last executing test programs: 12m31.710314132s ago: executing program 32 (id=83): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xffffffffffffffd7}, {0x1c, 0x2, {{0xfffffffc, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x3c8, 0x9, 0x1, 0x95ce, 0x8}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) r5 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r5, 0x29, 0x21, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x1000000}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0xa}, 0x0) r6 = socket(0x10, 0x803, 0x0) getuid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0x78, 0x1, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x73}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x24040004}, 0x40000) socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x51a, &(0x7f00000001c0)="$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") syz_genetlink_get_family_id$nl80211(0x0, r6) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x90000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0x1b, "5c76276f4e0cac746c86622447099377e66e2ebe40decbab5fbe9c"}}) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000fd0000000000e4000000000000000009000000000000000000c4747d018427e453eea7fd2f2522d2f7d19a6ec06bfdf1b851a283b1224ea5e56417cb037de0b703ac7088124c0a386d5419a265c7c858e88dcc5fefec2bacff0178a98f0bc0dd8eb906f1a8a04c5138d3c99648953a5c825553bb02bb11fdf134d54bb48ed2c0854c5878cf3e4d0c379565e089af1e986b5af189b44677a715aff4acad11a803a01ffc2d069c1e305167bdf46e4bb60e1ded15b7939fd070eae214109e9a10452aea521568381718862cc8a6ad06695143739d2edb54a81e8711c0"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m3.241156107s ago: executing program 33 (id=237): socket$xdp(0x2c, 0x3, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) timer_create(0x7, &(0x7f0000000280)={0x0, 0x3d, 0x1}, 0x0) timer_gettime(0x0, &(0x7f0000000340)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401d, 0x4002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000880), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x488, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0xb, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x458, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x7}, @TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x8, 0x6, 0x2, 0x9, {0xf, 0x2, 0x7ff, 0xfff9, 0x7}, {0xf, 0x2, 0x1, 0x1, 0x2, 0x1}, 0x7, 0xd}}, @TCA_POLICE_RATE={0x404, 0x2, [0x80a, 0x7, 0x2, 0x9, 0x6, 0xfffffffc, 0x1, 0x5, 0x3, 0x1ff, 0x5, 0x4, 0x0, 0x7f, 0x0, 0x2, 0x80000001, 0x4, 0x1, 0x8, 0x2, 0x5, 0x7, 0x9, 0x3, 0x1000, 0xb14, 0x6, 0xd9, 0x6, 0xcac0, 0x10001, 0x9, 0x5, 0x3, 0x0, 0x6, 0x0, 0x6, 0xccad, 0x7, 0x7, 0xf, 0x3, 0x9ff, 0x6, 0x5, 0x2, 0x7, 0x6, 0xb, 0x80, 0x0, 0x40, 0x8, 0x3, 0x4, 0x8, 0xfffffff9, 0x1, 0x1, 0x5, 0x3, 0x3, 0x3, 0x6, 0x9a, 0x6, 0x80, 0x8001, 0x7, 0x0, 0x8, 0x0, 0xffffffff, 0x8, 0x1ff, 0x80, 0x4, 0x83, 0x9, 0x2, 0x4000, 0x9, 0x7, 0xfffffff9, 0x7, 0x9, 0x80000001, 0x7, 0x8, 0x3bfa, 0x1, 0x8, 0x3, 0xb, 0x3, 0x7, 0xf41e, 0x1, 0x4, 0xc, 0x5d1, 0x7f, 0x8, 0x0, 0xb4a, 0x9, 0x40, 0x19d, 0x4, 0x1, 0x9, 0x0, 0xd5d, 0x9, 0x3, 0x6, 0x1, 0xa, 0x2, 0x0, 0x2, 0x200, 0x2, 0x6, 0x2, 0x74b5, 0x8, 0x8, 0x0, 0x8ba, 0x4be, 0x0, 0x1, 0x3, 0x1, 0x8195, 0x4f7a, 0x1, 0x6, 0x3, 0x10001, 0x10000, 0x0, 0xffffffff, 0x4, 0xb97a, 0x80000000, 0x8, 0x2, 0x7f, 0x7e5, 0x1f2, 0x6, 0x7c, 0x6565, 0x0, 0xfffffff7, 0x1ff, 0x1cc8, 0x7, 0x9, 0x80000000, 0x9, 0x3, 0x7fff, 0xa, 0x8001, 0xa, 0xe029, 0x8, 0xe71, 0x4, 0x0, 0x8, 0xfff, 0x1ff, 0x4, 0x2e87, 0x9a, 0x9, 0x8, 0x2, 0x1000, 0x2, 0x2, 0xfffffffd, 0x1, 0x0, 0x3, 0x3ff, 0x6, 0x1000, 0xffff3217, 0x96, 0x0, 0x1, 0x332, 0xa, 0x2, 0x2, 0x80, 0x6, 0x7, 0xfffffffe, 0x3d, 0x6, 0xb, 0x1, 0x9, 0x5, 0xb9, 0x10, 0xfff, 0x7fffffff, 0x6ae, 0x7fffffff, 0xe, 0x9, 0xb, 0x9, 0xa, 0x0, 0x4, 0x5, 0x401, 0x41b5, 0xea27, 0xa, 0x448e, 0x5, 0x48a81273, 0x10, 0x81ed, 0xfffffff7, 0x3, 0x1, 0x7, 0x9d0f, 0x9818, 0xf, 0x3, 0x2, 0x2, 0x0, 0x86, 0x2, 0x7, 0xa, 0x4, 0x6, 0x4, 0xa, 0x5, 0x7]}]}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = geteuid() setfsuid(r3) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f00000008c0)=[0x9, 0x1, 0x5, 0x2174, 0x1000, 0x4, 0x9, 0x9]) 10m17.438227616s ago: executing program 34 (id=962): socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4b, 0xf080, 0x0, 0xa0002f5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) io_uring_setup(0x6141, &(0x7f0000000280)={0x0, 0x6641, 0x100, 0x3, 0x60, 0x0, r0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m48.948050853s ago: executing program 35 (id=1510): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x37) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x100d, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x2, 0xff}, 0x1e51, 0x1, 0x0, 0x7, 0x4, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_clone3(&(0x7f0000000900)={0x22801100, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7m20.150340599s ago: executing program 36 (id=1939): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="000022ebffffffffffffaaaaaaaaaaaa88a8110081002f000800450000244000e0"], 0x3e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) r6 = io_uring_setup(0x18e5, 0x0) syz_io_uring_setup(0x1972, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9, 0x4c032, r6, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) 7m19.596116507s ago: executing program 37 (id=1944): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, 0x0, 0x0) 7m19.48966672s ago: executing program 4 (id=1947): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_pid(r1, &(0x7f0000002380), 0x12) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES64=r6, @ANYRESHEX=r0], 0x70}, 0x1, 0x0, 0x0, 0x20048045}, 0x40000) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f00000007c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3010010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001100100000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES16=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@generic={0x91, 0x1, 0x1, 0x71}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$MSR(&(0x7f0000000380), 0x66, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="640fcfff43f68314b0dd1715f05c1ae2fb684dd29dc2cfc1c2e9772b288582fc71af95a517c2c661be69334cacd586db6d81296f", @ANYRES64=r8, @ANYRES8=0x0, @ANYRESDEC=0x0], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20004015) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8931, 0x0) 7m19.034322915s ago: executing program 4 (id=1948): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0x0, 0x101, 0x0, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r0 = epoll_create(0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x2000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000002c0)={{0x8, 0x3}, {0x8, 0xb}, 0x7fff, 0x5, 0x4}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0xb, @private0, 0x8}, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x4, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010800000000000000000a00000008000240000000010900010073797a300000000028000000000a030000000000000000000a00000008000240000000000900010073797a30"], 0x78}}, 0x0) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0)) pivot_root(&(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)=ANY=[@ANYBLOB="2c000000210a010300001000000000000a0000010900010073797a31000000000900020073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 7m18.662727017s ago: executing program 4 (id=1949): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m18.57728774s ago: executing program 4 (id=1950): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32, @ANYBLOB="080300"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000400"/28], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) fdatasync(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r3, 0x0, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000005c0)={{r1, &(0x7f0000000340)=')))([&[\x00', 0x40, &(0x7f0000000380)={@align=0x9bc2, {0x1, 0x100, 0x205c009c, 0xffffffff}}, 0x9, &(0x7f00000003c0), &(0x7f0000000400)=0x4}, {[0x4, 0x2, 0xd536]}, 0x2, 0x48, &(0x7f0000000440)=""/72}) (async) socket$packet(0x11, 0x3, 0x300) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x0, 0x10001, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000900)=0xf320) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00') (async) r6 = socket$inet(0x2, 0x3, 0xa) sendmmsg$inet(r6, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a000000"], 0x20}}], 0x1, 0x24000004) (async) preadv(r5, &(0x7f0000000100)=[{0x0}], 0x1, 0x200000, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000280), 0x4, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000000)={0x2, 0x7}) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='`', 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="3000000000000000840000000100e800f8ff000000eeffffff0000000071d400d6cff1e5eee4930fe27358690000000000000000000000000c5bc06b3ca7800cde6b94d6b0d9345cb3b891b411eb568f64768bb93b865bc3ed181a074e862459d58c5e2542764edc79573ef0bd7fb210e529a11993773e70bb232a6a1f0307dbd80811a892b0d7e9f379726bb1c7d2f17a482e54666498d8ed6c7f6902a5c53f865d02a25a29aa6162de81cd6e0a5e05c692af9bb7d4b1125f06f102cd25e9f88a12f59c70daf813e14bcdc44711fd844eed49908bfc122284fc728b073c94a7e2284a1921e3511f0ad0d770260ff3fb6ffa78c96f9fb4e8", @ANYRES32=0x0], 0x30}], 0x1, 0x0) (async) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r10, 0x0, r9, 0x0, 0x6, 0xa) fcntl$setpipe(r9, 0x407, 0x10000000000000b) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d666e6bb772d8a4363e", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000640)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 7m18.428089405s ago: executing program 4 (id=1952): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xcc0, 0x0, &(0x7f0000000480)="b9ff033189442602000000f088a8", 0x0, 0x61, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m18.25441469s ago: executing program 4 (id=1953): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x10000, 0x6}, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x142f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004'], 0x38}, 0x4008804) r1 = socket$kcm(0x15, 0x5, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = getpid() r5 = creat(&(0x7f0000000040)='./file0\x00', 0x11f) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r5, &(0x7f0000000300)={r5, 0xffffffffffffffff, 0x3ce57dcc}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$nci(r6, 0x0, 0x0) r7 = fsmount(r3, 0x0, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x1ff}) r8 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x18009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18504, 0x0, 0xfffffffe, 0x6, 0x5, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfff}, r4, 0xffffffffffffffff, r2, 0xa) ioctl$PERF_EVENT_IOC_QUERY_BPF(r8, 0xc008240a, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000000)=0xffffffff) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0xff, 0x38, 0xd}, {0x6, 0xfd}]}) write$ppp(r9, &(0x7f0000000100)="229d", 0x2) fchdir(r7) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x80000000, 0xfffffffc, 0x5b50, 0xffffffff, 0xfffc}) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r10, 0x4b67, &(0x7f0000000140)={0x0, 0x0}) lchown(&(0x7f0000000600)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rc={0xa, @none}, 0x80, 0x0}, 0x0) 7m2.107675795s ago: executing program 38 (id=1953): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x10000, 0x6}, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x142f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004'], 0x38}, 0x4008804) r1 = socket$kcm(0x15, 0x5, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = getpid() r5 = creat(&(0x7f0000000040)='./file0\x00', 0x11f) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r5, &(0x7f0000000300)={r5, 0xffffffffffffffff, 0x3ce57dcc}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$nci(r6, 0x0, 0x0) r7 = fsmount(r3, 0x0, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x1ff}) r8 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x18009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18504, 0x0, 0xfffffffe, 0x6, 0x5, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfff}, r4, 0xffffffffffffffff, r2, 0xa) ioctl$PERF_EVENT_IOC_QUERY_BPF(r8, 0xc008240a, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000000)=0xffffffff) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0xff, 0x38, 0xd}, {0x6, 0xfd}]}) write$ppp(r9, &(0x7f0000000100)="229d", 0x2) fchdir(r7) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x80000000, 0xfffffffc, 0x5b50, 0xffffffff, 0xfffc}) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r10, 0x4b67, &(0x7f0000000140)={0x0, 0x0}) lchown(&(0x7f0000000600)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rc={0xa, @none}, 0x80, 0x0}, 0x0) 3m58.326851435s ago: executing program 2 (id=3077): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m58.321084826s ago: executing program 2 (id=3078): io_submit(0x0, 0x0, &(0x7f0000000540)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0xb}, {}, {0xe, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x80702) recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/200, 0xc8, 0x1, &(0x7f00000002c0)=@hci={0x1f, 0x2, 0x3}, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0xc5) unshare(0x20000400) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00d000000000000000000000a9b52d05206a17a268f39f1c9100"/41], 0x50) lchown(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000180)) 3m58.228867129s ago: executing program 2 (id=3079): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000200081dc00000000030000", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e") io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) listns(&(0x7f0000000b00)={0x20, 0x0, 0x8, 0x2000000, 0x0, 0x3}, &(0x7f0000000b40)=[0x0], 0x1, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) arch_prctl$ARCH_SET_GS(0x1001, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) sendto$inet(r0, &(0x7f0000000240), 0x0, 0xa, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000040002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3a, 0x1010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x100, 0x7ff, 0x0, 0x4, 0x7d3c1f3, 0x8}, r2, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="030704707900000000000700040004000180"], 0x18}}, 0x0) 3m57.300241968s ago: executing program 2 (id=3085): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file2\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x8}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8) ptrace(0x10, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0xffffffffffffffff, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'S'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1002, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}]}, 0x60}, 0x1, 0x7}, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x2004c454}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={r6, 0x1, r5, 0x80003}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0x0, 0xee00) r7 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r7, r7, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r8, 0x0, 0x810) 3m57.040978337s ago: executing program 2 (id=3086): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xe4ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x8000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[], 0xffdd) 3m56.722595487s ago: executing program 2 (id=3093): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$hwrng(0xffffffffffffff9c, 0x0, 0x280800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000001c00)=[{0x2, 0x1, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f0000000300)=""/180, 0xb4}], &(0x7f0000000400)=[0x4, 0x7, 0x4, 0x1aa, 0x2, 0x4, 0x4, 0x4, 0x7c1]}, {0x4, 0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000480)=""/155, 0x9b}, {&(0x7f0000000540)=""/124, 0x7c}, {&(0x7f0000000a80)=""/226, 0xe2}, {&(0x7f0000000b80)=""/4096, 0x1000}], &(0x7f0000001bc0)=[0x7]}], 0x2) r9 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r9, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r9, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r10, 0x5412, &(0x7f00000000c0)=0x29) 3m56.699782638s ago: executing program 39 (id=3093): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$hwrng(0xffffffffffffff9c, 0x0, 0x280800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000001c00)=[{0x2, 0x1, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f0000000300)=""/180, 0xb4}], &(0x7f0000000400)=[0x4, 0x7, 0x4, 0x1aa, 0x2, 0x4, 0x4, 0x4, 0x7c1]}, {0x4, 0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000480)=""/155, 0x9b}, {&(0x7f0000000540)=""/124, 0x7c}, {&(0x7f0000000a80)=""/226, 0xe2}, {&(0x7f0000000b80)=""/4096, 0x1000}], &(0x7f0000001bc0)=[0x7]}], 0x2) r9 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r9, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r9, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r10, 0x5412, &(0x7f00000000c0)=0x29) 2m41.187265917s ago: executing program 8 (id=3634): open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {0x0, 0xc, 0xffffffffffffffff, 0x1c, 0x846d7fa905d10f49, @in6={0xa, 0x4e22, 0xb6cc, @private2, 0x200000e}}}, 0xa0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000100)={@initdev, @multicast2, @initdev}, &(0x7f0000000140)=0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x2, 0x0) 2m40.306111895s ago: executing program 8 (id=3639): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket$nl_route(0x10, 0x3, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x1, 0xff, 0x3}, 0xfe}, 0x18) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x6}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000400000004000000"], 0x50) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="141b23dc", @ANYRES16=0x0, @ANYBLOB="ffff2abd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20040000) 2m38.411791755s ago: executing program 8 (id=3647): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) unshare(0xe040400) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_usb_disconnect(r0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f00000000c0)=0x8000018) 2m37.608725991s ago: executing program 8 (id=3657): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0xc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000680)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x400, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xffffffff}, {0xa, 0x4e23, 0x7ff, @private2, 0x6}, r2, 0x400000}}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x133d32cbb417428, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffeffb702000008000000b50af8ffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) fallocate(r3, 0x11, 0x100000007fc, 0x8000a000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mremap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000148000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x1102009, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) close(r6) lsetxattr$security_ima(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@ng={0x4, 0x7, "6f36fee06a84517a9a"}, 0xb, 0x3) 2m37.243206183s ago: executing program 8 (id=3659): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) flock(0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex_waitv(0x0, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x3938700}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) 2m35.278880596s ago: executing program 8 (id=3668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)=ANY=[@ANYBLOB="2c000000210a01"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2m34.884899488s ago: executing program 40 (id=3668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)=ANY=[@ANYBLOB="2c000000210a01"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2m20.197947839s ago: executing program 5 (id=3760): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x10049, 0xf41ba, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xc, 0x800}, 0x10c08, 0x0, 0x101, 0x9, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x203fffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x80, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$selinux_create(0xffffffffffffffff, &(0x7f0000000180)=@access={'system_u:object_r:semanage_trans_lock_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x1d}, 0x50) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x980}, @in={0x2, 0x0, @remote}}}, 0x118) close_range(r0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x40700, 0x0) 2m19.886707619s ago: executing program 5 (id=3761): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x50}, 0x0, 0x8f40, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000002c0)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x0, 0xf, "aede62497cf56c9ab5bfd7b842f6b7"}}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x1}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000000000000000000080004000100", 0x22) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsmount(r2, 0x1, 0x2) r3 = syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getpriority(0x0, r3) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x61, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x3, 0x12) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2721, 0x0, &(0x7f0000000100)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r7 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x0) 2m19.702764215s ago: executing program 5 (id=3765): mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setxattr(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)=@random={'osx.', '\x00'}, &(0x7f00000001c0)='\x00', 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@mcast1, 0x56, r1}) 2m19.668829046s ago: executing program 5 (id=3766): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@noinit_itable}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0xfffffffc, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r5}, 0xc) r6 = syz_ublk_setup_io_uring(0x2a93, &(0x7f0000000000)={0x0, 0x370a, 0x800, 0x2, 0x202bf, 0x0, r2}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r6, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@noinit_itable}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) (async) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0xfffffffc, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f0000000040)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r5}, 0xc) (async) syz_ublk_setup_io_uring(0x2a93, &(0x7f0000000000)={0x0, 0x370a, 0x800, 0x2, 0x202bf, 0x0, r2}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r6, 0x0) (async) 2m19.655356096s ago: executing program 3 (id=3767): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="1c52b8811ceb8803b279df8a8aee1c4cf640c75b3b6ac2b30bdf0d3e74eb4659bbad0debf3dec6130a9ea0afc93cb6bf47c03a28a493f51325bb52c54a500f4c1dcde16ce188cc8a52f55a0f92f6d89c0858898a2195c434736ea95565c7c80975c60ef70d9e1969086be00ecff903", 0x6f, 0x844, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8050, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mremap(&(0x7f000060c000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0) socket$packet(0x11, 0x2, 0x300) 2m19.377140985s ago: executing program 3 (id=3771): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0x386561e9, 0xf3ff}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 2m19.259478399s ago: executing program 5 (id=3773): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x140b, 0x605, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c004}, 0x2000c005) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x20080, 0x0) ioctl$TIOCVHANGUP(r1, 0x540f, 0x1000000000000) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x12640, 0x0, 0xb828, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create(0x200) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="b50400bd4aae9e0a6bed471dcc727e790000040000000400000005000100000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0xb2, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0x83, 0x84, 0x8, 0x7}, 0xe) sendto$inet6(r3, &(0x7f0000000600)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xffdc, 0x1, @remote, 0x40}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file1\x00', 0x2200090, &(0x7f0000000140)=ANY=[], 0x4, 0x2b1, &(0x7f0000000880)="$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") rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x58, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x58}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) fsync(r8) 2m19.183812251s ago: executing program 3 (id=3775): perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000401f, 0xb0988, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x400, 0x80, 0x7, 0x4, 0x4, 0x8005, 0x3fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) 2m19.059299225s ago: executing program 3 (id=3777): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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") syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3b94ba, 0x0, 0x20, 0x0, &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000008510000006000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x60000000000) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c45c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x8}, 0x1004, 0x4, 0x1, 0x7, 0x94da}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x4, 0x0, 0x9b, 0xd4, 0x0, 0x0, 0x2010e, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_config_ext={0xead6, 0x8c}, 0x806, 0xc8, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="000000001801000020207325000000000020f8955a495ccfb63420207b1af8ff00000200bf7556cf8e7bea16556174f3a100000000000007f50000f8ffffffb702000008000000b70300000000000085000000100000001811002400", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) open(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108843, 0x190) 2m18.781032414s ago: executing program 3 (id=3780): r0 = getpgid(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) getpgrp(0xffffffffffffffff) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x80c42, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, 0x0) (async) close(0xffffffffffffffff) listns(&(0x7f0000000080)={0x20, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0) (async) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/2, 0x2}, {&(0x7f0000000600)=""/192, 0xc0}], 0x2}, 0x10100) (async) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@mcast2, 0x52, r2}) (async) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x692, &(0x7f00000011c0)="$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") (async) perf_event_open(0x0, r0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e23, @private=0xa010103}}}, 0x108) (async) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000003c0)={0x8, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) (async) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000280)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e25, @empty}}}, 0x108) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2m18.502719713s ago: executing program 5 (id=3782): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f0000000000)={@val={0x0, 0x9200}, @val={0x3, 0x4, 0x5, 0x2, 0x1, 0xc9}, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x2c, 0x6, 0x0, @empty, @mcast1, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0x8, 0x4e22, 0x4e22}, 0x2, 0x2}, 0x1, 0x2}, 0x1}}}}}}}, 0x62) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$pid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x1ffffffffffe, 0x7, 0x8, 0x3}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r3, r3, 0x0, 0x80000000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESDEC=r2], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="00000000000000005704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="76147583ddd0569ba56a88a85993", 0x0, 0xfffffc00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 2m17.68057882s ago: executing program 41 (id=3782): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f0000000000)={@val={0x0, 0x9200}, @val={0x3, 0x4, 0x5, 0x2, 0x1, 0xc9}, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x2c, 0x6, 0x0, @empty, @mcast1, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0x8, 0x4e22, 0x4e22}, 0x2, 0x2}, 0x1, 0x2}, 0x1}}}}}}}, 0x62) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$pid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x1ffffffffffe, 0x7, 0x8, 0x3}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r3, r3, 0x0, 0x80000000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESDEC=r2], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="00000000000000005704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="76147583ddd0569ba56a88a85993", 0x0, 0xfffffc00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 2m17.156181067s ago: executing program 3 (id=3788): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r1, 0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000180)) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 2m17.050775429s ago: executing program 42 (id=3788): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r1, 0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000180)) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 4.265812853s ago: executing program 6 (id=4669): arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000140)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)="516920861a4d4ea6b7c77fbb35724af728feddf2af8f9a7e994f9e69790db5513ccc", 0x22}, {&(0x7f0000000240)="3fe4d397f5b487d27a425b395405cb7c0c910567fea24d2ce84e0e0644c955c01c977c7f8286d4bf102fe04a1411ff4f4716c9c60a96960e71928aec507197ccad7b7caaef8279adb7d7c1305845fb25106cc60557fe8a1c6e7ee257eb23205ad4d6e032de030c57ba3a856053e95b223b8c2f7665f4e1c5835eab26a79c00", 0x7f}], 0x2}, 0x8040) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000001c0), 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="01002ebd7000fcdbdf252100000009001f007068793000000000"], 0x20}, 0x1, 0x0, 0x0, 0x240488b0}, 0x40800) r3 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x74004, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x10001, 0x4}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) preadv2(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) pidfd_getfd(0xffffffffffffffff, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) socket$inet6(0xa, 0x3, 0x7) 4.265357753s ago: executing program 0 (id=4670): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56970a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d07096811c5a663a947eaf378bf56aaccdde055d0d74215d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b9a6b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1", 0x91}, {&(0x7f00000003c0)="ce9aa21f", 0x4}], 0x2}, 0x0) 4.206681305s ago: executing program 0 (id=4672): r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800004, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x6, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='GPL\x00', 0xffff, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x1], &(0x7f00000005c0)=[{0x4, 0x4, 0x7, 0x2}, {0x0, 0x2, 0x1, 0x5}], 0x10, 0xb9}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r1, 0x4, 0xa8d, 0x5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) sendmsg$nl_generic(r2, 0x0, 0x20040010) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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") r4 = openat(r3, 0x0, 0x40, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6}) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000080)=0x3) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000000)={r7}) writev(r5, &(0x7f0000000980)=[{0x0}, {&(0x7f00000003c0)="6d16aca9c108697174cbf75ad101c354f162920bef16e467760bae69bd1ee830ef011603b971d825c791b3e43267dca1eaf3b61ec6121bd2a5c63adce27ae33bef9f98f980f755c772866f1a682ff148c4023d8634d6513540588f9d2504c5fc62d408c8ff2c2bba77eabe3f1ef35058ca7ddd644f6c8c8ec66fa0d478253a71ffe70f7c4f4331dee729c8abdced4bdbacd3c1228f11b1afc1cbf65aa30d1a74cc6ba1eeab002bf58cbf24584c3a93a02b34035b023eea4cd3e895fcc690688088b1740932472571ade0658fe04bfa69f5bd5584e5cbe48866c93279e1acd63ca88a2faee78583aecae2a797f7f557c88f849b0b", 0xf4}, {&(0x7f00000007c0)="1cf7d9aa010c843b8c6835b89acac4cdf38bbb283960ff59b09abdc2633086a0de1ecce8615ee6d50762b20866e4d8244b6ae22ac921216426726fdfb677996611412f7190a219bf3b2493d15e9356126f48a5fb32b2a38e8e928b91962cc96f12416bd3acf7de918016b8b6b226736a04634f5a3d4d0e50f31a1e39205d831ad9fcfff2cc0a79b99d5ef2af993d067ea012031811ec5fc0bf81450c43414ed78d0655d9099efab34e11746d9fc0e533b4a587edc701925dc497b0dbe0e8c7be41b419adb6aa3ad4df25f0c9ff1547b38cf510e9228ba5ca910a6842d865533299a2a760f98b82c68fae", 0xea}, {&(0x7f0000000700)="49954e8370a39dfb6ea0882324b848ca4587a6444145d8e4b519284d79e4f11332206e443dd47385f4635f0945117a623621026c07209ca75424c3a81288bbe83c6b1c7b0ea0e9d549279bb64e66f1d342f04ea1afd2a459a8a8063c007dc4ad5103219d1bdc210cb6ba4a83c05c6d3bc7d55da07ef2cf48b7af97fca53f35529f953ae4dd38c6a5aebb3383e2a8c3a6c90bdae01012b9175b353e40f43121f39236a9e16ab0e42533e71aa391151075ac58d923674ce0fa8cd09bb0", 0xbc}], 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000003010102000000000000000002000005080015400000000008000840000065aa1c1c666356cb8a687e"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) socket$inet6(0xa, 0x80000, 0x4b0b8b7a) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x0, 0x4) write(0xffffffffffffffff, &(0x7f00000000c0)='t2q', 0x3) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r9, 0x0, 0x0, 0x931766f6319eed40) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) 2.098762462s ago: executing program 0 (id=4676): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000500)={[{@noblock_validity}, {@abort}, {@mb_optimize_scan}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) socket$netlink(0x10, 0x3, 0x5) clock_nanosleep(0x3, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.033462364s ago: executing program 1 (id=4678): perf_event_open(&(0x7f00000000c0)={0x1, 0xaf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x174491, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x9}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000b, 0x4000011, r2, 0x0) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6503, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x3fc0000000, 0xc}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x4, 0x5854}, 0x0, 0xffefffffffffffff, r2, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r4) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000340)={r1, &(0x7f0000000200)='SMC_PNETID\x00', 0x200000, &(0x7f0000000280)={@align=0x3, {0x2, 0x2, 0x9, 0x9}}, 0x81, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x3}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r8, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x28, r9, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80, 0xd}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r6, 0xe27, 0x70bd28, 0x80000, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) setpriority(0x2, 0x0, 0x8) r12 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) 1.931026148s ago: executing program 0 (id=4680): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x468, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000006c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000700)=0x1c) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000580)={r5}, &(0x7f0000000640)=0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc980, 0x1, &(0x7f0000000680)=0x1) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000740)={0x0, @initdev, @broadcast}, &(0x7f0000000780)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x98, 0x30, 0xb, 0x0, 0x0, {}, [{0x84, 0x1, [@m_skbmod={0x80, 0x1, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x6, 0xffffffffffffffff, 0xffffffff, 0x8000004}, 0x1}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x1, 0x7, 0x4, 0x7}, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}, {0x0, 0x1, [@m_xt={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x0, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x0, 0x6, {0x8, 'filter\x00', 0x0, 0x3, "0e4d1c80ac6106397ab5ee9a7418994a575024345ae2bede50cd8d4010bc56d8370fd60e22538777f237f26d5fd65c15e871d242f2f9d044f669"}}, @TCA_IPT_INDEX={0x0, 0x3, 0xfff}]}, {}, {}, {0x0, 0x8, {0x2, 0x1}}}}, @m_ct={0x0, 0x5, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x0, 0xd, 0x4e24}, @TCA_CT_ZONE={0x0, 0x4, 0x4}, @TCA_CT_LABELS_MASK={0x0, 0x8, "34aa0eb9683b5cbdfe5c381c09067397"}, @TCA_CT_ACTION={0x0, 0x3, 0x1}, @TCA_CT_PARMS={0x0, 0x1, {0x4000, 0x2, 0x1, 0x100, 0x5a28}}, @TCA_CT_NAT_PORT_MIN={0x0, 0xd, 0x4e20}, @TCA_CT_NAT_IPV6_MAX={0x0, 0xc, @private2}, @TCA_CT_LABELS={0x0, 0x7, "92bddeb7a07296c7921d18ee503eae25"}]}, {0x0, 0x6, "9216fa6f8e87074d719de0721826d220d5fd756dfe3f9e37289500745b80ca822d59ff562248fd5007f6d9c9084f06ec6d9a141664c2b15959256387870b3fa64ee7e02aa8957448056d52970e7b99de6a64d8d8014ebb9cecf39ba0655277f3e377bc6ee8e51a0fb751259ce60b0090a9e724874a9a7ae8f08eeeeef5a3c5a76cf4ac4ac8fd5f101ef65ff58dc8ab762b0777308e7a556c05e0432d148a314b39261d08c98525942ed4ac2a81d249f7d25b8f8e774f5b31cbdf13c305e4518157d9c77e7f534ab6c065bf6121bd9a919f7bf39a4d553d9bf886135251a9b48f44e536e381f0d337ab0fd01aea104bf69424c035ae9f16c7"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1}}}}, @m_nat={0xffffffb1, 0x1f, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x0, 0x1, {{0xfffffff7, 0x1, 0x20000000, 0x0, 0x6}, @dev={0xac, 0x14, 0x14, 0x23}, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x6, 0x0, 0x4, 0x7, 0x7}, @dev={0xac, 0x14, 0x14, 0x30}, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x0, 0x1, {{0xfffffffd, 0xffffffff, 0x8, 0x9cf3, 0x101}, @empty, @dev={0xac, 0x14, 0x14, 0x8}, 0xff000000}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x8, 0x1, 0xffffffffffffffff, 0x8000, 0x6}, @multicast2, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x0, 0x9, 0x10000000, 0x8000, 0x9}, @private=0xa010100, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x0, 0x0, 0x6, 0x8001, 0x687}, @empty, @rand_addr=0x64010102, 0x0, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x2, 0x9, 0x7, 0x6, 0x4}, @multicast2, @remote, 0xff000000, 0x1}}]}, {0x0, 0x6, "76940525cb348a1009c6fc8c90d2c1a8ed8583764ea55e20c0c8da14288ec548"}, {0x0, 0x7, {0x1, 0xb5e3058d3ecc2e50}}, {0x0, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x0, 0x16, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0x0, 0x4, @remote}, @TCA_SKBMOD_DMAC={0x0, 0x3, @local}, @TCA_SKBMOD_DMAC={0x0, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_DMAC={0x0, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, @TCA_SKBMOD_SMAC={0x0, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x0, 0x2, {{0x1, 0x6b65, 0x10000000, 0xff, 0xffffffff}, 0x9}}, @TCA_SKBMOD_SMAC={0x0, 0x4, @random="aa485855ee4f"}, @TCA_SKBMOD_ETYPE={0x0, 0x5, 0xb5e5}]}, {0x0, 0x6, "4cb1c29c3f472d8b6155f1854554734e743aff0602819dbd19a6c3bd2d9d0f8e60b72f5e48fd2f53a9b829c364ff0a5d34ea5284023cfbd68b2c1bdd4a213329adf7d15d44811c73933f960c99f886addbfa5cbefc090e189256cb7ba8293c224bcc4c5c4cc6ce01e95d2f6a5bdeee8403880ba5dddf0354dbc35456d55d9a171a483f48f5bedf0e8e4399c9253986ab91d38ce190f870780abfbf5687d60351d5f38ddc2b4d16"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_mirred={0x0, 0x10, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x0, 0x2, {{0x1000, 0x0, 0x3, 0x5, 0xb00}, 0x4, r6}}]}, {0x0, 0x6, "8644757f9b4295046eb105f655edd54a172902c270884ed52c5fa542edb59c5a51e9981920c516d52dd0af4a5aa9bc24f1828d34c920fed72d96c30c1d9c17a6783732e1a4a57598704d7aa75a16f08856f1d07063dc39f526a8135648670b3d09b88268a52285f8459079d006d4376d20226855186384ba40ba3fac77c65e9dea57f5fd08dd8167440c5a7aa07b52ae9cf3272b3deefa0912bb5c798095cb314d593cfd6523c84082684bbc7ef99d7c40b6bc3cb7691083f9716679a2d23650efb2b97a088987963b69907cb3f8a26c1f57ef1e49f16de280f075923dc5aba301c6282b7745169f3d9b1018a0d2b2463b8f5bf29bd2da65"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x3}}}}, @m_tunnel_key={0x0, 0x4, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x0, 0x9, 0x5}]}, {0x0, 0x6, "471da21a2816f54c876862a23580dbdb5e89753985854579298ca09ef4300648409aeb0d79048f0e94c000cf1978ba26c7d7327bef3c96fc"}, {}, {0x0, 0x8, {0x1, 0x1}}}}, @m_gact={0x0, 0x1b, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0x1f4f, 0x3}}, @TCA_GACT_PROB={0x0, 0x3, {0x2, 0xffa, 0x10000000}}]}, {0x0, 0x6, "7aaf6ce0365326b91c4bea2f0a33910df29e7f79205cfc04309100d2459a4e6ac07813db014aad979a78e91ec0d475fb8479d789668d0bb5eb4786d2f6ef032cd7d3df9be01afb11825c14300f5f0b2fdbf417ba4f1e370cdfe37d6f790c3f31a32b"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x0, 0x14, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x0, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x0, 0x4, @multicast1}, @TCA_TUNNEL_KEY_PARMS={0x0, 0x2, {{0x5, 0x200, 0x4, 0xff0, 0x48}, 0x2}}]}, {0x0, 0x6, "b5a375ddae040b73f0fc2b94beabcd9e1e3e5c33a1bb30241bc7b95be1c2ef70c0e061a93d4e131d8c34dbfa44381183ac62b6816eb2708d9bdcc970971cf56113b941e8fb10553e0cb4e3634a492bf0fc6612a30170b4fb3d0578387179f686e4fa"}, {}, {0x0, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x0, 0x4, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC, @TCA_SKBMOD_SMAC={0x0, 0x4, @local}]}, {0x0, 0x6, "7c9c431483c8ece4dff8"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x3, 0x1}}}}]}, {0x0, 0x1, [@m_connmark={0x0, 0x1b, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x0, 0x1, {{0x6, 0x1, 0x4, 0x4, 0x9}, 0x2}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x4, 0xfffffff2, 0x3, 0x8, 0xf5000000}, 0x8}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x6, 0x4, 0x20000000, 0x2, 0xfffffff9}, 0x3}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0xc0, 0x8, 0x5, 0x5, 0x8}, 0x3ce}}]}, {0x0, 0x6, "e8794546afbb5049283f43c58cd95a272bf4cedd649bfc6f272aad5f615becbac7f5e826fd8fde25ff4dfbf224f364a95804620492bdf5d0827938c69cf1ba3fd0d8271239d825f713f096177a8bf3dd5b37242e7fd96f40f328869446280151e2fa43ab3d2cb82ad7104a"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x0, 0x3}}}}]}, {0x0, 0x1, [@m_sample={0x0, 0xd, 0x0, 0x0, {{}, {}, {0x0, 0x6, "65d3f7b4b1c545a1370fe9be6bdb609c2fb2ad5bcb089b059be9f4534cab68b607901dfa8777526051c0b4546c6306528ac7527eddd99b3afb3e24"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x0, 0x1}}}}, @m_simple={0x0, 0x12, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x0, 0x2, {0x1, 0x101, 0x2, 0x6, 0x4}}, @TCA_DEF_DATA={0x0, 0x3, '\x00'}, @TCA_DEF_DATA={0x0, 0x3, '^\x00'}, @TCA_DEF_DATA={0x0, 0x3, '}(\x00'}, @TCA_DEF_DATA={0x0, 0x3, ' \x01\x00'}]}, {0x0, 0x6, "dcf8477ecb5a5cc7c53fafaab761f202f5b73f80bcbc63edcf7a38c958ae0772080a8f76d05ab92d25bac4d1c0020cc88074c8f970e22781286a85551f73d61c84e5180db0b755e75aa8b79aca67b9f36c0fcfc5a83a0d791004900c3457dcc1f2d6b9de66654d01e8c172dab1720141cfe803db9026bb26aee1d434bd795d64c5ef5dabe556f49b050ecc90bc8107101d1b4d7f1f5590daeb452927e543cab9c629aae51780f28b2a941bcb10ba92004f56b6f72885085b"}, {0x0, 0x7, {0x0, 0x1}}}}, @m_mirred={0x0, 0x1e, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x0, 0x2, {{0x3, 0x3ff, 0x20000000, 0x2, 0x2}, 0x4, r6}}]}, {0x0, 0x6, "52068701b0aa72b3e3e0e0b84ef472d371a8b594ecf3be891af7551b888afe68810e9e5e307ab86482838618bca75aa52514bbf941583bed39b1279897e27586d339f53239aca3c5ff37275605e6a5f7cd346811cf187b39945727353ac76fc1e8a17b82910116e573d5cdd56c5c8d4ed96375865c787709eb5d2e9f558ac037e86ff54c09ef7822a75e6dd7d9884d2c78b9802c58ec027545ca60b58933bf43f574b27a29af88dfb593f989a76da7d17cb9fcfde466"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x2, 0x2}}}}]}, {0x0, 0x1, [@m_ife={0x0, 0x6, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x0, 0x1, {{0x8, 0x8, 0x0, 0x3}}}, @TCA_IFE_SMAC, @TCA_IFE_PARMS={0x0, 0x1, {{0x2, 0x1, 0x7, 0x5, 0x5}, 0x1}}]}, {0x0, 0x6, "59fed38990b664b6ff8feadc00feb8d61f7be515aefc1b3e4b5c7b3c3efcc28e6b136a8c92c8f0044e4c6470512afc2e517ec3329b87591dec7a472b7d4b8e4bfcc9ca6e947a48d5df"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x0, 0x3}}}}, @m_mpls={0x0, 0x6, 0x0, 0x0, {{}, {}, {0x0, 0x6, "f9677d03eec27ebabcbc379155ec5f614b0d37c9bae5bf5740aa61c4063b4049cc1feb9b0d9fc591c2a1d0afe8b315fd64f39058ec5e0ca03d54908f5222673a533e482a81721f2cbd33e6c043b541dab0911846659ab17916"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x3, 0x1}}}}, @m_ife={0x0, 0x20, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x0, 0x5, 0x3}, @TCA_IFE_PARMS={0x0, 0x1, {{0x1, 0x8, 0x20000000, 0x0, 0xf1c1}}}, @TCA_IFE_SMAC, @TCA_IFE_DMAC]}, {0x0, 0x6, "2e4cf21a93047c3aa0f871658bd3f37c0e82e93390bd9189a4576a0f4129ca595544cfbdd480d862e963324cdf70f350491b240434f993341be108f9857fc3949f2f920466c149edaf2470ac50175d36602b0890635bc60180b48ee0e8168f3db369ff3e86c23b6229ddad1085444b0f16831ff144db55267e49b2faa4aa22a70b72c6df4aeb23e8ab2d4b15444900ab68d8e1d519455621a0ee305a8a88a0ee084fcec10bbfe9b9f4aa315671855bf85e502a29"}, {}, {0x0, 0x8, {0x2, 0x2}}}}, @m_ct={0x0, 0xd, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x0, 0xa, @multicast2}, @TCA_CT_ACTION={0x0, 0x3, 0x2}]}, {0x0, 0x6, "7d5adf9ae5273e4e38a2c9dd2471a8630565b83ec24bbbc8616504bd993dbf0256d093936716a1f72a3cab4ed991bd7e0571db1a0cc6e2532c9dad3d34e5e80cbfc122cd3cd33a8d2f7a31efb783e4a37d212073db5f982d974581498e0333aadada46bd1b4a59b601479138a76e6c232e3f78794a3299c47ffe9ea6d3d548e67b3043b4d1600dab4eeb5a"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x0, 0x1}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) 1.789714462s ago: executing program 7 (id=4683): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1000, 0x6}, 0x6025, 0x4003, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x8, &(0x7f0000000280)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="300000001900010000000000000001001c14009d70"], 0x30}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) msgsnd(0x0, 0x0, 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4790, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x1000, 0x20da, 0x0, 0x3b0, 0x20025, 0xb, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001400)=@filter={'filter\x00', 0xe, 0x4, 0x470, 0xffffffff, 0x0, 0x218, 0x218, 0xffffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@icmp6={{0x28}, {0x0, "53f6", 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xff, 0xff000000, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 'veth0_to_bond\x00', 'tunl0\x00', {}, {0xff}, 0xff, 0x8, 0x4, 0x10}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0xff}}, @common=@srh1={{0x90}, {0x32, 0x3, 0x16, 0x0, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xffffff00, 0x0, 0xffffff00, 0xffffff00], [0xffffffff, 0xff], 0x1080, 0x3000}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket(0x1e, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, 0x0, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r7, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r8, &(0x7f0000000440)='5', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x2, 0x2, r2, 0x0}]) ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000000a80)={{0x5050, 0x7, 0x2, 0x7, 0x7}, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}]}) write$cgroup_subtree(r5, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) 1.729555914s ago: executing program 6 (id=4685): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x100, 0xfffffff8, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21044, 0x5c182}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008880}, 0x4008040) r1 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0xfffd, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="100000000000001eea247e115450bf00"], 0x10}, 0x0) 1.645569097s ago: executing program 6 (id=4686): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa412, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.433201143s ago: executing program 1 (id=4687): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@deltclass={0x4c, 0x29, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0x6, 0x2}, {0x8, 0xffef}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x5d, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) symlink(0x0, &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x355) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2000c080}, 0x2400c855) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = inotify_init1(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket(0x10, 0x3, 0x9) inotify_add_watch(r2, 0x0, 0x1) close(r1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x5, 0x5, 0x8003, 0xfffc, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000002c0)={[{@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@discard}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") file_setattr(r1, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)={0x42e9, 0x7f, 0x3c30, 0x8000, 0x2}, 0x18, 0x1000) close_range(r4, 0xffffffffffffffff, 0x1000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) 1.182620091s ago: executing program 1 (id=4688): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x7, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xddd1dbc}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x20000004) 1.182209982s ago: executing program 1 (id=4689): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@nobh}, {@errors_remount}, {@grpid, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x80000000c}}, {@journal_dev}, {@nombcache}, {@dax_never}, {@resuid}, {@dax_always}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@grpid}], [], 0x2c}, 0x0, 0x52c, &(0x7f00000005c0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast2, 0x85ef}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000004b40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3ff, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000b80)="0850ff1b529d", 0x6}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x8001, 0x202, 0x7, 0x100}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x16, 0x6) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) 985.520768ms ago: executing program 1 (id=4690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x24, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 944.30543ms ago: executing program 1 (id=4691): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180800000000a2fb93f1000000001800000000000000000000950000000000d6469856e8dcc974d46c4b29417ce49d891a2fffe210b176e586ca4c1b61803811e399312c17cacddb3ad7aed35335b5fc180180818205a9d806d72d7f0f23c199dcc263cc8f10b58976086db892090c69426361b93b41aaa9d6fa19ba07c738800cb85fc727dfa62bbeb4fa91499da6dbc44d56f0bda971a2c673b0af78eee445f2070440178667d219199d0d27886783d78834a0a4c445bb152525d14a24b7961c13b180b3d487f713a539419f"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) write(r3, &(0x7f0000000200)="c7", 0x1) sendfile(r3, r2, 0x0, 0x7fff) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x189001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88ca", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x100200, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="9aa00afc48b287daceb889815a8df0256df1a277b77bd7fd6ca5c9d55176af06efad60c38063f73ef98537192996a293a2334d7d4dcb1158691f4087110330de7bb47f061b0619a3f7e81472615d51f0888ba9e9da1a06eb2e4ed2b3b229df5938c1c47eb320c237bba685f9c8e1d1e4423cd16740e407400a8330b078900738d35946fc2a55f3aa2a0bc655fae4d14abc117205f7074c9624713fbcba961d2d818aff6500a15b948adef647f317da485bb462a90aad05539f2c5b6a4aeb5f0c62a01accaf166f42b01d38dd9987df604d4fab83aa8c3f40b44eafdae95c71dcefd28f50957e436cbeb3e3af435a1c2105be6d", @ANYRES32], 0x13) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0xfffffffe, @mcast2, 0xffffffff}, {0xa, 0x4e20, 0x7, @mcast2}, r9, 0xffffffff}}, 0x48) 766.161855ms ago: executing program 9 (id=4693): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x2000c020) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf08, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000300)={0x7, 0x1b, 0x2}, 0x7) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) ptrace$pokeuser(0x6, r5, 0x6, 0xffffffff80000000) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) write$tun(r1, &(0x7f0000000840)=ANY=[], 0x11b0) 747.912836ms ago: executing program 7 (id=4694): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xb}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) unshare(0x400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet_buf(r0, 0x118, 0x29, 0x0, 0x0) r1 = syz_io_uring_setup(0x46, &(0x7f0000000300)={0x0, 0x6a78, 0x40, 0x2, 0x1f4}, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x22, &(0x7f0000000380)={&(0x7f0000003000)}, 0x1) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x40014) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000a80)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}, 0x0}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@i_version}, {@nouid32}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000e00)="$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") r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, 0x0, 0xfebc) socket$inet6(0xa, 0x2, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=']) (fail_nth: 7) r3 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) accept(0xffffffffffffffff, &(0x7f0000000140)=@caif, &(0x7f00000001c0)=0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x5d31, 0x2c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80040000000, 0x10005}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) 703.516397ms ago: executing program 6 (id=4695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0100000000000063010400000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB="cdf8c241ab38e36000000000000e0000f9090000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000300"/28], 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000fb0400000a38000000200a05000000000000000000020001000c00054000000000001f74020900010073797a30"], 0x60}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) r1 = socket$inet(0x2, 0x2, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f0000000000)='rw\x00', 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000100)) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8006f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0xfffffffc, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getuid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xf88ce2e0571bc7ea}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "00000300"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000001840), 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x8}}, @TCA_CT_ACTION={0x6, 0x3, 0x15}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) setsockopt$inet_opts(r1, 0x0, 0x2000000000003, &(0x7f0000000000)='\x00', 0x1) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000080)={0x1, {0x4, 0xf04, 0x8, 0x7, 0x430}}) 487.360644ms ago: executing program 6 (id=4696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060001db508f4eb9b6a9a7fcdb59800200000000000000000000000009000200e0993aad2e4289b25de74ac12adf73797a310200000005000100070000001c000780160f01800c000140ffffff"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 375.546937ms ago: executing program 0 (id=4697): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x5100, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x2, 0x4}, 0x0, 0x10000, 0x5, 0x1, 0x8, 0x20005, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r1, 0x0, &(0x7f0000000200)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)=0x7, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x25dfdbfd, {{@in=@multicast2, @in6=@mcast1, 0x0, 0xecdf, 0x1, 0x200, 0xa}, {@in6=@mcast1, 0x0, 0x32}, @in=@rand_addr=0x64010100, {0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x3}, {0x5, 0x400840, 0x0, 0x5}, {0x0, 0x0, 0x1}, 0x0, 0x3507, 0x2, 0x1, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'ctr-aes-neonbs-sync\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0xfffffffffffffdec, 0xc0}}]}, 0x194}}, 0x4050) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x5100, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x2, 0x4}, 0x0, 0x10000, 0x5, 0x1, 0x8, 0x20005, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket(0x40000000015, 0x5, 0x0) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) getsockname$packet(r1, 0x0, &(0x7f0000000200)) (async) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)=0x7, 0x4) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x25dfdbfd, {{@in=@multicast2, @in6=@mcast1, 0x0, 0xecdf, 0x1, 0x200, 0xa}, {@in6=@mcast1, 0x0, 0x32}, @in=@rand_addr=0x64010100, {0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x3}, {0x5, 0x400840, 0x0, 0x5}, {0x0, 0x0, 0x1}, 0x0, 0x3507, 0x2, 0x1, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'ctr-aes-neonbs-sync\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0xfffffffffffffdec, 0xc0}}]}, 0x194}}, 0x4050) (async) 375.090177ms ago: executing program 6 (id=4698): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x3) 283.03928ms ago: executing program 9 (id=4699): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@getrule={0x14, 0x22, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r1 = socket$inet(0x2, 0x94c4d42e471816d6, 0x9) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000000c0)="bf640173923ac038f5a1d126d1966ad228d47aead7e6537dc149bf331c7b4e2576afa79a633c7606cd37974d695c648a472e3b60dfc7daa97425b2eb471e252b7df195ae625d4e71a2294e399d8a233c1bf77389ba68f3f98a0658afc661ef0d9e1806ec1a160a76c05757e289fb91f4a8a0f5894dc860627e9a3dcf614fbb3a87bed870141db176853b1a8f438a9aea9dcc9d6cfd8633cdd7be3791630ef6dcef2a3ba0c38b0ffc3a192c724c4202181f83e9f84eaae06062f99159fd1af87b8ab277ede760a99f1062ac6b7f635ced8e9a", 0xd2) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@getrule={0x14, 0x22, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) socket$inet(0x2, 0x94c4d42e471816d6, 0x9) (async) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000000c0)="bf640173923ac038f5a1d126d1966ad228d47aead7e6537dc149bf331c7b4e2576afa79a633c7606cd37974d695c648a472e3b60dfc7daa97425b2eb471e252b7df195ae625d4e71a2294e399d8a233c1bf77389ba68f3f98a0658afc661ef0d9e1806ec1a160a76c05757e289fb91f4a8a0f5894dc860627e9a3dcf614fbb3a87bed870141db176853b1a8f438a9aea9dcc9d6cfd8633cdd7be3791630ef6dcef2a3ba0c38b0ffc3a192c724c4202181f83e9f84eaae06062f99159fd1af87b8ab277ede760a99f1062ac6b7f635ced8e9a", 0xd2) (async) 271.923811ms ago: executing program 7 (id=4700): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x70, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x2) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000380)={0x16, 0xb5, &(0x7f00000002c0)="000cf2b16a21b0dd70f0029822825675c76834c19756a0640bc155813a5b47101f5318eafac3b4f0857072810ed41383cf2cb168bac31efd77da0b09e8789ea1e77ab328e38db2d118ab1d0045ff859e91bb288c3ba36633d3b384ba3b27655f1062d0c7e530cd4d57cd90306416b29234ee039a7bd9ac4b3c473c8dea65330c74d4b8fc11d04a760aa6cab5ded241bf0aa94c5ebd1a265d2d9d76d6cc75e5ca48bf58818932df878c6b5f084efb1c206c4258b25d"}) 169.960094ms ago: executing program 9 (id=4701): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x3c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 169.218674ms ago: executing program 7 (id=4702): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x181840, 0x57) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) (async) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100000074000000740000000400000000000000010000852d0000000e0000000200000003000000060000000000000e04000000000000000d0000000000000c02000000070000000000000700000000000000000500000d000000000d000000020000000a00000005000000070000000300006d30d8e12361bdd2000200000001000000002e3000000000000000"], &(0x7f0000000200)=""/4096, 0x90, 0x1000, 0x1, 0x3, 0x10000, @value=r0}, 0x28) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r6, r3, 0x25, 0x0, @val=@tcx={@void, @value=r6}}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000012c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)=@ipv4_newnexthop={0x28, 0x68, 0x4, 0x70bd28, 0x25dfdbfc, {0x2, 0x0, 0x4, 0x0, 0x2a}, [@NHA_GROUP_TYPE={0x6}, @NHA_OIF={0x8, 0x5, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 168.728004ms ago: executing program 9 (id=4703): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x240c4, 0x0, 0x7, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL6={0x14, 0x8, @remote}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x1, 0x4003fe, 0x3, 0x0, 0x4, 0x5}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x9, 0x3, 0xfffffffc, 0x8000000000000001, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc000041}, 0x20008000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) 82.859357ms ago: executing program 7 (id=4704): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0x0, 0x101, 0x0, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000021000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 60.013487ms ago: executing program 7 (id=4705): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa412, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 21.437519ms ago: executing program 9 (id=4706): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x3) 1.31882ms ago: executing program 9 (id=4707): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvfrom$inet6(r0, &(0x7f0000000280)=""/33, 0x21, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="9713a91918dd34f280231201000097ff8208582005109bc100e1ff00030000000000000073d46ce0b77032575a00"], 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040)={0x0, 0xc, 0xf0}, &(0x7f0000000300)=ANY=[@ANYBLOB="656e633d6f61657020686173683d726d643132382d67656e657269630000000000000000000000000000a09f44dfc01587135c34b720000000000000000000000000000000000000000000000000000000000000000000000000518d37efc4f84948ec5709d695348c7677be99c48a052d120a8d22db617594ec48b600de628b06b1a4843522372a4a52274a282b4d108145f43010d620138b839f73341c685c984f41"], &(0x7f0000002580)="537ca28a8644faa348229e9c", &(0x7f00000025c0)=""/240) unshare(0x8040480) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) socket(0x2d, 0x2, 0x0) unshare(0x6020400) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0400000000000000e6000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x37, 0xfffffffffffffffd, &(0x7f00000003c0)=0x6a) poll(&(0x7f00000003c0)=[{r3, 0x66}], 0x919b6cd8d151a6ea, 0x43) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet(r6, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000400)) sendto$inet(r6, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0xffffffffffffff37, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1a502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x10ecc0, 0x1224, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fstat(r7, &(0x7f00000001c0)) pipe2$9p(&(0x7f00000002c0), 0x4100) 0s ago: executing program 0 (id=4708): syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_flowlabel\x00') syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0431e, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfbfe, @local, 'veth1_to_team\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xe0ffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a0000000400000008000880"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf4", 0x38}], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff5653f, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3b, 0x886, 0xdbc, 0x400, 0x1001, 0x2}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x0, 0x7, 0xfffffff8}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x31}, 0x48, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB=')\x006,', @ANYRES16=0x0, @ANYBLOB="010000000000fedbdf2503000000140001800e0001006574683a776c616e31"], 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1403000037"], 0x314}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'team0\x00'}) syz_emit_ethernet(0x74, &(0x7f0000000180)=ANY=[@ANYBLOB="0199c20000000000000000000800450000240000000000739078001c6af80900000100ef1074f34a8bd0bed21a49330813ca82000000fe9a90780200000000000000"], 0x0) kernel console output (not intermixed with test programs): N [ 727.463735][T20274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 727.463750][T20274] Call Trace: [ 727.463759][T20274] [ 727.463769][T20274] __dump_stack+0x1d/0x30 [ 727.463798][T20274] dump_stack_lvl+0x95/0xd0 [ 727.463823][T20274] dump_stack+0x15/0x1b [ 727.463916][T20274] should_fail_ex+0x25e/0x270 [ 727.463945][T20274] ? proc_do_submiturb+0x7f9/0x1c70 [ 727.463970][T20274] should_failslab+0x8c/0xb0 [ 727.464015][T20274] __kmalloc_cache_noprof+0x5f/0x400 [ 727.464103][T20274] proc_do_submiturb+0x7f9/0x1c70 [ 727.464194][T20274] proc_submiturb+0x7b/0xa0 [ 727.464233][T20274] usbdev_ioctl+0xc5d/0x16a0 [ 727.464347][T20274] ? __pfx_usbdev_ioctl+0x10/0x10 [ 727.464381][T20274] __se_sys_ioctl+0xce/0x140 [ 727.464419][T20274] __x64_sys_ioctl+0x43/0x50 [ 727.464458][T20274] x64_sys_call+0x1563/0x3020 [ 727.464486][T20274] do_syscall_64+0x136/0x3c0 [ 727.464570][T20274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.464676][T20274] RIP: 0033:0x7f5bf1eece59 [ 727.464696][T20274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.464739][T20274] RSP: 002b:00007f5bf0947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.464764][T20274] RAX: ffffffffffffffda RBX: 00007f5bf2165fa0 RCX: 00007f5bf1eece59 [ 727.464857][T20274] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000006 [ 727.464873][T20274] RBP: 00007f5bf0947090 R08: 0000000000000000 R09: 0000000000000000 [ 727.464888][T20274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.464904][T20274] R13: 00007f5bf2166038 R14: 00007f5bf2165fa0 R15: 00007ffe2a63d098 [ 727.464946][T20274] [ 728.270112][T20277] loop7: detected capacity change from 0 to 2048 [ 728.318178][T20277] loop7: p1 p4 [ 728.325273][T20277] loop7: p4 size 589824 extends beyond EOD, truncated [ 728.400518][ T2982] loop7: p1 p4 [ 728.404643][ T2982] loop7: p4 size 589824 extends beyond EOD, truncated [ 728.448663][ T9149] udevd[9149]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 728.492445][ T9149] udevd[9149]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 728.621492][T20288] loop7: detected capacity change from 0 to 4096 [ 728.667652][T20288] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.683059][ T28] audit: type=1400 audit(1709.502:4248): avc: denied { write } for pid=20287 comm="syz.7.4092" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 729.786902][T18681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.805936][T20292] loop1: detected capacity change from 0 to 512 [ 729.904832][T20292] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 729.921783][T20292] EXT4-fs (loop1): 1 orphan inode deleted [ 729.938176][T20292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 730.066663][T20306] loop7: detected capacity change from 0 to 1024 [ 730.088123][T20306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 730.125835][T20310] loop9: detected capacity change from 0 to 512 [ 730.134709][T20310] EXT4-fs: Ignoring removed nobh option [ 730.150689][T20310] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 730.170584][T18654] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.188220][T20310] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 730.197032][T20306] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 730.212522][T20310] EXT4-fs (loop9): orphan cleanup on readonly fs [ 730.226891][ T28] audit: type=1400 audit(1710.943:4249): avc: denied { write } for pid=20301 comm="syz.7.4093" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 730.253698][T20310] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #11: comm syz.9.4096: attempt to clear invalid blocks 1024 len 1 [ 730.278802][T20315] xt_TPROXY: Can be used only with -p tcp or -p udp [ 730.286243][T20310] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 730.286419][T20310] EXT4-fs (loop9): Remounting filesystem read-only [ 730.302341][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 730.302369][ C1] EXT4-fs (loop9): initial error at time 1710: ext4_clear_blocks:876: inode 11 [ 730.302425][ C1] EXT4-fs (loop9): last error at time 1710: ext4_clear_blocks:876: inode 11 [ 730.327118][T20317] program syz.1.4098 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 730.339714][T20310] EXT4-fs (loop9): 1 truncate cleaned up [ 730.346240][T20310] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 730.390831][T18681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 730.409185][ T28] audit: type=1400 audit(1711.120:4250): avc: denied { execmod } for pid=20314 comm="syz.0.4099" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=57524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 730.650183][ T28] audit: type=1400 audit(1711.336:4251): avc: denied { open } for pid=20318 comm="syz.6.4100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 730.718215][T20325] loop1: detected capacity change from 0 to 512 [ 730.730964][T20325] EXT4-fs: inline encryption not supported [ 730.737997][ T28] audit: type=1400 audit(1711.336:4252): avc: denied { perfmon } for pid=20318 comm="syz.6.4100" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 730.758832][ T28] audit: type=1400 audit(1711.336:4253): avc: denied { kernel } for pid=20318 comm="syz.6.4100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 730.778582][ T28] audit: type=1400 audit(1711.336:4254): avc: denied { tracepoint } for pid=20318 comm="syz.6.4100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 730.798131][ T28] audit: type=1400 audit(1711.364:4255): avc: denied { read write } for pid=20308 comm="syz.9.4096" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 730.842561][T20334] __nla_validate_parse: 86 callbacks suppressed [ 730.842648][T20334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4103'. [ 730.931505][T20325] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.4102: bad orphan inode 15 [ 731.151396][T20325] loop1: lost filesystem error report for type 5 error -117 [ 731.153950][T20325] ext4_test_bit(bit=14, block=5) = 0 [ 731.161888][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 731.161941][ C0] EXT4-fs (loop1): initial error at time 1711: ext4_orphan_get:1425 [ 731.162017][ C0] EXT4-fs (loop1): last error at time 1711: ext4_orphan_get:1425 [ 731.728280][T20325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 732.179157][ T28] audit: type=1400 audit(1711.364:4256): avc: denied { open } for pid=20308 comm="syz.9.4096" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 732.634889][ T28] audit: type=1400 audit(1711.364:4257): avc: denied { ioctl } for pid=18681 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 732.663574][T10890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 732.849187][T20325] FAULT_INJECTION: forcing a failure. [ 732.849187][T20325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.863257][T20325] CPU: 1 UID: 0 PID: 20325 Comm: syz.1.4102 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 732.863290][T20325] Tainted: [W]=WARN [ 732.863298][T20325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 732.863357][T20325] Call Trace: [ 732.863367][T20325] [ 732.863377][T20325] __dump_stack+0x1d/0x30 [ 732.863408][T20325] dump_stack_lvl+0x95/0xd0 [ 732.863436][T20325] dump_stack+0x15/0x1b [ 732.863461][T20325] should_fail_ex+0x25e/0x270 [ 732.863522][T20325] should_fail+0xb/0x20 [ 732.863592][T20325] should_fail_usercopy+0x1a/0x20 [ 732.863646][T20325] _copy_from_user+0x1c/0xb0 [ 732.863685][T20325] do_sock_getsockopt+0x122/0x570 [ 732.863729][T20325] __x64_sys_getsockopt+0x11d/0x1a0 [ 732.863808][T20325] x64_sys_call+0x2dcf/0x3020 [ 732.863840][T20325] do_syscall_64+0x136/0x3c0 [ 732.863866][T20325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.863916][T20325] RIP: 0033:0x7fe47783ce59 [ 732.863935][T20325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.863955][T20325] RSP: 002b:00007fe476297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 732.863975][T20325] RAX: ffffffffffffffda RBX: 00007fe477ab5fa0 RCX: 00007fe47783ce59 [ 732.864010][T20325] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000006 [ 732.864024][T20325] RBP: 00007fe476297090 R08: 0000200000002100 R09: 0000000000000000 [ 732.864073][T20325] R10: 00002000000020c0 R11: 0000000000000246 R12: 0000000000000001 [ 732.864091][T20325] R13: 00007fe477ab6038 R14: 00007fe477ab5fa0 R15: 00007ffcadd4b678 [ 732.864116][T20325] [ 733.331310][T18654] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.912812][T20366] loop1: detected capacity change from 0 to 512 [ 733.965506][T20366] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 734.080469][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 734.080484][ T28] audit: type=1400 audit(1714.553:4311): avc: denied { mount } for pid=20365 comm="syz.1.4112" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 734.537448][T20375] loop7: detected capacity change from 0 to 512 [ 734.918536][T20387] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4119'. [ 735.130344][T20397] loop9: detected capacity change from 0 to 512 [ 735.139006][T20397] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 735.150237][T20397] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 735.158549][T20397] EXT4-fs (loop9): orphan cleanup on readonly fs [ 735.166373][T20397] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.4116: Allocating blocks 41-42 which overlap fs metadata [ 735.180253][T20397] loop9: lost filesystem error report for type 5 error -117 [ 735.180526][T20397] EXT4-fs (loop9): Remounting filesystem read-only [ 735.187878][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 735.187901][ C0] EXT4-fs (loop9): initial error at time 1715: ext4_mb_mark_diskspace_used:4222 [ 735.187929][ C0] EXT4-fs (loop9): last error at time 1715: ext4_mb_mark_diskspace_used:4222 [ 735.219071][T20397] Quota error (device loop9): write_blk: dquota write failed [ 735.226524][T20397] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 735.236715][T20397] EXT4-fs (loop9): 1 truncate cleaned up [ 735.252015][T20397] EXT4-fs (loop9): pa ffff888100494bd0: logic 1, phys. 41, len 23 [ 735.260768][T20397] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 735.281185][T20396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4122'. [ 735.351483][T20396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4122'. [ 735.517437][ T28] audit: type=1400 audit(1715.891:4312): avc: denied { bind } for pid=20402 comm="syz.7.4124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 735.569501][ T28] audit: type=1400 audit(1715.891:4313): avc: denied { name_bind } for pid=20402 comm="syz.7.4124" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 735.616784][ T28] audit: type=1400 audit(1715.891:4314): avc: denied { node_bind } for pid=20402 comm="syz.7.4124" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 735.675125][ T28] audit: type=1400 audit(1715.910:4315): avc: denied { ioctl } for pid=20402 comm="syz.7.4124" path="socket:[58613]" dev="sockfs" ino=58613 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 735.733649][ T5551] IPVS: starting estimator thread 0... [ 735.747252][ T28] audit: type=1400 audit(1715.975:4316): avc: denied { create } for pid=20401 comm="syz.0.4125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 735.790849][ T28] audit: type=1400 audit(1716.087:4317): avc: denied { wake_alarm } for pid=20408 comm="syz.7.4127" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 735.839112][T20411] IPVS: using max 2352 ests per chain, 117600 per kthread [ 735.848628][ T28] audit: type=1400 audit(1716.172:4318): avc: denied { create } for pid=20408 comm="syz.7.4127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 736.016223][T10890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.025367][T20416] loop1: detected capacity change from 0 to 128 [ 736.044880][T20416] vfat: Unknown parameter '00000000000000000003' [ 736.513619][T20431] loop9: detected capacity change from 0 to 8192 [ 736.540330][T20431] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 736.767274][T20451] loop7: detected capacity change from 0 to 512 [ 736.776737][T20427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4131'. [ 736.798552][T20438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.828918][T20438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.866619][T20457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4144'. [ 736.999782][T20465] program syz.1.4146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 737.177905][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4142'. [ 737.338512][T20468] ip6erspan0: entered promiscuous mode [ 738.357887][T20479] netlink: 'syz.6.4150': attribute type 32 has an invalid length. [ 738.596338][T20480] loop9: detected capacity change from 0 to 512 [ 738.612498][T20480] EXT4-fs: Ignoring removed i_version option [ 738.626352][T20494] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20002 [ 738.655488][T20493] loop1: detected capacity change from 0 to 128 [ 738.666855][T20493] vfat: Unknown parameter '00000000000000000003' [ 739.381862][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4166'. [ 739.411390][T20522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=20522 comm=syz.7.4166 [ 739.450026][T20521] IPVS: sed: FWM 3 0x00000003 - no destination available [ 739.615894][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 739.615912][ T28] audit: type=1400 audit(1719.726:4349): avc: denied { connect } for pid=20524 comm="syz.1.4167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 739.660271][T20480] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.673368][T20525] tipc: Started in network mode [ 739.673404][T20525] tipc: Node identity 7256719f68f3, cluster identity 4711 [ 739.673466][T20525] tipc: Enabled bearer , priority 0 [ 739.673776][T20525] syzkaller0: entered promiscuous mode [ 739.673799][T20525] syzkaller0: entered allmulticast mode [ 739.706945][T20524] tipc: Resetting bearer [ 739.720868][T20524] tipc: Disabling bearer [ 739.767513][ T28] audit: type=1400 audit(1719.866:4350): avc: denied { mount } for pid=20510 comm="syz.0.4163" name="/" dev="rpc_pipefs" ino=58804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 739.816922][ T28] audit: type=1400 audit(1719.922:4351): avc: denied { getopt } for pid=20478 comm="syz.9.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 739.849684][T20540] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 739.890797][ T28] audit: type=1400 audit(1719.922:4352): avc: denied { write } for pid=20478 comm="syz.9.4151" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 739.922316][T20480] xt_hashlimit: size too large, truncated to 1048576 [ 739.946793][T20547] loop7: detected capacity change from 0 to 512 [ 739.959045][ T28] audit: type=1400 audit(1719.922:4353): avc: denied { add_name } for pid=20478 comm="syz.9.4151" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 739.961540][T20547] EXT4-fs: Ignoring removed nobh option [ 740.085855][T20547] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #3: comm syz.7.4175: corrupted inode contents [ 740.097915][T20547] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 740.103835][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 740.107063][ T28] audit: type=1400 audit(1719.922:4354): avc: denied { create } for pid=20478 comm="syz.9.4151" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 740.113000][ C0] EXT4-fs (loop7): initial error at time 1720: ext4_do_update_inode:5690 [ 740.121801][ T28] audit: type=1400 audit(1719.941:4355): avc: denied { remount } for pid=20478 comm="syz.9.4151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 740.151785][ C0] : inode 3 [ 740.151801][ C0] EXT4-fs (loop7): last error at time 1720: ext4_do_update_inode:5690: inode 3 [ 740.198682][T20547] EXT4-fs (loop7): Remounting filesystem read-only [ 740.218551][T20547] Quota error (device loop7): write_blk: dquota write failed [ 740.244334][T20547] Quota error (device loop7): qtree_write_dquot: Error -30 occurred while creating quota [ 740.254840][T20547] EXT4-fs (loop7): 1 truncate cleaned up [ 740.260967][T20547] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.280577][T20547] netlink: 'syz.7.4175': attribute type 39 has an invalid length. [ 740.520324][T10890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.627194][T20552] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4175'. [ 740.636590][T20553] tipc: Enabling of bearer rejected, failed to enable media [ 740.691563][ T28] audit: type=1400 audit(1720.727:4356): avc: denied { sys_module } for pid=20546 comm="syz.7.4175" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 740.749899][T20561] loop1: detected capacity change from 0 to 128 [ 740.780550][T20561] vfat: Unknown parameter '00000000000000000003' [ 741.701464][T20566] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98 [ 741.723996][T18681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.746774][T20576] sctp: [Deprecated]: syz.6.4181 (pid 20576) Use of int in max_burst socket option. [ 741.746774][T20576] Use struct sctp_assoc_value instead [ 741.822088][T20578] xfrm1: entered allmulticast mode [ 742.000462][T20579] loop1: detected capacity change from 0 to 128 [ 742.018815][T20579] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 742.100481][T18654] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 742.543405][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4188'. [ 742.852671][ T3530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.860946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.073283][T20604] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4187'. [ 743.123819][T20607] loop9: detected capacity change from 0 to 128 [ 743.258281][T20607] vfat: Unknown parameter '00000000000000000003' [ 744.669385][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.682011][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.690302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.760131][T20620] loop7: detected capacity change from 0 to 2048 [ 744.802578][T20624] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4197'. [ 744.835962][T20624] netlink: 3 bytes leftover after parsing attributes in process `syz.9.4197'. [ 744.872994][T20620] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.951663][T20632] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 744.963090][T20632] bond6 (unregistering): Released all slaves [ 745.005739][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 745.005796][ T28] audit: type=1400 audit(1725.759:4366): avc: denied { read write } for pid=20627 comm="syz.1.4198" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 745.044952][ T28] audit: type=1400 audit(1725.759:4367): avc: denied { open } for pid=20627 comm="syz.1.4198" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 745.334762][T20636] loop1: detected capacity change from 0 to 512 [ 745.764044][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.815685][T20652] loop9: detected capacity change from 0 to 128 [ 745.879012][T20652] vfat: Unknown parameter '00000000000000000003' [ 746.106515][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.114948][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.124146][ T28] audit: type=1400 audit(1726.208:4368): avc: denied { mounton } for pid=20627 comm="syz.1.4198" path=2F36392FE91F7189591E9233614B dev="tmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 746.148501][ T28] audit: type=1400 audit(1726.433:4369): avc: denied { create } for pid=20633 comm="syz.0.4200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 746.891709][ T28] audit: type=1400 audit(1726.882:4370): avc: denied { egress } for pid=20619 comm="syz.7.4196" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 746.914982][ T28] audit: type=1400 audit(1726.882:4371): avc: denied { sendto } for pid=20619 comm="syz.7.4196" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 747.195083][T18681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.250374][ T3552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.258656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.269612][ T28] audit: type=1400 audit(1727.836:4372): avc: denied { bind } for pid=20669 comm="syz.0.4211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 747.305579][ T28] audit: type=1400 audit(1727.836:4373): avc: denied { name_bind } for pid=20669 comm="syz.0.4211" src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 747.326098][ T28] audit: type=1400 audit(1727.836:4374): avc: denied { node_bind } for pid=20669 comm="syz.0.4211" saddr=224.0.0.1 src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 747.348014][ T28] audit: type=1400 audit(1727.836:4375): avc: denied { connect } for pid=20669 comm="syz.0.4211" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 747.425809][T20684] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.4213'. [ 747.471868][T20687] lo speed is unknown, defaulting to 1000 [ 747.743180][T20693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4216'. [ 748.873268][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.881686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.675037][T20699] loop7: detected capacity change from 0 to 512 [ 750.015157][T20699] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 750.469767][T20704] loop9: detected capacity change from 0 to 512 [ 750.481158][T20706] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4224'. [ 750.497341][T20699] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4220: Invalid block bitmap block 0 in block_group 0 [ 750.513230][T20704] EXT4-fs: Ignoring removed oldalloc option [ 750.535158][T20704] EXT4-fs: Ignoring removed nobh option [ 750.565122][T20704] EXT4-fs: quotafile must be on filesystem root [ 750.572553][T20699] loop7: lost filesystem error report for type 5 error -117 [ 750.574241][T20699] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 750.581637][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 750.581667][ C0] EXT4-fs (loop7): initial error at time 1730: ext4_read_block_bitmap_nowait:483 [ 750.581699][ C0] EXT4-fs (loop7): last error at time 1730: ext4_read_block_bitmap_nowait:483 [ 750.617510][T20712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1808 sclass=netlink_route_socket pid=20712 comm=syz.0.4224 [ 750.652229][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 750.652247][ T28] audit: type=1400 audit(1731.035:4377): avc: denied { mount } for pid=20710 comm="syz.6.4225" name="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 750.743880][ T5551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.753942][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.762242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.781120][T20719] IPv6: NLM_F_CREATE should be specified when creating new route [ 750.788912][T20719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 750.796125][T20719] IPv6: NLM_F_CREATE should be set when creating new route [ 750.803330][T20719] IPv6: NLM_F_CREATE should be set when creating new route [ 750.810546][T20719] IPv6: NLM_F_CREATE should be set when creating new route [ 750.820348][ T28] audit: type=1400 audit(1731.035:4378): avc: denied { search } for pid=20710 comm="syz.6.4225" name="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 750.841941][ T28] audit: type=1400 audit(1731.035:4379): avc: denied { search } for pid=20710 comm="syz.6.4225" name="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 750.864548][T20718] loop9: detected capacity change from 0 to 1764 [ 750.871041][T20699] loop7: lost filesystem error report for type 5 error -117 [ 750.895448][T20699] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.4220: attempt to clear invalid blocks 983261 len 1 [ 750.955354][T20699] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 750.955559][T20699] EXT4-fs error (device loop7): __ext4_get_inode_loc:4885: comm syz.7.4220: Invalid inode table block 0 in block_group 0 [ 750.991744][ T28] audit: type=1400 audit(1731.035:4380): avc: denied { read } for pid=20710 comm="syz.6.4225" name="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 751.013516][ T28] audit: type=1400 audit(1731.035:4381): avc: denied { read open } for pid=20710 comm="syz.6.4225" path="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 751.035748][ T28] audit: type=1400 audit(1731.035:4382): avc: denied { search } for pid=20710 comm="syz.6.4225" name="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 751.057821][ T28] audit: type=1400 audit(1731.035:4383): avc: denied { search } for pid=20710 comm="syz.6.4225" name="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 751.058801][T20699] loop7: lost filesystem error report for type 5 error -117 [ 751.079652][ T28] audit: type=1400 audit(1731.035:4384): avc: denied { write search } for pid=20710 comm="syz.6.4225" name="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 751.109558][ T28] audit: type=1400 audit(1731.035:4385): avc: denied { add_name } for pid=20710 comm="syz.6.4225" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 751.130375][ T28] audit: type=1400 audit(1731.035:4386): avc: denied { create } for pid=20710 comm="syz.6.4225" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 751.189426][T20699] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 751.201569][T20699] loop7: lost filesystem error report for type 5 error -117 [ 751.201709][T20699] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 751.218467][T20699] loop7: lost filesystem error report for type 5 error -117 [ 751.220702][T20699] EXT4-fs error (device loop7): __ext4_get_inode_loc:4885: comm syz.7.4220: Invalid inode table block 0 in block_group 0 [ 751.243921][T20730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4232'. [ 751.264209][T20699] loop7: lost filesystem error report for type 5 error -117 [ 751.265016][T20699] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 751.269925][T20730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4232'. [ 751.272395][T20699] loop7: lost filesystem error report for type 5 error -117 [ 751.292603][T20699] EXT4-fs error (device loop7): ext4_truncate:4690: inode #11: comm syz.7.4220: mark_inode_dirty error [ 751.312865][T20699] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 751.313012][T20699] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 751.340883][T20699] loop7: lost filesystem error report for type 5 error -117 [ 751.341089][T20699] EXT4-fs error (device loop7): __ext4_get_inode_loc:4885: comm syz.7.4220: Invalid inode table block 0 in block_group 0 [ 751.376233][T20699] loop7: lost filesystem error report for type 5 error -117 [ 751.376419][T20699] EXT4-fs (loop7): 1 truncate cleaned up [ 751.390347][T20699] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 751.429604][T20718] netlink: 160 bytes leftover after parsing attributes in process `syz.9.4226'. [ 751.447652][T18681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.489699][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.522794][T20744] loop1: detected capacity change from 0 to 4096 [ 751.561573][T20744] EXT4-fs: test_dummy_encryption option not supported [ 751.604137][T20750] loop7: detected capacity change from 0 to 8192 [ 751.620043][T20753] loop9: detected capacity change from 0 to 128 [ 751.867924][T11160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.876312][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.182577][T20753] syz.9.4238: attempt to access beyond end of device [ 752.182577][T20753] loop9: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 752.344716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.388539][T20753] syz.9.4238: attempt to access beyond end of device [ 752.388539][T20753] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 752.403018][T20753] syz.9.4238: attempt to access beyond end of device [ 752.403018][T20753] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 752.429050][T20779] FAULT_INJECTION: forcing a failure. [ 752.429050][T20779] name failslab, interval 1, probability 0, space 0, times 0 [ 752.455001][T20779] CPU: 0 UID: 0 PID: 20779 Comm: syz.1.4246 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 752.455085][T20779] Tainted: [W]=WARN [ 752.455092][T20779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 752.455110][T20779] Call Trace: [ 752.455120][T20779] [ 752.455131][T20779] __dump_stack+0x1d/0x30 [ 752.455162][T20779] dump_stack_lvl+0x95/0xd0 [ 752.455231][T20779] dump_stack+0x15/0x1b [ 752.455384][T20779] should_fail_ex+0x25e/0x270 [ 752.455418][T20779] should_failslab+0x8c/0xb0 [ 752.455445][T20779] kmem_cache_alloc_noprof+0x66/0x3f0 [ 752.455474][T20779] ? security_inode_alloc+0x37/0x100 [ 752.455532][T20779] security_inode_alloc+0x37/0x100 [ 752.455553][T20779] inode_init_always_gfp+0x495/0x4e0 [ 752.455577][T20779] ? __pfx_sock_alloc_inode+0x10/0x10 [ 752.455624][T20779] alloc_inode+0x58/0x170 [ 752.455645][T20779] do_accept+0xa0/0x390 [ 752.455721][T20779] __sys_accept4+0xbe/0x170 [ 752.455761][T20779] __x64_sys_accept4+0x51/0x60 [ 752.455875][T20779] x64_sys_call+0x48d/0x3020 [ 752.455965][T20779] do_syscall_64+0x136/0x3c0 [ 752.456001][T20779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.456032][T20779] RIP: 0033:0x7fe47783ce59 [ 752.456112][T20779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.456131][T20779] RSP: 002b:00007fe476297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 752.456152][T20779] RAX: ffffffffffffffda RBX: 00007fe477ab5fa0 RCX: 00007fe47783ce59 [ 752.456171][T20779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 752.456188][T20779] RBP: 00007fe476297090 R08: 0000000000000000 R09: 0000000000000000 [ 752.456244][T20779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.456256][T20779] R13: 00007fe477ab6038 R14: 00007fe477ab5fa0 R15: 00007ffcadd4b678 [ 752.456321][T20779] [ 752.783402][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.874346][T20753] syz.9.4238: attempt to access beyond end of device [ 752.874346][T20753] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 752.918160][T11160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.947138][T20753] syz.9.4238: attempt to access beyond end of device [ 752.947138][T20753] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 752.958976][T11160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.968918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.982484][T20783] loop1: detected capacity change from 0 to 256 [ 752.990576][T20753] syz.9.4238: attempt to access beyond end of device [ 752.990576][T20753] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 753.016847][T20783] vfat: Unknown parameter './file2' [ 753.042424][ T5551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.051354][T20753] syz.9.4238: attempt to access beyond end of device [ 753.051354][T20753] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 753.065098][T20753] syz.9.4238: attempt to access beyond end of device [ 753.065098][T20753] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 753.078628][T20753] syz.9.4238: attempt to access beyond end of device [ 753.078628][T20753] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 753.092234][T20753] syz.9.4238: attempt to access beyond end of device [ 753.092234][T20753] loop9: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 753.271502][T20783] random: crng reseeded on system resumption [ 753.468581][T20798] syzkaller0: entered promiscuous mode [ 753.476909][T20798] syzkaller0: entered allmulticast mode [ 753.762651][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.866818][T20809] lo speed is unknown, defaulting to 1000 [ 754.044009][T20824] siw: device registration error -23 [ 754.059431][T20823] loop9: detected capacity change from 0 to 512 [ 754.091289][T20823] EXT4-fs: Ignoring removed nobh option [ 754.110424][T20823] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 754.135993][T20823] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 754.151420][T20823] EXT4-fs (loop9): orphan cleanup on readonly fs [ 754.175658][T20823] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #11: comm syz.9.4258: attempt to clear invalid blocks 1024 len 1 [ 754.255912][T20823] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 754.256367][T20823] EXT4-fs (loop9): Remounting filesystem read-only [ 754.265581][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 754.265601][ C1] EXT4-fs (loop9): initial error at time 1734: ext4_clear_blocks:876: inode 11 [ 754.265649][ C1] EXT4-fs (loop9): last error at time 1734: ext4_clear_blocks:876: inode 11 [ 754.359709][T20823] EXT4-fs (loop9): 1 truncate cleaned up [ 754.373655][T20827] netlink: 'syz.7.4259': attribute type 21 has an invalid length. [ 754.387891][T20827] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4259'. [ 754.402956][T20823] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 754.521598][T20829] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4260'. [ 754.571556][T20829] team0: Port device team_slave_0 removed [ 754.767119][T10890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 754.940172][T20837] loop1: detected capacity change from 0 to 2048 [ 754.978283][T20837] ext4: Unknown parameter 'appraise' [ 754.992194][T20834] lo speed is unknown, defaulting to 1000 [ 755.393570][T20868] lo speed is unknown, defaulting to 1000 [ 755.762475][T20886] loop9: detected capacity change from 0 to 512 [ 755.770644][T20886] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 755.782693][T20886] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 755.790982][T20886] EXT4-fs (loop9): orphan cleanup on readonly fs [ 755.798659][T20886] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.4277: Allocating blocks 41-42 which overlap fs metadata [ 755.812428][T20886] loop9: lost filesystem error report for type 5 error -117 [ 755.814005][T20886] EXT4-fs (loop9): Remounting filesystem read-only [ 755.821356][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 755.821380][ C1] EXT4-fs (loop9): initial error at time 1735: ext4_mb_mark_diskspace_used:4222 [ 755.821427][ C1] EXT4-fs (loop9): last error at time 1735: ext4_mb_mark_diskspace_used:4222 [ 755.852590][T20886] EXT4-fs (loop9): 1 truncate cleaned up [ 755.860678][T20886] EXT4-fs (loop9): pa ffff888100494d20: logic 1, phys. 41, len 23 [ 755.869342][T20886] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 756.067971][T20885] loop1: detected capacity change from 0 to 164 [ 756.205813][ T28] kauditd_printk_skb: 4301 callbacks suppressed [ 756.205832][ T28] audit: type=1400 audit(1736.245:8686): avc: denied { mount } for pid=20884 comm="syz.1.4280" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 756.244134][T20885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4280'. [ 756.273078][ T28] audit: type=1400 audit(1736.282:8687): avc: denied { create } for pid=20884 comm="syz.1.4280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 756.330401][ T28] audit: type=1400 audit(1736.282:8688): avc: denied { write } for pid=20884 comm="syz.1.4280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 756.687846][ T28] audit: type=1400 audit(1736.301:8689): avc: denied { create } for pid=20903 comm="syz.6.4286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 757.722288][ T11] net_ratelimit: 11 callbacks suppressed [ 757.722330][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.736295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.744566][T11160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.756664][ T28] audit: type=1400 audit(1736.310:8690): avc: denied { setopt } for pid=20903 comm="syz.6.4286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 757.758409][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.103844][T10890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.150043][ T28] audit: type=1400 audit(1736.404:8691): avc: denied { ioctl } for pid=20901 comm="syz.0.4285" path="socket:[59573]" dev="sockfs" ino=59573 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 758.282552][ T28] audit: type=1400 audit(1736.460:8692): avc: denied { setopt } for pid=20901 comm="syz.0.4285" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 758.302544][ T28] audit: type=1400 audit(1736.507:8693): avc: denied { create } for pid=20884 comm="syz.1.4280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 758.321595][ T28] audit: type=1400 audit(1736.507:8694): avc: denied { getopt } for pid=20884 comm="syz.1.4280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 758.340610][ T28] audit: type=1400 audit(1737.770:8695): avc: denied { write } for pid=20915 comm="syz.7.4287" path="socket:[60421]" dev="sockfs" ino=60421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 758.463131][T20934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4294'. [ 758.738948][T20935] loop1: detected capacity change from 0 to 512 [ 758.848098][T11160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.856384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.999705][T20935] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4293: bg 0: block 393: padding at end of block bitmap is not set [ 759.038100][T20950] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4299'. [ 759.047399][T20950] gretap0: entered promiscuous mode [ 759.056156][T20948] loop9: detected capacity change from 0 to 512 [ 759.095708][T20948] EXT4-fs: inline encryption not supported [ 759.108198][T20950] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4299'. [ 759.117148][T20950] 0ªî{X¹¦: renamed from gretap0 [ 759.129399][T20935] loop1: lost filesystem error report for type 5 error -117 [ 759.137838][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 759.151744][ C0] EXT4-fs (loop1): initial error at time 1738: ext4_validate_block_bitmap:441 [ 759.160665][ C0] EXT4-fs (loop1): last error at time 1738: ext4_validate_block_bitmap:441 [ 759.174723][T20935] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 759.194325][T20948] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.4298: bad orphan inode 15 [ 759.205378][T20935] loop1: lost filesystem error report for type 5 error -117 [ 759.212930][T20935] EXT4-fs (loop1): 2 truncates cleaned up [ 759.228712][T11160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.251266][T20948] loop9: lost filesystem error report for type 5 error -117 [ 759.253325][T20948] ext4_test_bit(bit=14, block=5) = 0 [ 759.261632][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 759.261867][ C1] EXT4-fs (loop9): initial error at time 1739: ext4_orphan_get:1425 [ 759.262103][ C1] EXT4-fs (loop9): last error at time 1739: ext4_orphan_get:1425 [ 759.267033][T20935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.295245][T20950] 0ªî{X¹¦: left promiscuous mode [ 759.310898][T20935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4293'. [ 759.313123][T20948] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.320175][T20950] 0ªî{X¹¦: entered allmulticast mode [ 759.321310][T20950] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 759.396435][T20941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.404583][T20941] team0: Port device bond0 added [ 759.411540][T10890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.616509][T18654] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.632068][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.672407][T20968] loop9: detected capacity change from 0 to 764 [ 760.210138][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.334879][T20985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4308'. [ 760.404870][T20985] veth5: entered allmulticast mode [ 760.478165][T20995] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20001 [ 760.488396][T20991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4311'. [ 760.627571][T21011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4317'. [ 760.685029][T21011] netlink: 'syz.6.4317': attribute type 1 has an invalid length. [ 760.736584][T21021] lo speed is unknown, defaulting to 1000 [ 760.836169][T21024] netlink: 'syz.6.4323': attribute type 1 has an invalid length. [ 760.844277][T21024] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4323'. [ 760.853270][T21024] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4323'. [ 761.029859][T21038] loop7: detected capacity change from 0 to 512 [ 761.115666][T21038] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.4327: iget: bad i_size value: 38620345925642 [ 761.128696][T21038] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 761.130376][T21038] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4327: couldn't read orphan inode 15 (err -117) [ 761.139594][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 761.139625][ C0] EXT4-fs (loop7): initial error at time 1740: ext4_orphan_get:1399: inode 15 [ 761.139672][ C0] EXT4-fs (loop7): last error at time 1740: ext4_orphan_get:1399: inode 15 [ 761.260667][T21038] loop7: lost filesystem error report for type 5 error -117 [ 761.262497][T21038] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 761.639692][T21045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.741290][T21045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.009205][T21040] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 762.039098][ T96] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 762.076061][ T96] EXT4-fs (loop7): This should not happen!! Data will be lost [ 762.076061][ T96] [ 762.085872][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 762.085891][ T28] audit: type=1400 audit(1741.736:8747): avc: denied { name_bind } for pid=21050 comm="syz.9.4330" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 762.123748][ T96] EXT4-fs (loop7): Total free blocks count 0 [ 762.136109][ T96] EXT4-fs (loop7): Free/Dirty block details [ 762.154313][ T28] audit: type=1400 audit(1741.736:8748): avc: denied { node_bind } for pid=21050 comm="syz.9.4330" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 762.176543][ T96] EXT4-fs (loop7): free_blocks=0 [ 762.188418][ T96] EXT4-fs (loop7): dirty_blocks=7384 [ 762.201245][ T96] EXT4-fs (loop7): Block reservation details [ 762.217849][ T96] EXT4-fs (loop7): i_reserved_data_blocks=7384 [ 762.225672][ T28] audit: type=1400 audit(1741.736:8749): avc: denied { setopt } for pid=21050 comm="syz.9.4330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 762.240656][T21066] __nla_validate_parse: 1 callbacks suppressed [ 762.240758][T21066] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4334'. [ 762.267232][ T96] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 762.350866][T21071] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 762.358168][T21071] IPv6: NLM_F_CREATE should be set when creating new route [ 762.365463][T21071] IPv6: NLM_F_CREATE should be set when creating new route [ 762.372711][T21071] IPv6: NLM_F_CREATE should be set when creating new route [ 762.404175][T21071] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 762.411516][ T28] audit: type=1400 audit(1742.054:8750): avc: denied { write } for pid=21037 comm="syz.7.4327" name="cpuset.effective_mems" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 762.757106][ T28] audit: type=1400 audit(1742.372:8751): avc: denied { mount } for pid=21078 comm="syz.0.4339" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 762.779337][T21087] syzkaller0: entered promiscuous mode [ 762.785002][T21087] syzkaller0: entered allmulticast mode [ 762.817948][ T28] audit: type=1400 audit(1742.428:8752): avc: denied { ioctl } for pid=21078 comm="syz.0.4339" path="socket:[59892]" dev="sockfs" ino=59892 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 762.964891][ T28] audit: type=1400 audit(1742.568:8753): avc: denied { read } for pid=21092 comm="syz.1.4343" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 763.007511][ T28] audit: type=1400 audit(1742.568:8754): avc: denied { open } for pid=21092 comm="syz.1.4343" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 763.037679][ T28] audit: type=1400 audit(1742.587:8755): avc: denied { ioctl } for pid=21092 comm="syz.1.4343" path="" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 763.110115][ C0] net_ratelimit: 16 callbacks suppressed [ 763.110138][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.254321][T21109] loop1: detected capacity change from 0 to 512 [ 763.350704][T21109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 763.386912][T21109] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.4348: Unimplemented hash flags: 0x0001 [ 763.419562][ T28] audit: type=1400 audit(1742.989:8756): avc: denied { mounton } for pid=21111 comm="syz.9.4349" path="/442/file0" dev="tmpfs" ino=2397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 763.470619][T21109] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4348: Corrupt directory, running e2fsck is recommended [ 763.890762][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.958954][T11160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.967285][T11160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.975537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.093488][T18654] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.290632][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.464538][T21138] 9p: Bad value for 'rfdno' [ 764.471525][T21142] loop9: detected capacity change from 0 to 512 [ 764.497755][T21142] EXT4-fs (loop9): orphan cleanup on readonly fs [ 764.508087][T21142] EXT4-fs warning (device loop9): ext4_enable_quotas:7267: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 764.531758][T21142] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 764.550689][T21142] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.4357: couldn't read orphan inode 26 (err -116) [ 764.568911][T21146] loop7: detected capacity change from 0 to 512 [ 764.577033][T21146] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 764.589292][T21146] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 764.597265][T21146] EXT4-fs (loop7): orphan cleanup on readonly fs [ 764.604478][T21146] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.4353: Allocating blocks 41-42 which overlap fs metadata [ 764.618276][T21146] loop7: lost filesystem error report for type 5 error -117 [ 764.618522][T21146] EXT4-fs (loop7): Remounting filesystem read-only [ 764.632374][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 764.632392][ C1] EXT4-fs (loop7): initial error at time 1744: ext4_mb_mark_diskspace_used:4222 [ 764.632414][ C1] EXT4-fs (loop7): last error at time 1744: ext4_mb_mark_diskspace_used:4222 [ 764.650234][T21142] loop9: lost filesystem error report for type 5 error -116 [ 764.660562][T11160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.664446][T21146] EXT4-fs (loop7): 1 truncate cleaned up [ 764.677997][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.692488][T21146] EXT4-fs (loop7): pa ffff888100494d20: logic 1, phys. 41, len 23 [ 764.702770][T21146] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 764.725100][T21142] EXT4-fs (loop9): Remounting filesystem read-only [ 764.732339][T21142] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 764.767488][T10890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.997115][T21165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4364'. [ 765.089581][T11160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.089725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.119416][T21169] loop1: detected capacity change from 0 to 512 [ 765.120384][T21169] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 765.206021][T18681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.261865][T21177] loop7: detected capacity change from 0 to 512 [ 765.273975][T21169] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.4366: bad orphan inode 13 [ 765.309175][T21169] loop1: lost filesystem error report for type 5 error -117 [ 765.312173][T21169] ext4_test_bit(bit=12, block=18) = 1 [ 765.312498][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 765.312614][ C0] EXT4-fs (loop1): last error at time 1744: ext4_orphan_get:1425 [ 765.317439][T21177] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.4368: iget: bad i_size value: 38620345925642 [ 765.321330][T21169] is_bad_inode(inode)=0 [ 765.340374][T21177] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 765.353102][T21169] NEXT_ORPHAN(inode)=0 [ 765.370456][T21169] max_ino=32 [ 765.373690][T21169] i_nlink=1 [ 765.377363][T21169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 765.395117][T21177] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4368: couldn't read orphan inode 15 (err -117) [ 765.407027][T21177] loop7: lost filesystem error report for type 5 error -117 [ 765.410119][T21169] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 765.433266][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 765.433381][ C0] EXT4-fs (loop7): initial error at time 1744: ext4_orphan_get:1399: inode 15 [ 765.433669][ C0] EXT4-fs (loop7): last error at time 1744: ext4_orphan_get:1404 [ 765.462949][T21175] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 765.463046][T21177] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.498239][T21183] tipc: New replicast peer: 255.255.255.255 [ 765.517429][T21169] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.4366: Failed to acquire dquot type 1 [ 765.536455][T21183] tipc: Enabled bearer , priority 10 [ 765.566229][T21186] netlink: 'syz.0.4371': attribute type 4 has an invalid length. [ 765.641462][T18681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.646038][T18654] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 765.730050][T21189] loop7: detected capacity change from 0 to 1024 [ 765.747112][T21189] EXT4-fs: Ignoring removed oldalloc option [ 765.753663][T21189] EXT4-fs: Ignoring removed oldalloc option [ 765.768301][T21189] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 765.770692][T21195] loop1: detected capacity change from 0 to 512 [ 765.796011][T21189] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.814482][T21189] EXT4-fs (loop7): shut down requested (1) [ 765.822675][T21195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 765.843185][T21189] netlink: 71 bytes leftover after parsing attributes in process `syz.7.4373'. [ 765.865189][T18654] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.917227][T18681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.220741][T21206] loop1: detected capacity change from 0 to 512 [ 766.254612][T21206] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 766.295092][T21216] loop7: detected capacity change from 0 to 128 [ 766.304435][T21224] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4386'. [ 766.930000][T21257] loop7: detected capacity change from 0 to 512 [ 766.941245][T11160] tipc: Node number set to 447050143 [ 766.952048][T21257] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 766.965716][T21257] EXT4-fs (loop7): mount failed [ 766.988627][T21257] loop7: detected capacity change from 0 to 512 [ 767.004868][T21257] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.4396: corrupted in-inode xattr: invalid ea_ino [ 767.022980][T21257] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 767.024738][T21257] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4396: couldn't read orphan inode 15 (err -117) [ 767.033958][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 767.033984][ C1] EXT4-fs (loop7): initial error at time 1746: ext4_iget_extra_inode:5128: inode 15 [ 767.034023][ C1] EXT4-fs (loop7): last error at time 1746: ext4_iget_extra_inode:5128: inode 15 [ 767.115879][T21264] netlink: 148 bytes leftover after parsing attributes in process `syz.9.4398'. [ 767.125646][T21257] loop7: lost filesystem error report for type 5 error -117 [ 767.128777][T21257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.169019][T18681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.737635][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 767.737655][ T28] audit: type=1400 audit(1747.030:8803): avc: denied { read } for pid=21287 comm="syz.0.4407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 768.472622][T21295] netlink: 'syz.9.4408': attribute type 1 has an invalid length. [ 768.484369][T21295] netlink: 'syz.9.4408': attribute type 4 has an invalid length. [ 768.492530][T21295] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.4408'. [ 768.505522][ T28] audit: type=1400 audit(1747.750:8804): avc: denied { connect } for pid=21294 comm="syz.9.4408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 768.525733][ T28] audit: type=1400 audit(1747.750:8805): avc: denied { write } for pid=21294 comm="syz.9.4408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 768.609855][ T5550] net_ratelimit: 179 callbacks suppressed [ 768.609872][ T5550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.652154][ T28] audit: type=1400 audit(1747.891:8806): avc: denied { write } for pid=21296 comm="syz.7.4410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 768.715663][T21304] lo: entered promiscuous mode [ 768.720570][T21304] lo: entered allmulticast mode [ 768.783147][T21307] pimreg: entered allmulticast mode [ 768.801588][T21307] lo: entered allmulticast mode [ 768.818688][T21307] lo: left allmulticast mode [ 768.829663][T21307] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4411'. [ 768.844658][ T28] audit: type=1400 audit(1748.031:8807): avc: denied { unlink } for pid=15719 comm="syz-executor" name="file0" dev="tmpfs" ino=1469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 768.906971][T21300] pimreg: left allmulticast mode [ 768.929749][T21314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4414'. [ 768.948548][ T28] audit: type=1400 audit(1748.134:8808): avc: denied { mount } for pid=21312 comm="syz.6.4414" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 768.970690][ T28] audit: type=1400 audit(1748.134:8809): avc: denied { search } for pid=21312 comm="syz.6.4414" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 768.992037][ T28] audit: type=1400 audit(1748.134:8810): avc: denied { search } for pid=21312 comm="syz.6.4414" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 769.014276][ T28] audit: type=1400 audit(1748.134:8811): avc: denied { block_suspend } for pid=21312 comm="syz.6.4414" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 769.039615][T21322] syzkaller1: entered promiscuous mode [ 769.047698][ T28] audit: type=1400 audit(1748.134:8812): avc: denied { search } for pid=21312 comm="syz.6.4414" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 769.071342][T21322] syzkaller1: entered allmulticast mode [ 769.174807][T21328] tipc: Started in network mode [ 769.179827][T21328] tipc: Node identity 00000000000000000000ffff0a010102, cluster identity 4711 [ 769.190235][T21328] tipc: Enabling of bearer rejected, failed to enable media [ 769.202066][T21330] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4420'. [ 769.317971][T21337] netlink: 16158 bytes leftover after parsing attributes in process `syz.7.4424'. [ 769.335239][T21337] pim6reg: entered allmulticast mode [ 769.341371][T21337] pim6reg: left allmulticast mode [ 769.536114][ T3552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.544398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.865760][ T3552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.006575][T21350] siw: device registration error -23 [ 770.514415][ T5550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.649007][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.657326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.852500][T21367] set_capacity_and_notify: 3 callbacks suppressed [ 770.852518][T21367] loop9: detected capacity change from 0 to 512 [ 770.866521][T21367] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 770.880424][T21367] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 770.888577][T21367] EXT4-fs (loop9): orphan cleanup on readonly fs [ 770.896167][T21367] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.4428: Allocating blocks 41-42 which overlap fs metadata [ 770.910280][T21367] loop9: lost filesystem error report for type 5 error -117 [ 770.914138][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 770.927973][ C0] EXT4-fs (loop9): initial error at time 1750: ext4_mb_mark_diskspace_used:4222 [ 770.937074][ C0] EXT4-fs (loop9): last error at time 1750: ext4_mb_mark_diskspace_used:4222 [ 771.225993][T21367] EXT4-fs (loop9): Remounting filesystem read-only [ 771.232753][T21367] EXT4-fs (loop9): 1 truncate cleaned up [ 771.857298][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.865990][ T3552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.874461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.929121][T21367] EXT4-fs (loop9): pa ffff888100494bd0: logic 1, phys. 41, len 23 [ 771.937892][T21367] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 772.168732][T10890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.188559][T21382] loop1: detected capacity change from 0 to 128 [ 772.202525][T21382] vfat: Unknown parameter '00000000000000000003' [ 772.229880][T21386] loop9: detected capacity change from 0 to 512 [ 772.236514][T21386] EXT4-fs: Ignoring removed nobh option [ 772.307028][T21386] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 772.378072][T21386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 772.386471][T21386] EXT4-fs (loop9): orphan cleanup on readonly fs [ 772.393198][T21386] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #11: comm syz.9.4439: attempt to clear invalid blocks 1024 len 1 [ 772.406278][T21386] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 772.406497][T21386] EXT4-fs (loop9): Remounting filesystem read-only [ 772.422565][T21386] EXT4-fs (loop9): 1 truncate cleaned up [ 772.428742][T21386] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 772.495847][T21396] netlink: 67 bytes leftover after parsing attributes in process `syz.0.4442'. [ 773.160782][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 773.160802][ T28] audit: type=1400 audit(1752.100:8821): avc: denied { read write } for pid=18681 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 773.204145][T10890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 773.220165][ T28] audit: type=1400 audit(1752.100:8822): avc: denied { open } for pid=18681 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 773.315971][ T28] audit: type=1400 audit(1752.100:8823): avc: denied { ioctl } for pid=18681 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 773.405248][ T28] audit: type=1400 audit(1752.109:8824): avc: denied { prog_load } for pid=21405 comm="syz.1.4444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 773.512400][ T28] audit: type=1400 audit(1752.109:8825): avc: denied { bpf } for pid=21405 comm="syz.1.4444" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 774.082382][ T3552] net_ratelimit: 8 callbacks suppressed [ 774.082400][ T3552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.096481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.104735][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.139526][ T28] audit: type=1400 audit(1752.109:8826): avc: denied { perfmon } for pid=21405 comm="syz.1.4444" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 774.167829][T21428] tipc: Enabled bearer , priority 0 [ 774.175034][ T28] audit: type=1400 audit(1752.109:8827): avc: denied { prog_run } for pid=21405 comm="syz.1.4444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 774.204465][T21431] loop1: detected capacity change from 0 to 512 [ 774.229910][T21431] /dev/loop1: Can't open blockdev [ 774.247300][ T28] audit: type=1400 audit(1752.137:8828): avc: denied { recv } for pid=4037 comm="kworker/u8:17" saddr=10.128.0.163 src=30036 daddr=10.128.0.228 dest=45420 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 774.303541][ T28] audit: type=1400 audit(1752.137:8829): avc: denied { unmount } for pid=10890 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 774.344404][ T28] audit: type=1400 audit(1752.156:8830): avc: denied { create } for pid=21407 comm="syz.7.4445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 774.932537][T21442] loop1: detected capacity change from 0 to 1024 [ 774.961548][T21442] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 775.027913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.079362][T21442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.097516][T21427] tipc: Disabling bearer [ 775.181411][ T3530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.189716][ T3552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.197846][ T3552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.206108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.228392][T21453] loop7: detected capacity change from 0 to 512 [ 775.270230][T21453] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 775.300735][T21453] EXT4-fs (loop7): mount failed [ 775.315074][T21453] loop7: detected capacity change from 0 to 512 [ 775.370771][T21453] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.4457: corrupted in-inode xattr: invalid ea_ino [ 775.388576][T21473] loop9: detected capacity change from 0 to 256 [ 775.394986][T21453] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 775.395457][T21453] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4457: couldn't read orphan inode 15 (err -117) [ 775.404702][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 775.404729][ C1] EXT4-fs (loop7): initial error at time 2010: ext4_iget_extra_inode:5128: inode 15 [ 775.404763][ C1] EXT4-fs (loop7): last error at time 2010: ext4_iget_extra_inode:5128: inode 15 [ 775.463983][T18654] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.465247][T21453] loop7: lost filesystem error report for type 5 error -117 [ 775.558273][T21473] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4465'. [ 775.614960][ T5551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.617205][T21453] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.636527][T21483] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 776.634930][T18681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.685714][T21604] batadv_slave_0: entered promiscuous mode [ 776.721350][T21601] batadv_slave_0: left promiscuous mode [ 776.816781][T21616] loop9: detected capacity change from 0 to 512 [ 776.977285][T21612] loop7: detected capacity change from 0 to 512 [ 777.093072][T21616] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.179757][T21612] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 777.237291][T21612] System zones: 1-12 [ 777.285019][T21612] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.4475: error while reading EA inode 32 err=-116 [ 777.305749][T21612] loop7: lost filesystem error report for type 5 error -117 [ 777.307198][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 777.321887][ C1] EXT4-fs (loop7): initial error at time 2011: ext4_xattr_inode_iget:446 [ 777.330942][ C1] EXT4-fs (loop7): last error at time 2011: ext4_xattr_inode_iget:446 [ 777.344967][T21612] EXT4-fs (loop7): Remounting filesystem read-only [ 777.352451][T21612] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 777.364714][T21612] EXT4-fs (loop7): 1 orphan inode deleted [ 777.384526][T21612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.502816][T18681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.970586][T10890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.016171][T21634] loop7: detected capacity change from 0 to 128 [ 778.042172][T21634] EXT4-fs: Ignoring removed nobh option [ 778.082115][T21633] loop1: detected capacity change from 0 to 128 [ 778.088778][T21633] vfat: Unknown parameter '00000000000000000003' [ 778.457609][T21641] loop1: detected capacity change from 0 to 128 [ 778.501846][T21641] EXT4-fs (loop1): unable to read superblock [ 778.559205][T21634] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 778.584146][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 778.584163][ T28] audit: type=1400 audit(2013.181:8905): avc: denied { write } for pid=21630 comm="syz.7.4481" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 778.626543][T21634] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4481'. [ 778.646218][T21634] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4481'. [ 778.666483][ T28] audit: type=1400 audit(2013.181:8906): avc: denied { add_name } for pid=21630 comm="syz.7.4481" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 778.690864][T21634] netlink: 11 bytes leftover after parsing attributes in process `syz.7.4481'. [ 778.740228][ T28] audit: type=1400 audit(2013.181:8907): avc: denied { create } for pid=21630 comm="syz.7.4481" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 778.765327][T21634] netlink: 'syz.7.4481': attribute type 2 has an invalid length. [ 778.785218][ T28] audit: type=1400 audit(2013.209:8908): avc: denied { read write open } for pid=21630 comm="syz.7.4481" path="/123/mnt/file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 778.822859][T21634] netlink: 'syz.7.4481': attribute type 3 has an invalid length. [ 778.871086][ T28] audit: type=1400 audit(2013.284:8909): avc: denied { map } for pid=21630 comm="syz.7.4481" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 778.894670][T21634] netlink: 11 bytes leftover after parsing attributes in process `syz.7.4481'. [ 778.913855][ T28] audit: type=1400 audit(2013.312:8910): avc: denied { map } for pid=21630 comm="syz.7.4481" path="/123/mnt/file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 778.937020][ T28] audit: type=1400 audit(2013.312:8911): avc: denied { execute } for pid=21630 comm="syz.7.4481" path="/123/mnt/file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 778.959490][ T28] audit: type=1400 audit(2013.349:8912): avc: denied { read } for pid=21651 comm="iou-wrk-21652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 778.978918][ T28] audit: type=1400 audit(2013.443:8913): avc: denied { bind } for pid=21639 comm="syz.1.4483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 778.997858][ T28] audit: type=1400 audit(2013.443:8914): avc: denied { name_bind } for pid=21639 comm="syz.1.4483" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 779.104775][T21661] macvlan2: entered allmulticast mode [ 779.113947][T21661] batadv0: entered allmulticast mode [ 779.120293][T21661] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 779.128626][T21661] batadv0: left allmulticast mode [ 779.142171][T21662] loop1: detected capacity change from 0 to 256 [ 779.154090][T21662] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 779.240663][T21667] : port 1(ip6gretap0) entered blocking state [ 779.246878][T21667] : port 1(ip6gretap0) entered disabled state [ 779.253128][T21667] ip6gretap0: entered allmulticast mode [ 779.259286][T21667] ip6gretap0: entered promiscuous mode [ 779.267326][T21667] ip6gretap0: left allmulticast mode [ 779.272704][T21667] ip6gretap0: left promiscuous mode [ 779.278119][T21667] : port 1(ip6gretap0) entered disabled state [ 779.354392][T21670] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4493'. [ 779.367421][T21670] netlink: 'syz.1.4493': attribute type 39 has an invalid length. [ 779.426352][T18681] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 779.658044][T21678] loop9: detected capacity change from 0 to 128 [ 779.675785][T21678] vfat: Unknown parameter '00000000000000000003' [ 780.006668][ C0] net_ratelimit: 14 callbacks suppressed [ 780.006715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.225986][T11160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.234283][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.242816][ T3530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.251088][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.563467][ T5544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.595024][T21688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63546 sclass=netlink_route_socket pid=21688 comm=syz.1.4498 [ 780.788930][T21697] loop9: detected capacity change from 0 to 4096 [ 780.803885][T21697] EXT4-fs (loop9): unsupported descriptor size 576 [ 781.080957][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.338673][ T3530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.347080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.397537][ T3530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.525076][T12173] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.535681][T12173] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.538499][T21730] netlink: 6040 bytes leftover after parsing attributes in process `syz.6.4501'. [ 781.547011][T12173] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.592999][T12173] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.086212][T21776] FAULT_INJECTION: forcing a failure. [ 782.086212][T21776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.099389][T21776] CPU: 0 UID: 0 PID: 21776 Comm: syz.9.4517 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 782.099459][T21776] Tainted: [W]=WARN [ 782.099469][T21776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 782.099487][T21776] Call Trace: [ 782.099496][T21776] [ 782.099565][T21776] __dump_stack+0x1d/0x30 [ 782.099687][T21776] dump_stack_lvl+0x95/0xd0 [ 782.099719][T21776] dump_stack+0x15/0x1b [ 782.099747][T21776] should_fail_ex+0x25e/0x270 [ 782.099787][T21776] should_fail+0xb/0x20 [ 782.099816][T21776] should_fail_usercopy+0x1a/0x20 [ 782.099917][T21776] _copy_to_user+0x20/0xa0 [ 782.099959][T21776] simple_read_from_buffer+0xb5/0x130 [ 782.099993][T21776] proc_fail_nth_read+0x10e/0x150 [ 782.100022][T21776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 782.100075][T21776] vfs_read+0x18e/0x7c0 [ 782.100150][T21776] ? __rcu_read_unlock+0x4e/0x70 [ 782.100258][T21776] ? __fget_files+0x184/0x1c0 [ 782.100291][T21776] ? mutex_lock+0x57/0x90 [ 782.100411][T21776] ksys_read+0xdc/0x1a0 [ 782.100481][T21776] __x64_sys_read+0x40/0x50 [ 782.100543][T21776] x64_sys_call+0x2886/0x3020 [ 782.100576][T21776] do_syscall_64+0x136/0x3c0 [ 782.100605][T21776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.100637][T21776] RIP: 0033:0x7fee2595d68e [ 782.100669][T21776] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 782.100696][T21776] RSP: 002b:00007fee243f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 782.100789][T21776] RAX: ffffffffffffffda RBX: 00007fee243f76c0 RCX: 00007fee2595d68e [ 782.100876][T21776] RDX: 000000000000000f RSI: 00007fee243f70a0 RDI: 0000000000000005 [ 782.100894][T21776] RBP: 00007fee243f7090 R08: 0000000000000000 R09: 0000000000000000 [ 782.100912][T21776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.100930][T21776] R13: 00007fee25c16038 R14: 00007fee25c15fa0 R15: 00007ffe154fa8b8 [ 782.100958][T21776] [ 782.553061][T21786] loop9: detected capacity change from 0 to 512 [ 782.571599][T21786] EXT4-fs: Ignoring removed nobh option [ 782.603014][T21786] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 782.615546][T21786] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 782.628294][T21786] EXT4-fs (loop9): orphan cleanup on readonly fs [ 782.635373][T21786] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #11: comm syz.9.4519: attempt to clear invalid blocks 1024 len 1 [ 782.648957][T21786] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 782.650412][T21786] EXT4-fs (loop9): Remounting filesystem read-only [ 782.659684][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 782.659725][ C0] EXT4-fs (loop9): initial error at time 2016: ext4_clear_blocks:876: inode 11 [ 782.659760][ C0] EXT4-fs (loop9): last error at time 2016: ext4_clear_blocks:876: inode 11 [ 782.695471][T21786] EXT4-fs (loop9): 1 truncate cleaned up [ 782.701879][T21786] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 782.924279][T21834] netlink: 'syz.1.4524': attribute type 1 has an invalid length. [ 783.021335][T10890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 783.179660][T21849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4529'. [ 783.315757][T21856] loop9: detected capacity change from 0 to 128 [ 783.360166][T21845] netlink: 'syz.7.4525': attribute type 29 has an invalid length. [ 783.382653][T21856] vfat: Unknown parameter '00000000000000000003' [ 783.700582][T21849] team0: Port device team_slave_0 removed [ 784.112064][ T28] kauditd_printk_skb: 168 callbacks suppressed [ 784.112084][ T28] audit: type=1400 audit(2018.354:9083): avc: denied { create } for pid=21863 comm="syz.7.4532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 784.261869][ T28] audit: type=1400 audit(2018.382:9084): avc: denied { read } for pid=21863 comm="syz.7.4532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 784.298300][T21870] loop9: detected capacity change from 0 to 512 [ 784.346795][T21870] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.368523][ T28] audit: type=1400 audit(2018.428:9085): avc: denied { name_bind } for pid=21860 comm="syz.1.4531" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 784.444821][ T28] audit: type=1400 audit(2018.457:9086): avc: denied { prog_run } for pid=21860 comm="syz.1.4531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 784.478967][T10890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.529428][ T28] audit: type=1400 audit(2018.606:9087): avc: denied { mount } for pid=21869 comm="syz.9.4534" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 784.562864][ T28] audit: type=1400 audit(2018.616:9088): avc: denied { create } for pid=21869 comm="syz.9.4534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 784.583091][ T28] audit: type=1400 audit(2018.616:9089): avc: denied { write } for pid=21869 comm="syz.9.4534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 784.607713][ T28] audit: type=1400 audit(2018.616:9090): avc: denied { read } for pid=21869 comm="syz.9.4534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 784.643168][ T28] audit: type=1400 audit(2018.840:9091): avc: denied { write } for pid=21876 comm="syz.9.4535" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 784.672845][ T28] audit: type=1400 audit(2018.840:9092): avc: denied { setopt } for pid=21876 comm="syz.9.4535" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 785.195614][T21895] loop7: detected capacity change from 0 to 512 [ 785.307035][T21895] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.4543: bad orphan inode 13 [ 785.378892][T21895] loop7: lost filesystem error report for type 5 error -117 [ 785.379798][T21895] ext4_test_bit(bit=12, block=4) = 1 [ 785.392895][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 785.392927][ C1] EXT4-fs (loop7): initial error at time 2019: ext4_orphan_get:1425 [ 785.393002][ C1] EXT4-fs (loop7): last error at time 2019: ext4_orphan_get:1425 [ 785.428738][T21895] is_bad_inode(inode)=0 [ 785.433720][T21895] NEXT_ORPHAN(inode)=0 [ 785.438654][T21895] max_ino=32 [ 785.442276][T21895] i_nlink=1 [ 785.491192][T21895] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.512628][ T3530] net_ratelimit: 20 callbacks suppressed [ 785.512654][ T3530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.526706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.729005][T21906] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4546'. [ 785.763438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.805710][ T5551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.814730][T18681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.184612][T21932] loop9: detected capacity change from 0 to 1024 [ 786.248063][T21932] EXT4-fs error (device loop9): ext4_acquire_dquot:7032: comm syz.9.4557: Failed to acquire dquot type 0 [ 786.268462][T21932] loop9: lost filesystem error report for type 5 error -5 [ 786.269377][T21932] EXT4-fs (loop9): 1 truncate cleaned up [ 786.276601][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 786.276625][ C0] EXT4-fs (loop9): initial error at time 2020: ext4_acquire_dquot:7032 [ 786.276656][ C0] EXT4-fs (loop9): last error at time 2020: ext4_acquire_dquot:7032 [ 786.316876][T21932] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.433479][ T3530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.441815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.640178][ T3530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.648541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.896629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.910648][T21956] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 787.098516][T10890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.149929][T21970] loop7: detected capacity change from 0 to 512 [ 787.156927][T21970] EXT4-fs: Ignoring removed nobh option [ 787.182698][T21970] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 787.292144][ T5550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.325391][T21970] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 787.338165][T21970] EXT4-fs (loop7): orphan cleanup on readonly fs [ 787.362675][T21970] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.4567: attempt to clear invalid blocks 1024 len 1 [ 787.425889][T21970] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 787.429273][T21970] EXT4-fs (loop7): Remounting filesystem read-only [ 787.438510][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 787.438536][ C1] EXT4-fs (loop7): initial error at time 2021: ext4_clear_blocks:876: inode 11 [ 787.438574][ C1] EXT4-fs (loop7): last error at time 2021: ext4_clear_blocks:876: inode 11 [ 787.518892][T21970] EXT4-fs (loop7): 1 truncate cleaned up [ 787.525167][T21970] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 787.748736][T21976] loop9: detected capacity change from 0 to 128 [ 787.777220][T21976] vfat: Unknown parameter '18446744073709551615' [ 787.781889][T18681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 787.976274][T21980] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4569'. [ 788.036721][T21980] bridge0: port 3(vlan2) entered blocking state [ 788.054513][T21980] bridge0: port 3(vlan2) entered disabled state [ 788.097393][T21980] vlan2: entered allmulticast mode [ 788.108025][T21980] geneve0: entered allmulticast mode [ 788.152552][T21980] vlan2: entered promiscuous mode [ 788.177504][T21980] geneve0: entered promiscuous mode [ 789.007404][T21995] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4573'. [ 789.045479][T21995] netlink: 'syz.7.4573': attribute type 12 has an invalid length. [ 789.121465][T21987] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4572'. [ 789.130837][T21987] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 789.476762][ T28] kauditd_printk_skb: 235 callbacks suppressed [ 789.476781][ T28] audit: type=1400 audit(2023.367:9326): avc: denied { write } for pid=22007 comm="syz.1.4577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 789.660565][T22014] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4578'. [ 789.672956][ T28] audit: type=1400 audit(2023.545:9327): avc: denied { bind } for pid=22011 comm="syz.1.4578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 789.709267][ T28] audit: type=1400 audit(2023.573:9328): avc: denied { setopt } for pid=22011 comm="syz.1.4578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 789.780898][ T28] audit: type=1400 audit(2023.639:9329): avc: denied { execute } for pid=22011 comm="syz.1.4578" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=62822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 789.937469][T22015] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4578'. [ 789.963362][T22015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4578'. [ 790.073872][T22015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4578'. [ 790.432402][ T28] audit: type=1400 audit(2024.256:9330): avc: denied { connect } for pid=22020 comm="syz.9.4580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 790.608313][ T28] audit: type=1400 audit(2024.434:9331): avc: denied { create } for pid=22022 comm="syz.9.4581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 790.777640][ T28] audit: type=1400 audit(2024.452:9332): avc: denied { ioctl } for pid=22022 comm="syz.9.4581" path="socket:[62854]" dev="sockfs" ino=62854 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 790.921861][T22026] loop1: detected capacity change from 0 to 128 [ 790.941360][ T28] audit: type=1400 audit(2024.546:9333): avc: denied { create } for pid=22022 comm="syz.9.4581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 790.983614][T22026] vfat: Unknown parameter '18446744073709551615' [ 791.020104][ T28] audit: type=1400 audit(2024.546:9334): avc: denied { getopt } for pid=22022 comm="syz.9.4581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 791.141086][ T3552] net_ratelimit: 10 callbacks suppressed [ 791.141110][ T3552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.155057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.163327][ T3530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.171564][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.980920][T12194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.989654][ T28] audit: type=1400 audit(2024.555:9335): avc: denied { getopt } for pid=22022 comm="syz.9.4581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 792.203331][ T5550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.347660][ T3530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.355963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.370286][ T3356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.378602][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.528769][T22043] loop1: detected capacity change from 0 to 2048 [ 792.768538][T22048] lo speed is unknown, defaulting to 1000 [ 792.906449][T22048] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.913527][T22048] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.920708][T22048] bridge_slave_0: entered allmulticast mode [ 792.927205][T22048] bridge_slave_0: entered promiscuous mode [ 792.934538][T22048] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.945452][T22048] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.953361][T22048] bridge_slave_1: entered allmulticast mode [ 792.960111][T22048] bridge_slave_1: entered promiscuous mode [ 792.983565][T22040] tipc: Enabled bearer , priority 10 [ 792.992335][T22048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.004227][T22048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.028499][T22048] team0: Port device team_slave_0 added [ 793.035397][T22048] team0: Port device team_slave_1 added [ 793.049000][T22043] GPT:first_usable_lbas don't match. [ 793.058220][T22043] GPT:34 != 290 [ 793.058875][T22048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.063727][T22043] GPT: Use GNU Parted to correct GPT errors. [ 793.069959][T22048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.080199][T22043] loop1: p1 p2 p3 [ 793.102305][T22048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.116491][T22048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.123668][T22048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.149797][T22048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.259111][T22048] hsr_slave_0: entered promiscuous mode [ 793.267100][T22048] hsr_slave_1: entered promiscuous mode [ 793.273758][T22048] debugfs: 'hsr0' already exists in 'hsr' [ 793.280410][T22048] Cannot create hsr debugfs directory [ 793.325046][T22074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22074 comm=syz.1.4595 [ 793.460597][T22076] loop9: detected capacity change from 0 to 128 [ 793.505724][T22076] vfat: Unknown parameter '18446744073709551615' [ 793.717329][T22088] loop9: detected capacity change from 0 to 164 [ 793.817688][ T96] team0: Port device bond0 removed [ 793.824594][ T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.839725][ T96] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.849133][ T96] bond0 (unregistering): Released all slaves [ 793.858072][ T96] bond1 (unregistering): (slave veth3): Releasing backup interface [ 793.867824][ T96] bond1 (unregistering): Released all slaves [ 793.970659][ T96] hsr_slave_0: left promiscuous mode [ 793.978134][ T96] hsr_slave_1: left promiscuous mode [ 793.983932][ T96] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.993511][ T96] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.063762][ T96] team0 (unregistering): Port device team_slave_1 removed [ 794.074701][ T96] team0 (unregistering): Port device team_slave_0 removed [ 794.116964][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 794.228923][T22114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4603'. [ 794.716241][T22148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4606'. [ 794.730473][T22148] team1: entered promiscuous mode [ 794.735643][T22148] team1: entered allmulticast mode [ 794.741016][T22148] 8021q: adding VLAN 0 to HW filter on device team1 [ 794.826067][T22153] loop9: detected capacity change from 0 to 128 [ 794.832906][T22153] vfat: Unknown parameter '00000000000000000003' [ 794.991177][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 794.991263][ T28] audit: type=1400 audit(2028.512:9392): avc: denied { write } for pid=22151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.020505][ T28] audit: type=1400 audit(2028.531:9393): avc: denied { write } for pid=22165 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.225150][ T96] IPVS: stop unused estimator thread 0... [ 795.275809][ T28] audit: type=1400 audit(2028.690:9394): avc: denied { create } for pid=22149 comm="syz.1.4607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 795.388080][ T28] audit: type=1400 audit(2028.690:9395): avc: denied { block_suspend } for pid=22149 comm="syz.1.4607" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 795.443134][ T28] audit: type=1400 audit(2028.783:9396): avc: denied { create } for pid=22149 comm="syz.1.4607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 795.843725][ T28] audit: type=1400 audit(2029.317:9397): avc: denied { write } for pid=22173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.973068][ T28] audit: type=1400 audit(2029.438:9398): avc: denied { write } for pid=22184 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.055182][T22191] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4612'. [ 796.077259][ T28] audit: type=1400 audit(2029.522:9399): avc: denied { create } for pid=22190 comm="syz.9.4610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 796.118528][T22192] loop9: detected capacity change from 0 to 512 [ 796.141498][T22192] EXT4-fs: Ignoring removed i_version option [ 796.148157][ T28] audit: type=1400 audit(2029.532:9400): avc: denied { create } for pid=22190 comm="syz.9.4610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 796.175780][T22192] EXT4-fs: Ignoring removed bh option [ 796.196712][ T28] audit: type=1326 audit(2029.541:9401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22190 comm="syz.9.4610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2599ce59 code=0x7ffc0000 [ 796.227628][T22192] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.436955][T22201] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4615'. [ 796.499177][T22192] infiniband syz1: set down [ 796.509413][T22203] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4616'. [ 796.518777][T22192] infiniband syz1: added bond0 [ 796.538196][T22192] RDS/IB: syz1: added [ 796.548496][T22192] smc: adding ib device syz1 with port count 1 [ 796.555152][T22192] smc: ib device syz1 port 1 has no pnetid [ 796.704063][T22048] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 796.730585][T22048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 796.755610][T22048] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 796.783723][T22048] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 796.809798][T22048] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 796.836577][T22048] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 796.860482][T22048] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 796.878003][T22048] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 796.969771][T22218] FAULT_INJECTION: forcing a failure. [ 796.969771][T22218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.000322][T22218] CPU: 1 UID: 0 PID: 22218 Comm: syz.1.4621 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 797.000365][T22218] Tainted: [W]=WARN [ 797.000376][T22218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 797.000393][T22218] Call Trace: [ 797.000451][T22218] [ 797.000461][T22218] __dump_stack+0x1d/0x30 [ 797.000492][T22218] dump_stack_lvl+0x95/0xd0 [ 797.000515][T22218] dump_stack+0x15/0x1b [ 797.000590][T22218] should_fail_ex+0x25e/0x270 [ 797.000618][T22218] should_fail+0xb/0x20 [ 797.000674][T22218] should_fail_usercopy+0x1a/0x20 [ 797.000704][T22218] _copy_to_user+0x20/0xa0 [ 797.000740][T22218] simple_read_from_buffer+0xb5/0x130 [ 797.000834][T22218] proc_fail_nth_read+0x10e/0x150 [ 797.000859][T22218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 797.000952][T22218] vfs_read+0x18e/0x7c0 [ 797.000986][T22218] ? __rcu_read_unlock+0x4e/0x70 [ 797.001014][T22218] ? __fget_files+0x184/0x1c0 [ 797.001039][T22218] ? mutex_lock+0x57/0x90 [ 797.001110][T22218] ksys_read+0xdc/0x1a0 [ 797.001152][T22218] __x64_sys_read+0x40/0x50 [ 797.001187][T22218] x64_sys_call+0x2886/0x3020 [ 797.001241][T22218] do_syscall_64+0x136/0x3c0 [ 797.001314][T22218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.001338][T22218] RIP: 0033:0x7fe4777fd68e [ 797.001356][T22218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 797.001376][T22218] RSP: 002b:00007fe476296fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 797.001482][T22218] RAX: ffffffffffffffda RBX: 00007fe4762976c0 RCX: 00007fe4777fd68e [ 797.001497][T22218] RDX: 000000000000000f RSI: 00007fe4762970a0 RDI: 0000000000000005 [ 797.001578][T22218] RBP: 00007fe476297090 R08: 0000000000000000 R09: 0000000000000000 [ 797.001593][T22218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.001680][T22218] R13: 00007fe477ab6038 R14: 00007fe477ab5fa0 R15: 00007ffcadd4b678 [ 797.001703][T22218] [ 797.231247][T22048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.238634][T16633] net_ratelimit: 22 callbacks suppressed [ 797.238654][T16633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.253380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.276711][T22048] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.286815][T12194] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.293952][T12194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.459671][T12194] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.466840][T12194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.501708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.106959][T22228] loop1: detected capacity change from 0 to 512 [ 798.134227][T22228] EXT4-fs: inline encryption not supported [ 798.156934][T22228] ext4: Bad value for 'journal_ioprio' [ 798.264589][T22234] loop1: detected capacity change from 0 to 512 [ 798.280173][T22234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 798.446690][T16633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.454983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.477138][T10890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.613718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.640526][T22245] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.4623: Unimplemented hash flags: 0x0001 [ 798.653002][T22245] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4623: Corrupt directory, running e2fsck is recommended [ 799.061153][T22048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.167789][T22048] veth0_vlan: entered promiscuous mode [ 799.232477][ T5551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.253885][T22048] veth1_vlan: entered promiscuous mode [ 799.263214][T18654] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.309120][T22269] loop9: detected capacity change from 0 to 512 [ 799.315627][T22048] veth0_macvtap: entered promiscuous mode [ 799.323493][T22048] veth1_macvtap: entered promiscuous mode [ 799.331308][T22269] EXT4-fs: Ignoring removed oldalloc option [ 799.356179][T22269] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 799.370491][T22048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.375906][T22269] EXT4-fs (loop9): orphan cleanup on readonly fs [ 799.382132][T22048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.392955][T22269] EXT4-fs warning (device loop9): ext4_enable_quotas:7267: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 799.416060][T22269] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 799.444000][T22269] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #13: comm syz.9.4631: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 799.462638][T22269] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 799.462785][T22269] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.4631: couldn't read orphan inode 13 (err -117) [ 799.472010][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 799.472035][ C1] EXT4-fs (loop9): last error at time 2032: ext4_ext_check_inode:521: inode 13 [ 799.501939][T22269] loop9: lost filesystem error report for type 5 error -117 [ 799.502522][T22269] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 799.523080][T22274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.540895][T22274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.564562][T22269] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 799.574299][ T3530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.611097][ T4039] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.620412][T22269] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 799.630802][ T4039] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.640150][ T4039] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.649301][T22269] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2840c19c, mo2=0002] [ 799.657818][ T4039] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.667909][T22269] System zones: 0-2, 18-18, 34-34 [ 799.673164][T22269] EXT4-fs warning (device loop9): ext4_enable_quotas:7267: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 799.689988][T22269] batadv_slave_0: entered promiscuous mode [ 799.811843][T22284] loop7: detected capacity change from 0 to 512 [ 799.905159][T22284] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.026656][T22268] batadv_slave_0: left promiscuous mode [ 800.585509][T10890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.734341][ T28] kauditd_printk_skb: 217 callbacks suppressed [ 801.734356][ T28] audit: type=1400 audit(2035.798:9619): avc: denied { write } for pid=22299 comm="syz.1.4639" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 801.955259][T18681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.009473][ T28] audit: type=1400 audit(2036.078:9620): avc: denied { ioctl } for pid=22299 comm="syz.1.4639" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 802.138301][ T28] audit: type=1400 audit(2036.209:9621): avc: denied { name_bind } for pid=22312 comm="syz.6.4643" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 802.199331][ T28] audit: type=1400 audit(2036.237:9622): avc: denied { mount } for pid=22312 comm="syz.6.4643" name="/" dev="hugetlbfs" ino=64047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 802.221934][ T28] audit: type=1400 audit(2036.247:9623): avc: denied { cpu } for pid=22312 comm="syz.6.4643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 802.398903][ T28] audit: type=1326 audit(2036.462:9624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.1.4646" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47783ce59 code=0x7ffc0000 [ 802.424104][ T28] audit: type=1326 audit(2036.462:9625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.1.4646" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47783ce59 code=0x7ffc0000 [ 802.458059][ T28] audit: type=1326 audit(2036.462:9626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.1.4646" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47783ce59 code=0x7ffc0000 [ 802.483207][ T28] audit: type=1326 audit(2036.462:9627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.1.4646" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47783ce59 code=0x7ffc0000 [ 802.581544][ T28] audit: type=1326 audit(2036.462:9628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.1.4646" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe47783ce59 code=0x7ffc0000 [ 802.677964][ T3530] net_ratelimit: 5 callbacks suppressed [ 802.677980][ T3530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.691969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.408397][ T5544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.579100][T22330] loop9: detected capacity change from 0 to 128 [ 803.596259][T22330] vfat: Unknown parameter '00000000000000000003' [ 804.078820][T16633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.087151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.345195][T12194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.840993][T22366] loop9: detected capacity change from 0 to 128 [ 804.863478][T22366] vfat: Unknown parameter '00000000000000000003' [ 805.201096][T16633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.209413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.455526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.558918][T22375] loop9: detected capacity change from 0 to 512 [ 805.592686][T22375] EXT4-fs (loop9): corrupt root inode, run e2fsck [ 805.603987][T22375] EXT4-fs (loop9): mount failed [ 805.860789][T22400] loop7: detected capacity change from 0 to 512 [ 805.871278][T22400] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 805.882692][T22400] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 805.890617][T22400] EXT4-fs (loop7): orphan cleanup on readonly fs [ 805.897921][T22400] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.4661: Allocating blocks 41-42 which overlap fs metadata [ 805.911690][T22400] loop7: lost filesystem error report for type 5 error -117 [ 805.915443][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 805.930637][ C0] EXT4-fs (loop7): initial error at time 2039: ext4_mb_mark_diskspace_used:4222 [ 805.940203][ C0] EXT4-fs (loop7): last error at time 2039: ext4_mb_mark_diskspace_used:4222 [ 805.952867][T22400] EXT4-fs (loop7): Remounting filesystem read-only [ 805.959591][T22400] EXT4-fs (loop7): 1 truncate cleaned up [ 806.567385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.281102][T22400] EXT4-fs (loop7): pa ffff888100494d20: logic 1, phys. 41, len 23 [ 807.483250][T22400] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 807.904648][ T28] kauditd_printk_skb: 341 callbacks suppressed [ 807.904668][ T28] audit: type=1400 audit(2041.606:9968): avc: denied { create } for pid=22419 comm="syz.0.4676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 807.972761][T18681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.984031][ T28] audit: type=1400 audit(2041.644:9969): avc: denied { remount } for pid=22419 comm="syz.0.4676" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 808.080406][ T28] audit: type=1400 audit(2041.728:9970): avc: denied { mount } for pid=22422 comm="syz.1.4678" name="/" dev="ramfs" ino=64536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 808.147283][ T28] audit: type=1400 audit(2041.822:9971): avc: denied { read } for pid=22422 comm="syz.1.4678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 808.232255][T22433] loop7: detected capacity change from 0 to 4096 [ 808.281737][T22433] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.287662][ T28] audit: type=1400 audit(2041.962:9972): avc: denied { associate } for pid=22422 comm="syz.1.4678" name="cpuset.effective_cpus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 808.316388][T22443] loop9: detected capacity change from 0 to 512 [ 808.351171][T22443] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.4684: inode has both inline data and extents flags [ 808.364345][T22443] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 808.367569][T22443] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.4684: couldn't read orphan inode 15 (err -117) [ 808.388809][T22443] loop9: lost filesystem error report for type 5 error -117 [ 808.389514][T22443] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.411667][T22448] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4683'. [ 808.421001][ T28] audit: type=1400 audit(2042.084:9973): avc: denied { write } for pid=22434 comm="syz.9.4684" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 808.448527][ T28] audit: type=1400 audit(2042.084:9974): avc: denied { lock } for pid=22434 comm="syz.9.4684" path="/519/file0/file1" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 808.471032][ T28] audit: type=1400 audit(2042.084:9975): avc: denied { write } for pid=22434 comm="syz.9.4684" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 808.492582][ T28] audit: type=1400 audit(2042.084:9976): avc: denied { link } for pid=22434 comm="syz.9.4684" name="file1" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 808.515537][ T28] audit: type=1400 audit(2042.084:9977): avc: denied { ioctl } for pid=22432 comm="syz.7.4683" path="socket:[64568]" dev="sockfs" ino=64568 ioctlcmd=0x5880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 808.677636][T22452] loop1: detected capacity change from 0 to 512 [ 808.695595][T22452] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 808.720911][T22452] EXT4-fs: error: could not find journal device path [ 808.791008][ C0] net_ratelimit: 6 callbacks suppressed [ 808.791026][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.806849][T22456] loop1: detected capacity change from 0 to 512 [ 808.818861][T22456] EXT4-fs: Ignoring removed nobh option [ 808.827704][T22456] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 808.843709][T22456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 808.852753][T22456] EXT4-fs (loop1): orphan cleanup on readonly fs [ 808.860667][T22456] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.4689: attempt to clear invalid blocks 1024 len 1 [ 808.874900][T22456] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 808.876492][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 808.891931][T22456] EXT4-fs (loop1): Remounting filesystem read-only [ 808.892267][ C1] EXT4-fs (loop1): initial error at time 2042: ext4_clear_blocks:876: inode 11 [ 808.907718][ C1] EXT4-fs (loop1): last error at time 2042: ext4_clear_blocks:876: inode 11 [ 808.918279][T22456] EXT4-fs (loop1): 1 truncate cleaned up [ 808.924605][T22456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 808.994848][T18654] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 809.073286][T22461] loop1: detected capacity change from 0 to 4096 [ 809.102440][T10890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.120404][T22461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 809.133610][T16633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.141828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.166979][T22464] netlink: 'syz.9.4692': attribute type 17 has an invalid length. [ 809.175591][T22464] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4692'. [ 809.191721][T22464] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4692'. [ 809.235924][T18681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.299470][T22470] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4695'. [ 809.378824][T22468] loop7: detected capacity change from 0 to 512 [ 809.398290][T22468] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 809.426750][T22468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 809.479284][T22468] System zones: 1-12 [ 809.506860][T22468] EXT4-fs (loop7): orphan cleanup on readonly fs [ 809.550415][T22468] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4694: bg 0: block 361: padding at end of block bitmap is not set [ 809.571195][T22468] loop7: lost filesystem error report for type 5 error -117 [ 809.571489][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 809.585459][ C1] EXT4-fs (loop7): initial error at time 2043: ext4_validate_block_bitmap:441 [ 809.594555][ C1] EXT4-fs (loop7): last error at time 2043: ext4_validate_block_bitmap:441 [ 809.605302][T22468] EXT4-fs (loop7): Remounting filesystem read-only [ 809.628328][T22468] EXT4-fs (loop7): 1 truncate cleaned up [ 809.644269][T22468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 809.712421][T18681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 809.903445][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.014562][T22510] netlink: 'syz.0.4708': attribute type 39 has an invalid length. [ 810.053453][T22512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.062081][T22512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.101420][T22461] ================================================================== [ 810.109549][T22461] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 810.116708][T22461] [ 810.117119][T22513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4708'. [ 810.119061][T22461] write to 0xffff8881004bc254 of 4 bytes by task 22472 on cpu 0: [ 810.135729][T22461] xas_set_mark+0x12b/0x140 [ 810.140285][T22461] __folio_start_writeback+0x16a/0x350 [ 810.145815][T22461] ext4_bio_write_folio+0x5a2/0xa10 [ 810.151066][T22461] mpage_process_page_bufs+0x487/0x600 [ 810.156590][T22461] mpage_prepare_extent_to_map+0x79e/0xc00 [ 810.162445][T22461] ext4_do_writepages+0x6ec/0x2720 [ 810.167608][T22461] ext4_writepages+0x18f/0x300 [ 810.172412][T22461] do_writepages+0x1b9/0x300 [ 810.177044][T22461] file_write_and_wait_range+0x178/0x2f0 [ 810.182732][T22461] mmb_fsync_noflush+0x48/0x140 [ 810.187634][T22461] ext4_sync_file+0x1f2/0x6d0 [ 810.192342][T22461] vfs_fsync_range+0xc5/0xe0 [ 810.196977][T22461] ext4_buffered_write_iter+0x426/0x480 [ 810.202564][T22461] ext4_file_write_iter+0x38e/0xef0 [ 810.207800][T22461] iter_file_splice_write+0x6a0/0xa60 [ 810.213216][T22461] direct_splice_actor+0x156/0x280 [ 810.218370][T22461] splice_direct_to_actor+0x2f9/0x680 [ 810.223786][T22461] do_splice_direct+0x119/0x1a0 [ 810.228678][T22461] do_sendfile+0x37d/0x640 [ 810.233139][T22461] __x64_sys_sendfile64+0x105/0x150 [ 810.238380][T22461] x64_sys_call+0x2dc4/0x3020 [ 810.243099][T22461] do_syscall_64+0x136/0x3c0 [ 810.247723][T22461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.253653][T22461] [ 810.256007][T22461] read to 0xffff8881004bc254 of 4 bytes by task 22461 on cpu 1: [ 810.263666][T22461] xas_find_marked+0x602/0x650 [ 810.268468][T22461] filemap_get_folios_tag+0xf7/0x400 [ 810.273802][T22461] mpage_prepare_extent_to_map+0x2f8/0xc00 [ 810.279683][T22461] ext4_do_writepages+0x6ec/0x2720 [ 810.284829][T22461] ext4_writepages+0x18f/0x300 [ 810.289626][T22461] do_writepages+0x1b9/0x300 [ 810.294265][T22461] file_write_and_wait_range+0x178/0x2f0 [ 810.299957][T22461] mmb_fsync_noflush+0x48/0x140 [ 810.304862][T22461] ext4_sync_file+0x1f2/0x6d0 [ 810.309590][T22461] vfs_fsync_range+0xc5/0xe0 [ 810.314236][T22461] ext4_buffered_write_iter+0x426/0x480 [ 810.319843][T22461] ext4_file_write_iter+0x38e/0xef0 [ 810.325076][T22461] iter_file_splice_write+0x6a0/0xa60 [ 810.330489][T22461] direct_splice_actor+0x156/0x280 [ 810.335641][T22461] splice_direct_to_actor+0x2f9/0x680 [ 810.341039][T22461] do_splice_direct+0x119/0x1a0 [ 810.345932][T22461] do_sendfile+0x37d/0x640 [ 810.350411][T22461] __x64_sys_sendfile64+0x105/0x150 [ 810.355692][T22461] x64_sys_call+0x2dc4/0x3020 [ 810.360414][T22461] do_syscall_64+0x136/0x3c0 [ 810.365048][T22461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.370985][T22461] [ 810.373345][T22461] value changed: 0x0a000021 -> 0x04000021 [ 810.379087][T22461] [ 810.381434][T22461] Reported by Kernel Concurrency Sanitizer on: [ 810.387632][T22461] CPU: 1 UID: 0 PID: 22461 Comm: syz.1.4691 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 810.398632][T22461] Tainted: [W]=WARN [ 810.402454][T22461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 810.412550][T22461] ================================================================== [ 810.447472][ T3552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.455859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.537433][T18654] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.758322][ T5554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.014737][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.528060][ T3552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.536545][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.863473][ T3552] net_ratelimit: 7 callbacks suppressed [ 814.863498][ T3552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.877373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.975696][T15038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.986136][T16633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.994426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.086922][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.095225][T16633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.104070][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.258681][ T5544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.198753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog