0x2a, 0x52048, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x7, 0x47}, 0x8548, 0x1, 0x7, 0xc, 0x3, 0x5, 0x1, 0x0, 0xdc, 0x0, 0xffffffffffffffff}, r2, 0x6, r3, 0x3) socket$inet6(0xa, 0x80000, 0x1f18) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r5, 0x5605) (async) r6 = syz_open_dev$loop(&(0x7f00000006c0), 0x3, 0x80002) ioctl$IOC_PR_PREEMPT_ABORT(r6, 0x401870cc, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x4}) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000740), 0x2, 0x0) close(r7) (async) io_setup(0xb0, &(0x7f0000000780)=0x0) io_destroy(r8) ioctl$BLKROTATIONAL(r6, 0x127e, &(0x7f00000007c0)) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$FIOCLEX(r1, 0x5451) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x80, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000840)={'bond_slave_1\x00', @multicast}) (async) syz_open_dev$evdev(&(0x7f0000000880), 0x6, 0x4000) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000a40)={r11, &(0x7f0000000900)="f10db2c50c6f07c5a8cf136125747b740cf93ed8ced7adacda8944f53a22c2efdfeac4a8319db798d0b726e957deb7f6ea029b6e72bee7ad0f085f656a60cde0eb7b00fcf0ffba8e8aa514c81de7e5fe230bd21f6ed02f73131f9ea05aaf8bf53a95bae9a48eb7e70ee126bec435e9d4ee02d9129127dbbb80973cb38fe2e8e615a3481a5a805220526c926d39dc1b54580fe3e73ad0072462edc15394dffcdbedb02b3956b6b44a78b4120944f8947aa1589080b09fb6a27a048866a6aebc1a41e1c6afc31caf8ad64ca6312c7c05ea2c901c6fc9bd660281af87305daba980781817a5689af8625cb8dfe4c7f8e3a138c96b1726a186d973", &(0x7f0000000a00), 0x4}, 0x20) (async) recvmsg(r9, &(0x7f0000001080)={&(0x7f0000000a80)=@rc={0x1f, @none}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000b00)=""/219, 0xdb}, {&(0x7f0000000c00)=""/229, 0xe5}, {&(0x7f0000000d00)=""/112, 0x70}, {&(0x7f0000000d80)=""/70, 0x46}, {&(0x7f0000000e00)=""/164, 0xa4}, {&(0x7f0000000ec0)=""/26, 0x1a}], 0x6, &(0x7f0000000f80)=""/200, 0xc8}, 0x100) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) 3m22.37952694s ago: executing program 9 (id=1994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1b, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000005000000000000000008002f48ce7c5d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000ffff00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018220000", @ANYRES32=r0, @ANYBLOB="000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000000732f8ff080000008510000008000000ac28ff03290700009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffb}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_eee={0x44, 0x1, 0x3, 0x400, 0x3, 0x7, 0x15ac, 0xf, [0x4, 0x8]}}) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r7, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000180)=0x8) connect$unix(r6, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={0x0, 0x700}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) waitid(0x2, r2, 0x0, 0x4, &(0x7f0000000680)) umount2(&(0x7f0000000040)='.\x00', 0x2) 3m22.098788674s ago: executing program 9 (id=2027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000f8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000340)=0x9) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000000)=0xfffffffffffffffe) fcntl$notify(r5, 0x402, 0x8000003f) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e22, @private=0xa010102}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000080)={r8, 0xc06, 0x5}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x20, &(0x7f0000000940)="df05000000a60000090000000000", 0x0, 0xae33, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x20) 3m20.034041183s ago: executing program 9 (id=2049): socketpair(0x10, 0x80000, 0xe, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_secret(0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x11, r0, 0x9d506000) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000740)=@urb_type_iso={0x0, {0x1, 0x1}, 0xfff9, 0x20, 0x0, 0x0, 0x1, 0x6b3, 0x0, 0x10000, 0x824f, 0x0}) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x28}}, 0x802) ftruncate(r0, 0x51a9497) futex(0x0, 0x8, 0x1, 0x0, 0x0, 0x1) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, 0x0) 3m19.983240016s ago: executing program 37 (id=2049): socketpair(0x10, 0x80000, 0xe, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_secret(0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x11, r0, 0x9d506000) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000740)=@urb_type_iso={0x0, {0x1, 0x1}, 0xfff9, 0x20, 0x0, 0x0, 0x1, 0x6b3, 0x0, 0x10000, 0x824f, 0x0}) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x28}}, 0x802) ftruncate(r0, 0x51a9497) futex(0x0, 0x8, 0x1, 0x0, 0x0, 0x1) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, 0x0) 2m41.326362628s ago: executing program 3 (id=2328): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_procfs(0x0, 0x0) recvmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0xcd, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335db, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, r2, 0xa) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, &(0x7f00000003c0)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e1d, 0xffffffff, @mcast1}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x25, 0x5) syz_extract_tcp_res(&(0x7f0000000400)={0x41424344}, 0x2, 0x4) syz_emit_ethernet(0xa9, &(0x7f00000005c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x9b, 0x68, 0x0, 0x1, 0x6, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x4e20, 0x4e20, r5, 0x41424344, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x0, {[@eol]}}, {"925c9393fa8300e0978cedf39b3d4458fa93be912623f7f8baa3dc58b76520b7af5c4e5f84da7ce1595cb2b5f1d550daf5a3cf415a0cf6da856169e387a1bb546afb514778a95f89a4bf2370e30ff49e757f32d5bf87a9204f53fa9b6bb0ee0981168a87cee082957e6178e2f59c69"}}}}}}, 0x0) syz_emit_ethernet(0xfe, &(0x7f0000000180)={@random="7bce4633e0ca", @remote, @void, {@ipv4={0x800, @tcp={{0x10, 0x4, 0x2, 0x9, 0xf0, 0x65, 0x0, 0xd6, 0x6, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x10, 0xa3, 0x0, 0xe, [0x0, 0x9, 0x9]}, @lsrr={0x83, 0x17, 0x9, [@dev={0xac, 0x14, 0x14, 0x21}, @multicast2, @private=0xa010100, @private=0xa010102, @broadcast]}, @ra={0x94, 0x4, 0x1}]}}, {{0x4e24, 0x4e21, r4, r5, 0x1, 0x0, 0x14, 0xc2, 0x7ff, 0x0, 0x4, {[@timestamp={0x8, 0xa, 0x6, 0x13}, @mss={0x2, 0x4, 0xf4}, @sack={0x5, 0x16, [0xff, 0x0, 0xfff, 0xc0, 0x7]}, @window={0x3, 0x3, 0x2}, @timestamp={0x8, 0xa, 0x400, 0x7}, @eol, @timestamp={0x8, 0xa, 0x2, 0x5}]}}, {"f644348549fd1a117d577600157d5277aa1cadb9351487cac9ae8fad8f527ab4bd8287995909bfc82a295c2036441f91f45d56ea03dd47ddb1811811de620c43f03d2d2e42bd915eccad47b9429224e35ea7ab7b7481172dfbd58aab49720690"}}}}}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x440, 0x6, 0x0, 0x1, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff8850000002d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='9', 0x1}], 0x1) 2m38.546784125s ago: executing program 1 (id=2350): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x25, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x4a4, &(0x7f0000001300)="$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") syz_emit_ethernet(0x12, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180d2000000eb7fe2c837ef03616ac20040a4042c6fe29400"], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x101100, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xa}, {0x0, 0xfff1}, {0x3}}, [{0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) close(0x3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r4, 0x4) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 2m38.137209826s ago: executing program 3 (id=2354): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0xffff, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8605, &(0x7f0000000100)={[{@grpjquota}, {@abort}, {@nolazytime}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}]}, 0x81, 0x645, &(0x7f0000000180)="$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") fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000800), &(0x7f00000008c0), 0x2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r4) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) 2m37.923045947s ago: executing program 1 (id=2361): socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0xf, 0x0, 0x0, 0x0, 0xe26a, 0xf40b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2f}}}]}}]}]}]}}]}, 0x6c}}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$caif_seqpacket(0x25, 0x5, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x124a08, 0x10000, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x80000001, 0x0, 0x100000000}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socket(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd27, 0x25dfdc03, {0x2, 0x20, 0x20, 0x1, 0x0, 0x0, 0x0, 0xa71332d30cec69a7, 0x3800}}, 0x1c}}, 0x40050) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r5, 0x20, &(0x7f0000000440)={&(0x7f00000001c0)=""/83, 0x53, 0x0, &(0x7f0000000340)=""/252, 0xfc}}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') exit(0x100000000000035) 2m35.19678681s ago: executing program 3 (id=2367): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x200, 0x8cc11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7ff, 0x6, 0x6, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_GET_THP_DISABLE(0x2a) pread64(0xffffffffffffffff, &(0x7f0000000380)=""/148, 0x94, 0x40002f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7a}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@test_dummy_encryption}]}, 0xff, 0x451, &(0x7f0000000940)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) 2m32.619769906s ago: executing program 1 (id=2369): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r1, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) (async) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffffb}) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@noblock_validity}, {@nolazytime}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x5fa, &(0x7f0000001000)="$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") 2m32.619338216s ago: executing program 3 (id=2370): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)={r2, 0xb4, "59a5f3d6a12905000000000000008207249b6633ca3b85637d77b5df0a6d65369f569264b3d1effe4c0a00822f235b25dc7beb510fac057460353caed45f90e8f950e495a222a1c13db7b2425fa2e277ac6891bb000fa0bfedff0ecd23a09d0195e447379ea4dc001cc3f48e96cadafaeaea6e5028babe15a28794d7f2685ae62845ee451d848eaf91aa534229c28e19ba206a84fd3a1cfb63f902345975449c8e21be0a6639d270be74e05ed2b73769e469c962"}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00005ec000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00005ed000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10841) r4 = io_uring_setup(0x44fee, &(0x7f00000013c0)={0x0, 0xc89f, 0x4000, 0xa, 0x22002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=@deltaction={0x104, 0x31, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x34}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb54}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa41d}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x16}}, {0x14, 0x3ffd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4c890}, 0x80) setsockopt$sock_int(r4, 0x1, 0x3, &(0x7f0000000000)=0x1136, 0x4) io_uring_enter(r4, 0x731d, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fc, &(0x7f0000000d80)="$eJzs3c9PJFkdAPBvNTQ0DLuw6x7U6C7urq5mMg307JLNHnQ9GWM2Me5Rk1mEHkLopgkN44BzYM5eTTTxpEf/AM9z8u7F6M3LeDDxB9EMJh7aVHXB9DDdAxmgm9CfT1Kp9+rV9Pf7YOq96cfQL4ChNRsR+xExFhGfRcR0fj3Jj/i4faT3PTl4sHx48GA5iVbr038mWXt6LTr+TOpG/pqliPjBdyJ+nDwft7m7t75Uq1W38vrcdn1zrrm7d2utvrRaXa1uVCqLC4vzH97+oHJhfX2rPpaXvvz4D/vf+Gma1lR+pbMfF6nd9eJxnNRoRHzvMoINwEjen7FBJ8JLKUTE6xHxdvb8T8dI9t0EAK6zVms6WtOddQDguitka2BJoZyvBUxFoVAut9fw3ojJQq3R3L55t7GzsdJeK5uJYuHuWq06n68VzkQxSesLWflpvXKifjsiXouIn49PZPXycqO2Msh/+ADAELtxYv7/z3h7/gcArrnSoBMAAPrO/A8Aw8f8DwDDx/wPAMOnPf9PDDoNAKCPvP8HgOFj/geAofL9Tz5Jj9Zh/vnXK/d2d9Yb926tVJvr5frOcnm5sbVZXm00VrPP7Kmf9nq1RmNz4f3YuT/zzc3m9lxzd+9OvbGzsX0n+1zvO9Vidtd+H3oGAPTy2luP/pykM/JHE9kRHXs5FAeaGXDZCoNOABiYkUEnAAyM3b5geJ3jPb7lAbgmumzR+4xSt18QarVarctLCbhk733B+j8Mq471f/8LGIaM9X8YXtb/YXi1WslZ9/yPs94IAFxt1viBHj//fz0//zb/4cCPVk7e8cvLzAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACutqP9f8v5XuBTUSiUyxGvRMRMFJO7a7XqfES8GhF/Gi+Op/WFAecMAJxX4W9Jvv/Xe9PvTj3T9OaN4+JYRPzkV5/+4v7S9vbWHyPGkn+NH10fifx6pf/ZAwCnO5qns3PHG/knBw+Wj45+5vP3b0dEqR3/8GAsDo/jj8Zodi5FMSIm/53k9bakY+3iPPYfRsTnu/U/ialsDaS98+nJ+GnsV/oav/BM/ELW1j6nX4vPXUAuMGwepePPx92ev0LMZufuz38pG6HOLx//0pdaPszGwKfxj8a/kR7j3+xZY7z/+++2SxPPtz2M+OJoxFHsw47x5yh+0iP+u2eM/5cvvfl2r7bWr9tfx27xO2PNbdc355q7e7fW6kur1dXqRqWyuLA4/+HtDypz2Rr1XO/Z4B8f3Xy1V1va/8ke8Uun9P+rZ+z/b/732Q+/8oL4X3+nW/xCvPGC+Omc+LUzxl+a/F2pV1saf6VH/0/7/t88Y/zHf917bttwAGBwmrt760u1WnVLQeFkIWaTK/aXJM3mCqTRtfCtfsUai+5NP3un/UyfaGq1XipWrxHjIlbdgKvg+KGPiP8OOhkAAAAAAAAAAAAAAKCrvvwaGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyS/wcAAP//5bvKqg==") ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000140)) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000280)=0x8) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = perf_event_open(&(0x7f0000000d00)={0x5, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x4800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmsg$tipc(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x20000000) recvmsg(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r11) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r12, &(0x7f00000002c0)='./file1\x00', 0x8800, &(0x7f0000001dc0)={0x7b, 0xf5, 0x20000}, 0x20) 2m32.210783547s ago: executing program 3 (id=2373): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='w', 0x1}], 0x1, 0x1) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") fsopen(&(0x7f0000000040)='configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1b7b, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x200, 0x0) syz_io_uring_setup(0x5fce, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$NFC_CMD_LLC_GET_PARAMS(r6, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="b29e11be", @ANYRES16=0x0, @ANYBLOB="000325bd7000fcdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004811}, 0x40841) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) 2m31.669245016s ago: executing program 1 (id=2383): syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'macsec0\x00', 'dvmrp1\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_bond\x00', {0x1, 0x3, 0x3, 0x3, 0x1, 0x80000001, 0x7fff, 0x18, 0x40}, {0x1}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x3ff, 0x372, 0xfff, 'pptp\x00', 'syz1\x00', {0x4}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}, [], [0xff], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x238, 0x2a0, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xd, {0x100000000}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xf04, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0xfffe, 0x3, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d00)=@filter={'filter\x00', 0xe, 0x6, 0x15e, [0x0, 0x200000000500, 0x2000000005fe, 0x2000000008f2], 0x0, 0x0, &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x24, 0x8847, 'pimreg1\x00', 'caif0\x00', 'veth0_virt_wifi\x00', 'gretap0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x9e, 0xce, [], [@common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x1d6) r2 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x2208482, &(0x7f0000000040), 0x1, 0x5d8, &(0x7f0000000640)="$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") umount2(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000c80)=[r4, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x4, 0x3, 0x0, 0x6}, {0x3, 0x4, 0x0, 0x2}, {0x0, 0x1, 0xa, 0x4}, {0x4, 0x1, 0x5, 0x7}], 0x10, 0x86ca}, 0x94) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', r2) 2m31.321700864s ago: executing program 1 (id=2384): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x808, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100001000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040851) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a54000000060a010400000000000000000a0004050900010073797a310000000028000480240001800a0001007175657565000000140002800600024099eb000006000140008500000900020073797a32000000006b6bde15f7f03d"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000030790500140003006e657464657673696d300000000000000c0016800800018004000c80080004"], 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x804) perf_event_open$cgroup(0x0, r1, 0x0, 0xffffffffffffffff, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x7, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x800) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="7472796ca8ea00f26fa7da3381176d6f636b206d656d00"], 0xc) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x1}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x408dc}, 0x0) socket$kcm(0x11, 0x2, 0x300) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = io_uring_setup(0x723d, &(0x7f00000002c0)={0x0, 0x8, 0x100, 0x800}) io_uring_register$IORING_UNREGISTER_RING_FDS(r10, 0x15, &(0x7f00000005c0)=[{0xf00, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x1, 0x0, 0x0, 0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth0_to_bridge\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x1ff}, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x10) 2m30.762167674s ago: executing program 3 (id=2388): syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000cb856a4a000000000000000000000000009b37ef895a3cf4bf24a8502ca74b87f5e5f59dbd59981769adda3bcacd344e3cded1afec4cfdab3544d368306ff20293755ef3be0abc1db73e857f49f72611ad1da000"/107], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c42, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000300)=0x8) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x80, 0x0, 0x30, 0x0, 0x6040, 0x984, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x3}, 0x10000, 0x3, 0xe180, 0x3, 0x0, 0xa4a, 0xf, 0x0, 0x80, 0x0, 0xb}, r2, 0x7, r0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x80, 0x6, 0xd5, 0x3, 0xfc, 0x0, 0x4, 0x2040, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x10}, 0x0, 0x9, 0x2, 0x9, 0x7fffffffffffffff, 0x400, 0x7, 0x0, 0x2, 0x0, 0xd4}, r4, 0x6, r0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x1, 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f00000002c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x0, 0x1, 0xff, 0x5, 0x6, 0xa}, 0x20) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 2m30.747156834s ago: executing program 38 (id=2388): syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000cb856a4a000000000000000000000000009b37ef895a3cf4bf24a8502ca74b87f5e5f59dbd59981769adda3bcacd344e3cded1afec4cfdab3544d368306ff20293755ef3be0abc1db73e857f49f72611ad1da000"/107], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c42, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000300)=0x8) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x80, 0x0, 0x30, 0x0, 0x6040, 0x984, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x3}, 0x10000, 0x3, 0xe180, 0x3, 0x0, 0xa4a, 0xf, 0x0, 0x80, 0x0, 0xb}, r2, 0x7, r0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x80, 0x6, 0xd5, 0x3, 0xfc, 0x0, 0x4, 0x2040, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x10}, 0x0, 0x9, 0x2, 0x9, 0x7fffffffffffffff, 0x400, 0x7, 0x0, 0x2, 0x0, 0xd4}, r4, 0x6, r0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x1, 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f00000002c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x0, 0x1, 0xff, 0x5, 0x6, 0xa}, 0x20) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 2m30.45395362s ago: executing program 1 (id=2399): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x204, 0x8, 0x43a1bd76, 0x6, 0x9, 0x6, 0x4, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="021420001100000000400000000000000300"], 0x88}}, 0x0) 2m30.422147461s ago: executing program 39 (id=2399): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x204, 0x8, 0x43a1bd76, 0x6, 0x9, 0x6, 0x4, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="021420001100000000400000000000000300"], 0x88}}, 0x0) 38.77732907s ago: executing program 2 (id=3189): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) wait4(0xffffffffffffffff, 0x0, 0x4, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) unshare(0x40020000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000d00001000010000000000000000000000000a941d0000060a0b04000000000000000002000000680023b6540001800a000100b36d617463680000004400028008000240000000002c000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e8278ad0a0001006c696d6974000000100001800b000100736f636b657400000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 38.082994637s ago: executing program 2 (id=3196): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa290000080003000000000008000500", @ANYRES32=r1, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) 37.658048609s ago: executing program 2 (id=3197): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x0) syz_usb_disconnect(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x4000d, 0x0, 0x6, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000700)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x83c0550b, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14, 0x800) open(&(0x7f00000000c0)='./file0\x00', 0xb822666ecb03d6c3, 0x58) r7 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000c8c0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x200, 0x4) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/52) 36.663696851s ago: executing program 2 (id=3210): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r2, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0xffffffffffffffee, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c085}, 0x40000000) 36.574709826s ago: executing program 2 (id=3211): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x200, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = gettid() perf_event_open(0x0, r2, 0x7, r1, 0x9) perf_event_open$cgroup(&(0x7f0000000580)={0x0, 0x80, 0xc2, 0x5, 0x0, 0x80, 0x0, 0xfffffffffffffff8, 0x40, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xc}, 0x10a6d0, 0x7ff, 0x7, 0x6, 0x1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)=""/4049, 0xfd1}, {&(0x7f0000000000)=""/37, 0x25}], 0x2}, 0x40008020) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20) sendmsg$rds(r4, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)=""/83, 0x53}], 0x1, 0x0, 0x0, 0x8000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mprotect(&(0x7f00001ae000/0xf000)=nil, 0xf000, 0x2800000) ptrace(0x10, r6) ptrace$peeksig(0x4212, r6, 0x0, 0x0) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) 35.608902327s ago: executing program 2 (id=3221): r0 = socket$kcm(0x29, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYRES8=r0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e734fdc2da8c232e5563a04392efa56fc98553afa5a498c8c32c8e1b2b894946e1ee85dad57e50a3206f2b25a00c0ec0d1202c822ab708037a4c29a9c81216c73358cda8b1a2532650070aaf77d3ac8e46f2b2b5ed7828c6165514d2f40c6cf8eb2e325f9d2b7750afee696145751cdfc7d00f6021f29a689969eadb6a870fb43b3f6badebdc0048aa9956828007502b", @ANYRES16, @ANYRES64, @ANYBLOB="f47d9d"], 0x1, 0x679, &(0x7f0000001440)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00'], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0x9}, 0x14185, 0x20032, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x4}, 0x1400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee01, 0xee01, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) faccessat2(r2, &(0x7f0000001400)='\x00', 0x0, 0x1100) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x2, 0x1) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20008005, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'dummy0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ppoll(&(0x7f0000000200)=[{r4, 0x8604}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r6 = perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x7f, 0x6, 0x0, 0x0, 0x6, 0x48080, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000700), 0x1}, 0x2000, 0xffffffffffffffa1, 0x1fc, 0x2, 0x8000000000000001, 0xffffff80, 0x7fff, 0x0, 0x1ff, 0x0, 0x40}, 0x0, 0x6, r1, 0x3) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x7f, 0x5, 0x387b}, {0x56, 0x0, 0x0, 0x1}, {0x5, 0x8, 0x9, 0xfffffffb}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={r8, 0x3, 0xffffffffffffffff, 0x4}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYRES32=r6], 0x6, 0x2b0, &(0x7f0000000280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 19.500721153s ago: executing program 40 (id=3221): r0 = socket$kcm(0x29, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYRES8=r0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e734fdc2da8c232e5563a04392efa56fc98553afa5a498c8c32c8e1b2b894946e1ee85dad57e50a3206f2b25a00c0ec0d1202c822ab708037a4c29a9c81216c73358cda8b1a2532650070aaf77d3ac8e46f2b2b5ed7828c6165514d2f40c6cf8eb2e325f9d2b7750afee696145751cdfc7d00f6021f29a689969eadb6a870fb43b3f6badebdc0048aa9956828007502b", @ANYRES16, @ANYRES64, @ANYBLOB="f47d9d"], 0x1, 0x679, &(0x7f0000001440)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00'], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0x9}, 0x14185, 0x20032, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x4}, 0x1400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee01, 0xee01, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) faccessat2(r2, &(0x7f0000001400)='\x00', 0x0, 0x1100) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x2, 0x1) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20008005, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'dummy0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ppoll(&(0x7f0000000200)=[{r4, 0x8604}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r6 = perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x7f, 0x6, 0x0, 0x0, 0x6, 0x48080, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000700), 0x1}, 0x2000, 0xffffffffffffffa1, 0x1fc, 0x2, 0x8000000000000001, 0xffffff80, 0x7fff, 0x0, 0x1ff, 0x0, 0x40}, 0x0, 0x6, r1, 0x3) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x7f, 0x5, 0x387b}, {0x56, 0x0, 0x0, 0x1}, {0x5, 0x8, 0x9, 0xfffffffb}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={r8, 0x3, 0xffffffffffffffff, 0x4}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYRES32=r6], 0x6, 0x2b0, &(0x7f0000000280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 5.534829109s ago: executing program 4 (id=3448): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.464066112s ago: executing program 4 (id=3450): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast2, 0x20001000}, {0x2, 0xbff9, 0xc00, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, r1, 0x9dffffff}}, 0x48) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0xa81eb313d007ac2b, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x400, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rseq(0xfffffffffffffffc, 0xffffff81, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x1) listen(r3, 0x5) accept4$inet6(r3, 0x0, 0x0, 0x800) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x3f2, 0x200, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x6, @remote, 0x667}, {0xa, 0x4e22, 0x3, @empty, 0x4}, r1, 0x2}}, 0x48) tkill(r4, 0x7) 3.730720773s ago: executing program 4 (id=3465): getresuid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000380)) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000680)={[{@min_batch_time}, {@usrjquota_path={'usrjquota', 0x3d, './file1/file0'}}], [{@obj_type={'obj_type', 0x3d, '/dev/snd/seq\x00'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', r0}}, {@appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, 'journal_dev'}}, {@dont_appraise}]}, 0x0, 0x501, &(0x7f0000000f80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80001) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r3, 0x9, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30be, 0x400, 0x8, 0x40000187}) socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d050200100000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 3.516919625s ago: executing program 4 (id=3469): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f887, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x10d7854, 0x0) umount2(0x0, 0xa) 3.489580056s ago: executing program 4 (id=3470): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.796248303s ago: executing program 7 (id=3492): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000940)={&(0x7f0000000900)=[{&(0x7f0000000780)="3d34239f4d4388e0c695", 0xa}, {&(0x7f0000000800)="b42aa77cd9400daa559f7be5cfbef74441c34d8574743555c635e258641db214a4ea814177e6b82d2a2c4e350162cb9f365915bee44a201dc5d507ee8cea477ee7b3c83b945d79244898700daa8f8469c5ea5e925cb5c74e31ff35a42a24f43e3ffdcd86612a8ff16dce05b89e10d90219fd4291cda616bffd8e70fc6311cdc295af8404e7dffff055f7c58038664d1d09df0ed877a22cb23ef9ab5fd575a93b012e1f365c1ad448c57bc775d34d10e7ef82766f5c65910265b42e5127badc532808e5978e8db4b6c202b8e52bcc7071015a9fd8bc8c3164", 0xd8}], 0x2, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4, 0x4}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000180)) syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r1, &(0x7f0000000300)=@unspec, 0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX=r3, @ANYRES16=r2], 0x2c}}, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtaction={0xc4, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0xb0, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x4c, 0x2, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x100, 0x8, 0x7, 0x0, 0x1}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xc4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$MSR(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000380)=0x8001, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x4}, 0x30, 0x0, 0x10000, 0x4, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r5}, 0x38) bind$802154_dgram(r2, &(0x7f0000000480)={0x24, @long={0x3, 0x264566dfda907e2a, {0xaaaaaaaaaaaa0002}}}, 0x14) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r6, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x4, @remote, 'syzkaller1\x00'}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='fdinfo/4\x00') pread64(r8, &(0x7f0000002140)=""/17, 0x11, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="81b60ff1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f00000007c0)=[{0x3, 0x1, {0x2, 0xf, 0x1}, {0x2, 0x0, 0x1}, 0xfd, 0xfe}, {0x2, 0x2, {0x0, 0x1, 0x3}, {0x0, 0xff, 0x1}, 0x0, 0xfd}], 0x40) 2.794569743s ago: executing program 5 (id=3493): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) getpid() r0 = socket(0x2, 0x3, 0xff) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x40014) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f00000011c0)={0x0}, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) sendfile(r6, r5, 0x0, 0x7fffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 2.633604911s ago: executing program 4 (id=3494): socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.612356352s ago: executing program 41 (id=3494): socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.247422132s ago: executing program 6 (id=3496): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14084, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.013387154s ago: executing program 6 (id=3497): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x82a0, 0x1224, 0x1ff, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x88) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r2, 0xa, 0x0, 0xccd, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0]}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000000) ioctl$TIOCCONS(r2, 0x541d) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02050b070e00000026bd70000000000005000600000000000a004e2300000003fc000000000000000000000000000001c4bb00000000000002000100ffffff7db000e60000000000050005000080000000000000fe80000000000000000000"], 0x70}}, 0x84) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat$loop(r2, &(0x7f00000003c0)='./file0\x00', 0x80, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.89116791s ago: executing program 7 (id=3499): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a37ac2a1f2ae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a64a2abbf936452f8ba4bb4909c21", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f000027d000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000276000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2000) 1.787122066s ago: executing program 5 (id=3500): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000001180)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @local}}}, 0x118) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xd37c, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.786497686s ago: executing program 5 (id=3501): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20010}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xb, 0xfffb}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20000001) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40085507, &(0x7f0000000100)=0xb) 1.768978367s ago: executing program 7 (id=3502): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) 1.768328036s ago: executing program 8 (id=3503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x9}}, @qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x31, 0x80000001, 0x80000001, 0x0, 0x5}}}}]}, 0x54}}, 0x0) 1.749383788s ago: executing program 8 (id=3504): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e1f, @multicast1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) socket(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x888) socket$kcm(0x10, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) close(r5) 1.730706839s ago: executing program 7 (id=3505): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd2101000000000007010000f8ffffffb502020008000000b703000000000000850000001200000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7ecbc13c, 0xc87b}, 0x0, 0x0, 0x784, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) socket$isdn(0x22, 0x3, 0x23) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000001740), 0x12) r4 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x110, 0x5, &(0x7f0000000280)=[0x4, 0x2], 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="05"], 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r8) r9 = socket$inet6(0xa, 0x1, 0x0) listen(r9, 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000080), &(0x7f0000000840)=r8}, 0x20) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 1.621529804s ago: executing program 6 (id=3506): socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 1.51478021s ago: executing program 7 (id=3507): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000bb", @ANYRES32, @ANYBLOB="f40300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000100"/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={&(0x7f0000000200)="6330b1f4567a000000000000000000", &(0x7f0000000740)=""/217, &(0x7f00000005c0)="8791ef515d37f7bc59d455", &(0x7f0000000600)="1957e03cbfe8705643abd01cecbc95405fee69a4c058f2c23c240500ebd097e5d2b02213321ef13fb3195f4106aee047da3ad243646c33014fe35569aecbf6e0147a6443fd5561a7950ab7539fa2903af467393230c3004b749878a3", 0xfffffffe, r3, 0x4}, 0x38) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0x40082104, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRESDEC=r0, @ANYRES32], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x20008840) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)}, 0xffffff22) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000180)=0xfffffff7, &(0x7f00000001c0)=0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}, 0x1c) connect$inet6(r6, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00', 0xffffffff}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@local, 0x8, 0x2, 0x0, 0x8}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r7, &(0x7f0000000340)=',d', 0x2, 0xd1, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000000b06010100000000000000000500000108000940000000060900020073797a3200000000050001000700005140612f019ef28c366e2c0009"], 0x3c}, 0x1, 0x0, 0x0, 0x44001}, 0x810) r10 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x0, 0x0) unshare(0x2040400) 1.046959904s ago: executing program 7 (id=3508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601020000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a31000000002000078005000300010000000c00018008000140ac1414aa050014001c00000005000500020000000500010006"], 0x68}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x558}}, 0x40) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x20040000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="1709000000000000000001000000050007000000000008000900feffffff08000a00fcffffff0600020000000000"], 0x34}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="810200000000000014001a80100004800c000180"], 0x34}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x6}, 0x8, 0x0, 0x0, 0x6, 0x0, 0xa, 0xfffd, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) close(r7) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r8, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r8, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x23, &(0x7f0000000040), 0xcf) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0xcf) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) fcntl$dupfd(r3, 0x0, r2) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000140003050100800000dcdf250218f4ff", @ANYRES32=r12, @ANYBLOB="01971cb5fb1861bf67768fe134d69c363970a27b5525a592272ecc9fe9aca0263e4f6ddb8b0db84f9ef2711fbb46207c7d75778fd9754407939258214ec0b8223f894dabdf1242cf508f056f22b4ceb3be3665aca75771c8e0a655321a409b6e99fe8a10e0fba58b50c43dd9"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) 998.775437ms ago: executing program 5 (id=3509): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) close_range(r2, r2, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00fc35dd654ced169597090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000", 0x58}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r5) r6 = socket$inet6(0xa, 0x1, 0x0) listen(r6, 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000080), &(0x7f0000000840)=r5}, 0x20) 997.959907ms ago: executing program 5 (id=3510): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x9a, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0x8, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400070200000000", @ANYRES32=0x0, @ANYBLOB="0382000021460000140012800c000100", @ANYRES32, @ANYBLOB='\b\x00\n', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x2, 0x3, @mcast2, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x300, 0x2c}, 0x44004) 922.761571ms ago: executing program 6 (id=3511): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000001180)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @local}}}, 0x118) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xd37c, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 754.89246ms ago: executing program 8 (id=3512): socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0xffffd000) (rerun: 64) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) (async) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200), 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffd) ioctl$KIOCSOUND(r1, 0x4b2f, 0xfff) 726.706701ms ago: executing program 6 (id=3513): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x2, "c10443b64d2c1be0c600bfc08b0308a3"}}}]}, 0x44}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x29, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 650.101155ms ago: executing program 8 (id=3514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x9}}, @qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x31, 0x80000001, 0x80000001, 0x0, 0x5}}}}]}, 0x54}}, 0x0) 649.158205ms ago: executing program 8 (id=3515): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0xd, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000020756c2500000000002020207b1af8ff00000000bfa1ffffffb702000008000000b70300004f2b0000850000000600000085100000fa6600ff2ef877ea3d2c51232309f884a424508bf42ba247942dc203ed970c1a7da9"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xe75c, 0x80900) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmdt(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000140)=""/116) sendmmsg$unix(r4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3, 0x4}, 0x110124, 0x37e, 0xb, 0x0, 0x7fff, 0x10, 0x7f, 0x0, 0x0, 0x0, 0x20000008}, 0xffffffffffffffff, 0xe, r1, 0xa) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)="cdc063be0a55354e027315fd19acc2361963a725b0877d32f42208ca6f2e2e4390c27aceabb49ca5b04d75d407a179dd17c2c2993cac15c111d931c551de29f90d962854eb54e2cf46acb849bb9e7b6d41ec0880f02f519c908f3ec09139a1ce1daba056c4707a163a144dcb2483c6dd2eebf574d231032eecb84cdb948d1a1820f9ad69f8142518e5fdab5c65b440f939d463d64b18f427ca649422b4f2f9cfee8165ce417fc7c3112c47", 0x0, 0x2000005, r5}, 0x38) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0xac}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r8, 0x2f, 0x0, 0x40, 0x4, 0x3, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x700}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r9) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000700)={'wg1\x00', 0x0}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r12, &(0x7f00000021c0)=[{&(0x7f0000000300)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f00000002c0)="b9e81c8ef20300", 0x7}], 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000740)={0x1, 0x8, 0xb, 0x10000, @vifc_lcl_ifindex=r11, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 563.02252ms ago: executing program 6 (id=3516): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x853}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x1, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) fgetxattr(r5, &(0x7f0000000780)=@known='security.selinux\x00', &(0x7f0000000880)=""/138, 0xffffffffffffff98) 482.653454ms ago: executing program 8 (id=3517): perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x214}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="495327bd70000000000067"], 0x24}, 0x1, 0x0, 0x0, 0x40850}, 0x8000) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000000c0)='./bus/file0\x00', 0x0, &(0x7f0000000400)={[{@minixdf}, {@noload}, {@lazytime}, {@oldalloc}, {@orlov}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0xa34dc44c682dcc1b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./bus/file0\x00', 0x2224005, &(0x7f0000000380)={[{@sb={'sb', 0x3d, 0x49a4}}, {@debug}, {@journal_path={'journal_path', 0x3d, './bus/file0'}}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@obj_user={'obj_user', 0x3d, 'resgid'}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r4 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r5) capset(&(0x7f0000000080)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000100)={0x1400, 0x10fffd, 0xfffffffd, 0x0, 0x0, 0x18000}) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 384.790259ms ago: executing program 0 (id=3495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000a5b0500850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000040000000700000022800400", @ANYRES32=r0, @ANYBLOB="00000000eb52ebac88c9720bb05c00"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, &(0x7f0000000080), 0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002700)={'wg2\x00'}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r8, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x9, 0x0) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000540)={0x0, @loopback, @dev}, &(0x7f0000000580)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0xd, 0x16, &(0x7f0000000700)=ANY=[@ANYBLOB="1800800000fcffff8000000004000400186400000b0000000000000002000000186400000f000000000000006bd400007d001800040000008510000008000000182b0000da4b20222d5b910f194879ff8f6ce43437c015098fd52ade60368fea9fb90aacf30658a3dba5b34d0c89c8d3e22e2419e630e586732ad15d88ad931f827780cc08ce0fcac61d7c60", @ANYRES32=r0, @ANYBLOB="00000000000400009500000000000000c3a30e00fcffffff180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000040850000000600000085100000fdffffff9500000000000000"], &(0x7f0000000380)='GPL\x00', 0xf, 0x1000, &(0x7f0000001700)=""/4096, 0x41100, 0x32, '\x00', r11, @fallback, r9, 0x8, &(0x7f0000002740)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000002780)={0x2, 0xe, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000027c0), 0x0, 0x10, 0x63}, 0x94) r12 = socket$inet6(0xa, 0x800, 0x0) connect$inet6(r12, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r12, @ANYRESHEX=0x0, @ANYBLOB="2c6f76657272696465726f636b7065726d2c6d61703d6e6f726d61fe7bb705e3ef", @ANYRESHEX=0x0, @ANYRES16], 0x0, 0x6c3, &(0x7f0000001000)="$eJzs3V9vG1n9x/HPOI7jZH+/sgJUVVXanraslIrijp1tqqhIrBmPkwHbY804KJGQUNkmq6pOF9oi0UhoyQ1/pOUJIG64gAseBBLXPAtuEEgruENaLozmn+O/cbPrtrvb9yva9fic75xzZo7X353EcywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDLqdl22VLDa+3smumcWuA30+3/9sbrk9YWdSPZuDGzX8mK/lGxqAtJ0YWvnlSfj/51TavJs1UVo4fiz47eOP/m3a/kc9n+pwz4k9BZG3zy7OjhvW53//FzxC7ozM2/SsplW8vpnEwI2nJbXuh7zeqWa7zQN5sbG/at7Xpo6l7DDffCjts0TuDmOn5g1pwbpry5uW7c0p6/09qqVRtuVnjnGxXb3jDfWUomWlIpdLa9RsNrbcUxUXUUc8d8+P0kwK02jTl40N1fn3UkUVD5eYIqs4IqdqVSLlcq5Y3bm7fv2HZ+sCAnKW9HLLtPY7vM/UWLz5n5vHEDc5CL8v/fLKmholra0a7MxB9HNQXy1ZxSn8ry/1u33FP7Hcz/WZa/IH0rrb6oOP9fTp5dTvO/RvP/lLEYmXiHSTXWlPKz/SzGIzJ6omc60kPdU1dd7evxHNo2Mlfm0spL+NmSq5Y8hfLlqamqtvSH/1daYrSpDW3I7n0pnVejujw15CrUnkJ15MavKEeBXFXVka9ARmtydENGZW1qU+syclXSnnztqKUt1VTVf3q93oEexOd9/ZQxKgsqTwlYGgyqnNLScDL/nbL8/8MPkqOz8/YI8v/rJXkdLCUPy6fFAJ8BvfT6f1Bu9m5XXtyIAAAAAADAvFnxb9+t+G/3lyT1VPcarv2qhwUAAAAAAObIUm9Jq7Ki639Jl2Rx/Q8AAAAAwBeNFd9jZ0laiT/Ub53cCfU8vwRYeAlDBAAAAAAAn1J85//lgtSLF624IutM1/8AAAAAAOBz4FcDa+znszV2e9mf9XOSwvaS9ed/LSlYtI7bu1+zDqtRTfUwjfl4tMVO/aJ1Ll2oN34oSIqfOe6qtZosjpkugtlfd/Cjg9G1/kfX+rWCkQEUFgYbmDIAK+p5I58+04e6muxyNV1n/v5RTnFN0stK3Wu4Jcdv3C2rWj2X67i7nZ88evBTKeh/0uHgQXe/9O773fvxWI6jouPDqNEPhoaTm3wyTsbyNF5vIb7nYtIRL6uedfnrVnPFivu1s+NfUPUwN9jRaRNw0ucvdE3xpzaurSSxK0f9Ffej4y9Gx18uxVM2dPTBonUyivLokU+aiCmjKMajuJ7EXF+7rsrfk+3+LOSs4tcXpEppfA6GRlEZHMXsc2H9e+xcDIwifshqBs7FejSKv0QNTRnF+tlGMTYjAPCqHOiS4nehS4oXMe9noWKad7P0kL2pfaK8Mzu7vzOc3Z/+tteLd1iQ8unfJk7tpajoHX3NivNQITmk/MUJ7+h2mleKmvKObn+K7Bb19aeT70BKhz02io97vd7dctzvb0ay6u+HuhvrN2xUFqJTeOvp4Y/iBfAj7+2/t/+oUlnfsN+27dsVLcaHkT4siNwDABgz+zt2+hGalrvf1tWk/ur9f76VbA1lvC/3P1JQ0rt6X13d183sKwSuTG51ZeBjCDeTq1YNXLWa82/ejb+Xbji2rJtTr+riXDoQW+nHLirbZThTn8Suv9A5AADgZbs2Iw9bE/8PoTiU/29qLYlYuzjxuns4l6dXx/1L+mmx5dmDf2feZwMAgNeDG3xkrXR+aQWB1/5BeXOzXO1suybwne+awKttucZrddzA2a62tlzTDvyO7/gN0w605NXc0IQ77bYfdEzdD0zbD73d+JvfTfrV76HbrLY6nhO2G241dI3jtzpVp2NqXuiY9s63G1647QbxzmHbdby651Q7nt8yob8TOG7JmNB1BwK9mtvqeHUv2myZduA1q8Ge+Z7f2Gm6puaGTuC1O37SYNaX16r7QTNutpTvTfq8AAAAr50nz44e3ut29x+PbixHl+ZJybGmxIxvFPTkWXRVHpXk0yrWCAIA4DPmJIGfYafiCxwQAAAAAAAAAAAAAAAAAAAAAAAYM/OWPut5bvsb2FicdLOg1C/58bm0RD/XyS2GY+1YOkun897InXWv7JaIo4d/nRZT0L3lfkl2+gdjjl/aAf7j/6Q34hIlJfn597V8yuS+iI1vHiRndGpMVDmxaqk/F/mx/xzGS0Y3Cpo5wkd/nFLVX9d66u5Lw1WFoQPMndZpXtLjwpmnoDD2EgXwRfW/AAAA//9UxyyK") r13 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbb00020a63cdec590806000108000604"], 0x0) sendto$packet(r13, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @link_local}, 0x14) 0s ago: executing program 5 (id=3518): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20010}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xb, 0xfffb}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20000001) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085507, &(0x7f0000000100)=0xb) kernel console output (not intermixed with test programs): - 0 [ 480.179684][T15440] 9p: Bad value for 'wfdno' [ 480.201814][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.839301][T15459] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2905'. [ 480.881607][T15459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2905'. [ 481.087148][T15467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15467 comm=syz.2.2905 [ 481.127229][T15459] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 481.137608][T15459] bridge1: entered promiscuous mode [ 481.195254][T15459] loop2: detected capacity change from 0 to 2048 [ 481.231074][T15459] loop2: p1 p2 [ 481.241782][ T3008] loop2: p1 p2 [ 481.576085][T15503] loop4: detected capacity change from 0 to 512 [ 481.605712][T15503] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 481.614792][T15503] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 481.623676][T15503] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 481.632981][T15503] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 481.641010][T15503] System zones: 0-2, 18-18, 34-35 [ 481.647027][T15503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.670624][T14272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.797076][T15516] loop4: detected capacity change from 0 to 164 [ 481.805921][T15516] ISOFS: unable to read i-node block [ 481.811659][T15516] isofs_fill_super: get root inode failed [ 481.835739][T15516] ipip0: entered promiscuous mode [ 483.241339][ T7956] udevd[7956]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 483.245099][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2925'. [ 483.253545][ T8981] udevd[8981]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 483.280054][T15532] xt_policy: output policy not valid in PREROUTING and INPUT [ 483.353447][T15539] SELinux: Context œ is not valid (left unmapped). [ 483.372074][T15540] Cannot find add_set index 0 as target [ 483.394914][T15540] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 483.433982][T15540] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2925'. [ 483.469295][T15540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.481953][T15540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.494659][T15540] bond0 (unregistering): Released all slaves [ 483.623255][T15542] loop5: detected capacity change from 0 to 8192 [ 483.948386][T15548] loop2: detected capacity change from 0 to 512 [ 483.957975][T15548] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 483.967125][T15548] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 483.976258][T15548] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 483.989143][T15548] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 484.012909][T15548] System zones: 0-2, 18-18, 34-35 [ 484.018883][T15548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.101847][T12815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.210931][T15562] loop2: detected capacity change from 0 to 512 [ 484.261587][T15562] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 484.287513][T15562] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2932: bad orphan inode 131083 [ 484.349891][T15562] loop2: lost filesystem error report for type 5 error -117 [ 484.351259][T15562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.467369][T12815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.716592][T15583] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2938'. [ 485.981966][ T28] kauditd_printk_skb: 152 callbacks suppressed [ 485.981984][ T28] audit: type=1400 audit(1777023126.592:4192): avc: denied { map } for pid=15589 comm="syz.4.2941" path="/proc/168/task" dev="proc" ino=43783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 486.699981][T15596] usb usb7: check_ctrlrecip: process 15596 (syz.2.2936) requesting ep 01 but needs 81 [ 486.923019][T15596] usb usb7: usbfs: process 15596 (syz.2.2936) did not claim interface 0 before use [ 487.117639][T15612] loop4: detected capacity change from 0 to 512 [ 487.142770][T15612] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 487.189954][T15612] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2947: bad orphan inode 131083 [ 487.257802][T15612] loop4: lost filesystem error report for type 5 error -117 [ 487.258317][T15612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.336442][T15616] wg1 speed is unknown, defaulting to 1000 [ 487.407990][T14272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.528131][T15617] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2948'. [ 487.573263][ T28] audit: type=1326 audit(1777023128.080:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15622 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277bfcdd9 code=0x7ffc0000 [ 487.609467][ T28] audit: type=1326 audit(1777023128.080:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15622 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277bfcdd9 code=0x7ffc0000 [ 487.633947][ T28] audit: type=1326 audit(1777023128.080:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15622 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277bfcdd9 code=0x7ffc0000 [ 487.865174][ T28] audit: type=1326 audit(1777023128.080:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15622 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277bfcdd9 code=0x7ffc0000 [ 488.053803][ T28] audit: type=1326 audit(1777023128.108:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15622 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1277bfcdd9 code=0x7ffc0000 [ 488.117546][ T28] audit: type=1326 audit(1777023128.108:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15622 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1277bfcb42 code=0x7ffc0000 [ 488.141086][ T28] audit: type=1326 audit(1777023128.108:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15622 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1277bfcb42 code=0x7ffc0000 [ 488.164690][ T28] audit: type=1326 audit(1777023128.108:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15622 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277bfcdd9 code=0x7ffc0000 [ 488.188499][ T28] audit: type=1326 audit(1777023128.108:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15622 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277bfcdd9 code=0x7ffc0000 [ 488.522313][T15616] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 488.901243][T15640] loop2: detected capacity change from 0 to 512 [ 489.061131][ T116] Bluetooth: hci0: Frame reassembly failed (-84) [ 489.962185][T15640] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.2955: corrupted inode contents [ 489.990679][T15640] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 489.990937][T15640] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.2955: mark_inode_dirty error [ 490.000184][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 490.000204][ C1] EXT4-fs (loop2): initial error at time 1777023130: ext4_do_update_inode:5690: inode 16 [ 490.000240][ C1] EXT4-fs (loop2): last error at time 1777023130: ext4_do_update_inode:5690: inode 16 [ 490.098436][T15643] bridge0: entered promiscuous mode [ 490.131542][T15640] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 490.132127][T15640] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.2955: corrupted inode contents [ 490.276480][T15640] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 490.276662][T15640] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.2955: mark_inode_dirty error [ 490.305107][T15640] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 490.305676][T15640] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.2955: corrupted inode contents [ 490.340638][T15656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=15656 comm=syz.6.2958 [ 490.353741][T15640] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 490.354084][T15640] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 490.381107][T15640] loop2: lost filesystem error report for type 5 error -117 [ 490.381307][T15640] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.2955: corrupted inode contents [ 490.400820][T15640] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 490.401037][T15640] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.2955: mark_inode_dirty error [ 490.431667][T15640] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 490.431911][T15640] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 490.471006][T15640] loop2: lost filesystem error report for type 5 error -117 [ 490.478795][T15673] loop4: detected capacity change from 0 to 512 [ 490.516712][T15673] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.4.2962: corrupted xattr block 95: invalid header [ 490.531748][T15640] EXT4-fs (loop2): 1 truncate cleaned up [ 490.540517][T15673] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 490.540839][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 490.556531][ C0] EXT4-fs (loop4): initial error at time 1777023130: ext4_expand_extra_isize_ea:2810: inode 11 [ 490.566923][ C0] EXT4-fs (loop4): last error at time 1777023130: ext4_expand_extra_isize_ea:2810: inode 11 [ 490.567281][T15640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.669640][T15640] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.697685][ T555] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 490.710867][T15673] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2962: bg 0: block 7: invalid block bitmap [ 490.763797][T15673] loop4: lost filesystem error report for type 5 error -117 [ 490.768442][T15673] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 490.978595][T15673] loop4: lost filesystem error report for type 5 error -117 [ 490.984037][T15673] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #11: comm syz.4.2962: corrupted xattr block 95: invalid header [ 491.107123][T15673] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 491.108287][T15673] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 491.127075][T15642] Bluetooth: hci0: command 0x1003 tx timeout [ 491.129832][ T4421] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 491.139365][T15673] EXT4-fs (loop4): 1 orphan inode deleted [ 491.146479][T15673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.170322][T12815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.175498][T15691] SELinux: failed to load policy [ 491.227791][T15694] Dead loop on virtual device ip6_vti0 (net 593), fix it urgently! [ 491.257208][T15694] Cannot find set identified by id 0 to match [ 491.397407][T15705] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2973'. [ 491.452736][T15709] netlink: 'syz.6.2975': attribute type 6 has an invalid length. [ 491.460527][T15709] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2975'. [ 491.484996][T15711] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2976'. [ 491.536158][T14272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.567484][T15715] netlink: 'syz.4.2977': attribute type 1 has an invalid length. [ 491.708892][T15715] bond1: entered promiscuous mode [ 491.720185][T15715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.538646][T15736] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.564439][T15736] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.868478][T15753] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.929996][T15753] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.985178][T15753] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.007374][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 494.007392][ T28] audit: type=1400 audit(1777023134.097:4310): avc: denied { ioctl } for pid=15767 comm="syz.6.2991" path="socket:[44111]" dev="sockfs" ino=44111 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 494.120262][T15736] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 494.126824][T15736] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 494.134979][T15736] vhci_hcd vhci_hcd.0: Device attached [ 494.146161][T15753] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.223265][ T116] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.237807][ T116] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.266479][ T116] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.280503][ T116] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.570095][T13263] usb 6-1: SetAddress Request (2) to port 0 [ 494.618799][T15803] wg1 speed is unknown, defaulting to 1000 [ 494.640782][T13263] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 494.853785][T15783] vhci_hcd: connection reset by peer [ 494.866878][ T36] vhci_hcd vhci_hcd.2: stop threads [ 494.918579][T15807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3001'. [ 494.937062][ T36] vhci_hcd vhci_hcd.2: release socket [ 495.013324][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 495.473116][T15829] netlink: 'syz.4.3010': attribute type 16 has an invalid length. [ 495.626388][T15829] netlink: 'syz.4.3010': attribute type 17 has an invalid length. [ 496.338399][T15829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 496.659490][T15827] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 496.666099][T15827] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 496.675697][T15827] vhci_hcd vhci_hcd.0: Device attached [ 497.181427][T15850] loop2: detected capacity change from 0 to 1024 [ 497.228620][T15850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.300834][ T28] audit: type=1400 audit(1777023137.176:4311): avc: denied { map } for pid=15849 comm="syz.2.3018" path="/109/file1/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 497.327602][T13273] usb 10-1: SetAddress Request (2) to port 0 [ 497.352110][T13273] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 497.387601][T12815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.562671][ T28] audit: type=1400 audit(1777023137.419:4312): avc: denied { connect } for pid=15859 comm="syz.8.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 497.605644][T15843] vhci_hcd: connection reset by peer [ 497.764878][T11983] vhci_hcd vhci_hcd.4: stop threads [ 498.413739][T11983] vhci_hcd vhci_hcd.4: release socket [ 498.448238][T11983] vhci_hcd vhci_hcd.4: disconnect device [ 498.827494][T15886] loop2: detected capacity change from 0 to 512 [ 498.861378][T15886] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.2.3030: corrupted xattr block 95: invalid header [ 498.908198][T15886] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 498.910293][T15886] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3030: bg 0: block 7: invalid block bitmap [ 498.919565][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 498.919604][ C1] EXT4-fs (loop2): initial error at time 1777023138: ext4_expand_extra_isize_ea:2810: inode 11 [ 498.919671][ C1] EXT4-fs (loop2): last error at time 1777023138: ext4_expand_extra_isize_ea:2810: inode 11 [ 498.989337][T15886] loop2: lost filesystem error report for type 5 error -117 [ 498.989591][T15886] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 499.013579][T15886] loop2: lost filesystem error report for type 5 error -117 [ 499.013874][T15886] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.3030: corrupted xattr block 95: invalid header [ 499.034907][T15886] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 499.035162][T15886] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 499.053571][T15886] EXT4-fs (loop2): 1 orphan inode deleted [ 499.060666][T15886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.224559][T12815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.520549][T13263] usb 6-1: device descriptor read/8, error -110 [ 500.584930][ T28] audit: type=1400 audit(1777023140.254:4313): avc: denied { unmount } for pid=15153 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 500.639172][T13263] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 500.660563][T13263] usb 6-1: enqueue for inactive port 0 [ 500.666094][T13263] usb 6-1: enqueue for inactive port 0 [ 500.675597][T13263] usb 6-1: enqueue for inactive port 0 [ 500.776661][T15931] wg1 speed is unknown, defaulting to 1000 [ 500.837948][T15931] loop2: detected capacity change from 0 to 512 [ 501.915778][T15931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.955525][T13273] usb 10-1: device descriptor read/8, error -110 [ 503.135490][T13273] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 503.203864][T13273] usb 10-1: enqueue for inactive port 0 [ 503.227585][T13273] usb 10-1: enqueue for inactive port 0 [ 503.332758][T13273] usb 10-1: enqueue for inactive port 0 [ 503.340695][T15931] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.465019][T15965] loop5: detected capacity change from 0 to 8192 [ 503.474780][T15965] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 503.699981][T15983] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.718481][T13263] usb usb6-port1: attempt power cycle [ 503.730326][T15983] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.770688][T15995] sock: sock_timestamping_bind_phc: sock not bind to device [ 503.845413][T16001] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 503.845413][T16001] program syz.4.3061 not setting count and/or reply_len properly [ 504.006928][ T28] audit: type=1326 audit(1777023143.408:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16007 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1dccdd9 code=0x7ffc0000 [ 504.049928][ T28] audit: type=1326 audit(1777023143.408:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16007 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1dccdd9 code=0x7ffc0000 [ 504.077338][ T28] audit: type=1326 audit(1777023143.408:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16007 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1dccdd9 code=0x7ffc0000 [ 504.116583][ T28] audit: type=1326 audit(1777023143.408:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16007 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f87e1dccdd9 code=0x7ffc0000 [ 504.160407][ T28] audit: type=1326 audit(1777023143.408:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16007 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87e1dccb42 code=0x7ffc0000 [ 504.194134][ T28] audit: type=1326 audit(1777023143.408:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16007 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87e1dccb42 code=0x7ffc0000 [ 504.486698][T13273] usb usb10-port1: attempt power cycle [ 504.513065][ T28] audit: type=1326 audit(1777023143.408:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16007 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1dccdd9 code=0x7ffc0000 [ 504.663626][ T28] audit: type=1326 audit(1777023143.408:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16007 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1dccdd9 code=0x7ffc0000 [ 504.690586][ T28] audit: type=1326 audit(1777023143.408:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16007 comm="syz.4.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1dccdd9 code=0x7ffc0000 [ 504.750155][T16028] dvmrp6: left allmulticast mode [ 504.869878][T15983] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 504.876512][T15983] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 504.893049][T16037] wg1 speed is unknown, defaulting to 1000 [ 504.917089][T15983] vhci_hcd vhci_hcd.0: Device attached [ 504.954826][T16044] dns_resolver: Unsupported server list version (0) [ 504.996958][T16046] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 505.034577][T16042] loop4: detected capacity change from 0 to 4096 [ 505.072920][T16042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.180987][T16057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36374 sclass=netlink_route_socket pid=16057 comm=syz.8.3075 [ 505.288331][T14272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.299260][ T3414] usb 12-1: SetAddress Request (2) to port 0 [ 505.305693][ T3414] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 505.374391][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3075'. [ 505.658781][T16038] vhci_hcd: connection reset by peer [ 505.836691][ T2335] vhci_hcd vhci_hcd.5: stop threads [ 505.978982][ T2335] vhci_hcd vhci_hcd.5: release socket [ 506.077774][ T2335] vhci_hcd vhci_hcd.5: disconnect device [ 506.381026][T16067] wg1 speed is unknown, defaulting to 1000 [ 506.498622][T16082] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3080'. [ 506.527982][T13273] usb usb10-port1: unable to enumerate USB device [ 506.569076][T16067] chnl_net:caif_netlink_parms(): no params data found [ 506.604248][T16083] loop5: detected capacity change from 0 to 512 [ 506.612993][T13263] usb usb6-port1: unable to enumerate USB device [ 506.680568][T16083] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.761760][T16083] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.871326][T16067] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.878694][T16067] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.893817][T16067] bridge_slave_0: entered allmulticast mode [ 506.902780][T16067] bridge_slave_0: entered promiscuous mode [ 506.912966][T16067] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.920291][T16067] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.932994][T16067] bridge_slave_1: entered allmulticast mode [ 507.119370][T16067] bridge_slave_1: entered promiscuous mode [ 507.208061][ T555] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.270930][ T555] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.403729][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3088'. [ 507.422450][T16067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.433132][T16067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.445918][T15153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.492842][ T555] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.520262][ T555] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.554192][T16120] loop5: detected capacity change from 0 to 164 [ 507.620513][T16113] loop2: detected capacity change from 0 to 128 [ 507.631385][T16067] team0: Port device team_slave_0 added [ 507.652533][T16067] team0: Port device team_slave_1 added [ 507.932675][T16120] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 508.197771][T16113] syz.2.3086: attempt to access beyond end of device [ 508.197771][T16113] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 508.236352][T16113] syz.2.3086: attempt to access beyond end of device [ 508.236352][T16113] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 508.256491][T16113] syz.2.3086: attempt to access beyond end of device [ 508.256491][T16113] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 508.257381][ T555] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.273254][T16113] syz.2.3086: attempt to access beyond end of device [ 508.273254][T16113] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 508.295297][ T555] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.318527][T16113] syz.2.3086: attempt to access beyond end of device [ 508.318527][T16113] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 508.332521][T16114] syz.2.3086: attempt to access beyond end of device [ 508.332521][T16114] loop2: rw=0, sector=150, nr_sectors = 1 limit=128 [ 508.360054][T16067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.367512][T16067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.369565][T16113] syz.2.3086: attempt to access beyond end of device [ 508.369565][T16113] loop2: rw=0, sector=145, nr_sectors = 1 limit=128 [ 508.400508][T16067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.421655][T16113] Buffer I/O error on dev loop2, logical block 145, async page read [ 508.429874][T16113] syz.2.3086: attempt to access beyond end of device [ 508.429874][T16113] loop2: rw=0, sector=146, nr_sectors = 1 limit=128 [ 508.443345][T16113] Buffer I/O error on dev loop2, logical block 146, async page read [ 508.451628][T16113] syz.2.3086: attempt to access beyond end of device [ 508.451628][T16113] loop2: rw=0, sector=147, nr_sectors = 1 limit=128 [ 508.465185][T16113] Buffer I/O error on dev loop2, logical block 147, async page read [ 508.473597][T16113] syz.2.3086: attempt to access beyond end of device [ 508.473597][T16113] loop2: rw=0, sector=148, nr_sectors = 1 limit=128 [ 508.489225][T16113] Buffer I/O error on dev loop2, logical block 148, async page read [ 508.497636][T16113] Buffer I/O error on dev loop2, logical block 149, async page read [ 508.506063][T16113] Buffer I/O error on dev loop2, logical block 150, async page read [ 508.514124][T16113] Buffer I/O error on dev loop2, logical block 151, async page read [ 508.522583][T16113] Buffer I/O error on dev loop2, logical block 152, async page read [ 508.531137][T16113] Buffer I/O error on dev loop2, logical block 145, async page read [ 508.578248][T16113] Buffer I/O error on dev loop2, logical block 146, async page read [ 508.611427][ T555] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.631940][ T555] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.662183][T16067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.683482][T16139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3096'. [ 508.715368][T16067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.962249][T16067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.110030][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3095'. [ 509.274006][T16067] hsr_slave_0: entered promiscuous mode [ 509.287180][T16067] hsr_slave_1: entered promiscuous mode [ 509.300315][T16067] debugfs: 'hsr0' already exists in 'hsr' [ 509.306486][T16067] Cannot create hsr debugfs directory [ 509.318706][ T555] bridge_slave_1: left allmulticast mode [ 509.326534][ T555] bridge_slave_1: left promiscuous mode [ 509.335720][ T555] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.349908][ T555] bridge_slave_0: left allmulticast mode [ 509.464343][ T555] bridge_slave_0: left promiscuous mode [ 509.470723][ T555] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.482078][ T555] tipc: Resetting bearer [ 509.713511][ T555] bond1 (unregistering): (slave geneve2): Releasing active interface [ 509.736034][ T555] geneve2 (unregistering): left allmulticast mode [ 509.759803][ T555] tipc: Disabling bearer [ 510.136862][ T555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.157831][ T555] bond_slave_0: left promiscuous mode [ 510.172253][ T555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.181379][ T555] bond_slave_1: left promiscuous mode [ 510.195160][ T555] bond0 (unregistering): Released all slaves [ 510.222076][ T555] bond1 (unregistering): Released all slaves [ 510.244005][ T555] bond2 (unregistering): Released all slaves [ 510.283653][T13263] wg1 speed is unknown, defaulting to 1000 [ 510.303859][ T555] tipc: Left network mode [ 510.307889][T13263] syz2: Port: 1 Link DOWN [ 510.556732][ T555] hsr_slave_0: left promiscuous mode [ 510.602146][ T555] hsr_slave_1: left promiscuous mode [ 510.704784][ T3414] usb 12-1: device descriptor read/8, error -110 [ 510.897976][ T3414] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 510.997307][ T3414] usb 12-1: enqueue for inactive port 0 [ 511.033384][ T555] team0: left promiscuous mode [ 511.038375][ T555] team_slave_0: left promiscuous mode [ 511.043851][ T555] team_slave_1: left promiscuous mode [ 511.049573][ T3414] usb 12-1: enqueue for inactive port 0 [ 511.058087][ T555] veth0_macvtap: left promiscuous mode [ 511.063679][ T555] veth1_vlan: left promiscuous mode [ 511.081296][ T3414] usb 12-1: enqueue for inactive port 0 [ 511.145624][ T555] pim6reg2 (unregistering): left allmulticast mode [ 511.344356][ T555] team0 (unregistering): Port device team_slave_1 removed [ 511.357544][ T555] team0 (unregistering): Port device team_slave_0 removed [ 511.368431][T16205] netlink: 'syz.4.3107': attribute type 16 has an invalid length. [ 511.409019][T16205] netlink: 'syz.4.3107': attribute type 17 has an invalid length. [ 511.578579][T16215] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3106'. [ 511.851152][T16208] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 511.857721][T16208] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 511.889454][T16208] vhci_hcd vhci_hcd.0: Device attached [ 512.131381][T16219] vhci_hcd: connection closed [ 512.131758][ T12] vhci_hcd vhci_hcd.4: stop threads [ 512.152269][ T12] vhci_hcd vhci_hcd.4: release socket [ 512.169533][T13275] usb 10-1: SetAddress Request (6) to port 0 [ 512.183510][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 512.191178][ T3414] usb usb12-port1: attempt power cycle [ 512.202008][T13275] usb 10-1: new SuperSpeed USB device number 6 using vhci_hcd [ 512.244283][T13275] usb 10-1: enqueue for inactive port 0 [ 512.259825][T13275] usb 10-1: enqueue for inactive port 0 [ 512.276591][T13275] usb 10-1: enqueue for inactive port 0 [ 512.404550][T13275] usb 10-1: new SuperSpeed USB device number 6 using vhci_hcd [ 512.433181][T16197] 8021q: VLANs not supported on ip_vti0 [ 512.444290][ T3047] 8021q: adding VLAN 0 to HW filter on device eth9 [ 512.461064][T13275] usb 10-1: enqueue for inactive port 0 [ 512.481010][T13275] usb 10-1: enqueue for inactive port 0 [ 512.509618][T13275] usb 10-1: enqueue for inactive port 0 [ 512.648182][T16205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 512.823667][T16225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 513.016783][ T555] IPVS: stop unused estimator thread 0... [ 513.023486][T16067] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 513.064064][T16067] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.082116][T16067] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 513.873490][T16067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.029858][T16067] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 514.221377][T13275] usb usb10-port1: attempt power cycle [ 514.269273][T16067] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 514.316494][T16067] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 514.357114][T16067] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 514.601924][T16277] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.3120'. [ 514.638800][ T28] kauditd_printk_skb: 119 callbacks suppressed [ 514.638825][ T28] audit: type=1400 audit(1777023153.412:4442): avc: denied { map } for pid=16273 comm="syz.4.3121" path="socket:[47205]" dev="sockfs" ino=47205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 514.694364][T16277] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3120'. [ 515.042428][T16067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.044309][ T3414] usb usb12-port1: unable to enumerate USB device [ 515.053220][T16067] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.080844][ T116] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.087992][ T116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.110524][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.117660][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.429929][T16310] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3127'. [ 515.452287][T16067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.483273][T16311] loop5: detected capacity change from 0 to 512 [ 515.504953][T16311] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 515.514097][T16311] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 515.537262][T16329] loop2: detected capacity change from 0 to 512 [ 515.645572][T16329] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 515.660527][T16311] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 515.699209][T16329] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3131: bad orphan inode 131083 [ 515.710301][T16311] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 515.721188][T16311] System zones: 0-2, 18-18, 34-35 [ 515.748983][T16311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.801942][T16329] loop2: lost filesystem error report for type 5 error -117 [ 515.803840][T16329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.869456][T16297] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 515.876028][T16297] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 515.959750][T16297] vhci_hcd vhci_hcd.0: Device attached [ 515.990256][T15153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.146635][T12815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.156848][T13275] usb 10-1: SetAddress Request (9) to port 0 [ 516.222331][T13275] usb 10-1: new SuperSpeed USB device number 9 using vhci_hcd [ 516.238783][T16356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.251756][T16356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.342278][T16067] veth0_vlan: entered promiscuous mode [ 516.351150][T16067] veth1_vlan: entered promiscuous mode [ 516.367526][T16067] veth0_macvtap: entered promiscuous mode [ 516.375631][T16067] veth1_macvtap: entered promiscuous mode [ 516.388307][T16067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.402138][T16067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.413749][ T555] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.450554][ T555] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.460436][ T555] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.469758][ T555] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.522549][ T28] audit: type=1326 audit(1777023155.171:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16384 comm="syz.6.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df47fcdd9 code=0x7ffc0000 [ 516.568971][ T28] audit: type=1326 audit(1777023155.171:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16384 comm="syz.6.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df47fcdd9 code=0x7ffc0000 [ 516.597921][ T28] audit: type=1326 audit(1777023155.171:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16384 comm="syz.6.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df47fcdd9 code=0x7ffc0000 [ 516.631558][T16346] vhci_hcd: connection reset by peer [ 516.649618][ T68] vhci_hcd vhci_hcd.4: stop threads [ 516.657245][ T68] vhci_hcd vhci_hcd.4: release socket [ 516.674712][ T68] vhci_hcd vhci_hcd.4: disconnect device [ 516.675882][ T28] audit: type=1326 audit(1777023155.171:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16384 comm="syz.6.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5df47fcdd9 code=0x7ffc0000 [ 516.754373][ T28] audit: type=1326 audit(1777023155.171:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16384 comm="syz.6.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5df47fcb42 code=0x7ffc0000 [ 516.790678][ T28] audit: type=1326 audit(1777023155.171:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16384 comm="syz.6.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5df47fcb42 code=0x7ffc0000 [ 516.825703][T16405] netlink: 'syz.4.3135': attribute type 12 has an invalid length. [ 516.837812][ T28] audit: type=1326 audit(1777023155.171:4449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16384 comm="syz.6.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df47fcdd9 code=0x7ffc0000 [ 516.902854][ T28] audit: type=1326 audit(1777023155.171:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16384 comm="syz.6.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df47fcdd9 code=0x7ffc0000 [ 516.983223][ T28] audit: type=1326 audit(1777023155.171:4451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16384 comm="syz.6.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df47fcdd9 code=0x7ffc0000 [ 517.515421][T16447] loop2: detected capacity change from 0 to 512 [ 517.558647][T16452] loop6: detected capacity change from 0 to 512 [ 517.583029][T16447] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 517.641067][T16452] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 517.786076][T16447] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3146: bad orphan inode 131083 [ 517.852416][T16452] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3147: bad orphan inode 131083 [ 517.924300][T16447] loop2: lost filesystem error report for type 5 error -117 [ 517.925028][T16447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.944693][T16452] loop6: lost filesystem error report for type 5 error -117 [ 517.953579][T16452] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.112191][T12815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.138826][T16067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.146299][T16463] rdma_op ffff88817d1cb580 conn xmit_rdma 0000000000000000 [ 518.607758][T16495] SELinux: Context AÇ is not valid (left unmapped). [ 518.642805][T16495] loop2: detected capacity change from 0 to 512 [ 518.904508][T16495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.917176][T16495] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.272344][T12815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.660999][T16538] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 519.734172][T16538] vhci_hcd vhci_hcd.0: invalid port number 23 [ 519.856786][T16541] netlink: 'syz.5.3165': attribute type 1 has an invalid length. [ 520.092661][T16541] netlink: 'syz.5.3165': attribute type 1 has an invalid length. [ 521.384083][T16565] loop5: detected capacity change from 0 to 2048 [ 521.543664][T16565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.772419][T13275] usb 10-1: device descriptor read/8, error -110 [ 521.782388][T16565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.895662][T13275] usb 10-1: new SuperSpeed USB device number 9 using vhci_hcd [ 521.962339][T13275] usb 10-1: enqueue for inactive port 0 [ 521.980116][T13275] usb 10-1: enqueue for inactive port 0 [ 521.996793][T13275] usb 10-1: enqueue for inactive port 0 [ 522.030835][T16585] loop5: detected capacity change from 0 to 512 [ 522.063612][T16585] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 522.127179][T16585] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.3172: bad orphan inode 131083 [ 522.144066][T16588] wg1: entered promiscuous mode [ 522.151048][T16585] loop5: lost filesystem error report for type 5 error -117 [ 522.158572][T16585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.182333][T16588] wg1: entered allmulticast mode [ 522.232506][T15153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.263242][ T28] kauditd_printk_skb: 149 callbacks suppressed [ 522.263261][ T28] audit: type=1326 audit(1777023160.543:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.4.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1dccdd9 code=0x7ffc0000 [ 522.315380][ T28] audit: type=1326 audit(1777023160.543:4602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.4.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1dccdd9 code=0x7ffc0000 [ 522.379851][ T28] audit: type=1326 audit(1777023160.543:4603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.4.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1dccdd9 code=0x7ffc0000 [ 522.452856][ T28] audit: type=1326 audit(1777023160.543:4604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.4.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f87e1dccdd9 code=0x7ffc0000 [ 522.509843][ T28] audit: type=1326 audit(1777023160.543:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.4.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87e1dccb42 code=0x7ffc0000 [ 522.557245][ T28] audit: type=1326 audit(1777023160.543:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.4.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87e1dccb42 code=0x7ffc0000 [ 522.613005][ T28] audit: type=1326 audit(1777023160.543:4607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.4.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1dccdd9 code=0x7ffc0000 [ 522.664503][ T28] audit: type=1326 audit(1777023160.543:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.4.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1dccdd9 code=0x7ffc0000 [ 522.724087][ T28] audit: type=1326 audit(1777023160.552:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.4.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1dccdd9 code=0x7ffc0000 [ 522.775947][ T28] audit: type=1326 audit(1777023160.552:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.4.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1dccdd9 code=0x7ffc0000 [ 524.076940][T16625] loop2: detected capacity change from 0 to 512 [ 524.377158][T16626] loop6: detected capacity change from 0 to 1024 [ 524.390762][T16625] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 524.507417][T16626] EXT4-fs: Ignoring removed bh option [ 524.573334][T16625] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3185: bad orphan inode 131083 [ 524.606516][T16625] loop2: lost filesystem error report for type 5 error -117 [ 524.607984][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 524.621799][ C1] EXT4-fs (loop2): initial error at time 1777023162: ext4_orphan_get:1423 [ 524.630444][ C1] EXT4-fs (loop2): last error at time 1777023162: ext4_orphan_get:1423 [ 524.640073][T16625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.729654][T16626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.785947][T12815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.806727][T16067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.824904][T16635] vlan2: entered allmulticast mode [ 524.841670][T16635] syz_tun: entered allmulticast mode [ 525.046050][T16650] loop6: detected capacity change from 0 to 2048 [ 525.081214][T16650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.195936][T16650] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.219223][T16650] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.281365][T16650] loop6: detected capacity change from 0 to 512 [ 525.469489][T16650] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 525.556407][T16650] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 525.638576][T16650] System zones: 0-1, 15-15, 18-18, 34-34 [ 525.685020][T16650] EXT4-fs (loop6): orphan cleanup on readonly fs [ 525.733504][T16650] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3193: bg 0: block 40: padding at end of block bitmap is not set [ 525.827478][T16650] loop6: lost filesystem error report for type 5 error -117 [ 525.836891][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 525.851145][ C1] EXT4-fs (loop6): initial error at time 1777023163: ext4_validate_block_bitmap:441 [ 525.860605][ C1] EXT4-fs (loop6): last error at time 1777023163: ext4_validate_block_bitmap:441 [ 525.869850][T16650] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 525.878736][T16650] loop6: lost filesystem error report for type 5 error -117 [ 525.878934][T16650] EXT4-fs (loop6): 1 truncate cleaned up [ 525.904922][T16650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 525.991340][T16067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.024281][T16667] loop4: detected capacity change from 0 to 512 [ 526.050877][T16667] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 526.098071][T16669] loop5: detected capacity change from 0 to 512 [ 526.116455][T16669] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 526.117493][T16667] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.3199: bad orphan inode 131083 [ 526.136136][T16669] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 526.161326][T16669] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 526.191594][T16677] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3203'. [ 526.197378][T16667] loop4: lost filesystem error report for type 5 error -117 [ 526.203293][T16669] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 526.203904][T16677] loop6: detected capacity change from 0 to 512 [ 526.213019][T16667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.233493][T16677] loop6: detected capacity change from 0 to 1024 [ 526.263354][T16669] System zones: 0-2, 18-18, 34-35 [ 526.269176][T16669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.312911][T15153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.372358][T14272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.557832][T16688] FAULT_INJECTION: forcing a failure. [ 526.557832][T16688] name failslab, interval 1, probability 0, space 0, times 0 [ 526.570544][T16688] CPU: 1 UID: 0 PID: 16688 Comm: syz.5.3207 Tainted: G W syzkaller #0 PREEMPT(full) [ 526.570577][T16688] Tainted: [W]=WARN [ 526.570593][T16688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 526.570608][T16688] Call Trace: [ 526.570616][T16688] [ 526.570626][T16688] __dump_stack+0x1d/0x30 [ 526.570894][T16688] dump_stack_lvl+0x95/0xd0 [ 526.570924][T16688] dump_stack+0x15/0x1b [ 526.570947][T16688] should_fail_ex+0x263/0x280 [ 526.571021][T16688] should_failslab+0x8c/0xb0 [ 526.571043][T16688] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 526.571070][T16688] ? __alloc_skb+0x2d6/0x690 [ 526.571171][T16688] __alloc_skb+0x2d6/0x690 [ 526.571198][T16688] ? __alloc_skb+0x200/0x690 [ 526.571225][T16688] netlink_alloc_large_skb+0xbf/0xf0 [ 526.571347][T16688] netlink_sendmsg+0x40c/0x6f0 [ 526.571380][T16688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.571417][T16688] ____sys_sendmsg+0x563/0x5b0 [ 526.571508][T16688] ___sys_sendmsg+0x195/0x1e0 [ 526.571624][T16688] __x64_sys_sendmsg+0xd4/0x160 [ 526.571659][T16688] x64_sys_call+0x194c/0x3020 [ 526.571691][T16688] do_syscall_64+0x12c/0x3b0 [ 526.571751][T16688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.571775][T16688] RIP: 0033:0x7fe800a3cdd9 [ 526.571794][T16688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.571860][T16688] RSP: 002b:00007fe7ff497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.571894][T16688] RAX: ffffffffffffffda RBX: 00007fe800cb5fa0 RCX: 00007fe800a3cdd9 [ 526.571912][T16688] RDX: 0000000000008084 RSI: 0000200000000080 RDI: 000000000000000b [ 526.571928][T16688] RBP: 00007fe7ff497090 R08: 0000000000000000 R09: 0000000000000000 [ 526.571944][T16688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.571960][T16688] R13: 00007fe800cb6038 R14: 00007fe800cb5fa0 R15: 00007ffeb30ca278 [ 526.572037][T16688] [ 526.817659][T16690] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 526.905121][T16696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3210'. [ 526.914396][T16696] tipc: Invalid UDP bearer configuration [ 526.914412][T16696] tipc: Enabling of bearer rejected, failed to enable media [ 526.959327][T16700] netlink: 'syz.2.3211': attribute type 29 has an invalid length. [ 526.967678][T16700] netlink: 'syz.2.3211': attribute type 29 has an invalid length. [ 526.976031][T16700] netlink: 'syz.2.3211': attribute type 29 has an invalid length. [ 527.001878][T16702] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3209'. [ 527.011948][T16702] xt_hashlimit: overflow, try lower: 18446744073709551614/4 [ 527.512369][T16711] set_capacity_and_notify: 1 callbacks suppressed [ 527.512398][T16711] loop6: detected capacity change from 0 to 512 [ 527.542740][T16710] loop4: detected capacity change from 0 to 512 [ 527.648990][T16711] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 527.660022][T16710] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 527.669395][T16710] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 527.675342][T16711] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3215: bad orphan inode 131083 [ 527.678493][T16710] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 527.690398][T16711] loop6: lost filesystem error report for type 5 error -117 [ 527.698033][T16711] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.699461][T16710] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 527.725761][T16710] System zones: 0-2, 18-18, 34-35 [ 527.732194][T16067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.732599][T16710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.785693][T14272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.963504][T16725] loop5: detected capacity change from 0 to 1024 [ 528.017322][T16730] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3223'. [ 528.054040][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3223'. [ 528.082593][T16725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.141982][T15153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.189465][T16739] loop5: detected capacity change from 0 to 512 [ 528.197297][T16739] EXT4-fs: Ignoring removed orlov option [ 528.232982][T16739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.257349][T16739] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.269241][T16739] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3225'. [ 528.345044][T15153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.248570][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3232'. [ 529.430209][T16776] loop5: detected capacity change from 0 to 512 [ 529.439317][T16776] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 529.448527][T16776] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 529.466770][T16776] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 529.476324][T16776] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 529.484584][T16776] System zones: 0-2, 18-18, 34-35 [ 529.508051][T16776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.552873][T15153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.588475][T16783] loop5: detected capacity change from 0 to 512 [ 529.603836][T16783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.617273][T16783] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.629129][T16783] tmpfs: Unknown parameter 'inode31' [ 529.853128][T15153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.341110][T16796] FAULT_INJECTION: forcing a failure. [ 530.341110][T16796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.405478][T16796] CPU: 0 UID: 0 PID: 16796 Comm: syz.4.3244 Tainted: G W syzkaller #0 PREEMPT(full) [ 530.405603][T16796] Tainted: [W]=WARN [ 530.405612][T16796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 530.405627][T16796] Call Trace: [ 530.405648][T16796] [ 530.405658][T16796] __dump_stack+0x1d/0x30 [ 530.405689][T16796] dump_stack_lvl+0x95/0xd0 [ 530.405799][T16796] dump_stack+0x15/0x1b [ 530.405826][T16796] should_fail_ex+0x263/0x280 [ 530.405863][T16796] should_fail+0xb/0x20 [ 530.405896][T16796] should_fail_usercopy+0x1a/0x20 [ 530.405924][T16796] _copy_from_user+0x1c/0xb0 [ 530.405943][T16796] do_tcp_setsockopt+0x432/0x1620 [ 530.405973][T16796] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 530.406006][T16796] tcp_setsockopt+0x51/0xb0 [ 530.406090][T16796] sock_common_setsockopt+0x69/0x80 [ 530.406110][T16796] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 530.406131][T16796] smc_setsockopt+0x183/0x750 [ 530.406158][T16796] ? __pfx_smc_setsockopt+0x10/0x10 [ 530.406295][T16796] __sys_setsockopt+0x184/0x200 [ 530.406383][T16796] __x64_sys_setsockopt+0x64/0x80 [ 530.406408][T16796] x64_sys_call+0x2327/0x3020 [ 530.406451][T16796] do_syscall_64+0x12c/0x3b0 [ 530.406503][T16796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.406584][T16796] RIP: 0033:0x7f87e1dccdd9 [ 530.406602][T16796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.406647][T16796] RSP: 002b:00007f87e0827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 530.406673][T16796] RAX: ffffffffffffffda RBX: 00007f87e2045fa0 RCX: 00007f87e1dccdd9 [ 530.406689][T16796] RDX: 0000000000000007 RSI: 0000000000000006 RDI: 0000000000000003 [ 530.406701][T16796] RBP: 00007f87e0827090 R08: 0000000000000004 R09: 0000000000000000 [ 530.406714][T16796] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 530.406780][T16796] R13: 00007f87e2046038 R14: 00007f87e2045fa0 R15: 00007ffcfe17c708 [ 530.406798][T16796] [ 530.702036][T16798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3245'. [ 530.763281][T16798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3245'. [ 530.782301][T16802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.791401][T16802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.794469][ T68] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.817618][ T68] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.829177][ T68] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.842824][ T68] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.905756][ T28] kauditd_printk_skb: 120 callbacks suppressed [ 531.905784][ T28] audit: type=1400 audit(1777023169.564:4731): avc: denied { getopt } for pid=16836 comm="syz.4.3254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 532.453622][T16851] loop6: detected capacity change from 0 to 512 [ 532.465313][T16851] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 532.474478][T16851] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 532.483217][T16851] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 532.500459][T16851] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 532.508572][T16851] System zones: 0-2, 18-18, 34-35 [ 532.533404][T16851] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.643416][T16855] netlink: 'syz.8.3259': attribute type 21 has an invalid length. [ 532.655822][T16067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.704401][T16857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.730337][T16857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.968302][T16863] loop5: detected capacity change from 0 to 512 [ 533.007560][T16863] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.3262: corrupted xattr block 95: invalid header [ 533.033094][T16863] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 533.033929][T16863] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3262: bg 0: block 7: invalid block bitmap [ 533.043408][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 533.043475][ C1] EXT4-fs (loop5): initial error at time 1777023170: ext4_expand_extra_isize_ea:2810: inode 11 [ 533.043562][ C1] EXT4-fs (loop5): last error at time 1777023170: ext4_expand_extra_isize_ea:2810: inode 11 [ 533.084068][T16863] loop5: lost filesystem error report for type 5 error -117 [ 533.084468][T16863] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 533.103769][T16863] loop5: lost filesystem error report for type 5 error -117 [ 533.109103][T16863] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.3262: corrupted xattr block 95: invalid header [ 533.132663][T16863] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 533.133008][T16863] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 533.152379][T16863] EXT4-fs (loop5): 1 orphan inode deleted [ 533.160335][T16863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.305140][T15153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.783927][T16883] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3265'. [ 533.909392][T16885] netlink: 'syz.8.3268': attribute type 16 has an invalid length. [ 533.917308][T16885] netlink: 'syz.8.3268': attribute type 17 has an invalid length. [ 533.944002][T16885] bridge0: port 3(gretap0) entered blocking state [ 533.950533][T16885] bridge0: port 3(gretap0) entered forwarding state [ 533.953657][T16887] loop6: detected capacity change from 0 to 1024 [ 533.961061][T16885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.970848][T16887] EXT4-fs: test_dummy_encryption option not supported [ 533.987448][T16885] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.098172][T16885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 534.712096][T16897] loop5: detected capacity change from 0 to 512 [ 534.797072][T16897] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.3271: corrupted xattr block 95: invalid header [ 534.811112][T16897] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 534.811698][T16897] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3271: bg 0: block 7: invalid block bitmap [ 534.820952][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 534.820990][ C1] EXT4-fs (loop5): initial error at time 1777023172: ext4_expand_extra_isize_ea:2810: inode 11 [ 534.821061][ C1] EXT4-fs (loop5): last error at time 1777023172: ext4_expand_extra_isize_ea:2810: inode 11 [ 534.861000][T16897] loop5: lost filesystem error report for type 5 error -117 [ 534.861398][T16897] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 534.878421][T16897] loop5: lost filesystem error report for type 5 error -117 [ 534.878879][T16897] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.3271: corrupted xattr block 95: invalid header [ 534.900242][T16897] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 534.900567][T16897] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 534.919107][T16897] EXT4-fs (loop5): 1 orphan inode deleted [ 534.926391][T16897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.016087][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3273'. [ 535.025163][T16902] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3273'. [ 535.034418][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3273'. [ 535.133645][T15153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.335218][T16913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.344115][T16913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.427270][T16915] syzkaller0: entered promiscuous mode [ 535.432831][T16915] syzkaller0: entered allmulticast mode [ 536.186363][T16923] xt_connbytes: Forcing CT accounting to be enabled [ 536.278306][T16926] loop6: detected capacity change from 0 to 512 [ 536.297434][T16926] EXT4-fs: Ignoring removed oldalloc option [ 536.469507][T16926] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 537.459990][T16926] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.3281: invalid indirect mapped block 83886080 (level 1) [ 537.519546][T16926] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 537.527410][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 537.543191][ C1] EXT4-fs (loop6): initial error at time 1777023174: ext4_free_branches:1023: inode 16 [ 537.552990][ C1] EXT4-fs (loop6): last error at time 1777023174: ext4_free_branches:1023: inode 16 [ 537.568524][T16926] EXT4-fs (loop6): Remounting filesystem read-only [ 537.578756][T16926] EXT4-fs (loop6): 1 orphan inode deleted [ 537.597372][T16926] EXT4-fs (loop6): 1 truncate cleaned up [ 537.603626][T16926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.620336][T16926] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.262174][T16949] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3281'. [ 538.757401][ T28] audit: type=1400 audit(1777023175.983:4732): avc: denied { bind } for pid=16942 comm="syz.8.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 538.873257][T16957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.885269][T16955] tipc: Failed to remove unknown binding: 66,2,2/0:2852642160/2852642164 [ 538.888216][T16957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.918449][T16960] loop4: detected capacity change from 0 to 164 [ 538.972825][T16960] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 539.138818][T16972] loop4: detected capacity change from 0 to 512 [ 539.157413][T16972] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 539.166493][T16972] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 539.204898][T16972] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 539.214235][T16972] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 539.222282][T16972] System zones: 0-2, 18-18, 34-35 [ 539.228189][T16972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.309371][T14272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.388173][T16986] futex_wake_op: syz.4.3300 tries to shift op by -65; fix this program [ 540.497854][T16991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=16991 comm=syz.6.3302 [ 540.532466][T16991] tap0: tun_chr_ioctl cmd 21731 [ 540.539129][T16989] loop5: detected capacity change from 0 to 512 [ 540.557251][T16989] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 540.566325][T16989] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 540.576064][T16989] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 540.585846][T16989] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 540.597095][T16989] System zones: 0-2, 18-18, 34-35 [ 540.602915][T16989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.628636][T15153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.629234][T16993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16993 comm=syz.8.3303 [ 540.691438][T16998] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3304'. [ 540.708811][ T28] audit: type=1326 audit(1777023177.761:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.6.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df47fcdd9 code=0x7ffc0000 [ 540.746076][T17002] loop4: detected capacity change from 0 to 512 [ 540.746500][ T28] audit: type=1326 audit(1777023177.761:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.6.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df47fcdd9 code=0x7ffc0000 [ 540.787931][T17002] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 540.799447][ T28] audit: type=1326 audit(1777023177.761:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.6.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df47fcdd9 code=0x7ffc0000 [ 540.827635][ T28] audit: type=1326 audit(1777023177.761:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.6.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df47fcdd9 code=0x7ffc0000 [ 540.843818][T17002] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.3306: bad orphan inode 131083 [ 540.853027][ T28] audit: type=1326 audit(1777023177.761:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.6.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df47fcdd9 code=0x7ffc0000 [ 540.885514][ T28] audit: type=1326 audit(1777023177.761:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.6.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5df47fcdd9 code=0x7ffc0000 [ 540.895789][T17002] loop4: lost filesystem error report for type 5 error -117 [ 540.912123][ T28] audit: type=1326 audit(1777023177.761:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.6.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5df47fcb42 code=0x7ffc0000 [ 540.936299][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 540.943243][ T28] audit: type=1326 audit(1777023177.761:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.6.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5df47fcb42 code=0x7ffc0000 [ 540.943292][ T28] audit: type=1326 audit(1777023177.761:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.6.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df47fcdd9 code=0x7ffc0000 [ 540.997440][ C1] EXT4-fs (loop4): initial error at time 1777023178: ext4_orphan_get:1423 [ 541.005986][ C1] EXT4-fs (loop4): last error at time 1777023178: ext4_orphan_get:1423 [ 541.015095][T17002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.074462][T14272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.315410][T17017] loop6: detected capacity change from 0 to 1764 [ 541.322254][T17017] iso9660: Bad value for 'uid' [ 541.327045][T17017] iso9660: Bad value for 'uid' [ 543.325346][T17137] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3318'. [ 543.346166][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3317'. [ 543.355685][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3317'. [ 543.364566][T17135] netlink: 33 bytes leftover after parsing attributes in process `syz.8.3317'. [ 543.373624][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3317'. [ 543.382467][T17135] netlink: 33 bytes leftover after parsing attributes in process `syz.8.3317'. [ 545.678522][ T7245] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.858758][T17190] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3331'. [ 546.061304][ T7245] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.242583][ T7245] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.261042][ T7245] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.262600][T17201] loop6: detected capacity change from 0 to 164 [ 546.291920][T17165] chnl_net:caif_netlink_parms(): no params data found [ 546.307020][T17198] loop5: detected capacity change from 0 to 4096 [ 546.332593][T17198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.346403][ T7245] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.378625][ T7245] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.393788][T17192] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3332'. [ 546.458238][T15153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.473593][ T7245] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.477982][T17214] loop4: detected capacity change from 0 to 512 [ 546.493016][ T7245] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.547913][T17208] loop4: detected capacity change from 0 to 1024 [ 546.633473][T17165] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.691068][T17165] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.698741][T17165] bridge_slave_0: entered allmulticast mode [ 546.706128][T17165] bridge_slave_0: entered promiscuous mode [ 546.714783][T17165] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.722105][T17165] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.725052][T17201] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 546.729387][T17165] bridge_slave_1: entered allmulticast mode [ 546.730101][T17165] bridge_slave_1: entered promiscuous mode [ 546.766621][T17221] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3341'. [ 546.831761][T17221] tipc: Invalid UDP bearer configuration [ 546.831777][T17221] tipc: Enabling of bearer rejected, failed to enable media [ 546.896266][T17165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.111868][T17165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.195797][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 547.195902][ T28] audit: type=1326 audit(1777023183.863:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17224 comm="syz.8.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6ebacdd9 code=0x7ffc0000 [ 547.277200][ T28] audit: type=1326 audit(1777023183.863:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17224 comm="syz.8.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6ebacdd9 code=0x7ffc0000 [ 547.330462][ T28] audit: type=1326 audit(1777023183.863:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17224 comm="syz.8.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6ebacdd9 code=0x7ffc0000 [ 547.366073][T17165] team0: Port device team_slave_0 added [ 547.394897][T17165] team0: Port device team_slave_1 added [ 547.400956][ T28] audit: type=1326 audit(1777023183.863:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17224 comm="syz.8.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6ebacdd9 code=0x7ffc0000 [ 547.506316][ T28] audit: type=1326 audit(1777023183.863:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17224 comm="syz.8.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1b6ebacdd9 code=0x7ffc0000 [ 547.556863][ T28] audit: type=1326 audit(1777023183.863:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17224 comm="syz.8.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1b6ebacb42 code=0x7ffc0000 [ 547.611736][ T7245] bridge_slave_1: left allmulticast mode [ 547.660492][ T7245] bridge_slave_1: left promiscuous mode [ 547.684272][ T7245] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.707617][ T7245] bridge_slave_0: left allmulticast mode [ 547.713468][ T28] audit: type=1326 audit(1777023183.909:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17224 comm="syz.8.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6ebacdd9 code=0x7ffc0000 [ 547.737128][ T7245] bridge_slave_0: left promiscuous mode [ 547.742854][ T7245] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.858050][ T28] audit: type=1326 audit(1777023183.909:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17224 comm="syz.8.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6ebacdd9 code=0x7ffc0000 [ 547.975471][ T28] audit: type=1326 audit(1777023183.909:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17224 comm="syz.8.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1b6ebacb42 code=0x7ffc0000 [ 548.000180][ T28] audit: type=1326 audit(1777023183.909:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17224 comm="syz.8.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1b6ebacb42 code=0x7ffc0000 [ 548.084696][T17253] loop5: detected capacity change from 0 to 128 [ 548.103633][T17253] bio_check_eod: 1300 callbacks suppressed [ 548.103654][T17253] syz.5.3347: attempt to access beyond end of device [ 548.103654][T17253] loop5: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 548.132324][T17253] syz.5.3347: attempt to access beyond end of device [ 548.132324][T17253] loop5: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 548.145975][T17253] buffer_io_error: 1294 callbacks suppressed [ 548.145993][T17253] Buffer I/O error on dev loop5, logical block 71, lost async page write [ 548.160980][T17253] syz.5.3347: attempt to access beyond end of device [ 548.160980][T17253] loop5: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 548.174503][T17253] Buffer I/O error on dev loop5, logical block 71, lost async page write [ 548.183964][T17253] syz.5.3347: attempt to access beyond end of device [ 548.183964][T17253] loop5: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 548.197443][T17253] Buffer I/O error on dev loop5, logical block 72, lost async page write [ 548.198870][ T7245] smc: removing net device bond0 with user defined pnetid SYZ2 [ 548.205956][T17253] syz.5.3347: attempt to access beyond end of device [ 548.205956][T17253] loop5: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 548.227746][ T7245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.227903][T17253] syz.5.3347: attempt to access beyond end of device [ 548.227903][T17253] loop5: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 548.250389][T17253] syz.5.3347: attempt to access beyond end of device [ 548.250389][T17253] loop5: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 548.264221][T17253] Buffer I/O error on dev loop5, logical block 87, lost async page write [ 548.272824][T17253] syz.5.3347: attempt to access beyond end of device [ 548.272824][T17253] loop5: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 548.286555][T17253] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 548.295602][ T7245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.295737][T17253] syz.5.3347: attempt to access beyond end of device [ 548.295737][T17253] loop5: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 548.320018][T17253] syz.5.3347: attempt to access beyond end of device [ 548.320018][T17253] loop5: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 548.320119][ T7245] bond0 (unregistering): Released all slaves [ 548.333609][T17253] Buffer I/O error on dev loop5, logical block 91, lost async page write [ 548.348277][T17253] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 548.411525][T17242] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3345'. [ 548.424720][ T7245] tipc: Left network mode [ 548.429622][T17259] loop6: detected capacity change from 0 to 512 [ 548.432101][ T3047] 8021q: adding VLAN 0 to HW filter on device eth9 [ 548.442832][T17259] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 548.454596][T17259] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3348: bad orphan inode 131083 [ 548.458789][T17165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.472128][T17259] loop6: lost filesystem error report for type 5 error -117 [ 548.472294][T17165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.472943][T17259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.518798][T17165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.543411][T17264] netlink: 'syz.5.3350': attribute type 2 has an invalid length. [ 548.552279][T16067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.561594][ T7245] hsr_slave_0: left promiscuous mode [ 548.585935][ T7245] hsr_slave_1: left promiscuous mode [ 548.593979][ T7245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.601706][ T7245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.611687][ T7245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.625605][ T7245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.637175][ T7245] veth1_macvtap: left promiscuous mode [ 548.642973][ T7245] veth0_macvtap: left promiscuous mode [ 548.648998][ T7245] veth1_vlan: left promiscuous mode [ 548.654591][ T7245] veth0_vlan: left promiscuous mode [ 548.735215][ T7245] team0 (unregistering): Port device team_slave_1 removed [ 548.754068][ T7245] team0 (unregistering): Port device team_slave_0 removed [ 548.805164][T17165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.819728][T17165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.857775][T17284] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20001 [ 548.858059][T17165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.877911][T17267] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3352'. [ 548.886912][T17267] tipc: Invalid UDP bearer configuration [ 548.886927][T17267] tipc: Enabling of bearer rejected, failed to enable media [ 548.913497][T17279] syzkaller0: entered promiscuous mode [ 548.920298][T17279] syzkaller0: entered allmulticast mode [ 548.945249][T17165] hsr_slave_0: entered promiscuous mode [ 548.951346][T17165] hsr_slave_1: entered promiscuous mode [ 548.957296][T17165] debugfs: 'hsr0' already exists in 'hsr' [ 548.979567][T17165] Cannot create hsr debugfs directory [ 549.178890][T17314] loop5: detected capacity change from 0 to 512 [ 549.193830][T17314] EXT4-fs (loop5): #clusters per group too big: 67117056 [ 549.597636][T17317] loop4: detected capacity change from 0 to 1024 [ 549.607585][T17317] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 549.624768][T17317] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 5: comm syz.4.3360: lblock 5 mapped to illegal pblock 5 (length 1) [ 549.639831][T17317] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 549.640121][T17317] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.3360: Failed to acquire dquot type 0 [ 549.649236][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 549.649254][ C1] EXT4-fs (loop4): initial error at time 1777023186: ext4_map_blocks:833: inode 3: block 5 [ 549.649300][ C1] EXT4-fs (loop4): last error at time 1777023186: ext4_map_blocks:833: inode 3: block 5 [ 549.687050][T17317] loop4: lost filesystem error report for type 5 error -117 [ 549.687186][T17317] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 5: comm syz.4.3360: lblock 5 mapped to illegal pblock 5 (length 1) [ 549.708536][T17317] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 549.711702][T17317] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.3360: Failed to acquire dquot type 0 [ 549.732242][T17317] loop4: lost filesystem error report for type 5 error -117 [ 549.732398][T17317] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.3360: Freeing blocks not in datazone - block = 0, count = 4096 [ 549.753643][T17317] loop4: lost filesystem error report for type 5 error -117 [ 549.753808][T17317] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 5: comm syz.4.3360: lblock 5 mapped to illegal pblock 5 (length 1) [ 549.775157][T17317] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 549.775384][T17317] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.3360: Failed to acquire dquot type 0 [ 549.810531][T17317] loop4: lost filesystem error report for type 5 error -117 [ 549.810711][T17317] EXT4-fs (loop4): 1 orphan inode deleted [ 549.824217][T17317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.853265][T17317] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #15: comm syz.4.3360: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 549.871342][T17317] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #15: comm syz.4.3360: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 550.018266][T14272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.049478][ T3047] 8021q: adding VLAN 0 to HW filter on device eth10 [ 550.191514][T17322] loop5: detected capacity change from 0 to 1024 [ 550.208710][T17322] EXT4-fs: Ignoring removed bh option [ 550.219796][T17342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=17342 comm=syz.4.3365 [ 550.237616][T17333] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3365'. [ 550.262386][T17322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.338937][T17322] openvswitch: netlink: EtherType 0 is less than min 600 [ 550.405911][ T3047] 8021q: adding VLAN 0 to HW filter on device eth11 [ 550.429259][T15153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.478944][T17367] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3371'. [ 550.492197][T17165] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 550.506860][T17165] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 550.558661][T17165] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 550.577126][T17165] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 550.595366][T17165] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 550.605023][T17165] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 551.189188][T17165] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 551.198218][T17165] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 551.320311][T17165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.344031][T17165] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.351567][ T3047] 8021q: adding VLAN 0 to HW filter on device eth12 [ 551.361634][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.368730][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.380407][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.387573][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.550582][T17427] netlink: 'syz.4.3380': attribute type 10 has an invalid length. [ 551.572872][T17428] netlink: 'syz.4.3380': attribute type 10 has an invalid length. [ 551.695652][T17165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.754325][T17459] loop4: detected capacity change from 0 to 512 [ 551.761111][T17455] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3386'. [ 551.775829][T17459] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 551.804502][T17459] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.3387: bad orphan inode 131083 [ 551.819577][T17459] loop4: lost filesystem error report for type 5 error -117 [ 551.821519][T17459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.892666][T14272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.920253][T17479] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3388'. [ 552.087897][T17472] loop6: detected capacity change from 0 to 512 [ 552.099394][T17472] EXT4-fs: Ignoring removed oldalloc option [ 552.106032][T17472] EXT4-fs: Ignoring removed bh option [ 552.118480][T17472] EXT4-fs: Mount option(s) incompatible with ext2 [ 552.136651][T17165] veth0_vlan: entered promiscuous mode [ 552.176402][T17504] FAULT_INJECTION: forcing a failure. [ 552.176402][T17504] name failslab, interval 1, probability 0, space 0, times 0 [ 552.193669][T17504] CPU: 0 UID: 0 PID: 17504 Comm: syz.5.3390 Tainted: G W syzkaller #0 PREEMPT(full) [ 552.193701][T17504] Tainted: [W]=WARN [ 552.193709][T17504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 552.193782][T17504] Call Trace: [ 552.193790][T17504] [ 552.193857][T17504] __dump_stack+0x1d/0x30 [ 552.193893][T17504] dump_stack_lvl+0x95/0xd0 [ 552.193921][T17504] dump_stack+0x15/0x1b [ 552.193946][T17504] should_fail_ex+0x263/0x280 [ 552.194090][T17504] should_failslab+0x8c/0xb0 [ 552.194111][T17504] __kmalloc_cache_node_noprof+0x6b/0x470 [ 552.194137][T17504] ? __get_vm_area_node+0x106/0x1d0 [ 552.194196][T17504] ? __rcu_read_unlock+0x33/0x70 [ 552.194259][T17504] __get_vm_area_node+0x106/0x1d0 [ 552.194288][T17504] __vmalloc_node_range_noprof+0x25a/0x11c0 [ 552.194333][T17504] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 552.194369][T17504] ? cred_has_capability+0x224/0x2a0 [ 552.194526][T17504] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 552.194560][T17504] __vmalloc_noprof+0xa4/0xf0 [ 552.194589][T17504] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 552.194687][T17504] bpf_prog_alloc_no_stats+0x47/0x390 [ 552.194720][T17504] ? bpf_prog_alloc+0x2a/0x150 [ 552.194787][T17504] bpf_prog_alloc+0x3c/0x150 [ 552.194833][T17504] bpf_prog_load+0x50d/0x1030 [ 552.194866][T17504] ? security_bpf+0x2b/0x90 [ 552.194894][T17504] __sys_bpf+0x505/0x7e0 [ 552.194983][T17504] __x64_sys_bpf+0x41/0x50 [ 552.195007][T17504] x64_sys_call+0x10cb/0x3020 [ 552.195174][T17504] do_syscall_64+0x12c/0x3b0 [ 552.195203][T17504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.195227][T17504] RIP: 0033:0x7fe800a3cdd9 [ 552.195244][T17504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.195272][T17504] RSP: 002b:00007fe7ff497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 552.195293][T17504] RAX: ffffffffffffffda RBX: 00007fe800cb5fa0 RCX: 00007fe800a3cdd9 [ 552.195308][T17504] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 552.195349][T17504] RBP: 00007fe7ff497090 R08: 0000000000000000 R09: 0000000000000000 [ 552.195365][T17504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.195378][T17504] R13: 00007fe800cb6038 R14: 00007fe800cb5fa0 R15: 00007ffeb30ca278 [ 552.195396][T17504] [ 552.195761][T17504] syz.5.3390: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 552.282643][T17165] veth1_vlan: entered promiscuous mode [ 552.532746][T17504] ,cpuset=/,mems_allowed=0 [ 552.560129][T17504] CPU: 1 UID: 0 PID: 17504 Comm: syz.5.3390 Tainted: G W syzkaller #0 PREEMPT(full) [ 552.560170][T17504] Tainted: [W]=WARN [ 552.560178][T17504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 552.560193][T17504] Call Trace: [ 552.560202][T17504] [ 552.560243][T17504] __dump_stack+0x1d/0x30 [ 552.560276][T17504] dump_stack_lvl+0x95/0xd0 [ 552.560360][T17504] dump_stack+0x15/0x1b [ 552.560387][T17504] warn_alloc+0x145/0x1c0 [ 552.560477][T17504] __vmalloc_node_range_noprof+0x27f/0x11c0 [ 552.560513][T17504] ? cred_has_capability+0x224/0x2a0 [ 552.560546][T17504] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 552.560574][T17504] __vmalloc_noprof+0xa4/0xf0 [ 552.560601][T17504] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 552.560633][T17504] bpf_prog_alloc_no_stats+0x47/0x390 [ 552.560664][T17504] ? bpf_prog_alloc+0x2a/0x150 [ 552.560700][T17504] bpf_prog_alloc+0x3c/0x150 [ 552.560757][T17504] bpf_prog_load+0x50d/0x1030 [ 552.560796][T17504] ? security_bpf+0x2b/0x90 [ 552.560819][T17504] __sys_bpf+0x505/0x7e0 [ 552.560920][T17504] __x64_sys_bpf+0x41/0x50 [ 552.560950][T17504] x64_sys_call+0x10cb/0x3020 [ 552.560976][T17504] do_syscall_64+0x12c/0x3b0 [ 552.561043][T17504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.561070][T17504] RIP: 0033:0x7fe800a3cdd9 [ 552.561089][T17504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.561111][T17504] RSP: 002b:00007fe7ff497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 552.561178][T17504] RAX: ffffffffffffffda RBX: 00007fe800cb5fa0 RCX: 00007fe800a3cdd9 [ 552.561197][T17504] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 552.561211][T17504] RBP: 00007fe7ff497090 R08: 0000000000000000 R09: 0000000000000000 [ 552.561226][T17504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.561242][T17504] R13: 00007fe800cb6038 R14: 00007fe800cb5fa0 R15: 00007ffeb30ca278 [ 552.561262][T17504] [ 552.561292][T17504] Mem-Info: [ 552.660580][T17165] veth0_macvtap: entered promiscuous mode [ 552.822343][T17165] veth1_macvtap: entered promiscuous mode [ 552.854287][T17165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.862386][T17504] active_anon:29470 inactive_anon:14458 isolated_anon:0 [ 552.862386][T17504] active_file:26629 inactive_file:3314 isolated_file:0 [ 552.862386][T17504] unevictable:39 dirty:169 writeback:0 [ 552.862386][T17504] slab_reclaimable:4099 slab_unreclaimable:52746 [ 552.862386][T17504] mapped:33100 shmem:34654 pagetables:8278 [ 552.862386][T17504] sec_pagetables:0 bounce:0 [ 552.862386][T17504] kernel_misc_reclaimable:0 [ 552.862386][T17504] free:1791374 free_pcp:6734 free_cma:0 [ 552.933368][T17165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.949198][T11982] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.958036][T11982] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.968246][T17504] Node 0 active_anon:116000kB inactive_anon:57828kB active_file:106516kB inactive_file:13252kB unevictable:156kB isolated(anon):0kB isolated(file):0kB mapped:130384kB dirty:728kB writeback:0kB shmem:136544kB kernel_stack:4592kB pagetables:33480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 552.999134][T17504] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 553.055250][T11982] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.066670][T17504] lowmem_reserve[]: 0 2878 7857 7857 [ 553.071687][T11982] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.085219][T17504] Node 0 DMA32 free:2946980kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947340kB mlocked:0kB bounce:0kB free_pcp:360kB local_pcp:104kB free_cma:0kB [ 553.118771][T17504] lowmem_reserve[]: 0 0 4978 4978 [ 553.129764][T17524] bridge0: port 3(gretap0) entered disabled state [ 553.136542][T17517] netlink: 'syz.8.3391': attribute type 16 has an invalid length. [ 553.137265][T17504] Node 0 Normal free:4222240kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:104632kB inactive_anon:57828kB active_file:106516kB inactive_file:13252kB unevictable:156kB writepending:728kB zspages:0kB present:5242880kB managed:5098236kB mlocked:156kB bounce:0kB free_pcp:23284kB local_pcp:8660kB free_cma:0kB [ 553.169803][T17517] netlink: 'syz.8.3391': attribute type 17 has an invalid length. [ 553.246612][T17504] lowmem_reserve[]: 0 0 0 0 [ 553.252765][T17504] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 553.265701][T17527] netlink: 'syz.4.3393': attribute type 16 has an invalid length. [ 553.297712][T17504] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 4*64kB (M) 4*128kB (M) 4*256kB (M) 4*512kB (M) 4*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2946980kB [ 553.319203][T17527] netlink: 'syz.4.3393': attribute type 17 has an invalid length. [ 553.330928][T17504] Node 0 Normal: 4658*4kB (UME) 3009*8kB (UM) 2462*16kB (UME) 1969*32kB (UME) 1876*64kB (UME) 1201*128kB (UM) 981*256kB (UME) 904*512kB (UME) 787*1024kB (UM) 529*2048kB (UME) 293*4096kB (UM) = 4222288kB [ 553.367553][T17517] bridge0: port 3(gretap0) entered blocking state [ 553.374084][T17517] bridge0: port 3(gretap0) entered forwarding state [ 553.392003][T17504] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 553.409722][ T28] kauditd_printk_skb: 298 callbacks suppressed [ 553.409763][ T28] audit: type=1326 audit(1777023189.693:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17548 comm="syz.7.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4685ecdd9 code=0x7ffc0000 [ 553.446445][T17504] 64094 total pagecache pages [ 553.451903][T17504] 246 pages in swap cache [ 553.456353][T17504] Free swap = 116424kB [ 553.460783][T17504] Total swap = 124996kB [ 553.467210][ T28] audit: type=1326 audit(1777023189.721:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17548 comm="syz.7.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4685ecdd9 code=0x7ffc0000 [ 553.493063][T17504] 2097051 pages RAM [ 553.503738][T17504] 0 pages HighMem/MovableOnly [ 553.511883][T17504] 81817 pages reserved [ 553.546194][ T28] audit: type=1326 audit(1777023189.721:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17548 comm="syz.7.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4685ecdd9 code=0x7ffc0000 [ 553.570276][T17517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 553.575591][ T28] audit: type=1326 audit(1777023189.721:5121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17548 comm="syz.7.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4685ecdd9 code=0x7ffc0000 [ 553.691546][T17566] loop6: detected capacity change from 0 to 4096 [ 553.701138][ T28] audit: type=1326 audit(1777023189.721:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17548 comm="syz.7.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4685ecdd9 code=0x7ffc0000 [ 553.701670][T17531] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 553.724663][ T28] audit: type=1326 audit(1777023189.721:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17548 comm="syz.7.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff4685ecdd9 code=0x7ffc0000 [ 553.731171][T17531] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 553.805105][T17566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.835315][T17531] vhci_hcd vhci_hcd.0: Device attached [ 553.852132][ T28] audit: type=1326 audit(1777023189.721:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17548 comm="syz.7.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff4685ecb42 code=0x7ffc0000 [ 553.876574][ T28] audit: type=1326 audit(1777023189.721:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17548 comm="syz.7.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff4685ecb42 code=0x7ffc0000 [ 553.901104][ T28] audit: type=1326 audit(1777023189.721:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17548 comm="syz.7.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4685ecdd9 code=0x7ffc0000 [ 553.901913][T16067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.925029][ T28] audit: type=1326 audit(1777023189.721:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17548 comm="syz.7.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4685ecdd9 code=0x7ffc0000 [ 553.937207][T17527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 554.165776][T13275] usb 10-1: SetAddress Request (10) to port 0 [ 554.178237][T13275] usb 10-1: new SuperSpeed USB device number 10 using vhci_hcd [ 554.231772][T17599] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 554.243948][T17567] vhci_hcd: connection reset by peer [ 554.252993][T11982] vhci_hcd vhci_hcd.4: stop threads [ 554.259057][T17601] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3399'. [ 554.278164][T11982] vhci_hcd vhci_hcd.4: release socket [ 554.289682][T11982] vhci_hcd vhci_hcd.4: disconnect device [ 554.348215][T17608] loop7: detected capacity change from 0 to 512 [ 554.366076][T17608] EXT4-fs error (device loop7): __ext4_fill_super:5596: inode #2: comm syz.7.3403: iget: checksum invalid [ 554.385928][T17608] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 554.386848][T17608] EXT4-fs (loop7): get root inode failed [ 554.395869][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 554.395892][ C0] EXT4-fs (loop7): initial error at time 1777023190: __ext4_fill_super:5596: inode 2 [ 554.395920][ C0] EXT4-fs (loop7): last error at time 1777023190: __ext4_fill_super:5596: inode 2 [ 554.427374][T17608] EXT4-fs (loop7): mount failed [ 554.532906][T17621] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.3405'. [ 554.616216][T17641] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3406'. [ 555.353800][T17717] loop5: detected capacity change from 0 to 128 [ 555.365506][T17713] netlink: 'syz.7.3415': attribute type 1 has an invalid length. [ 555.482087][T17728] loop5: detected capacity change from 0 to 1024 [ 555.538260][T17728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.582222][T17728] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3421'. [ 555.596494][T17728] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3421'. [ 555.605928][T17728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3421'. [ 555.619965][T17730] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3422'. [ 555.628956][T17730] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3422'. [ 555.689806][T15153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.759290][T17748] loop7: detected capacity change from 0 to 2048 [ 555.856965][T17748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.900576][T17748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.497103][T17764] loop6: detected capacity change from 0 to 512 [ 556.506167][T17764] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 556.530440][T17764] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 556.560182][T17774] FAULT_INJECTION: forcing a failure. [ 556.560182][T17774] name failslab, interval 1, probability 0, space 0, times 0 [ 556.563197][T17764] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 556.572830][T17774] CPU: 1 UID: 0 PID: 17774 Comm: syz.4.3438 Tainted: G W syzkaller #0 PREEMPT(full) [ 556.572866][T17774] Tainted: [W]=WARN [ 556.572943][T17774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 556.572957][T17774] Call Trace: [ 556.572966][T17774] [ 556.572974][T17774] __dump_stack+0x1d/0x30 [ 556.573009][T17774] dump_stack_lvl+0x95/0xd0 [ 556.573037][T17774] dump_stack+0x15/0x1b [ 556.573063][T17774] should_fail_ex+0x263/0x280 [ 556.573220][T17774] should_failslab+0x8c/0xb0 [ 556.573244][T17774] kmem_cache_alloc_noprof+0x66/0x3f0 [ 556.573289][T17774] ? skb_clone+0x151/0x1f0 [ 556.573329][T17774] skb_clone+0x151/0x1f0 [ 556.573359][T17774] __netlink_deliver_tap+0x2c9/0x500 [ 556.573475][T17774] netlink_unicast+0x653/0x680 [ 556.573506][T17774] netlink_sendmsg+0x5c8/0x6f0 [ 556.573543][T17774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.573578][T17774] sock_write_iter+0x2e8/0x320 [ 556.573631][T17774] do_iter_readv_writev+0x4fd/0x5a0 [ 556.573657][T17774] vfs_writev+0x2e1/0x900 [ 556.573731][T17774] do_writev+0xe9/0x210 [ 556.573835][T17774] __x64_sys_writev+0x45/0x50 [ 556.573859][T17774] x64_sys_call+0x1c0c/0x3020 [ 556.573887][T17774] do_syscall_64+0x12c/0x3b0 [ 556.573915][T17774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.573976][T17774] RIP: 0033:0x7f87e1dccdd9 [ 556.574005][T17774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.574027][T17774] RSP: 002b:00007f87e0827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 556.574050][T17774] RAX: ffffffffffffffda RBX: 00007f87e2045fa0 RCX: 00007f87e1dccdd9 [ 556.574067][T17774] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 556.574163][T17774] RBP: 00007f87e0827090 R08: 0000000000000000 R09: 0000000000000000 [ 556.574179][T17774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.574193][T17774] R13: 00007f87e2046038 R14: 00007f87e2045fa0 R15: 00007ffcfe17c708 [ 556.574219][T17774] [ 556.666724][T17779] loop4: detected capacity change from 0 to 512 [ 556.709562][T17764] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 556.862284][T17764] System zones: 0-2, 18-18, 34-35 [ 556.868140][T17764] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.925391][T17785] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 556.936782][T16067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.986499][T17785] bond0: option miimon: invalid value (18446744073709551615) [ 557.001536][T17785] bond0: option miimon: allowed values 0 - 2147483647 [ 557.009947][T17785] bond0 (unregistering): Released all slaves [ 557.032123][T17791] loop6: detected capacity change from 0 to 512 [ 557.434490][T17793] __nla_validate_parse: 4 callbacks suppressed [ 557.434504][T17793] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3443'. [ 557.705200][T17805] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.3446'. [ 557.716596][T17805] netlink: zone id is out of range [ 557.722429][T17805] netlink: zone id is out of range [ 557.734239][T17805] netlink: zone id is out of range [ 557.864787][T17805] netlink: set zone limit has 8 unknown bytes [ 558.846313][ T28] kauditd_printk_skb: 378 callbacks suppressed [ 558.846331][ T28] audit: type=1326 audit(1777023194.783:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17815 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87e1d8d60e code=0x7ffc0000 [ 558.876207][ T28] audit: type=1326 audit(1777023194.783:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17815 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87e1d8d60e code=0x7ffc0000 [ 558.899901][ T28] audit: type=1326 audit(1777023194.783:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17815 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87e1d8d60e code=0x7ffc0000 [ 558.937260][ T28] audit: type=1326 audit(1777023194.783:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17815 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87e1d8d60e code=0x7ffc0000 [ 558.968878][ T28] audit: type=1326 audit(1777023194.783:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17815 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87e1d8d60e code=0x7ffc0000 [ 559.058895][ T28] audit: type=1326 audit(1777023194.783:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17815 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87e1d8d60e code=0x7ffc0000 [ 559.099640][ T28] audit: type=1326 audit(1777023194.783:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17815 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87e1d8d60e code=0x7ffc0000 [ 559.134482][T17848] set_capacity_and_notify: 1 callbacks suppressed [ 559.134500][T17848] loop6: detected capacity change from 0 to 164 [ 559.178063][ T28] audit: type=1326 audit(1777023194.783:5513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17815 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87e1d8d60e code=0x7ffc0000 [ 559.201839][ T28] audit: type=1326 audit(1777023194.793:5514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17815 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87e1d8d60e code=0x7ffc0000 [ 559.490558][T17848] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 559.526705][ T28] audit: type=1326 audit(1777023194.793:5515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17815 comm="syz.4.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f87e1d8d60e code=0x7ffc0000 [ 559.732354][T13275] usb 10-1: device descriptor read/8, error -110 [ 559.750822][T17854] loop6: detected capacity change from 0 to 1024 [ 559.757685][T17854] EXT4-fs: Ignoring removed orlov option [ 559.794332][T17856] loop4: detected capacity change from 0 to 512 [ 559.801649][T17856] EXT4-fs: quotafile must be on filesystem root [ 559.809914][T17854] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 559.818750][T13275] usb 10-1: new SuperSpeed USB device number 10 using vhci_hcd [ 559.827297][T17854] System zones: 0-1, 3-12 [ 559.846068][T17854] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.858782][T13275] usb 10-1: enqueue for inactive port 0 [ 559.864607][T13275] usb 10-1: enqueue for inactive port 0 [ 559.871993][T13275] usb 10-1: enqueue for inactive port 0 [ 559.892678][T16067] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 559.944254][T17866] netlink: 'syz.6.3468': attribute type 1 has an invalid length. [ 559.957141][T17866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 559.973418][T17866] bond1: (slave veth3): Enslaving as an active interface with a down link [ 560.056309][T17866] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.063677][T17866] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.111768][T17866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.121934][T17866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.165247][T17868] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 560.174062][T17868] bond1: (slave batadv1): making interface the new active one [ 560.183514][T17868] batadv1: entered promiscuous mode [ 560.188923][T17868] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 560.211791][T17872] tipc: Enabling of bearer rejected, failed to enable media [ 560.230886][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.251709][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.262828][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.285373][ T7245] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.408064][T17894] loop6: detected capacity change from 0 to 512 [ 560.428378][T17894] EXT4-fs error (device loop6): __ext4_fill_super:5596: inode #2: comm syz.6.3479: iget: checksum invalid [ 560.442969][T17894] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 560.443443][T17894] EXT4-fs (loop6): get root inode failed [ 560.452550][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 560.452570][ C1] EXT4-fs (loop6): initial error at time 1777023196: __ext4_fill_super:5596: inode 2 [ 560.452600][ C1] EXT4-fs (loop6): last error at time 1777023196: __ext4_fill_super:5596: inode 2 [ 560.483709][T17894] EXT4-fs (loop6): mount failed [ 560.558118][T17903] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3482'. [ 560.692218][T17922] loop7: detected capacity change from 0 to 1764 [ 560.708488][T17922] iso9660: Unknown parameter '0x0000000000000003' [ 560.994320][T13275] usb usb10-port1: attempt power cycle [ 561.103968][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aaea200: rx timeout, send abort [ 561.114815][T17939] chnl_net:caif_netlink_parms(): no params data found [ 561.151835][T17939] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.159004][T17939] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.166688][T17939] bridge_slave_0: entered allmulticast mode [ 561.173422][T17939] bridge_slave_0: entered promiscuous mode [ 561.180266][T17939] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.187532][T17939] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.194834][T17939] bridge_slave_1: entered allmulticast mode [ 561.201399][T17939] bridge_slave_1: entered promiscuous mode [ 561.218577][T17939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.228811][T17939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.247986][T17939] team0: Port device team_slave_0 added [ 561.254650][T17939] team0: Port device team_slave_1 added [ 561.269305][T17939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.276344][T17939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.302574][T17939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.314082][T17939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.321208][T17939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.351387][T17939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.383063][T17939] hsr_slave_0: entered promiscuous mode [ 561.393842][T17939] hsr_slave_1: entered promiscuous mode [ 561.403554][T17939] debugfs: 'hsr0' already exists in 'hsr' [ 561.410288][T17939] Cannot create hsr debugfs directory [ 561.478115][T17939] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.529481][T17939] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.606313][T17962] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3498'. [ 561.627411][T17957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 561.638322][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881038acc00: rx timeout, send abort [ 561.646663][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aaea200: abort rx timeout. Force session deactivation [ 561.658523][T17939] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.675590][T17966] loop7: detected capacity change from 0 to 128 [ 561.683429][T17966] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 561.703490][T17966] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 561.707842][T17963] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 561.723781][T17963] bond3 (unregistering): Released all slaves [ 561.741608][T17939] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.858197][T17939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 561.874812][T17939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 561.904772][T17939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 561.924426][T17939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 561.932197][T17939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 561.941998][T17939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 561.949251][T17984] loop6: detected capacity change from 0 to 512 [ 561.949856][T17939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 561.974611][T17939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 562.105050][T17984] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 562.115508][T17984] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 562.156294][T17984] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 562.195067][T17984] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 562.204087][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881038acc00: abort rx timeout. Force session deactivation [ 562.343445][T17984] System zones: 0-2, 18-18, 34-35 [ 562.364962][T17984] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.419005][T17939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.437734][T17939] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.484251][ T555] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.491402][ T555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.533900][ T116] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.541116][ T116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.572026][T18001] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3508'. [ 562.586437][T18003] random: crng reseeded on system resumption [ 562.593154][T16067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.599913][T18003] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3510'. [ 562.655203][T18005] loop6: detected capacity change from 0 to 512 [ 562.674273][T18008] xt_hashlimit: size too large, truncated to 1048576 [ 562.686705][T18005] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 562.707088][T17939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.720133][T18005] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3511: bad orphan inode 131083 [ 562.748590][T18005] loop6: lost filesystem error report for type 5 error -117 [ 562.757182][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 562.770967][ C0] EXT4-fs (loop6): initial error at time 1777023198: ext4_orphan_get:1423 [ 562.779784][ C0] EXT4-fs (loop6): last error at time 1777023198: ext4_orphan_get:1423 [ 562.793682][T18005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.836038][T16067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.888614][T18023] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3513'. [ 562.977818][T17939] veth0_vlan: entered promiscuous mode [ 562.998428][T17939] veth1_vlan: entered promiscuous mode [ 563.005423][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3508'. [ 563.034633][T17939] veth0_macvtap: entered promiscuous mode [ 563.047168][T17939] veth1_macvtap: entered promiscuous mode [ 563.064317][T17939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.073294][T17939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.136845][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.569888][T13275] usb usb10-port1: unable to enumerate USB device [ 563.745779][T18046] loop0: detected capacity change from 0 to 164 [ 563.752850][T18046] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 563.805971][ T7953] ================================================================== [ 563.814124][ T7953] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 563.821111][ T7953] [ 563.823444][ T7953] write to 0xffff8881021cd91c of 4 bytes by task 8981 on cpu 1: [ 563.831096][ T7953] shmem_mknod+0x143/0x170 [ 563.835534][ T7953] shmem_create+0x34/0x50 [ 563.839880][ T7953] path_openat+0xd75/0x2050 [ 563.844447][ T7953] do_file_open+0x16c/0x290 [ 563.848963][ T7953] do_sys_openat2+0x94/0x130 [ 563.853564][ T7953] __x64_sys_openat+0xf2/0x120 [ 563.858344][ T7953] x64_sys_call+0x1e39/0x3020 [ 563.863042][ T7953] do_syscall_64+0x12c/0x3b0 [ 563.867640][ T7953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.873546][ T7953] [ 563.875871][ T7953] read to 0xffff8881021cd91c of 4 bytes by task 7953 on cpu 0: [ 563.883433][ T7953] fill_mg_cmtime+0x5b/0x240 [ 563.888067][ T7953] generic_fillattr+0x24a/0x340 [ 563.892931][ T7953] shmem_getattr+0x181/0x200 [ 563.897554][ T7953] vfs_getattr_nosec+0x146/0x1e0 [ 563.902523][ T7953] vfs_getattr+0x48/0x60 [ 563.906783][ T7953] vfs_statx_path+0x28/0x140 [ 563.911394][ T7953] vfs_statx+0xc4/0x170 [ 563.915568][ T7953] vfs_fstatat+0x118/0x170 [ 563.920000][ T7953] __se_sys_newfstatat+0x55/0x3e0 [ 563.925041][ T7953] __x64_sys_newfstatat+0x55/0x70 [ 563.930335][ T7953] x64_sys_call+0x2c64/0x3020 [ 563.935031][ T7953] do_syscall_64+0x12c/0x3b0 [ 563.939635][ T7953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.945539][ T7953] [ 563.947869][ T7953] value changed: 0x19660f7b -> 0x196b79ac [ 563.953677][ T7953] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 563.956008][ T7953] Reported by Kernel Concurrency Sanitizer on: [ 563.962170][ T7953] CPU: 0 UID: 0 PID: 7953 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 563.972770][ T7953] Tainted: [W]=WARN [ 563.976574][ T7953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.986640][ T7953] ================================================================== [ 564.234270][ T36] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 564.244465][ T36] bond0 (unregistering): Released all slaves [ 564.252185][ T36] bond1 (unregistering): Released all slaves [ 564.260498][ T36] bond2 (unregistering): Released all slaves [ 564.268761][T18035] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3517'. [ 564.280215][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.376371][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.390108][ T36] hsr_slave_0: left promiscuous mode [ 564.404110][ T36] hsr_slave_1: left promiscuous mode [ 564.421507][ T36] pim6reg (unregistering): left allmulticast mode [ 564.492125][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.864824][ T36] IPVS: stop unused estimator thread 0... [ 564.962875][ T36] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.004260][ T36] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.078921][ T36] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.132451][ T36] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.204359][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.250788][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.311854][ T3047] 8021q: adding VLAN 0 to HW filter on device eth13 [ 565.335665][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.388848][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.428996][ T3047] 8021q: adding VLAN 0 to HW filter on device eth14 [ 565.539110][ T3047] 8021q: adding VLAN 0 to HW filter on device eth15 [ 565.664421][ T3047] 8021q: adding VLAN 0 to HW filter on device eth16 [ 565.780321][ T3047] 8021q: adding VLAN 0 to HW filter on device eth21 [ 565.860270][ T36] bridge_slave_1: left allmulticast mode [ 565.865969][ T36] bridge_slave_1: left promiscuous mode [ 565.872133][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.880175][ T36] bridge_slave_0: left allmulticast mode [ 565.885946][ T36] bridge_slave_0: left promiscuous mode [ 565.892227][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.901537][ T36] bridge_slave_1: left allmulticast mode [ 565.907214][ T36] bridge_slave_1: left promiscuous mode [ 565.912945][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.920923][ T36] bridge_slave_0: left allmulticast mode [ 565.926591][ T36] bridge_slave_0: left promiscuous mode [ 565.932305][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.941380][ T36] gretap0: left allmulticast mode [ 565.946583][ T36] gretap0: left promiscuous mode [ 565.951730][ T36] bridge0: port 3(gretap0) entered disabled state [ 565.958815][ T36] bridge_slave_1: left allmulticast mode [ 565.964515][ T36] bridge_slave_1: left promiscuous mode [ 565.970190][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.977777][ T36] bridge_slave_0: left promiscuous mode [ 565.983476][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.992597][ T36] bridge_slave_1: left allmulticast mode [ 565.998485][ T36] bridge_slave_1: left promiscuous mode [ 566.004149][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.011855][ T36] bridge_slave_0: left allmulticast mode [ 566.017716][ T36] bridge_slave_0: left promiscuous mode [ 566.023343][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.114430][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.124480][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.133911][ T36] bond0 (unregistering): Released all slaves [ 566.455910][ T36] bond0 (unregistering): left promiscuous mode [ 566.462175][ T36] bond_slave_0: left promiscuous mode [ 566.467660][ T36] bond_slave_1: left promiscuous mode [ 566.474055][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.483405][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.492426][ T36] bond0 (unregistering): Released all slaves [ 566.499788][ T36] bond1 (unregistering): Released all slaves [ 566.616751][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.626141][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.635123][ T36] bond0 (unregistering): Released all slaves [ 566.643197][ T36] bond1 (unregistering): (slave veth3): Releasing active interface [ 566.651822][ T36] bond1 (unregistering): (slave batadv1): Releasing active interface [ 566.660649][ T36] bond1 (unregistering): Released all slaves [ 566.669103][ T36] bond2 (unregistering): Released all slaves [ 566.677678][ T3047] 8021q: adding VLAN 0 to HW filter on device eth22 [ 566.720164][ T36] tipc: Left network mode [ 566.730274][ T36] hsr_slave_0: left promiscuous mode [ 566.736360][ T36] hsr_slave_1: left promiscuous mode [ 566.742343][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.749917][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.758722][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.766308][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.777532][ T36] hsr_slave_0: left promiscuous mode [ 566.783222][ T36] hsr_slave_1: left promiscuous mode [ 566.788936][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.796342][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.803983][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.811471][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.819649][ T36] batadv0: left promiscuous mode [ 566.826523][ T36] hsr_slave_0: left promiscuous mode [ 566.832298][ T36] hsr_slave_1: left promiscuous mode [ 566.837946][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.845428][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.855742][ T36] hsr_slave_0: left promiscuous mode [ 566.861663][ T36] hsr_slave_1: left promiscuous mode [ 566.867459][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.874967][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.887430][ T36] veth1_macvtap: left promiscuous mode [ 566.892991][ T36] veth0_macvtap: left promiscuous mode [ 566.898496][ T36] veth1_vlan: left promiscuous mode [ 566.903881][ T36] veth0_vlan: left promiscuous mode [ 566.910027][ T36] veth1_macvtap: left promiscuous mode [ 566.915575][ T36] veth0_macvtap: left promiscuous mode [ 566.921325][ T36] veth1_vlan: left promiscuous mode [ 566.926770][ T36] veth0_vlan: left promiscuous mode [ 567.019530][ T36] team0 (unregistering): Port device team_slave_1 removed [ 567.029001][ T36] team0 (unregistering): Port device team_slave_0 removed [ 567.089538][ T36] team0 (unregistering): Port device team_slave_1 removed [ 567.099210][ T36] team0 (unregistering): Port device team_slave_0 removed [ 567.139195][ T36] pim6reg2 (unregistering): left allmulticast mode [ 567.173325][ T36] team0 (unregistering): Port device team_slave_1 removed [ 567.183166][ T36] team0 (unregistering): Port device team_slave_0 removed [ 567.250622][ T36] team0 (unregistering): Port device team_slave_1 removed [ 567.261597][ T36] team0 (unregistering): Port device team_slave_0 removed [ 567.483009][ T3047] 8021q: adding VLAN 0 to HW filter on device eth23 [ 567.587017][ T3047] 8021q: adding VLAN 0 to HW filter on device eth24 [ 567.689647][ T3047] 8021q: adding VLAN 0 to HW filter on device eth25 [ 567.789715][ T3047] 8021q: adding VLAN 0 to HW filter on device eth26 [ 567.891842][ T3047] 8021q: adding VLAN 0 to HW filter on device eth27 [ 567.991471][ T3047] 8021q: adding VLAN 0 to HW filter on device eth28 [ 568.079164][ T36] IPVS: stop unused estimator thread 0... [ 568.111404][ T3047] 8021q: adding VLAN 0 to HW filter on device eth29 [ 568.157203][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.210118][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.222565][ T3047] 8021q: adding VLAN 0 to HW filter on device eth30 [ 568.263387][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.317730][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.331416][ T3047] 8021q: adding VLAN 0 to HW filter on device eth31 [ 568.391722][ T36] bridge_slave_1: left allmulticast mode [ 568.397449][ T36] bridge_slave_1: left promiscuous mode [ 568.403492][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.411354][ T36] bridge_slave_0: left allmulticast mode [ 568.417069][ T36] bridge_slave_0: left promiscuous mode [ 568.422890][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.497562][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.507771][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.517202][ T36] bond0 (unregistering): Released all slaves [ 568.524723][ T3047] 8021q: adding VLAN 0 to HW filter on device eth32 [ 568.563648][ T36] hsr_slave_0: left promiscuous mode [ 568.569428][ T36] hsr_slave_1: left promiscuous mode [ 568.576973][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.584867][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.592759][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.600214][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.611158][ T36] veth1_macvtap: left promiscuous mode [ 568.616870][ T36] veth0_macvtap: left promiscuous mode [ 568.623107][ T36] veth1_vlan: left promiscuous mode [ 568.629066][ T36] veth0_vlan: left promiscuous mode [ 568.693891][ T36] team0 (unregistering): Port device team_slave_1 removed [ 568.703629][ T36] team0 (unregistering): Port device team_slave_0 removed [ 568.738481][ T3047] 8021q: adding VLAN 0 to HW filter on device eth33 [ 568.841245][ T3047] 8021q: adding VLAN 0 to HW filter on device eth34 [ 569.036998][ T3047] 8021q: adding VLAN 0 to HW filter on device eth35 [ 569.137494][ T3047] 8021q: adding VLAN 0 to HW filter on device eth36