last executing test programs: 3.864632817s ago: executing program 1 (id=74): creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb2", 0xb) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fdatasync(r2) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.30762065s ago: executing program 3 (id=77): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x300, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}}, 0x20}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r2 = fcntl$dupfd(r1, 0x0, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 3.145658321s ago: executing program 3 (id=78): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) 3.049206982s ago: executing program 4 (id=80): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 2.980758932s ago: executing program 4 (id=81): io_setup(0x8f0, &(0x7f0000002400)) 2.851749533s ago: executing program 4 (id=82): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$hidraw(0x0, 0x9, 0x4b442) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x110) bind$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @local, @mcast2, {[], {0x2, 0xe22, 0x8}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3ee, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000004340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}, @NFT_MSG_DELSET={0x110, 0xb, 0xa, 0x807, 0x0, 0x0, {0x9, 0x0, 0x3}, [@NFTA_SET_DESC={0x4}, @NFTA_SET_EXPRESSIONS={0xb8, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_TYPE={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3c}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x1324, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1310, 0x3, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_KEY_END={0xd8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "f49f44f81841ab7476dd2a781aac2da44b326c9e8fcc2c9dea860cf869c425bdd2706ce5a91708591e977f68cb029385ec3aba2bf6b46d5d0d1d55943312155b204b30d7afcd27fc143d96b4fc4228dc21d31a8a66d84432e29900b64f1946533920a5c1e7e5c2cb74301c9a5d22c5d436a9e28a8bee106d1c045cc09864018804dfcf8c0008d6eb1db32a4c56f112f893972f1622fd827274a4a90575ac843f60e54412d86481cf2981eed1fa2e3bc6"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf, 0x1, "6806d20d9a3fe7250d62e9"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @reject={{0xb}, @void}}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}, {0x10ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_ELEM_KEY_END={0xf30, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xee4, 0x1, "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"}, @NFTA_DATA_VALUE={0x47, 0x1, "90a586d7165d2290965cfd16366395a9fd9d7b36cf419b5580af724a0402b64f0e81c43010cb7143b01ecfd55e23a8b8cf06b2df5fd55315ec3bc149d4e0d4dbb8a97f"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xcc, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2dc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x101}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x19, 0x6, 0x1, 0x0, "1c842f9b8b096fbc3d38cb91ec5c98ed690e956e41"}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0x6d, 0x6, 0x1, 0x0, "af03fc5ce109609705425e94e3768e2114a42aa043380c4c9022c4f173260a11d96b0ee615e121ab3b8e4520d2137c5708569f187760b1be74d578722db693ac0b1cc1c8a457389428aafdcc9ffb2097dc4725416df002faac81d70a12cca543096e041be5d434da63"}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_KEY_END={0xc4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xa7, 0x1, "69d2b114ca3c020abae2c9da77651a7a43376da133e22f579442e8ea7bda734e12a4b92a8bb33c3688485e2a200ada3287a50bebeaf488dc50315e0500a427830d0f2206c3547ebd571f767f151d4be5b165070d81d5576113731d850da72ca8fa170aa5e49750925ff57cc3b7c73bf2fc1faf6a1dd2796254ce27a11a9f6dacd817c36946359d26221a17d1fe7d4833d027cc61dedc639401025e05349ea08ecbbabe"}]}, @NFTA_SET_ELEM_KEY_END={0x88, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xd, 0x1, "f7c0834dc9beb66f4d"}, @NFTA_DATA_VALUE={0x69, 0x1, "e448b046bebbed95e52f06c772c016998de2deba5e385f6e00da7dd6ea1561e6d6f730f402146ecc4b63c2e356d9d7558807281256d025ac532a6ab718849ed43570656f94e996c2c6b3bd2c47e452b2bfc1a6356a3c6c5abbe63a021ae6216cfa402fb887"}, @NFTA_DATA_VALUE={0x4}]}]}]}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x831}, @NFTA_SET_EXPR={0x50, 0x11, 0x0, 0x1, @dup={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1544}, 0x1, 0x0, 0x0, 0xc000}, 0xc8010) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x34, 0x22048800, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27) 2.450656415s ago: executing program 4 (id=84): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$hidraw(0x0, 0x9, 0x4b442) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x110) bind$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @local, @mcast2, {[], {0x2, 0xe22, 0x8}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3ee, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000004340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}, @NFT_MSG_DELSET={0x110, 0xb, 0xa, 0x807, 0x0, 0x0, {0x9, 0x0, 0x3}, [@NFTA_SET_DESC={0x4}, @NFTA_SET_EXPRESSIONS={0xb8, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_TYPE={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3c}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x1324, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1310, 0x3, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_KEY_END={0xd8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "f49f44f81841ab7476dd2a781aac2da44b326c9e8fcc2c9dea860cf869c425bdd2706ce5a91708591e977f68cb029385ec3aba2bf6b46d5d0d1d55943312155b204b30d7afcd27fc143d96b4fc4228dc21d31a8a66d84432e29900b64f1946533920a5c1e7e5c2cb74301c9a5d22c5d436a9e28a8bee106d1c045cc09864018804dfcf8c0008d6eb1db32a4c56f112f893972f1622fd827274a4a90575ac843f60e54412d86481cf2981eed1fa2e3bc6"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf, 0x1, "6806d20d9a3fe7250d62e9"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @reject={{0xb}, @void}}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}, {0x10ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_ELEM_KEY_END={0xf30, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xee4, 0x1, "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"}, @NFTA_DATA_VALUE={0x47, 0x1, "90a586d7165d2290965cfd16366395a9fd9d7b36cf419b5580af724a0402b64f0e81c43010cb7143b01ecfd55e23a8b8cf06b2df5fd55315ec3bc149d4e0d4dbb8a97f"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xcc, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2dc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x101}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x19, 0x6, 0x1, 0x0, "1c842f9b8b096fbc3d38cb91ec5c98ed690e956e41"}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0x6d, 0x6, 0x1, 0x0, "af03fc5ce109609705425e94e3768e2114a42aa043380c4c9022c4f173260a11d96b0ee615e121ab3b8e4520d2137c5708569f187760b1be74d578722db693ac0b1cc1c8a457389428aafdcc9ffb2097dc4725416df002faac81d70a12cca543096e041be5d434da63"}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_KEY_END={0xc4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xa7, 0x1, "69d2b114ca3c020abae2c9da77651a7a43376da133e22f579442e8ea7bda734e12a4b92a8bb33c3688485e2a200ada3287a50bebeaf488dc50315e0500a427830d0f2206c3547ebd571f767f151d4be5b165070d81d5576113731d850da72ca8fa170aa5e49750925ff57cc3b7c73bf2fc1faf6a1dd2796254ce27a11a9f6dacd817c36946359d26221a17d1fe7d4833d027cc61dedc639401025e05349ea08ecbbabe"}]}, @NFTA_SET_ELEM_KEY_END={0x88, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xd, 0x1, "f7c0834dc9beb66f4d"}, @NFTA_DATA_VALUE={0x69, 0x1, "e448b046bebbed95e52f06c772c016998de2deba5e385f6e00da7dd6ea1561e6d6f730f402146ecc4b63c2e356d9d7558807281256d025ac532a6ab718849ed43570656f94e996c2c6b3bd2c47e452b2bfc1a6356a3c6c5abbe63a021ae6216cfa402fb887"}, @NFTA_DATA_VALUE={0x4}]}]}]}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x831}, @NFTA_SET_EXPR={0x50, 0x11, 0x0, 0x1, @dup={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1544}, 0x1, 0x0, 0x0, 0xc000}, 0xc8010) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x34, 0x22048800, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) 2.085213367s ago: executing program 3 (id=88): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x2, 0x6, 0x7189e472, 0xa000, 0x1, 0x1000, '\x00', r0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x0, @value=r1}, 0x50) r2 = epoll_create(0xc000) epoll_pwait2(r2, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x9]}, 0x8) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000002c0)={0x60, 0x1, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x8, &(0x7f0000000200)=[{0x96, 0x0, 0x4}, {0xbb1e, 0x7, 0xfffffffffffffff9}, {0x19f7, 0xb51, 0x3}, {0x4, 0x8}, {0x6, 0x3}, {0x5, 0x3}], 0x6, 0xffffffff, 0x2, 0x9, 0x9, 0x67}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)=0x0) syz_pidfd_open(r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x10100, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000400)={0x60, 0x1, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2, &(0x7f00000003c0)=[{0x3, 0x3, 0x2}, {0x0, 0xfffffffffffffff9, 0xe79}], 0x2, 0x6f07, 0x40, 0x2, 0x64, 0x42}) timer_create(0x0, &(0x7f0000000540)={0x0, 0x28, 0x0, @thr={&(0x7f0000000480)="0fb91bb63dacf315a0996c6645331849ecee7462a964921d9e7c06c1f7771b924d42e1bf56b1672f5e0349f9bc6264405b4dab6aff06c2489a37ce172a42acdb665c2f51c96e80e1488297276e0eb26fe6e6968c07189be1019e946da2", &(0x7f0000000500)="2d81a8343f51d3a5daf65b8006c046663c2b6ca6fd613ffdd9b39cfb84c4c4ff"}}, &(0x7f0000000580)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/fscaps', 0x300, 0x4) setsockopt$inet6_int(r6, 0x29, 0x23, &(0x7f0000000600)=0x7fffffff, 0x4) copy_file_range(r1, &(0x7f0000000640)=0x2, r6, &(0x7f0000000680)=0x7, 0xc9, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), r5) timer_create(0x5, &(0x7f0000000800)={0x0, 0x1, 0x1, @thr={&(0x7f0000000700)="bccc3c71970be749b49fa0c2ecfba2ae067f0adc53f0973ab8bdfc99d8481bf223dd26143f79f11e26586f3fea201c9852fa8a625e0bf91903d99fba5ddcf30487ad937e2565c35c9953e9e01d22418859c5ba4a81e479b07b38abfb98ef21ca4c586d535c0a9c440dac859fda44c73a4492fdf0ac07351c7d31c06f0d658cad6d79ca36490358bc735fd198a963998dff9ca7462edd9c8c324a295fb5e05511b51b1fcdd382b8057fae3bc71f8ed7850b00cb", &(0x7f00000007c0)="1498e419"}}, &(0x7f0000000840)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000880)={0x6, 'bond_slave_1\x00', {0xf}, 0x7}) bpf$PROG_LOAD(0x5, 0xfffffffffffffffd, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000008c0)={@empty, @private0, @private1, 0x5, 0x2, 0x9, 0x100, 0xc9f9, 0xc00362, r0}) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000940)=@gcm_128={{0x304}, "bc3d2cdc5d3e9672", "7ee616c16cc34585dd962cf6bc0070fa", "0523a132", "fa9b4365200a0a7e"}, 0x28) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, 0x9, 0x6, 0xd15f020fb7d21fb4, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xe48}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x8) r7 = accept4$packet(r6, &(0x7f0000000ac0), &(0x7f0000000b00)=0x14, 0xf928a88ac4de736c) recvfrom$packet(r7, &(0x7f0000000b40)=""/32, 0x20, 0x20123, &(0x7f0000000b80)={0x11, 0x17, 0x0, 0x1, 0x6, 0x6, @random="2ab6fe8c772f"}, 0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x64, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x34}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x9}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4) r8 = open$dir(&(0x7f0000000d00)='./file0\x00', 0xc4802, 0x38) utimensat(r8, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={{0x0, 0x2710}, {0x77359400}}, 0x100) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000dc0), 0x1c0, 0x0) mq_notify(r6, &(0x7f0000000f00)={0x0, 0x24, 0x0, @thr={&(0x7f0000000e00)="732582cbcc10056c00d491fc9cd9eab3c5dd621822c7d0b1e9506abe7bb22ef28cab0cb73ba98f8b53c019c839ef", &(0x7f0000000e40)="55915b7f4c2c7b8aa969106c467abbeb7c13d7af014872ae8a863e9cd923e377aa869309000c808a4bed21351d9af4cddc5881f0571c5c08b18ffbb236fd0b51a7169ed806ce0528dc66ad31e760e5ced403a3fc8f860973773ba82353d5fed4d5e1c92d772f1b82565880f0b0108530fd77761d392bf5d86e8d289addc65704043a466c51898bb89d6c6dbe669ae0ffab"}}) sendmsg$nl_route(r5, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)=@ipv6_newnexthop={0x2c, 0x68, 0x400, 0xa8, 0x25dfdbfe, {0xa, 0x0, 0x1, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@mcast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040041}, 0x20040885) 2.075271997s ago: executing program 1 (id=90): socket$netlink(0x10, 0x3, 0x4) r0 = open(0x0, 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa880003"], 0x0) 2.007603738s ago: executing program 1 (id=94): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$hidraw(0x0, 0x9, 0x4b442) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x110) bind$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @local, @mcast2, {[], {0x2, 0xe22, 0x8}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3ee, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000004340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}, @NFT_MSG_DELSET={0x110, 0xb, 0xa, 0x807, 0x0, 0x0, {0x9, 0x0, 0x3}, [@NFTA_SET_DESC={0x4}, @NFTA_SET_EXPRESSIONS={0xb8, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_TYPE={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3c}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x1324, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1310, 0x3, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_KEY_END={0xd8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "f49f44f81841ab7476dd2a781aac2da44b326c9e8fcc2c9dea860cf869c425bdd2706ce5a91708591e977f68cb029385ec3aba2bf6b46d5d0d1d55943312155b204b30d7afcd27fc143d96b4fc4228dc21d31a8a66d84432e29900b64f1946533920a5c1e7e5c2cb74301c9a5d22c5d436a9e28a8bee106d1c045cc09864018804dfcf8c0008d6eb1db32a4c56f112f893972f1622fd827274a4a90575ac843f60e54412d86481cf2981eed1fa2e3bc6"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf, 0x1, "6806d20d9a3fe7250d62e9"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @reject={{0xb}, @void}}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}, {0x10ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_ELEM_KEY_END={0xf30, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xee4, 0x1, "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"}, @NFTA_DATA_VALUE={0x47, 0x1, "90a586d7165d2290965cfd16366395a9fd9d7b36cf419b5580af724a0402b64f0e81c43010cb7143b01ecfd55e23a8b8cf06b2df5fd55315ec3bc149d4e0d4dbb8a97f"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xcc, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2dc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x101}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x19, 0x6, 0x1, 0x0, "1c842f9b8b096fbc3d38cb91ec5c98ed690e956e41"}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0x6d, 0x6, 0x1, 0x0, "af03fc5ce109609705425e94e3768e2114a42aa043380c4c9022c4f173260a11d96b0ee615e121ab3b8e4520d2137c5708569f187760b1be74d578722db693ac0b1cc1c8a457389428aafdcc9ffb2097dc4725416df002faac81d70a12cca543096e041be5d434da63"}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_KEY_END={0xc4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xa7, 0x1, "69d2b114ca3c020abae2c9da77651a7a43376da133e22f579442e8ea7bda734e12a4b92a8bb33c3688485e2a200ada3287a50bebeaf488dc50315e0500a427830d0f2206c3547ebd571f767f151d4be5b165070d81d5576113731d850da72ca8fa170aa5e49750925ff57cc3b7c73bf2fc1faf6a1dd2796254ce27a11a9f6dacd817c36946359d26221a17d1fe7d4833d027cc61dedc639401025e05349ea08ecbbabe"}]}, @NFTA_SET_ELEM_KEY_END={0x88, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xd, 0x1, "f7c0834dc9beb66f4d"}, @NFTA_DATA_VALUE={0x69, 0x1, "e448b046bebbed95e52f06c772c016998de2deba5e385f6e00da7dd6ea1561e6d6f730f402146ecc4b63c2e356d9d7558807281256d025ac532a6ab718849ed43570656f94e996c2c6b3bd2c47e452b2bfc1a6356a3c6c5abbe63a021ae6216cfa402fb887"}, @NFTA_DATA_VALUE={0x4}]}]}]}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x831}, @NFTA_SET_EXPR={0x50, 0x11, 0x0, 0x1, @dup={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1544}, 0x1, 0x0, 0x0, 0xc000}, 0xc8010) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x34, 0x22048800, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27) 2.007174858s ago: executing program 4 (id=95): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000"], &(0x7f0000000000)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r6, 0x0, 0x88000cc, 0x0) 1.882581619s ago: executing program 1 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x6, 0xa}, {0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x8, 0x7, 0x0, 0x40000000000000}, {0x4, 0x5f94c303, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in6=@empty, 0x1, 0x32}, 0xa, @in6=@local, 0x1502, 0x4, 0x3, 0x0, 0xc36, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty, 0xfffffffd}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 1.374537781s ago: executing program 2 (id=106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) 1.352713301s ago: executing program 2 (id=107): r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x6, 0x0, 0x3, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000003800000000000000", @ANYRES32, @ANYBLOB="0500eeffffffffffffff00000000001b00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000100000095000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=r3, @ANYRES32, @ANYRESHEX=r3], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000001340), 0x1, 0x60a, &(0x7f0000000600)="$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") r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7800, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @rand_addr=0x64010102}}}}) 1.184452843s ago: executing program 3 (id=111): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) stat(&(0x7f0000000b80)='./file1\x00', &(0x7f0000001100)) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', &(0x7f0000002200), 0x1000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000640)="148827517794770f0ed621665f2a9084dba3e2fd228e8a6131622152b65a1c2740faebcb574e3dd25d2aa2f5a36e0353ee2a490e771e370146d1e5e118bcf0afb0ff2f4635d64bce33e61d01e18dcb23bb8669d9da8f", 0x56}, {&(0x7f0000000c00)="a13252542ff2434a947f7001ede430f984a1681d1b4fb2e55b4924d20cbdf1689b4cb7c152c4acb98edb40aace1f132e9690cb197c8867e77f69c12e745162486f286cbeaf49bdac151c5a197f77753aa06274ef6547d76ab33181e4098bdd49dfa15ef92e29749802f700307b7ee1e55a4f841e002038905854c9ac5fbef51abe947a69b1c0", 0x86}, {&(0x7f0000000cc0)="0649c7b626b916aebf98febe0bc8488783f281671052ee98b392898e01b95eb482212b88cc49897f87e373d24e521e5f56e5478f8f3be5526c81922c3692b5a2b87cb1ef5f58b3b9192ccdadfda158ca5665aa0290f82787b2f875a9d07a1096a31640c737a903b20404066f7a815b714006f25642d5baf5f4d7b3c500fc1dec2687db12c05b4eb51296e3427930a9a9a436a35ca8e51ba3d487faa53a53c9f11571d9c800eb4d00076f01903b65bfdbb5d6b561a4da2fe9a784d7b645a3fd77d39ffa19cea4bcc8e026c0ffd9cdf4b4476051c514d53af1866e06ed8a2cd04588d7759f8d430ac0381e2f88b9426056821e67ac58374d5e35a0", 0xfa}, {&(0x7f0000000f00)="a8d91b1649cd68e183c00b0635e7b7a182fa9279a6ab04083087e34b8037fd1825f101ee94ffe8bb44828a2c69efe32a929596bbbd4b12a2cc6339b329c3ae8fad078a4400eb9dec36556cdd3bd130e3a3c554a0441a3cdb2b25d33c8171cb5c0c7df8542d3ce679a9104637fbb650c3f73b503b55e70c8e48fae1e922c9ccc68e0a83c3b89b696550acdb5c54014349dca000e949166674f1be6f08c9f0ff69b92a9475fb85e12f0610be9977f6fef8287d13ff8d8f10ca47bc33e2202cf13fec64", 0xc2}, {&(0x7f0000001000)="ad0030d7c14ceb8812a2da002a6650ad2e52b05445ef1a3556b24323617425484d36f60d5adc59a48a569f6f88196a5be43390f5de5678f971f43572d13b962ced86c086cddd294e1c48b5a92743dc44be1ecb29f3e877c5e431754d9716ec9225237943d1e9573ae67ed583d82282d39e8bc6042423e825971858c2948d96eb39caf48726b3bdd129e4e620055b53f160a99206f4eae747ec91dc9d9dcb9e68fb40f6f1d9e46b3b3f7d93a59301ead6944d396841c3d9c18ab80921acbd7267deb35618c882c55df5171fe4ee60680a472aa44ba2185cef8138d6ff7f587c9b3875be27abd79cd576eea1", 0xeb}], 0x5, &(0x7f0000000380)=[@rights={{0x2c, 0x1, 0x1, [r1, r4, 0xffffffffffffffff, r0, r2, r4, 0xffffffffffffffff]}}], 0x30, 0x4008001}}], 0x1, 0xc4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={r5, 0x2, r4, 0x202, 0x80000}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={r5, 0x1, r6, 0x200, 0x80000}) unshare(0x2c060000) unshare(0x2c020400) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000e00), 0x1, 0x570, &(0x7f0000001500)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r7, 0x0) 1.128601403s ago: executing program 4 (id=112): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 819.634345ms ago: executing program 1 (id=113): r0 = gettid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x19e5, 0xd5, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x200}) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f00000003c0), 0x9}, 0x10020a, 0x0, 0xfffffffd, 0x6, 0xffffffff, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x270, 0x20a, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e23], [0x4e20, 0x4e22], 0x3, 0x8, 0x80, 0x7}}, @common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111040000000000731a0eff00000000950000f7ff000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x23}, 0x22) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) 758.759545ms ago: executing program 0 (id=114): prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='w\xde\xa3\x05\xa3\x91\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xaek\xbd\x87W\x1d\x1b(\x8e\xf8\\2\x98\xf7P\x1b8\xcf\xf5\xdc0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private2}}, &(0x7f00000002c0)=0xe8) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000080)=@filename='./file0\x00', r5, &(0x7f0000000380)={0xdb1, 0x7, 0x1, 0x2}) splice(r2, 0x0, r4, 0x0, 0xc, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 582.170466ms ago: executing program 2 (id=116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 547.333787ms ago: executing program 2 (id=117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) 523.290866ms ago: executing program 1 (id=118): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], 0x0, 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r6, 0x0, 0x88000cc, 0x0) 515.395346ms ago: executing program 0 (id=119): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 505.599746ms ago: executing program 2 (id=120): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) unshare(0x24040000) unshare(0x22020600) 482.627577ms ago: executing program 0 (id=121): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 467.729607ms ago: executing program 2 (id=122): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x80, &(0x7f0000000100)={[{@shortname_winnt}, {@fat=@flush}, {@shortname_lower}, {@shortname_win95}, {@fat=@check_strict}]}, 0x11, 0x320, &(0x7f0000000c00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 462.014487ms ago: executing program 0 (id=123): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa880003"], 0x0) 436.619187ms ago: executing program 0 (id=124): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0xff, 0x2f2, &(0x7f0000000980)="$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") creat(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb2", 0xb) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fdatasync(r2) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 284.047058ms ago: executing program 3 (id=125): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x300, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}}, 0x20}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r2 = fcntl$dupfd(r1, 0x0, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=126): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0xff, 0x2f2, &(0x7f0000000980)="$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") creat(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb2", 0xb) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fdatasync(r2) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.4' (ED25519) to the list of known hosts. [ 32.969703][ T29] audit: type=1400 audit(1762004140.574:62): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.992720][ T29] audit: type=1400 audit(1762004140.594:63): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.993725][ T3302] cgroup: Unknown subsys name 'net' [ 33.020508][ T29] audit: type=1400 audit(1762004140.624:64): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.225135][ T3302] cgroup: Unknown subsys name 'cpuset' [ 33.231497][ T3302] cgroup: Unknown subsys name 'rlimit' [ 33.334443][ T29] audit: type=1400 audit(1762004140.944:65): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.357734][ T29] audit: type=1400 audit(1762004140.944:66): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.378212][ T29] audit: type=1400 audit(1762004140.944:67): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.392702][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.398594][ T29] audit: type=1400 audit(1762004140.944:68): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.427508][ T29] audit: type=1400 audit(1762004140.954:69): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.450250][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.452305][ T29] audit: type=1400 audit(1762004140.954:70): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.484242][ T29] audit: type=1400 audit(1762004141.014:71): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.712197][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 34.763284][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 34.813046][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.820177][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.827394][ T3313] bridge_slave_0: entered allmulticast mode [ 34.833873][ T3313] bridge_slave_0: entered promiscuous mode [ 34.840649][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.847749][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.855013][ T3313] bridge_slave_1: entered allmulticast mode [ 34.861573][ T3313] bridge_slave_1: entered promiscuous mode [ 34.904340][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.913513][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 34.939559][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.948761][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 34.964511][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.971593][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.978843][ T3312] bridge_slave_0: entered allmulticast mode [ 34.985244][ T3312] bridge_slave_0: entered promiscuous mode [ 35.008214][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.015356][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.022535][ T3312] bridge_slave_1: entered allmulticast mode [ 35.029072][ T3312] bridge_slave_1: entered promiscuous mode [ 35.057036][ T3313] team0: Port device team_slave_0 added [ 35.084833][ T3313] team0: Port device team_slave_1 added [ 35.091833][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.118866][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.128186][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.135173][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.161211][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.174625][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.181863][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.189089][ T3316] bridge_slave_0: entered allmulticast mode [ 35.195521][ T3316] bridge_slave_0: entered promiscuous mode [ 35.203975][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.211171][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.218430][ T3316] bridge_slave_1: entered allmulticast mode [ 35.224884][ T3316] bridge_slave_1: entered promiscuous mode [ 35.236822][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.243774][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.269800][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.290707][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 35.299791][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.306931][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.314278][ T3314] bridge_slave_0: entered allmulticast mode [ 35.320783][ T3314] bridge_slave_0: entered promiscuous mode [ 35.340912][ T3312] team0: Port device team_slave_0 added [ 35.349768][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.356949][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.364104][ T3314] bridge_slave_1: entered allmulticast mode [ 35.370455][ T3314] bridge_slave_1: entered promiscuous mode [ 35.383612][ T3312] team0: Port device team_slave_1 added [ 35.403767][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.414828][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.451397][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.458427][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.484586][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.496438][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.518780][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.525772][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.551837][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.563647][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.577502][ T3313] hsr_slave_0: entered promiscuous mode [ 35.583544][ T3313] hsr_slave_1: entered promiscuous mode [ 35.590548][ T3316] team0: Port device team_slave_0 added [ 35.615443][ T3314] team0: Port device team_slave_0 added [ 35.626824][ T3316] team0: Port device team_slave_1 added [ 35.637971][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.645190][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.652405][ T3320] bridge_slave_0: entered allmulticast mode [ 35.659147][ T3320] bridge_slave_0: entered promiscuous mode [ 35.666417][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.673520][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.680766][ T3320] bridge_slave_1: entered allmulticast mode [ 35.687166][ T3320] bridge_slave_1: entered promiscuous mode [ 35.693734][ T3314] team0: Port device team_slave_1 added [ 35.747934][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.754931][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.780933][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.794740][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.801707][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.827822][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.847661][ T3312] hsr_slave_0: entered promiscuous mode [ 35.853666][ T3312] hsr_slave_1: entered promiscuous mode [ 35.859528][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 35.865291][ T3312] Cannot create hsr debugfs directory [ 35.872178][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.881733][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.888700][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.914643][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.934312][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.943698][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.950682][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.977046][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.034872][ T3316] hsr_slave_0: entered promiscuous mode [ 36.040931][ T3316] hsr_slave_1: entered promiscuous mode [ 36.046821][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 36.052549][ T3316] Cannot create hsr debugfs directory [ 36.058668][ T3320] team0: Port device team_slave_0 added [ 36.072094][ T3314] hsr_slave_0: entered promiscuous mode [ 36.078113][ T3314] hsr_slave_1: entered promiscuous mode [ 36.083944][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 36.089722][ T3314] Cannot create hsr debugfs directory [ 36.101328][ T3320] team0: Port device team_slave_1 added [ 36.155107][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.162069][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.188067][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.215002][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.222045][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.248093][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.298934][ T3320] hsr_slave_0: entered promiscuous mode [ 36.304993][ T3320] hsr_slave_1: entered promiscuous mode [ 36.311094][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 36.316862][ T3320] Cannot create hsr debugfs directory [ 36.394078][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.412451][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.423706][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.444764][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.469801][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.481641][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.493148][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.505343][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.535812][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.549366][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.562648][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.573900][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.614864][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.626524][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.638951][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.646148][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.665946][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.676934][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.701386][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.715444][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.727001][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.738378][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.745462][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.754404][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.763444][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.772604][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.788755][ T1673] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.795865][ T1673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.804756][ T1673] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.811872][ T1673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.829741][ T1673] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.836836][ T1673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.853844][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.890401][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.900876][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.913227][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.930925][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.938121][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.947325][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.954390][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.010518][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.022771][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.046771][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.058330][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.071145][ T116] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.078358][ T116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.115435][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.125912][ T116] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.133005][ T116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.175809][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.208578][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.233469][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.247953][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.255140][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.292406][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.299634][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.314174][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.359353][ T3314] veth0_vlan: entered promiscuous mode [ 37.381894][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.392340][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.416326][ T3314] veth1_vlan: entered promiscuous mode [ 37.441818][ T3316] veth0_vlan: entered promiscuous mode [ 37.449279][ T3313] veth0_vlan: entered promiscuous mode [ 37.460965][ T3314] veth0_macvtap: entered promiscuous mode [ 37.473629][ T3313] veth1_vlan: entered promiscuous mode [ 37.489427][ T3314] veth1_macvtap: entered promiscuous mode [ 37.505631][ T3316] veth1_vlan: entered promiscuous mode [ 37.523809][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.534823][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.550377][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.563852][ T3313] veth0_macvtap: entered promiscuous mode [ 37.576577][ T3313] veth1_macvtap: entered promiscuous mode [ 37.584711][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.595839][ T3312] veth0_vlan: entered promiscuous mode [ 37.603522][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.614134][ T3316] veth0_macvtap: entered promiscuous mode [ 37.621714][ T3316] veth1_macvtap: entered promiscuous mode [ 37.629351][ T3312] veth1_vlan: entered promiscuous mode [ 37.635399][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.644158][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.662729][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.677884][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.706491][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.716015][ T1673] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.727158][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.728058][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.756838][ T3445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.768132][ T3312] veth0_macvtap: entered promiscuous mode [ 37.777595][ T3312] veth1_macvtap: entered promiscuous mode [ 37.784657][ T3445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.804051][ T3343] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.833698][ T3343] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.852168][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.872555][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.883340][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.899317][ T3320] veth0_vlan: entered promiscuous mode [ 37.907191][ T3343] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.924845][ T3320] veth1_vlan: entered promiscuous mode [ 37.935892][ T3484] FAULT_INJECTION: forcing a failure. [ 37.935892][ T3484] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.949267][ T3484] CPU: 0 UID: 0 PID: 3484 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.949298][ T3484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 37.949315][ T3484] Call Trace: [ 37.949322][ T3484] [ 37.949332][ T3484] __dump_stack+0x1d/0x30 [ 37.949378][ T3484] dump_stack_lvl+0xe8/0x140 [ 37.949399][ T3484] dump_stack+0x15/0x1b [ 37.949416][ T3484] should_fail_ex+0x265/0x280 [ 37.949495][ T3484] should_fail+0xb/0x20 [ 37.949511][ T3484] should_fail_usercopy+0x1a/0x20 [ 37.949544][ T3484] _copy_from_user+0x1c/0xb0 [ 37.949629][ T3484] io_register_rsrc_update+0x5f/0x120 [ 37.949666][ T3484] __se_sys_io_uring_register+0x9bf/0xf30 [ 37.949699][ T3484] ? fput+0x8f/0xc0 [ 37.949722][ T3484] ? ksys_write+0x192/0x1a0 [ 37.949808][ T3484] __x64_sys_io_uring_register+0x55/0x70 [ 37.949839][ T3484] x64_sys_call+0x18a3/0x3000 [ 37.949888][ T3484] do_syscall_64+0xd2/0x200 [ 37.949913][ T3484] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 37.949952][ T3484] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 37.950007][ T3484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.950077][ T3484] RIP: 0033:0x7ff46a23efc9 [ 37.950097][ T3484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.950181][ T3484] RSP: 002b:00007ff468c9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 37.950213][ T3484] RAX: ffffffffffffffda RBX: 00007ff46a495fa0 RCX: 00007ff46a23efc9 [ 37.950231][ T3484] RDX: 0000200000000300 RSI: 0000000000000010 RDI: 0000000000000003 [ 37.950248][ T3484] RBP: 00007ff468c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 37.950263][ T3484] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 37.950276][ T3484] R13: 00007ff46a496038 R14: 00007ff46a495fa0 R15: 00007ffc76743e08 [ 37.950374][ T3484] [ 37.951259][ T3343] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.996007][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 37.996026][ T29] audit: type=1400 audit(1762004145.604:95): avc: denied { open } for pid=3490 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.008157][ T3343] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.009076][ T29] audit: type=1400 audit(1762004145.604:96): avc: denied { perfmon } for pid=3490 comm="syz.2.6" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.028799][ T3343] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.034305][ T29] audit: type=1400 audit(1762004145.604:97): avc: denied { kernel } for pid=3490 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.039910][ T3343] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.134769][ T29] audit: type=1400 audit(1762004145.624:98): avc: denied { tracepoint } for pid=3490 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.151502][ T3320] veth0_macvtap: entered promiscuous mode [ 38.152330][ T29] audit: type=1400 audit(1762004145.704:99): avc: denied { map_create } for pid=3488 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.152384][ T29] audit: type=1400 audit(1762004145.704:100): avc: denied { map_read map_write } for pid=3488 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.152406][ T29] audit: type=1400 audit(1762004145.704:101): avc: denied { prog_load } for pid=3488 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.173533][ T3320] veth1_macvtap: entered promiscuous mode [ 38.179953][ T29] audit: type=1400 audit(1762004145.704:102): avc: denied { bpf } for pid=3488 comm="syz.4.5" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.238462][ T3495] FAULT_INJECTION: forcing a failure. [ 38.238462][ T3495] name failslab, interval 1, probability 0, space 0, times 1 [ 38.256453][ T29] audit: type=1400 audit(1762004145.704:103): avc: denied { prog_run } for pid=3488 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.262176][ T3495] CPU: 1 UID: 0 PID: 3495 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.262209][ T3495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 38.262227][ T3495] Call Trace: [ 38.262246][ T3495] [ 38.262258][ T3495] __dump_stack+0x1d/0x30 [ 38.262293][ T3495] dump_stack_lvl+0xe8/0x140 [ 38.262322][ T3495] dump_stack+0x15/0x1b [ 38.262428][ T3495] should_fail_ex+0x265/0x280 [ 38.262454][ T3495] ? tcx_link_attach+0xae/0x5e0 [ 38.262483][ T3495] should_failslab+0x8c/0xb0 [ 38.262523][ T3495] __kmalloc_cache_noprof+0x4c/0x4a0 [ 38.262615][ T3495] tcx_link_attach+0xae/0x5e0 [ 38.262649][ T3495] link_create+0x546/0x6e0 [ 38.262691][ T3495] __sys_bpf+0x628/0x7c0 [ 38.262727][ T3495] __x64_sys_bpf+0x41/0x50 [ 38.262817][ T3495] x64_sys_call+0x2aee/0x3000 [ 38.262848][ T3495] do_syscall_64+0xd2/0x200 [ 38.262875][ T3495] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 38.262915][ T3495] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 38.263000][ T3495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.263030][ T3495] RIP: 0033:0x7ff46a23efc9 [ 38.263132][ T3495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.263156][ T3495] RSP: 002b:00007ff468c7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 38.263189][ T3495] RAX: ffffffffffffffda RBX: 00007ff46a496090 RCX: 00007ff46a23efc9 [ 38.263206][ T3495] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 000000000000001c [ 38.263221][ T3495] RBP: 00007ff468c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 38.263246][ T3495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.263263][ T3495] R13: 00007ff46a496128 R14: 00007ff46a496090 R15: 00007ffc76743e08 [ 38.263343][ T3495] [ 38.295532][ T3343] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.472202][ T3497] loop4: detected capacity change from 0 to 164 [ 38.564271][ T29] audit: type=1326 audit(1762004146.154:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3498 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef890efc9 code=0x7ffc0000 [ 38.572643][ T3497] Unable to read rock-ridge attributes [ 38.625654][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.636832][ T3497] FAULT_INJECTION: forcing a failure. [ 38.636832][ T3497] name failslab, interval 1, probability 0, space 0, times 0 [ 38.643558][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.649538][ T3497] CPU: 1 UID: 0 PID: 3497 Comm: syz.4.7 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.649598][ T3497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 38.649617][ T3497] Call Trace: [ 38.649683][ T3497] [ 38.649694][ T3497] __dump_stack+0x1d/0x30 [ 38.649725][ T3497] dump_stack_lvl+0xe8/0x140 [ 38.649754][ T3497] dump_stack+0x15/0x1b [ 38.649780][ T3497] should_fail_ex+0x265/0x280 [ 38.649888][ T3497] should_failslab+0x8c/0xb0 [ 38.649930][ T3497] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 38.650051][ T3497] ? __d_alloc+0x3d/0x340 [ 38.650097][ T3497] __d_alloc+0x3d/0x340 [ 38.650142][ T3497] d_alloc_parallel+0x58/0xc70 [ 38.650168][ T3497] ? __rcu_read_unlock+0x4f/0x70 [ 38.650205][ T3497] ? __d_lookup+0x316/0x340 [ 38.650235][ T3497] ? lockref_get_not_dead+0x120/0x1c0 [ 38.650273][ T3497] ? __rcu_read_unlock+0x4f/0x70 [ 38.650319][ T3497] path_openat+0x6b5/0x2170 [ 38.650361][ T3497] do_filp_open+0x109/0x230 [ 38.650401][ T3497] do_sys_openat2+0xa6/0x110 [ 38.650430][ T3497] __x64_sys_openat+0xf2/0x120 [ 38.650491][ T3497] x64_sys_call+0x2eab/0x3000 [ 38.650532][ T3497] do_syscall_64+0xd2/0x200 [ 38.650559][ T3497] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 38.650740][ T3497] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 38.650802][ T3497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.650839][ T3497] RIP: 0033:0x7f28e470efc9 [ 38.650861][ T3497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.650885][ T3497] RSP: 002b:00007f28e3177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 38.650912][ T3497] RAX: ffffffffffffffda RBX: 00007f28e4965fa0 RCX: 00007f28e470efc9 [ 38.650992][ T3497] RDX: 00000000000026e1 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 38.651012][ T3497] RBP: 00007f28e3177090 R08: 0000000000000000 R09: 0000000000000000 [ 38.651039][ T3497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.651064][ T3497] R13: 00007f28e4966038 R14: 00007f28e4965fa0 R15: 00007ffdc3de05a8 [ 38.651089][ T3497] [ 38.728395][ T3505] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8'. [ 38.894657][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.908570][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.921219][ T3511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.951224][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.961011][ T3511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.966613][ T3517] loop1: detected capacity change from 0 to 128 [ 38.981909][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.034809][ T3445] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.061948][ T3526] loop3: detected capacity change from 0 to 512 [ 39.109734][ T3517] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 39.117659][ T3517] FAT-fs (loop1): Filesystem has been set read-only [ 39.124954][ T3526] EXT4-fs: Ignoring removed bh option [ 39.149174][ T3526] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.4: missing EA_INODE flag [ 39.154566][ T3517] syz.1.2: attempt to access beyond end of device [ 39.154566][ T3517] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 39.170145][ T3526] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.4: error while reading EA inode 11 err=-117 [ 39.175653][ T3537] xt_TCPMSS: Only works on TCP SYN packets [ 39.192792][ T3526] EXT4-fs (loop3): 1 orphan inode deleted [ 39.200277][ T3526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.213511][ T3517] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 39.221450][ T3517] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 39.268092][ T3517] syz.1.2: attempt to access beyond end of device [ 39.268092][ T3517] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.337607][ T3517] syz.1.2: attempt to access beyond end of device [ 39.337607][ T3517] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.417487][ T3517] syz.1.2: attempt to access beyond end of device [ 39.417487][ T3517] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.454027][ T3543] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14'. [ 39.475254][ T3517] syz.1.2: attempt to access beyond end of device [ 39.475254][ T3517] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.490997][ T3543] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.14' sets config #0 [ 39.514414][ T3543] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.14' sets config #1 [ 39.523635][ T3517] syz.1.2: attempt to access beyond end of device [ 39.523635][ T3517] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.557250][ T3517] syz.1.2: attempt to access beyond end of device [ 39.557250][ T3517] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.592378][ T3517] syz.1.2: attempt to access beyond end of device [ 39.592378][ T3517] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.619829][ T3517] syz.1.2: attempt to access beyond end of device [ 39.619829][ T3517] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.657874][ T3517] syz.1.2: attempt to access beyond end of device [ 39.657874][ T3517] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.829827][ T3554] xt_TCPMSS: Only works on TCP SYN packets [ 39.901540][ T3556] loop1: detected capacity change from 0 to 128 [ 39.927991][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.020918][ T3558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19'. [ 40.222108][ T3569] FAULT_INJECTION: forcing a failure. [ 40.222108][ T3569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.235395][ T3569] CPU: 0 UID: 0 PID: 3569 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.235430][ T3569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 40.235447][ T3569] Call Trace: [ 40.235455][ T3569] [ 40.235463][ T3569] __dump_stack+0x1d/0x30 [ 40.235491][ T3569] dump_stack_lvl+0xe8/0x140 [ 40.235518][ T3569] dump_stack+0x15/0x1b [ 40.235569][ T3569] should_fail_ex+0x265/0x280 [ 40.235590][ T3569] should_fail+0xb/0x20 [ 40.235609][ T3569] should_fail_usercopy+0x1a/0x20 [ 40.235694][ T3569] _copy_from_user+0x1c/0xb0 [ 40.235733][ T3569] memdup_user+0x5e/0xd0 [ 40.235760][ T3569] strndup_user+0x68/0xb0 [ 40.235833][ T3569] bpf_uprobe_multi_link_attach+0x20b/0x900 [ 40.235876][ T3569] ? __rcu_read_unlock+0x4f/0x70 [ 40.235974][ T3569] ? __fget_files+0x184/0x1c0 [ 40.236005][ T3569] link_create+0x680/0x6e0 [ 40.236035][ T3569] __sys_bpf+0x628/0x7c0 [ 40.236122][ T3569] __x64_sys_bpf+0x41/0x50 [ 40.236154][ T3569] x64_sys_call+0x2aee/0x3000 [ 40.236216][ T3569] do_syscall_64+0xd2/0x200 [ 40.236251][ T3569] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 40.236277][ T3569] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 40.236308][ T3569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.236367][ T3569] RIP: 0033:0x7ff46a23efc9 [ 40.236415][ T3569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.236432][ T3569] RSP: 002b:00007ff468c9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 40.236451][ T3569] RAX: ffffffffffffffda RBX: 00007ff46a495fa0 RCX: 00007ff46a23efc9 [ 40.236463][ T3569] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 000000000000001c [ 40.236475][ T3569] RBP: 00007ff468c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 40.236490][ T3569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.236550][ T3569] R13: 00007ff46a496038 R14: 00007ff46a495fa0 R15: 00007ffc76743e08 [ 40.236573][ T3569] [ 40.478353][ T3524] syz.4.11 (3524) used greatest stack depth: 7480 bytes left [ 40.580341][ T3574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23'. [ 40.600140][ T3574] hsr_slave_0: left promiscuous mode [ 40.652930][ T3574] hsr_slave_1: left promiscuous mode [ 40.726099][ T3546] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.901302][ T37] Bluetooth: hci1: Frame reassembly failed (-84) [ 40.961897][ T3567] process 'syz.3.21' launched './file0' with NULL argv: empty string added [ 41.094762][ T3586] Bluetooth: hci0: command 0x1003 tx timeout [ 41.106114][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.225931][ T3589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 41.385734][ T3591] loop3: detected capacity change from 0 to 128 [ 41.735234][ T3609] mmap: syz.0.33 (3609) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.832720][ T3610] loop0: detected capacity change from 0 to 512 [ 41.887079][ T3609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 42.252390][ T3612] loop4: detected capacity change from 0 to 512 [ 42.295599][ T3612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.315118][ T3612] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.373058][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.385429][ T3616] syz.3.36 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.873269][ T3627] loop3: detected capacity change from 0 to 512 [ 42.949379][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 42.976561][ T3528] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 43.027849][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 43.027863][ T29] audit: type=1400 audit(1762004150.634:311): avc: denied { create } for pid=3619 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.126824][ T29] audit: type=1400 audit(1762004150.664:312): avc: denied { bind } for pid=3628 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.146083][ T29] audit: type=1400 audit(1762004150.694:313): avc: denied { getopt } for pid=3628 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.165435][ T29] audit: type=1400 audit(1762004150.694:314): avc: denied { setopt } for pid=3628 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.250948][ T29] audit: type=1326 audit(1762004150.814:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.4.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e470efc9 code=0x7ffc0000 [ 43.275058][ T29] audit: type=1326 audit(1762004150.814:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.4.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e470efc9 code=0x7ffc0000 [ 43.299120][ T29] audit: type=1326 audit(1762004150.814:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.4.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f28e470efc9 code=0x7ffc0000 [ 43.322439][ T29] audit: type=1326 audit(1762004150.814:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.4.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e470efc9 code=0x7ffc0000 [ 43.346378][ T29] audit: type=1326 audit(1762004150.814:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.4.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e470efc9 code=0x7ffc0000 [ 43.550924][ T29] audit: type=1326 audit(1762004151.144:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3637 comm="syz.3.41" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff63d6befc9 code=0x0 [ 43.717960][ T3647] tipc: Started in network mode [ 43.722911][ T3647] tipc: Node identity ac14140f, cluster identity 4711 [ 43.734771][ T3647] tipc: New replicast peer: 255.255.255.255 [ 43.740976][ T3647] tipc: Enabled bearer , priority 10 [ 43.765376][ T3647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 43.918117][ T3651] loop4: detected capacity change from 0 to 512 [ 43.946370][ T3651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.974690][ T3651] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.069246][ T3663] loop1: detected capacity change from 0 to 1024 [ 44.079626][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.094914][ T3663] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 44.123195][ T3003] udevd[3003]: worker [3519] terminated by signal 33 (Unknown signal 33) [ 44.140250][ T3003] udevd[3003]: worker [3519] failed while handling '/devices/virtual/block/loop1' [ 44.321512][ T3686] FAULT_INJECTION: forcing a failure. [ 44.321512][ T3686] name failslab, interval 1, probability 0, space 0, times 0 [ 44.334333][ T3686] CPU: 0 UID: 0 PID: 3686 Comm: syz.4.59 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.334363][ T3686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 44.334378][ T3686] Call Trace: [ 44.334384][ T3686] [ 44.334414][ T3686] __dump_stack+0x1d/0x30 [ 44.334442][ T3686] dump_stack_lvl+0xe8/0x140 [ 44.334535][ T3686] dump_stack+0x15/0x1b [ 44.334557][ T3686] should_fail_ex+0x265/0x280 [ 44.334581][ T3686] ? io_drain_req+0x67/0x350 [ 44.334626][ T3686] should_failslab+0x8c/0xb0 [ 44.334736][ T3686] __kmalloc_cache_noprof+0x4c/0x4a0 [ 44.334814][ T3686] ? kmem_cache_free+0xe4/0x3d0 [ 44.334927][ T3686] io_drain_req+0x67/0x350 [ 44.334959][ T3686] ? io_queue_sqe_fallback+0x12a/0x140 [ 44.334990][ T3686] io_queue_sqe_fallback+0x132/0x140 [ 44.335089][ T3686] io_submit_sqes+0xc2e/0x1060 [ 44.335142][ T3686] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 44.335186][ T3686] ? 0xffffffff81000000 [ 44.335203][ T3686] ? __rcu_read_unlock+0x4f/0x70 [ 44.335238][ T3686] ? get_pid_task+0x96/0xd0 [ 44.335319][ T3686] ? proc_fail_nth_write+0x13b/0x160 [ 44.335361][ T3686] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 44.335414][ T3686] ? vfs_write+0x7e8/0x960 [ 44.335462][ T3686] ? __rcu_read_unlock+0x4f/0x70 [ 44.335526][ T3686] ? __fget_files+0x184/0x1c0 [ 44.335609][ T3686] ? fput+0x8f/0xc0 [ 44.335633][ T3686] __x64_sys_io_uring_enter+0x78/0x90 [ 44.335677][ T3686] x64_sys_call+0x2df0/0x3000 [ 44.335767][ T3686] do_syscall_64+0xd2/0x200 [ 44.335793][ T3686] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.335829][ T3686] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 44.335880][ T3686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.335909][ T3686] RIP: 0033:0x7f28e470efc9 [ 44.335927][ T3686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.335950][ T3686] RSP: 002b:00007f28e3177038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 44.335975][ T3686] RAX: ffffffffffffffda RBX: 00007f28e4965fa0 RCX: 00007f28e470efc9 [ 44.335991][ T3686] RDX: 00000000000004c1 RSI: 0000000000000627 RDI: 0000000000000006 [ 44.336069][ T3686] RBP: 00007f28e3177090 R08: 0000000000000000 R09: 0000000000000000 [ 44.336085][ T3686] R10: 0000000000000043 R11: 0000000000000246 R12: 0000000000000001 [ 44.336105][ T3686] R13: 00007f28e4966038 R14: 00007f28e4965fa0 R15: 00007ffdc3de05a8 [ 44.336130][ T3686] [ 44.367148][ T3688] loop3: detected capacity change from 0 to 512 [ 44.593686][ T3688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.606081][ T3688] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.658012][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.734279][ T3408] tipc: Node number set to 2886997007 [ 44.889675][ T3705] loop4: detected capacity change from 0 to 256 [ 44.918547][ T3709] loop1: detected capacity change from 0 to 512 [ 44.926925][ T3709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.939230][ T3709] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.049987][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.068528][ T3722] loop0: detected capacity change from 0 to 512 [ 45.076901][ T3722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.089132][ T3722] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.089274][ T3724] loop1: detected capacity change from 0 to 512 [ 45.117185][ T3724] EXT4-fs: Ignoring removed i_version option [ 45.123236][ T3724] EXT4-fs: Ignoring removed bh option [ 45.190454][ T3724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.226353][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.237362][ T3724] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.267632][ T3724] SELinux: Context system_u:object_r:pam_var_run_t:s0 is not valid (left unmapped). [ 45.311135][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.030100][ T3741] loop3: detected capacity change from 0 to 128 [ 46.039326][ T3741] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 46.047282][ T3741] FAT-fs (loop3): Filesystem has been set read-only [ 46.054021][ T3741] bio_check_eod: 1734 callbacks suppressed [ 46.054034][ T3741] syz.3.78: attempt to access beyond end of device [ 46.054034][ T3741] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 46.120823][ T3741] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 46.128835][ T3741] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 46.141515][ T3747] loop0: detected capacity change from 0 to 128 [ 46.150075][ T3745] loop1: detected capacity change from 0 to 128 [ 46.190483][ T3747] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 46.198416][ T3747] FAT-fs (loop0): Filesystem has been set read-only [ 46.220100][ T3741] syz.3.78: attempt to access beyond end of device [ 46.220100][ T3741] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.235302][ T3747] syz.0.79: attempt to access beyond end of device [ 46.235302][ T3747] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 46.252525][ T3741] syz.3.78: attempt to access beyond end of device [ 46.252525][ T3741] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.286546][ T3747] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 46.294460][ T3747] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 46.316777][ T3741] syz.3.78: attempt to access beyond end of device [ 46.316777][ T3741] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.346526][ T3747] syz.0.79: attempt to access beyond end of device [ 46.346526][ T3747] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.365266][ T3741] syz.3.78: attempt to access beyond end of device [ 46.365266][ T3741] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.382805][ T3755] loop4: detected capacity change from 0 to 512 [ 46.408298][ T3747] syz.0.79: attempt to access beyond end of device [ 46.408298][ T3747] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.427530][ T3741] syz.3.78: attempt to access beyond end of device [ 46.427530][ T3741] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.442612][ T3755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.459309][ T3747] syz.0.79: attempt to access beyond end of device [ 46.459309][ T3747] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.476268][ T3755] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.703049][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.792595][ T3762] loop4: detected capacity change from 0 to 512 [ 46.806018][ T3764] FAULT_INJECTION: forcing a failure. [ 46.806018][ T3764] name failslab, interval 1, probability 0, space 0, times 0 [ 46.818767][ T3764] CPU: 1 UID: 0 PID: 3764 Comm: syz.2.86 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.818827][ T3764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 46.818844][ T3764] Call Trace: [ 46.818879][ T3764] [ 46.818889][ T3764] __dump_stack+0x1d/0x30 [ 46.818920][ T3764] dump_stack_lvl+0xe8/0x140 [ 46.818941][ T3764] dump_stack+0x15/0x1b [ 46.818958][ T3764] should_fail_ex+0x265/0x280 [ 46.818979][ T3764] should_failslab+0x8c/0xb0 [ 46.819074][ T3764] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 46.819110][ T3764] ? __alloc_skb+0x101/0x320 [ 46.819140][ T3764] __alloc_skb+0x101/0x320 [ 46.819281][ T3764] netlink_alloc_large_skb+0xbf/0xf0 [ 46.819370][ T3764] netlink_sendmsg+0x3cf/0x6b0 [ 46.819396][ T3764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.819462][ T3764] __sock_sendmsg+0x145/0x180 [ 46.819491][ T3764] ____sys_sendmsg+0x31e/0x4e0 [ 46.819540][ T3764] ___sys_sendmsg+0x17b/0x1d0 [ 46.819625][ T3764] __x64_sys_sendmsg+0xd4/0x160 [ 46.819647][ T3764] x64_sys_call+0x191e/0x3000 [ 46.819703][ T3764] do_syscall_64+0xd2/0x200 [ 46.819729][ T3764] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 46.819813][ T3764] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 46.819894][ T3764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.819923][ T3764] RIP: 0033:0x7ff46a23efc9 [ 46.819942][ T3764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.819998][ T3764] RSP: 002b:00007ff468c9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.820042][ T3764] RAX: ffffffffffffffda RBX: 00007ff46a495fa0 RCX: 00007ff46a23efc9 [ 46.820058][ T3764] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 46.820075][ T3764] RBP: 00007ff468c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 46.820090][ T3764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.820102][ T3764] R13: 00007ff46a496038 R14: 00007ff46a495fa0 R15: 00007ffc76743e08 [ 46.820119][ T3764] [ 47.069804][ T3762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.109908][ T3762] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.157101][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.192287][ T3783] vlan2: entered allmulticast mode [ 47.194815][ T3787] loop1: detected capacity change from 0 to 512 [ 47.206163][ T3787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.220952][ T3787] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.286328][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.430353][ T3798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'. [ 47.579149][ T3812] FAULT_INJECTION: forcing a failure. [ 47.579149][ T3812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.592498][ T3812] CPU: 1 UID: 0 PID: 3812 Comm: syz.2.103 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.592533][ T3812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 47.592549][ T3812] Call Trace: [ 47.592558][ T3812] [ 47.592567][ T3812] __dump_stack+0x1d/0x30 [ 47.592598][ T3812] dump_stack_lvl+0xe8/0x140 [ 47.592626][ T3812] dump_stack+0x15/0x1b [ 47.592643][ T3812] should_fail_ex+0x265/0x280 [ 47.592716][ T3812] should_fail+0xb/0x20 [ 47.592734][ T3812] should_fail_usercopy+0x1a/0x20 [ 47.592757][ T3812] _copy_from_user+0x1c/0xb0 [ 47.592791][ T3812] __sys_bpf+0x183/0x7c0 [ 47.592816][ T3812] __x64_sys_bpf+0x41/0x50 [ 47.592859][ T3812] x64_sys_call+0x2aee/0x3000 [ 47.592881][ T3812] do_syscall_64+0xd2/0x200 [ 47.593023][ T3812] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 47.593054][ T3812] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 47.593084][ T3812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.593158][ T3812] RIP: 0033:0x7ff46a23efc9 [ 47.593172][ T3812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.593188][ T3812] RSP: 002b:00007ff468c9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.593250][ T3812] RAX: ffffffffffffffda RBX: 00007ff46a495fa0 RCX: 00007ff46a23efc9 [ 47.593261][ T3812] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000012 [ 47.593272][ T3812] RBP: 00007ff468c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 47.593282][ T3812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.593293][ T3812] R13: 00007ff46a496038 R14: 00007ff46a495fa0 R15: 00007ffc76743e08 [ 47.593310][ T3812] [ 47.800077][ T3816] loop0: detected capacity change from 0 to 1024 [ 47.806885][ T3816] ======================================================= [ 47.806885][ T3816] WARNING: The mand mount option has been deprecated and [ 47.806885][ T3816] and is ignored by this kernel. Remove the mand [ 47.806885][ T3816] option from the mount to silence this warning. [ 47.806885][ T3816] ======================================================= [ 47.846136][ T3816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.849635][ T3820] syz.2.107 uses obsolete (PF_INET,SOCK_PACKET) [ 47.860973][ T3816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.105'. [ 47.873259][ T3820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'. [ 47.885854][ T3816] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3816 comm=syz.0.105 [ 47.899218][ T3820] team0: Port device team_slave_1 removed [ 47.919695][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.938620][ T3824] loop2: detected capacity change from 0 to 1024 [ 47.954363][ T3824] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.973665][ T3824] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 47.983599][ T3824] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.992906][ T3824] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.107: Invalid inode table block 0 in block_group 0 [ 48.006169][ T3824] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 48.021557][ T3833] loop3: detected capacity change from 0 to 128 [ 48.028095][ T3824] EXT4-fs error (device loop2): ext4_quota_write:7334: inode #3: comm syz.2.107: mark_inode_dirty error [ 48.039807][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 48.039824][ T29] audit: type=1326 audit(1762004155.644:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff63d6bdc2a code=0x7ffc0000 [ 48.069319][ T3824] Quota error (device loop2): write_blk: dquota write failed [ 48.076795][ T3824] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 48.086828][ T3824] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.107: Failed to acquire dquot type 0 [ 48.098489][ T29] audit: type=1326 audit(1762004155.644:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff63d6bdc2a code=0x7ffc0000 [ 48.121793][ T29] audit: type=1326 audit(1762004155.644:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff63d6bd717 code=0x7ffc0000 [ 48.145156][ T29] audit: type=1326 audit(1762004155.644:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff63d6c076a code=0x7ffc0000 [ 48.168431][ T29] audit: type=1326 audit(1762004155.694:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff63d6bd810 code=0x7ffc0000 [ 48.171178][ T3824] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.107: Invalid inode table block 0 in block_group 0 [ 48.191698][ T29] audit: type=1326 audit(1762004155.694:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7ff63d6bdd17 code=0x7ffc0000 [ 48.227386][ T29] audit: type=1326 audit(1762004155.694:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff63d6bd810 code=0x7ffc0000 [ 48.250738][ T29] audit: type=1326 audit(1762004155.694:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63d6befc9 code=0x7ffc0000 [ 48.277523][ T3824] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 48.288546][ T3833] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 48.296576][ T3833] FAT-fs (loop3): Filesystem has been set read-only [ 48.304736][ T3833] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 48.312632][ T3833] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 48.320769][ T3824] EXT4-fs error (device loop2): ext4_ext_truncate:4475: inode #15: comm syz.2.107: mark_inode_dirty error [ 48.332411][ T3824] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.107: Invalid inode table block 0 in block_group 0 [ 48.351338][ T3824] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 48.364792][ T3824] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 48.373645][ T3824] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.107: Invalid inode table block 0 in block_group 0 [ 48.386836][ T3824] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 48.418921][ T3824] EXT4-fs error (device loop2): ext4_truncate:4637: inode #15: comm syz.2.107: mark_inode_dirty error [ 48.442328][ T3824] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 48.454841][ T3824] EXT4-fs (loop2): 1 truncate cleaned up [ 48.461049][ T3824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.587347][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.739638][ T3868] loop0: detected capacity change from 0 to 128 [ 48.926480][ T3874] loop2: detected capacity change from 0 to 512 [ 49.185744][ T3878] loop3: detected capacity change from 0 to 128 [ 49.516887][ T3868] ================================================================== [ 49.525014][ T3868] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 49.533105][ T3868] [ 49.535460][ T3868] write to 0xffff888119881d14 of 4 bytes by task 3870 on cpu 1: [ 49.543118][ T3868] xas_set_mark+0x12b/0x140 [ 49.547641][ T3868] __folio_start_writeback+0x155/0x390 [ 49.553146][ T3868] __block_write_full_folio+0x53a/0x8f0 [ 49.558727][ T3868] block_write_full_folio+0x2c2/0x2e0 [ 49.564141][ T3868] mpage_writepages+0x6cf/0x1250 [ 49.569127][ T3868] fat_writepages+0x24/0x30 [ 49.573660][ T3868] do_writepages+0x1c6/0x310 [ 49.578293][ T3868] file_write_and_wait_range+0x156/0x2c0 [ 49.583977][ T3868] __generic_file_fsync+0x46/0x140 [ 49.589130][ T3868] fat_file_fsync+0x49/0x100 [ 49.593758][ T3868] vfs_fsync_range+0x10d/0x130 [ 49.598557][ T3868] generic_file_write_iter+0x1b8/0x2f0 [ 49.604054][ T3868] iter_file_splice_write+0x666/0xa60 [ 49.609483][ T3868] direct_splice_actor+0x156/0x2a0 [ 49.614638][ T3868] splice_direct_to_actor+0x312/0x680 [ 49.620042][ T3868] do_splice_direct+0xda/0x150 [ 49.624836][ T3868] do_sendfile+0x380/0x650 [ 49.629301][ T3868] __x64_sys_sendfile64+0x105/0x150 [ 49.634542][ T3868] x64_sys_call+0x2bb4/0x3000 [ 49.639300][ T3868] do_syscall_64+0xd2/0x200 [ 49.643997][ T3868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.649920][ T3868] [ 49.652257][ T3868] read to 0xffff888119881d14 of 4 bytes by task 3868 on cpu 0: [ 49.659823][ T3868] __writeback_single_inode+0x1f9/0x7c0 [ 49.665406][ T3868] writeback_single_inode+0x16d/0x3f0 [ 49.670854][ T3868] sync_inode_metadata+0x5b/0x90 [ 49.675823][ T3868] __generic_file_fsync+0xf8/0x140 [ 49.680975][ T3868] fat_file_fsync+0x49/0x100 [ 49.685586][ T3868] vfs_fsync_range+0x10d/0x130 [ 49.690387][ T3868] generic_file_write_iter+0x1b8/0x2f0 [ 49.695891][ T3868] iter_file_splice_write+0x666/0xa60 [ 49.701310][ T3868] direct_splice_actor+0x156/0x2a0 [ 49.706452][ T3868] splice_direct_to_actor+0x312/0x680 [ 49.711864][ T3868] do_splice_direct+0xda/0x150 [ 49.716666][ T3868] do_sendfile+0x380/0x650 [ 49.721121][ T3868] __x64_sys_sendfile64+0x105/0x150 [ 49.726366][ T3868] x64_sys_call+0x2bb4/0x3000 [ 49.731073][ T3868] do_syscall_64+0xd2/0x200 [ 49.735608][ T3868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.741538][ T3868] [ 49.743884][ T3868] value changed: 0x0a000021 -> 0x00000021 [ 49.749623][ T3868] [ 49.751971][ T3868] Reported by Kernel Concurrency Sanitizer on: [ 49.758159][ T3868] CPU: 0 UID: 0 PID: 3868 Comm: syz.0.124 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.767842][ T3868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 49.777920][ T3868] ================================================================== [ 50.295946][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 50.296958][ T3528] Bluetooth: hci1: Opcode 0x1003 failed: -110