last executing test programs: 6m21.174454939s ago: executing program 32 (id=625): lsm_get_self_attr(0x67, 0xffffffffffffffff, &(0x7f0000000080), 0x1) exit(0x1ff) lsm_set_self_attr(0x0, &(0x7f00000005c0)={0x64, 0x4, 0x78, 0x58, "ebf98846e5b873f55bfdf36b362377e0ed1c470abff14dce60f3a7d73f22e1a95203b846c7d7115a6c443f4cf01ae19cd8e67fd867f621dd15f55521dadc8ce2726ec0c5e45843e7d07a62912de342d01e9f69457dfe36b0"}, 0x78, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000380)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac141400000000000000000002000100000000fffffffe02fffffffb030005000000000002"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff7]}, 0x8, 0x80000) close(0x3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffc}, 0x0, 0xd, 0x26, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdnO=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="68c5000000000000140003006e657464657673696d3000000000000034001680300001802c000c801400"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x200088c4) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x0, 0x6, [@random, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @random="f6acfa5ea93a", @random, @multicast, @empty]}) rt_sigprocmask(0x0, &(0x7f0000000200)={[0x75]}, &(0x7f0000000280), 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000140)={[{@dioread_lock}, {@nombcache}, {@discard}, {@noblock_validity}, {@grpjquota}]}, 0x3, 0x7e5, &(0x7f00000018c0)="$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") pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x2}, 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4002664}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x168, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x51, 0x45, "35e1ac26f85ed158bf3363484eeba364c5367831584927eb40dc1255c5de70197353d0864b80553de185debb7d409e0ab0abcad95fd4ba00b7172c3dcd530fd1f3ca611fc57a36bc8aab30970f"}, @NL80211_ATTR_TESTDATA={0xa, 0x45, "e524fb1fc18b"}, @NL80211_ATTR_TESTDATA={0xf4, 0x45, "add2d5813fa671423a23d7648340d95c02b877c8f5910b04c777d4d3560057a04706fca1a765cbc3ab6642aa1cd9ee929e0e3e5d8db5775025e84e6ebefbafc86399bd2f70b3c9bbac75682e5247d2e2d67eb41c31a1c97089c3314d41eee849cd560164aed124cd3778bf2cd4949c394b20df49c8f4ac019b1e5faf626bf6af195f827d482622c299629faacdb12c15ecc86b9ddb371e040ab2887bf748aed60cf180077e3c115666d3f65a1cb1cae9cd5964d7a01a9b2945256d8d9c9c63ee93ba35a540936d0a20d74f3971c965179ff51b4d37babda593caa26a5102f84099b125a6e707d4f470dd4515d392233b"}]}, 0x168}, 0x1, 0x0, 0x0, 0x4004805}, 0x80) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="009b00000000000081"]) 5m54.894137986s ago: executing program 0 (id=830): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x13, 0x6, &(0x7f0000000380)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xd2, &(0x7f0000000bc0)=""/210, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='CONNMARK\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) close_range(0xffffffffffffffff, r4, 0x2) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0xb065, 0x10, 0x0, 0x4e}, 0x0, &(0x7f0000000280), &(0x7f0000000000)) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x210, 0x2a8, 0x2a8, 0x210, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3, 0x4}}, @common=@unspec=@cluster={{0x30}, {0x20, 0xfff, 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connmark={{0x30}, {0x6, 0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5m52.511948901s ago: executing program 0 (id=849): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r1, 0x358, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1d, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@local, 0x4e23, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800453400300065000000010001ac1414aa0301b0780300fffe450480000000fffb002f0001ac1414aaac1414bb"], 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0642, 0x0) write$tcp_mem(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x10000, @loopback, 0x2}}, 0x0, 0x0, 0x44, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0x135) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0xfffffffc, @loopback, 0xffff}, 0x1c) 5m51.651137996s ago: executing program 0 (id=865): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@lazytime}, {@nombcache}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) umount2(0x0, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0xf00, 0x40, &(0x7f0000001800)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x100, 0x100, 0xfeffffff, 0x228, 0x0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'veth0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 5m51.208928149s ago: executing program 0 (id=868): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000200)={0x8, 0x42, 0x9, 0x7, 0x0, 0x40}, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x45e, &(0x7f0000000b40)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x80000000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@grpquota}, {@nodiscard}]}, 0x3, 0x453, &(0x7f0000000f80)="$eJzs281vG0UbAPBn7ST9St/krcpH0woCBRG+kiYtpQcuIJA4FAkJDuUYkrQKdRvUBIlWEQSESm+oEicuiCMSfwEnuCDgVIkr3FGlCuXSwslobW/iOLZbp3Zc6t9PWndmd92ZZ3fHfnYnDqBnjaYvScRgRPweEUPl6sYdRsv/3Fpdnvl7dXkmiWLxrb+S0n43V5dnsl2z9+3JKn0Ruc+SOFin3cWLl85OFwpzFyr1iaVz708sXrz0/Py56TNzZ+bOT504cezo5IvHp15oS5xpXDdHPlo4dOD1d66+MXPq6ru/fJdk8dfE0SajzTY+WSy2ubnu2hv5tXLS19Wu0IJ8eZhGf2n8D0U+1k/eULz2aVc7B3RUsVgsPth480oRuI8l0e0eAN0RufIXfXr/my3blnzcA268XL4BSuO+VVnKW/qyQ1O6N9rbofZHI+LUyj9fp0s0eQ6RdKh9AKD3/JDmP8/Vy/9yUf1c6H9x7cqVwXL5/xGxLyKOR8T+iHggorTvQxHxcIvt106SbM5/ctera8U2J0Jp/vdSZW5rY/6XZX8xnK/U0hxwOPqT0/OFuSOlYxIxFv070vpkkzZ+fPW3Lxptq87/0iVtP8sFK/243rdj43tmp5em7ybmajc+iRjpq4n/ZJQyzmwmID3kByJiZIttzD/z7aFG224ffxNtmGcqfhPxVPn8r8SG879+oSXN5ycndkZh7shEdlVs9uu1y282av+u4m+D9Pzvrnv9r8U/nFTP1y628r9/9XT6evmPzxveU271+h9I3i6VByrrPpxeWrowGTGQnCx3unr91Pp7s3q2fxr/2OH6439frB+JgxGxs1J/JCIerfT9sYh4PCIONzkKP7/yxHtbj7+z0vhnWzr/64WBqF1Tv5A/+9P3GxodbiX+9PwfK5XGKmvu5PPvTvrV6tUMAAAA/1W5iBiMJDe+Vs7lxsfLf8O/P3bnCguLS8+eXvjg/Gz5NwLD0Z/LnnQNVT0Pnazc1mf1qZr60cpz4y/zu0r18ZmFwmy3g4cet6fB+E/9me9274CO83st6F3GP/Qu4x96l/EPvavO+N/VjX4A26/e9//HXegHsP1qxr9pP+gh7v+hd21l/PvMgPtD07E8sH39ALbV4q64/Y/kFRQ2FSJ3T3RDoUOFbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtMe/AQAA//9c0uqW") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x2a03, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x25, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x44090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa00}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[], 0x5, 0x272, &(0x7f0000001f40)="$eJzs3U9LW1kUAPDzYkRHGCLMgCgD8wb3QR1mrwwKMoGBkSxmViNjZAbjCApCu9B01XVX3bSbfoB2U+i20EXptl+gFIotdKNduSikxKRGY1L/lJhSf7+NB+8579773iMvWeTk7x9WV5bWNpb39nYiM5j0Z6fj4dh+EsORib6oqwQA8DXZr1Zjt1rX67UAAJfD8x8Arp7m8z858fxPKo33BN/dGx/txeIAgK7w+R8Arp6FP//6baZQmP1jNx2MWL25Wdws1v/Wx2eW478oRykmIhfvI6qH6vHt+cLsRFrzejiKq9uN+u3NYt/x+snIxfDJ+rn5wuxkWne8vj+GGvUvhqIUU5GL79vXT7Wr74+I8SPz5yMXz/+JtSjHUtRqm/Vbk2n66++FlvkHDvIAAAAAAAAAAAAAAAAAAAAAAKAb8pmD1jnVgTRt278nn08/ahmv1x/tD/RNm/5Ac4f9gVr7+2RjLNvbvQMAAAAAAAAAAAAAAAAAAMCXYuPa9ZXFcrm0/qng/2f3n5yWc8YgaczbNmcgIj5/ijMG3/706k7nnBvnOT8XCKY7Dz3+set7Px7UTvt5q57u/Dv688bIL51yItu1NWdOuSjZdtt5m+twazVuyMrF1/Pg8Jq+OzX51sJl3eF9rf8ZuTu9+Gjr5ZuzHqdXr0gAAAAAAAAAAAAAAAAAAHB1Nb/02+uVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvNH//v0OQRC3IRkTnnHJpPYnk4Hhthiq93iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwIAAD//7QZm14=") unshare(0x2040400) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r2, 0x0, 0xe, 0x0, &(0x7f0000000940)="089198ef75ca778895e0e359940e", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) preadv(r1, &(0x7f00000010c0)=[{&(0x7f0000000c40)=""/261, 0x105}], 0x1, 0x40000004, 0x6) syz_clone(0x84008000, &(0x7f00000003c0)="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", 0xfa, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5m50.533033775s ago: executing program 0 (id=880): r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) fallocate(r0, 0x0, 0x11, 0x9) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f00000000c0), 0x2, 0x3) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timerfd_gettime(r0, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x30000008}) 5m49.779180715s ago: executing program 0 (id=894): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0x8}], 0x1, &(0x7f0000000100)=ANY=[], 0x40}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) 5m49.648857981s ago: executing program 33 (id=894): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0x8}], 0x1, &(0x7f0000000100)=ANY=[], 0x40}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) 4m43.959462075s ago: executing program 6 (id=1293): r0 = getpid() syz_pidfd_open(r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) 4m41.720810722s ago: executing program 6 (id=1305): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x21081e, &(0x7f0000000000), 0xfe, 0x51e, &(0x7f0000000880)="$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") set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x2010, 0xffffffffffffffff, 0xf8e77000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002dc0)=@newtaction={0x14, 0x1d, 0x1, 0x30bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@quota}, {@auto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x82078, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x4000001) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e21, @loopback}], 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000386dd6001012000103afffe8000000000000000000000000000bbff02000000000000000300000000000000009078000008400040000000000000"], 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x20000288, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000140079a048fe00000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x71, '\x00', 0x0, @sk_msg}, 0x94) 4m40.869894516s ago: executing program 6 (id=1317): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x7, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = shmget(0x0, 0x3000, 0x4, &(0x7f000074a000/0x3000)=nil) socket(0x2c, 0x80000, 0x5) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f00000000c0)=""/62) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0001e00ac00060411000000a4001200bc00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r5 = gettid() migrate_pages(r5, 0x9, &(0x7f0000000100)=0x8, &(0x7f0000000280)=0xfffffffffffffbff) 4m38.760568537s ago: executing program 6 (id=1331): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x21081e, &(0x7f0000000000), 0xfe, 0x51e, &(0x7f0000000880)="$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") set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x2010, 0xffffffffffffffff, 0xf8e77000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002dc0)=@newtaction={0x14, 0x1d, 0x1, 0x30bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@quota}, {@auto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x82078, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x4000001) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e21, @loopback}], 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000386dd6001012000103afffe8000000000000000000000000000bbff02000000000000000300000000000000009078000008400040000000000000"], 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x2d8, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x20000288, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000140079a048fe00000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x71, '\x00', 0x0, @sk_msg}, 0x94) 4m37.603479468s ago: executing program 6 (id=1342): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) recvmmsg(r1, &(0x7f000000cf00)=[{{0x0, 0x0, 0x0}, 0x1d}], 0x1, 0x10102, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x80) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @local}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r4], 0x108}}], 0x1, 0xc040) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061181c000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@newtaction={0xa8, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x94, 0x1, [@m_simple={0x90, 0x18, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x5a, 0x6, "1cb72a0d004a5c6799e72fccea79d240b866dc36cafcd105bb9bda437e04a39917c1b592230051b580d2ef2f1d06b4410ba3bd4e07f8e2806928104167947d9996404a71de46982432812ccbb4369e29e517f695dcda"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000880}, 0x20008084) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r6, 0x29, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 4m37.345992102s ago: executing program 6 (id=1345): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x0, 0xb, 0xad4, 0x7, 0x9}, &(0x7f0000000240)=0x98) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x28a180, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x10b800, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) setns(0xffffffffffffffff, 0x4c000080) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) ioctl$BLKDISCARDZEROES(r1, 0x127c, 0x0) pwrite64(r2, 0x0, 0x0, 0xf) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000c80)={0x3, 0x1, 0xdd, 0x5, 0xbed4, 0x0, 0x192, 0x8, 0x0, 0xfffffff7, 0x6, 0x5, 0x401, 0x9}) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000cc0)=0xffffffd5, 0x4) 4m22.051437963s ago: executing program 34 (id=1345): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x0, 0xb, 0xad4, 0x7, 0x9}, &(0x7f0000000240)=0x98) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x28a180, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x10b800, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) setns(0xffffffffffffffff, 0x4c000080) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) ioctl$BLKDISCARDZEROES(r1, 0x127c, 0x0) pwrite64(r2, 0x0, 0x0, 0xf) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000c80)={0x3, 0x1, 0xdd, 0x5, 0xbed4, 0x0, 0x192, 0x8, 0x0, 0xfffffff7, 0x6, 0x5, 0x401, 0x9}) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000cc0)=0xffffffd5, 0x4) 57.377289402s ago: executing program 5 (id=3285): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r1, r1, 0x0, 0x2000009) symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x38be, &(0x7f0000000100)={0x0, 0xbfb6, 0x8000, 0xffffffbc, 0x333}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x2, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000440)=""/66, 0x42}], 0x0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4c814) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x2000000000000216, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) preadv(0xffffffffffffffff, &(0x7f0000003840)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x6, 0xa) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000"], 0x0}, 0x94) sync() sync() bpf$PROG_LOAD(0x5, 0x0, 0x7) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x2000000, @b}}) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "5bce1506fad77a900fa9ec933dfdc9fefeee27fbbb612481c380ce8b01c38092156948751d6feee7ebaf0cb9641255f0289aef2d9f9af45766cebeda59a472e9", 0x1b}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000003c0)='logon\x00', &(0x7f0000000400)) get_mempolicy(0x0, 0x0, 0x1, &(0x7f000051f000/0x2000)=nil, 0x2) accept(r0, 0x0, &(0x7f0000000000)) 56.444701651s ago: executing program 5 (id=3288): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x48890) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 56.332609957s ago: executing program 5 (id=3289): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002a40)={'geneve1\x00', &(0x7f0000002a00)=@ethtool_stats}) 56.316917948s ago: executing program 5 (id=3291): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x7) 56.192775604s ago: executing program 5 (id=3294): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x8, r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 55.932529048s ago: executing program 5 (id=3298): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) close(r0) io_uring_setup(0xc96, &(0x7f0000000140)={0x0, 0xea27, 0x200, 0x3, 0x2d7}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x0, 0x0}, 0x8) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x49, 0x0, 0x3d) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x3, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYRES8=r8, @ANYRESHEX=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0xe, 0x0, &(0x7f00000000c0)="b994bc444b9893b04bf30981fd1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./bus\x00', 0x8800, &(0x7f0000000080), 0x9, 0x522, &(0x7f0000000ac0)="$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") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000000c0)=@filename='./bus\x00', 0x0, 0x0) 55.932302528s ago: executing program 35 (id=3298): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) close(r0) io_uring_setup(0xc96, &(0x7f0000000140)={0x0, 0xea27, 0x200, 0x3, 0x2d7}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x0, 0x0}, 0x8) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x49, 0x0, 0x3d) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x3, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYRES8=r8, @ANYRESHEX=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0xe, 0x0, &(0x7f00000000c0)="b994bc444b9893b04bf30981fd1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./bus\x00', 0x8800, &(0x7f0000000080), 0x9, 0x522, &(0x7f0000000ac0)="$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") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000000c0)=@filename='./bus\x00', 0x0, 0x0) 41.637557477s ago: executing program 8 (id=3464): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) 40.614509151s ago: executing program 8 (id=3470): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 40.526419346s ago: executing program 8 (id=3471): r0 = msgget$private(0x0, 0x200) msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0xff, 0x0) msgrcv(r0, &(0x7f0000000f40)={0x0, ""/255}, 0x107, 0xffffffffffffffff, 0x2000) msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000916a506fcf1d3f209fe6ecf2716551b95c6c4b5ff16c2e3a628bde2e45afcb40477fc4d0775f2548529dd1aec37051d57de64e84cd51e8d88cef0eed73a8cfb953a5dc45e5bfb047039df8ac783d5a6b10b5d5322cd15ff617232a95cfefee5477282e1b0f9bae623be92eda084c5a796c5e47e53ad0b5e5f5de3e3f"], 0x84, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2061, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(r4, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @private=0xa010101}], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x88, 0xfffffff2, 0x6, 0xfaa, 0x800, 0x588, 0x3ff, 0x4, 0xa0, 0x0, 0x9, 0x3, 0x2, 0x51, 0x7, 0xe, 0x4, 0xfffff3d2, 0x100, 0x9, 0x2, 0xffff, 0x10000, 0x0, 0x2, 0x5e, 0x80000000, 0x8, 0xffff, 0xffffffff, 0x4, 0x1, 0x0, 0xfffffc36, 0x5, 0x5, 0x505d, 0x3, 0xa4, 0x1ff, 0x5, 0x550, 0x3, 0xe, 0x0, 0x6, 0x9, 0x4, 0x3, 0x81, 0x7, 0x7, 0x34fa, 0x1, 0x400, 0x80000001, 0x9, 0x76e, 0x5, 0x2, 0x9, 0x6d, 0x9, 0x1000, 0x4, 0x2, 0x7f, 0x1, 0xea5a, 0x3, 0x400, 0x7, 0xfff, 0x401, 0x8, 0x34e2, 0x4, 0x100007c, 0x7, 0x5, 0x1, 0x7, 0x8, 0x359, 0x1, 0x10, 0x0, 0x200, 0x0, 0x0, 0x8000, 0xfff, 0x4, 0x104, 0xc63b, 0x6, 0x8, 0x6, 0x9, 0x1, 0x6, 0x1, 0x1, 0x5, 0x48000000, 0x200, 0x9, 0xfffffff8, 0xf, 0x2, 0x3ec0, 0x4, 0x4f, 0xe7ce, 0x4, 0x1, 0x7fffffff, 0x80000002, 0x9, 0xb, 0x4, 0x0, 0x10001, 0xfffffff9, 0x80000000, 0x7, 0xffff86c1, 0xb5, 0x7, 0x4, 0x9, 0x4, 0x4, 0x5, 0x2, 0x8, 0x1, 0x1, 0x7, 0x400, 0x3ff, 0x8, 0x0, 0x3, 0x6, 0x3, 0x10000, 0x5, 0xd6bb, 0x6, 0xfffffff2, 0x5, 0x0, 0x0, 0xc7a2, 0x1, 0x9, 0x5, 0x10000, 0x100, 0xd61, 0x8, 0x30, 0x8, 0x1, 0x9, 0x4, 0x10001, 0x1, 0x514, 0x200, 0xfffffff7, 0xdb15b858, 0xc, 0xb6a5, 0x3, 0x1, 0xfffff001, 0x7ff, 0xff, 0xd2a0, 0x1, 0x7, 0x8, 0x0, 0xfffffffb, 0x5, 0x1, 0xd, 0x4, 0x7, 0x80, 0x5, 0x0, 0x0, 0xb520, 0x7, 0x7ffb, 0x2, 0x9, 0x80000000, 0x8, 0x1, 0x9, 0x8, 0x29d, 0x8, 0x6, 0x4, 0x4a, 0x5, 0x9, 0x80, 0x5, 0x81, 0x3, 0x7fff, 0x1, 0x3, 0x633, 0x80b07, 0x8, 0xc, 0x6, 0xfffffffc, 0x2, 0x4, 0xb, 0x5, 0x9, 0x6, 0x6, 0x9, 0x5, 0x2, 0x87c, 0x504c000, 0x374e, 0x67, 0x8, 0x97f, 0x80000000, 0x5, 0xe, 0xff, 0x4, 0x0, 0x7, 0xc, 0x5, 0x6, 0x2, 0x2, 0x2, 0xd9]}]}}, @TCA_RATE={0x6, 0x5, {0xfd, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (fail_nth: 3) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) close(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRESHEX=r6, @ANYRES8, @ANYRES16], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r10}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800"/15, @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$inet(r6, &(0x7f0000002000)={0x0, 0x0, 0x0}, 0x800) 40.264610509s ago: executing program 8 (id=3473): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 40.216077291s ago: executing program 8 (id=3474): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 39.992960083s ago: executing program 8 (id=3475): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x8, r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 39.923009267s ago: executing program 36 (id=3475): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x8, r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 39.654612722s ago: executing program 7 (id=3479): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x0, 0xfff, 0xfffffffa}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) write$cgroup_pid(r1, &(0x7f00000003c0), 0x12) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 39.531083728s ago: executing program 7 (id=3480): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) 38.651962194s ago: executing program 7 (id=3483): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x51}}, 0x0}, 0x94) unshare(0x20040600) r0 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0) 38.573728638s ago: executing program 7 (id=3484): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 38.54095385s ago: executing program 7 (id=3485): r0 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f00000001c0)=0xffffff7e, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @loopback}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0xa, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}}]}, 0x50}}, 0x0) socket(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfdef}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x90, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/103) close(r0) 38.013826207s ago: executing program 7 (id=3487): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x7, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = shmget(0x0, 0x3000, 0x4, &(0x7f000074a000/0x3000)=nil) socket(0x2c, 0x80000, 0x5) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f00000000c0)=""/62) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0001e00ac00060411000000a4001200bc00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r5 = gettid() migrate_pages(r5, 0x9, &(0x7f0000000100)=0x8, &(0x7f0000000280)=0xfffffffffffffbff) 37.988106569s ago: executing program 37 (id=3487): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x7, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = shmget(0x0, 0x3000, 0x4, &(0x7f000074a000/0x3000)=nil) socket(0x2c, 0x80000, 0x5) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f00000000c0)=""/62) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0001e00ac00060411000000a4001200bc00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r5 = gettid() migrate_pages(r5, 0x9, &(0x7f0000000100)=0x8, &(0x7f0000000280)=0xfffffffffffffbff) 4.845692926s ago: executing program 1 (id=3838): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20048845}, 0x48) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="05000000"], 0x48}, 0x1, 0x0, 0x0, 0x4030}, 0x0) recvmmsg(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/50, 0x32}], 0x1}, 0x2}], 0x1, 0x12002, 0x0) 3.756437323s ago: executing program 1 (id=3849): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1ec, 0x14, 0x420, 0x70bd27, 0x25dfdbfc, {0x18, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x29, 0x1, "6f1d854fd9ee9b34ba84b472e2fa1ee47b03000b1dd62ea874875623c6b3111654cde61b55"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "dd27a16f3ddd30702ed4507bb6c43f6dac9796287cf5513d471f99b93c52fb22331eb8ab6e598b9592f93fe8ce21f32ff69d717a30fc304ed447e6d11f687b048e2f2874ade12306430d48723fcd34b47fe7e772bbeaec712031f76cef56f7ad1e420de13ab8a6bd2560ba66ddcc18f56f3ae6c3822aa289cae6d8b94961ffea656167fba46eb1d3b92bd156ce91934745034f172b69dcfcc727c1d7e4a36e36fedbc9c135c61d1cff98d787a3f4307792f64f35f6951fce7ee1e22f1ca40704b2ab2681d171b5d79be46b1734b56b72e1c7237a74e353"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "07c06065f3a8766194869c41f303477b09d85fef0a751bd6e25271b8d775ec2991c4dcda2965ee3fbc17e0ab4f67e98b986b9c05a48f4fa95190bcf3a20000eddaa82ee59a0b02c7051d1a0c8bf723d9b93951668e39f99667c998af14f61f7450aa53a3a0eab6f3b4f0bd294c4a42cdebcd92c40ceb996b8c0746202d5803eab5a26f92ca5d238e3096861006084480d44fb307006659bb08c5bc22e9a705d605bed062a451b848f6f93d99bd89180f0902d99642a91c6e0662571a7b66fec53426df64f1bd187112"}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x1040}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x101, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x64, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xb2) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x10, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xdc6c}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x4, 0x1, 0x5, 0x4, 0x2, 0x50, 0x8}, @alu={0x4, 0x59b95f2e95d7fb9d, 0x6, 0x2, 0x6, 0xfffffffffffffff8, 0x8}, @map_fd={0x18, 0x6}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x800}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) r6 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x1, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r6, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xe, 0x3, "91abc12404cf378042f2"}]}], {0x14}}, 0x58}}, 0x0) 3.756071383s ago: executing program 4 (id=3850): r0 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f00000001c0)=0xffffff7e, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @loopback}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000001c00010029bd7000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="80007e0a0a000200aaaa"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0xa, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}}]}, 0x50}}, 0x0) socket(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfdef}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x90, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 2.966197794s ago: executing program 4 (id=3854): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r1, r1, 0x0, 0x2000009) symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_uring_setup(0x38be, &(0x7f0000000100)={0x0, 0xbfb6, 0x8000, 0xffffffbc, 0x333}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x2, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000440)=""/66, 0x42}], 0x0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4c814) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x2000000000000216, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9500, 0x0) preadv(r5, &(0x7f0000003840)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x6, 0xa) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000"], 0x0}, 0x94) sync() sync() bpf$PROG_LOAD(0x5, 0x0, 0x7) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x2000000, @b}}) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "5bce1506fad77a900fa9ec933dfdc9fefeee27fbbb612481c380ce8b01c38092156948751d6feee7ebaf0cb9641255f0289aef2d9f9af45766cebeda59a472e9", 0x1b}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000003c0)='logon\x00', &(0x7f0000000400)) get_mempolicy(0x0, 0x0, 0x1, &(0x7f000051f000/0x2000)=nil, 0x2) accept(r0, 0x0, &(0x7f0000000000)) 1.895839451s ago: executing program 4 (id=3859): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000000000000000000000000000000000000000000105"], 0x0, 0x42}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.792069776s ago: executing program 2 (id=3861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a300000000050000000060a010400000000000000000100000208000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000000c080002400000000014000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x3, 0x0, 0x0, 0x0, 0x7, 0xf00, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x8}, 0x106200, 0x10000, 0x20da, 0x3, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, r2, 0xb) modify_ldt$write2(0x11, &(0x7f0000000000)={0xb1, 0xffffffffffffffff, 0x4000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x20000000, {0x1, 0xff, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x1d, r6, 0x2, {0x2, 0x0, 0x4}}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.672617592s ago: executing program 1 (id=3862): r0 = epoll_create1(0x0) r1 = socket(0x23, 0x80805, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getrandom(0xfffffffffffffffc, 0x0, 0x2) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x42) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x4, 0xbff5, 0x0, 0x6, 0x8, "eff5e85388a0539be9e9449ddd028dc19de2b6"}) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) listen(r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x101001, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close_range(r10, 0xffffffffffffffff, 0x2) dup3(r6, r10, 0x80000) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') 1.672426752s ago: executing program 2 (id=3863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80512, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x10a2e0, 0x10000, 0x4, 0x1, 0x40000008, 0x1, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) 1.637596624s ago: executing program 1 (id=3865): r0 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f00000001c0)=0xffffff7e, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000001c00010029bd7000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="80007e0a0a000200aaaa"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0xa, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}}]}, 0x50}}, 0x0) socket(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfdef}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x90, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/103) close(r0) 1.576662287s ago: executing program 4 (id=3866): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x4}, 0x10, 0x0, 0xfffffffd, 0x3, 0x9, 0x8001, 0x7ffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000002}, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x3b35}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000002ceeb519652a497c989a99eb1f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbff, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0xffffffffffffff95}, {0x3}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0xc277}], 0x2000011f, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.404341126s ago: executing program 3 (id=3867): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x700}, 0x10}, 0x1, 0x7, 0x34000}, 0x0) 1.320628441s ago: executing program 3 (id=3868): ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000100)=0x9) 1.285362703s ago: executing program 3 (id=3869): r0 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f00000001c0)=0xffffff7e, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @loopback}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000001c00010029bd7000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="80007e0a0a000200aaaa"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0xa, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}}]}, 0x50}}, 0x0) socket(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfdef}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x90, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 1.190349158s ago: executing program 2 (id=3870): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000040)=0x2) 1.128691611s ago: executing program 2 (id=3871): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x4}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d3f04bb4604aed32226e529c8812223fc4797c733f8176720c3ad91b943b1ad6f6027b3cc582e5502433b313659a57fa991300b16a4529482443b67e8a41483837b5f9f422cb9d69b64f69b4bb9d3fdc2907e8201322498ed0448ce67f43a68a92938a420012241f6712e9dc52e38a6aed925779287435d8441c3f33760552e488dc42bcadd66a5e1643c45095a081be0967", 0x92}], 0x1}, 0x7101}], 0x1, 0x4001c00) 1.128355711s ago: executing program 2 (id=3872): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x615a}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x6400, 0x0, 0x3) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004002c4e2d", @ANYRESOCT], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) 1.104303472s ago: executing program 1 (id=3873): r0 = geteuid() quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000040)=@rnullb, r0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@abort}]}, 0x5, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000003c0)='.\x00', 0x1b4a47c, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES16, @ANYRES64, @ANYBLOB="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", @ANYRESDEC, @ANYRES8, @ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRESDEC=0x0, @ANYRES32, @ANYRES16], 0x5, 0x0, &(0x7f0000000000)) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 1.018244727s ago: executing program 3 (id=3874): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffffdbe}]}) geteuid() r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f00000000c0)={0x1000, 0xb65, 0x820, 0x4, 0x4, "f7744f7014e8c2d9b5cd3bfcfd0a24402d7ac2", 0x4, 0x9c1}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 969.404419ms ago: executing program 4 (id=3876): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000000000000000000000000000000000000000000105"], 0x0, 0x42}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 915.367602ms ago: executing program 3 (id=3877): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x37}, 0x28) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000600000000000000000000020300000000000000000000090000000004"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) r3 = dup(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000"], 0x0, 0x6c, 0x0, 0x1, 0x3}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000003c0)=0x40000004) dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000002c0), &(0x7f00000004c0)=0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000, 0x0, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="38000000031401002abd70000cdcdf250900020073797a31000000000800410072786500140033007866726d300000000000000000000e00b36dfc44f9a75b66bddf12d6a07fcf92b8017d6418d88bff3e90"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="75a1d70300", 0x5, 0xfffffffffffffffe) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/16, 0x10}], 0x1, &(0x7f0000000080)=""/65, 0x41}, 0xb}, {{&(0x7f0000000100)=@can, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000500)=""/188, 0xbc}], 0x2}, 0x2}], 0x2, 0x40000000, &(0x7f00000006c0)) 819.276547ms ago: executing program 9 (id=3878): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x37}, 0x28) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000000000203000000000000000000000900000000040000000000001202000000003061005f"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) r3 = dup(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000"], 0x0, 0x6c, 0x0, 0x1, 0x3}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000003c0)=0x40000004) dup(0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000002c0), &(0x7f00000004c0)=0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000, 0x0, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="38000000031401002abd70000cdcdf250900020073797a31000000000800410072786500140033007866726d300000000000000000000e00b36dfc44f9a75b66bddf12d6a07fcf92b8017d6418d88bff3e"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="75a1d70300", 0x5, 0xfffffffffffffffe) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/16, 0x10}], 0x1, &(0x7f0000000080)=""/65, 0x41}, 0xb}, {{&(0x7f0000000100)=@can, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000500)=""/188, 0xbc}], 0x2}, 0x2}], 0x2, 0x40000000, &(0x7f00000006c0)) 754.832001ms ago: executing program 1 (id=3879): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x615a}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x6400, 0x0, 0x3) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004002c4e2d", @ANYRESOCT], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) 641.497236ms ago: executing program 3 (id=3880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80512, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x10a2e0, 0x10000, 0x4, 0x1, 0x40000008, 0x1, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r2, r2, &(0x7f0000000040)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) 639.358047ms ago: executing program 4 (id=3881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r2, r2, &(0x7f0000000040)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) 600.285669ms ago: executing program 9 (id=3882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000002100)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xf162, @remote, 0x9}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000003c0)="15", 0x1}], 0x1}}], 0x1, 0x4) 491.801024ms ago: executing program 9 (id=3883): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x700, 0x400300, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1002, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd, 0xc0000001}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}]}, 0x50}, 0x1, 0x7}, 0x0) 368.498601ms ago: executing program 9 (id=3884): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 353.327561ms ago: executing program 9 (id=3885): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20048845}, 0x48) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="05000000"], 0x48}, 0x1, 0x0, 0x0, 0x4030}, 0x0) recvmmsg(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/50, 0x32}], 0x1}, 0x2}], 0x1, 0x12002, 0x0) 143.869322ms ago: executing program 9 (id=3886): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/52) 80.964256ms ago: executing program 38 (id=3886): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/52) 0s ago: executing program 2 (id=3888): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x11e, 0x4088c0) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/52) kernel console output (not intermixed with test programs): T4-fs (loop4): error count since last fsck: 1 [ 453.613823][ C1] EXT4-fs (loop4): initial error at time 2000000176: xattr_find_entry:337: inode 15 [ 453.613869][ C1] EXT4-fs (loop4): last error at time 2000000176: xattr_find_entry:337: inode 15 [ 453.645578][T14751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.652134][ T8607] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.696667][T14642] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 453.709208][T14642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.736853][T12937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.752417][T14642] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 453.765329][T14642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.797587][T14642] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 453.807833][T14642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.817283][ T3040] 8021q: adding VLAN 0 to HW filter on device eth15 [ 453.825630][T14642] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 453.834808][T14642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 453.853170][T14642] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.860413][T14642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.868565][T14642] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.875775][T14642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.884423][ T3601] usb usb16-port1: attempt power cycle [ 453.908681][T14642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.920801][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.931431][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.946104][T14642] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.959507][ T8958] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.966629][ T8958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.984120][ T8958] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.991258][ T8958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.029452][ T3040] 8021q: adding VLAN 0 to HW filter on device eth16 [ 454.071568][T14642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.197407][T14642] veth0_vlan: entered promiscuous mode [ 454.205795][T14642] veth1_vlan: entered promiscuous mode [ 454.222740][T14642] veth0_macvtap: entered promiscuous mode [ 454.231292][T14642] veth1_macvtap: entered promiscuous mode [ 454.244504][T14642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.266512][T14642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.280670][ T8956] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.289674][ T8956] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.300082][ T8956] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.309670][ T8956] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.401596][T14823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3331'. [ 454.446053][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3332'. [ 454.469483][T14830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3333'. [ 454.481075][T14830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3333'. [ 454.540927][T14831] xfrm0 speed is unknown, defaulting to 1000 [ 454.549155][T14833] EXT4-fs: Ignoring removed bh option [ 454.560912][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3335'. [ 454.585406][T14833] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.684754][ T8607] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.749044][T14840] bridge0: entered promiscuous mode [ 454.766013][T14840] macvlan2: entered allmulticast mode [ 454.776232][T14844] set_capacity_and_notify: 3 callbacks suppressed [ 454.776278][T14844] loop7: detected capacity change from 0 to 512 [ 454.782361][T14840] bridge0: entered allmulticast mode [ 454.794885][T14842] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 454.804225][T14844] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 454.823566][T14840] bridge0: port 1(macvlan2) entered blocking state [ 454.831276][T14844] EXT4-fs error (device loop7): xattr_find_entry:337: inode #15: comm syz.7.3336: corrupted xattr entries [ 454.857042][T14840] bridge0: port 1(macvlan2) entered disabled state [ 454.867083][T14844] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 454.867555][T14844] EXT4-fs (loop7): 1 truncate cleaned up [ 454.877150][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 454.877176][ C1] EXT4-fs (loop7): initial error at time 2000000177: xattr_find_entry:337: inode 15 [ 454.877206][ C1] EXT4-fs (loop7): last error at time 2000000177: xattr_find_entry:337: inode 15 [ 454.911858][T14840] bridge0: left allmulticast mode [ 454.924076][T14840] bridge0: left promiscuous mode [ 454.937996][T14844] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.988398][T11997] usb usb8-port1: unable to enumerate USB device [ 455.092697][ T8607] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.140202][T14856] loop2: detected capacity change from 0 to 4096 [ 455.284903][T14856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.434240][T14870] loop7: detected capacity change from 0 to 16384 [ 455.748419][ T3601] usb usb16-port1: unable to enumerate USB device [ 456.529481][T12402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.395958][T14907] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 457.402582][T14907] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 457.432117][T14911] loop7: detected capacity change from 0 to 512 [ 457.451316][T14911] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 457.477555][T14907] vhci_hcd vhci_hcd.0: Device attached [ 457.485168][T14911] EXT4-fs error (device loop7): xattr_find_entry:337: inode #15: comm syz.7.3356: corrupted xattr entries [ 457.503785][T14911] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 457.505425][T14911] EXT4-fs (loop7): 1 truncate cleaned up [ 457.514908][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 457.514936][ C0] EXT4-fs (loop7): initial error at time 2000000180: xattr_find_entry:337: inode 15 [ 457.514974][ C0] EXT4-fs (loop7): last error at time 2000000180: xattr_find_entry:337: inode 15 [ 457.561499][T14911] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.644558][T14913] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 457.685019][T14922] __nla_validate_parse: 2 callbacks suppressed [ 457.685037][T14922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3359'. [ 457.720081][T14922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3359'. [ 457.748367][ T1031] usb 8-1: SetAddress Request (6) to port 0 [ 457.763628][ T1031] usb 8-1: new SuperSpeed USB device number 6 using vhci_hcd [ 457.778107][ T8607] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.827528][T14908] vhci_hcd: connection reset by peer [ 457.844013][ T8945] vhci_hcd vhci_hcd.3: stop threads [ 457.853607][ T8945] vhci_hcd vhci_hcd.3: release socket [ 457.874101][ T8945] vhci_hcd vhci_hcd.3: disconnect device [ 457.973048][T14929] syz1: rxe_newlink: already configured on xfrm0 [ 458.033082][T14924] xfrm0 speed is unknown, defaulting to 1000 [ 458.132838][T14932] loop7: detected capacity change from 0 to 4096 [ 458.154026][T14932] EXT4-fs: Ignoring removed bh option [ 458.183788][T14932] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.302297][ T8607] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.661537][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3370'. [ 458.705509][T14949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3370'. [ 458.768599][T14951] netlink: 'syz.4.3371': attribute type 1 has an invalid length. [ 458.859341][T14954] loop4: detected capacity change from 0 to 512 [ 458.889796][T14954] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 458.916642][T14954] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.3372: corrupted xattr entries [ 458.957938][T14954] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 458.958169][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 458.974076][ C0] EXT4-fs (loop4): initial error at time 2000000181: xattr_find_entry:337: inode 15 [ 458.983893][ C0] EXT4-fs (loop4): last error at time 2000000181: xattr_find_entry:337: inode 15 [ 459.009792][T14954] EXT4-fs (loop4): 1 truncate cleaned up [ 459.019420][T14954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.127925][T12937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.139417][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3376'. [ 459.171236][T14961] loop3: detected capacity change from 0 to 4096 [ 459.193373][T14961] EXT4-fs: Ignoring removed bh option [ 459.205847][T14961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.276233][T13450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.385955][T14977] FAULT_INJECTION: forcing a failure. [ 459.385955][T14977] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 459.419037][T14977] CPU: 1 UID: 0 PID: 14977 Comm: syz.3.3379 Tainted: G W syzkaller #0 PREEMPT(full) [ 459.419074][T14977] Tainted: [W]=WARN [ 459.419087][T14977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 459.419139][T14977] Call Trace: [ 459.419148][T14977] [ 459.419159][T14977] __dump_stack+0x1d/0x30 [ 459.419188][T14977] dump_stack_lvl+0x95/0xd0 [ 459.419279][T14977] dump_stack+0x15/0x1b [ 459.419307][T14977] should_fail_ex+0x263/0x280 [ 459.419343][T14977] should_fail_alloc_page+0xf2/0x100 [ 459.419447][T14977] __alloc_frozen_pages_noprof+0x108/0x350 [ 459.419485][T14977] alloc_pages_mpol+0xb3/0x260 [ 459.419619][T14977] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 459.419714][T14977] do_wp_page+0x70e/0x2040 [ 459.419744][T14977] ? __rcu_read_lock+0x36/0x50 [ 459.419775][T14977] handle_mm_fault+0x8b9/0x2e70 [ 459.419838][T14977] do_user_addr_fault+0x3fd/0x1050 [ 459.419874][T14977] exc_page_fault+0x62/0xa0 [ 459.419910][T14977] asm_exc_page_fault+0x26/0x30 [ 459.419955][T14977] RIP: 0010:__put_user_4+0xd/0x20 [ 459.419990][T14977] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 459.420011][T14977] RSP: 0018:ffffc90002c0fd80 EFLAGS: 00050202 [ 459.420080][T14977] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000004 [ 459.420094][T14977] RDX: 0000000000000791 RSI: 0000000000000000 RDI: ffffc90002c0fe1c [ 459.420108][T14977] RBP: ffff888103ce1078 R08: 0001c90002c0fe1f R09: 0000000000000000 [ 459.420185][T14977] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000080084504 [ 459.420198][T14977] R13: 0000200000000004 R14: 0000000000000000 R15: ffff88810515d800 [ 459.420219][T14977] evdev_ioctl_handler+0xc5a/0x16d0 [ 459.420260][T14977] ? __pfx_evdev_ioctl+0x10/0x10 [ 459.420335][T14977] evdev_ioctl+0x24/0x30 [ 459.420367][T14977] __se_sys_ioctl+0xce/0x140 [ 459.420494][T14977] __x64_sys_ioctl+0x43/0x50 [ 459.420598][T14977] x64_sys_call+0x1563/0x3020 [ 459.420629][T14977] do_syscall_64+0x12c/0x3b0 [ 459.420668][T14977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.420727][T14977] RIP: 0033:0x7fef5b7cc819 [ 459.420744][T14977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.420764][T14977] RSP: 002b:00007fef5a227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.420786][T14977] RAX: ffffffffffffffda RBX: 00007fef5ba45fa0 RCX: 00007fef5b7cc819 [ 459.420802][T14977] RDX: 0000200000000000 RSI: 0000000080084504 RDI: 0000000000000003 [ 459.420882][T14977] RBP: 00007fef5a227090 R08: 0000000000000000 R09: 0000000000000000 [ 459.420951][T14977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.420965][T14977] R13: 00007fef5ba46038 R14: 00007fef5ba45fa0 R15: 00007ffc85f0f088 [ 459.420986][T14977] [ 459.728251][T14979] netlink: 'syz.7.3382': attribute type 4 has an invalid length. [ 459.736480][T14979] netlink: 'syz.7.3382': attribute type 30 has an invalid length. [ 459.905643][T14990] syzkaller0: entered promiscuous mode [ 459.929875][T14990] syzkaller0: entered allmulticast mode [ 460.054516][T15000] loop7: detected capacity change from 0 to 4096 [ 460.063533][T15000] EXT4-fs: Ignoring removed bh option [ 460.080485][T15000] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.141456][T15004] xfrm0 speed is unknown, defaulting to 1000 [ 460.179772][ T8607] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.236039][T15010] program syz.2.3394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.263290][T15010] FAULT_INJECTION: forcing a failure. [ 460.263290][T15010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.297457][T15010] CPU: 0 UID: 0 PID: 15010 Comm: syz.2.3394 Tainted: G W syzkaller #0 PREEMPT(full) [ 460.297614][T15010] Tainted: [W]=WARN [ 460.297623][T15010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 460.297637][T15010] Call Trace: [ 460.297644][T15010] [ 460.297651][T15010] __dump_stack+0x1d/0x30 [ 460.297696][T15010] dump_stack_lvl+0x95/0xd0 [ 460.297726][T15010] dump_stack+0x15/0x1b [ 460.297753][T15010] should_fail_ex+0x263/0x280 [ 460.297783][T15010] should_fail+0xb/0x20 [ 460.297820][T15010] should_fail_usercopy+0x1a/0x20 [ 460.297855][T15010] _copy_from_user+0x1c/0xb0 [ 460.297928][T15010] scsi_ioctl+0x139b/0x1750 [ 460.297961][T15010] ? avc_has_perm_noaudit+0xab/0x130 [ 460.297993][T15010] ? avc_has_perm+0x101/0x190 [ 460.298030][T15010] ? __file_has_perm+0x3d9/0x430 [ 460.298062][T15010] ? do_vfs_ioctl+0x84f/0xe70 [ 460.298126][T15010] sg_ioctl+0xeb3/0x1340 [ 460.298153][T15010] ? mutex_lock+0x57/0x90 [ 460.298183][T15010] ? __pfx_sg_ioctl+0x10/0x10 [ 460.298203][T15010] __se_sys_ioctl+0xce/0x140 [ 460.298273][T15010] __x64_sys_ioctl+0x43/0x50 [ 460.298340][T15010] x64_sys_call+0x1563/0x3020 [ 460.298372][T15010] do_syscall_64+0x12c/0x3b0 [ 460.298409][T15010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.298502][T15010] RIP: 0033:0x7f3b5105c819 [ 460.298520][T15010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.298601][T15010] RSP: 002b:00007f3b4faaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.298629][T15010] RAX: ffffffffffffffda RBX: 00007f3b512d5fa0 RCX: 00007f3b5105c819 [ 460.298647][T15010] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 460.298660][T15010] RBP: 00007f3b4faaf090 R08: 0000000000000000 R09: 0000000000000000 [ 460.298673][T15010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.298711][T15010] R13: 00007f3b512d6038 R14: 00007f3b512d5fa0 R15: 00007ffe236cca48 [ 460.298730][T15010] [ 460.629426][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3397'. [ 460.650717][T15019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15019 comm=syz.2.3397 [ 460.680867][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3395'. [ 460.813401][T15024] netlink: 'syz.7.3398': attribute type 4 has an invalid length. [ 460.821624][T15024] netlink: 'syz.7.3398': attribute type 30 has an invalid length. [ 460.913747][T15022] program syz.2.3399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.092746][T15028] loop2: detected capacity change from 0 to 512 [ 461.125646][T15028] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 461.208708][T15028] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.3400: corrupted xattr entries [ 461.276654][T15028] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 461.277023][T15028] EXT4-fs (loop2): 1 truncate cleaned up [ 461.286403][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 461.286424][ C0] EXT4-fs (loop2): initial error at time 2000000184: xattr_find_entry:337: inode 15 [ 461.286469][ C0] EXT4-fs (loop2): last error at time 2000000184: xattr_find_entry:337: inode 15 [ 461.383999][T15038] loop8: detected capacity change from 0 to 4096 [ 461.400049][T15038] EXT4-fs: Ignoring removed bh option [ 461.450892][T15038] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.480177][T15028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.564313][T14642] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.965607][T15056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3412'. [ 462.149468][T15062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3415'. [ 462.190100][T15064] loop3: detected capacity change from 0 to 1024 [ 462.198471][T15064] EXT4-fs: Ignoring removed bh option [ 462.231296][T12402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.247432][T15064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.280897][T15069] loop7: detected capacity change from 0 to 512 [ 462.291084][T15074] loop4: detected capacity change from 0 to 512 [ 462.302773][T15069] EXT4-fs: Ignoring removed mblk_io_submit option [ 462.312648][T15074] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 462.323513][T15069] EXT4-fs: Ignoring removed mblk_io_submit option [ 462.363294][T15074] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.3417: corrupted xattr entries [ 462.369196][T15069] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 4: comm syz.7.3418: lblock 0 mapped to illegal pblock 4 (length 1) [ 462.379681][T15074] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 462.396553][T15069] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 462.403246][T15074] EXT4-fs (loop4): 1 truncate cleaned up [ 462.407588][T13450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.415051][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 462.415069][ C0] EXT4-fs (loop4): initial error at time 2000000185: xattr_find_entry:337: inode 15 [ 462.415103][ C0] EXT4-fs (loop4): last error at time 2000000185: xattr_find_entry:337: inode 15 [ 462.416337][T15069] EXT4-fs warning (device loop7): dx_probe:791: inode #2: lblock 0: comm syz.7.3418: error -117 reading directory block [ 462.420939][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 462.430990][T15074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.437056][ C1] EXT4-fs (loop7): initial error at time 2000000185: ext4_map_blocks:791: inode 2: block 4 [ 462.447865][T15069] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 462.456612][ C1] EXT4-fs (loop7): last error at time 2000000185: ext4_map_blocks:791: inode 2: block 4 [ 462.521196][T15069] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.538997][T15084] FAULT_INJECTION: forcing a failure. [ 462.538997][T15084] name failslab, interval 1, probability 0, space 0, times 0 [ 462.559635][T15084] CPU: 1 UID: 0 PID: 15084 Comm: syz.2.3421 Tainted: G W syzkaller #0 PREEMPT(full) [ 462.559701][T15084] Tainted: [W]=WARN [ 462.559711][T15084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 462.559726][T15084] Call Trace: [ 462.559756][T15084] [ 462.559832][T15084] __dump_stack+0x1d/0x30 [ 462.559864][T15084] dump_stack_lvl+0x95/0xd0 [ 462.559894][T15084] dump_stack+0x15/0x1b [ 462.559923][T15084] should_fail_ex+0x263/0x280 [ 462.560054][T15084] should_failslab+0x8c/0xb0 [ 462.560078][T15084] __kmalloc_noprof+0xb8/0x4d0 [ 462.560104][T15084] ? bpf_test_init+0x86/0x130 [ 462.560175][T15084] bpf_test_init+0x86/0x130 [ 462.560200][T15084] bpf_prog_test_run_skb+0x2a9/0x11c0 [ 462.560269][T15084] ? kstrtoull+0x111/0x140 [ 462.560371][T15084] ? __rcu_read_unlock+0x4e/0x70 [ 462.560402][T15084] ? __fget_files+0x184/0x1c0 [ 462.560425][T15084] ? __rcu_read_unlock+0x4e/0x70 [ 462.560491][T15084] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 462.560568][T15084] bpf_prog_test_run+0x204/0x340 [ 462.560604][T15084] __sys_bpf+0x52e/0x7e0 [ 462.560662][T15084] __x64_sys_bpf+0x41/0x50 [ 462.560687][T15084] x64_sys_call+0x10cb/0x3020 [ 462.560733][T15084] do_syscall_64+0x12c/0x3b0 [ 462.560848][T15084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.560873][T15084] RIP: 0033:0x7f3b5105c819 [ 462.560892][T15084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.560971][T15084] RSP: 002b:00007f3b4faaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 462.560993][T15084] RAX: ffffffffffffffda RBX: 00007f3b512d5fa0 RCX: 00007f3b5105c819 [ 462.561010][T15084] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 462.561026][T15084] RBP: 00007f3b4faaf090 R08: 0000000000000000 R09: 0000000000000000 [ 462.561043][T15084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.561066][T15084] R13: 00007f3b512d6038 R14: 00007f3b512d5fa0 R15: 00007ffe236cca48 [ 462.561143][T15084] [ 462.621720][T15089] RDS: rds_bind could not find a transport for ::4002:0:20:0, load rds_tcp or rds_rdma? [ 462.685590][T15090] xfrm0 speed is unknown, defaulting to 1000 [ 462.758444][T15089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.829791][T15089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.844141][ T1031] usb 8-1: device descriptor read/8, error -110 [ 462.858881][T15097] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3424'. [ 462.896517][T15101] loop8: detected capacity change from 0 to 164 [ 462.968313][ T1031] usb 8-1: new SuperSpeed USB device number 6 using vhci_hcd [ 463.008210][ T1031] usb 8-1: enqueue for inactive port 0 [ 463.027061][ T1031] usb 8-1: enqueue for inactive port 0 [ 463.032272][T15089] Set syz1 is full, maxelem 6117 reached [ 463.040158][ T1031] usb 8-1: enqueue for inactive port 0 [ 463.042512][T15110] bridge_slave_0: left allmulticast mode [ 463.051859][T15110] bridge_slave_0: left promiscuous mode [ 463.058079][T15110] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.063195][ T8945] nci: nci_ntf_packet: unknown ntf opcode 0x26 [ 463.074701][T15110] bridge_slave_1: left allmulticast mode [ 463.088350][T15110] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.104710][T15110] bond0: (slave bond_slave_0): Releasing backup interface [ 463.115443][T15110] bond0: (slave bond_slave_1): Releasing backup interface [ 463.129070][T15110] team0: Port device team_slave_0 removed [ 463.138923][T15110] team0: Port device team_slave_1 removed [ 463.146275][T15110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.154208][T15110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.164360][T15110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.172011][T15110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.182960][T15110] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 463.273465][T15119] netdevsim netdevsim8: Direct firmware load for ..€ failed with error -2 [ 463.286672][ T28] audit: type=1400 audit(2000000186.280:1143): avc: denied { bind } for pid=15118 comm="syz.8.3433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 463.310172][T15122] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 463.314929][ T28] audit: type=1400 audit(2000000186.280:1144): avc: denied { name_bind } for pid=15118 comm="syz.8.3433" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 463.337746][ T28] audit: type=1400 audit(2000000186.280:1145): avc: denied { node_bind } for pid=15118 comm="syz.8.3433" saddr=fc00::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 463.639516][T15127] bridge0: entered promiscuous mode [ 463.645010][T15127] macvlan2: entered allmulticast mode [ 463.650704][T15127] bridge0: entered allmulticast mode [ 463.657146][T15127] bridge0: port 1(macvlan2) entered blocking state [ 463.664000][T15127] bridge0: port 1(macvlan2) entered disabled state [ 463.672465][T15127] bridge0: left allmulticast mode [ 463.677607][T15127] bridge0: left promiscuous mode [ 463.733470][T15129] loop4: detected capacity change from 0 to 512 [ 463.740871][T15129] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 463.753026][T15129] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.3437: corrupted xattr entries [ 463.765111][T15129] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 463.765405][T15129] EXT4-fs (loop4): 1 truncate cleaned up [ 463.775135][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 463.775181][ C0] EXT4-fs (loop4): initial error at time 2000000186: xattr_find_entry:337: inode 15 [ 463.775214][ C0] EXT4-fs (loop4): last error at time 2000000186: xattr_find_entry:337: inode 15 [ 463.795702][T15106] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 463.879722][T15138] loop7: detected capacity change from 0 to 164 [ 463.886719][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3440'. [ 463.953801][T15144] loop3: detected capacity change from 0 to 128 [ 464.053006][T15146] syz1: rxe_newlink: already configured on xfrm0 [ 464.073902][T15150] syzkaller0: entered promiscuous mode [ 464.079522][T15150] syzkaller0: entered allmulticast mode [ 464.118600][ T1031] usb usb8-port1: attempt power cycle [ 464.263142][T15160] tipc: Enabling of bearer rejected, failed to enable media [ 464.567564][T15180] FAULT_INJECTION: forcing a failure. [ 464.567564][T15180] name failslab, interval 1, probability 0, space 0, times 0 [ 464.654419][T15180] CPU: 0 UID: 0 PID: 15180 Comm: syz.2.3452 Tainted: G W syzkaller #0 PREEMPT(full) [ 464.654484][T15180] Tainted: [W]=WARN [ 464.654493][T15180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 464.654508][T15180] Call Trace: [ 464.654517][T15180] [ 464.654527][T15180] __dump_stack+0x1d/0x30 [ 464.654569][T15180] dump_stack_lvl+0x95/0xd0 [ 464.654594][T15180] dump_stack+0x15/0x1b [ 464.654673][T15180] should_fail_ex+0x263/0x280 [ 464.654709][T15180] should_failslab+0x8c/0xb0 [ 464.654730][T15180] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 464.654809][T15180] ? sidtab_sid2str_get+0xa0/0x130 [ 464.654838][T15180] kmemdup_noprof+0x2b/0x70 [ 464.654876][T15180] sidtab_sid2str_get+0xa0/0x130 [ 464.655039][T15180] security_sid_to_context_core+0x1eb/0x2e0 [ 464.655101][T15180] security_sid_to_context+0x27/0x40 [ 464.655127][T15180] selinux_lsm_getattr+0x1c2/0x230 [ 464.655164][T15180] selinux_getselfattr+0x4d/0xd0 [ 464.655214][T15180] security_getselfattr+0x24d/0x500 [ 464.655247][T15180] __x64_sys_lsm_get_self_attr+0x51/0x60 [ 464.655334][T15180] x64_sys_call+0x1b6f/0x3020 [ 464.655364][T15180] do_syscall_64+0x12c/0x3b0 [ 464.655403][T15180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.655555][T15180] RIP: 0033:0x7f3b5105c819 [ 464.655577][T15180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.655600][T15180] RSP: 002b:00007f3b4faaf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 464.655626][T15180] RAX: ffffffffffffffda RBX: 00007f3b512d5fa0 RCX: 00007f3b5105c819 [ 464.655664][T15180] RDX: 00002000000001c0 RSI: 0000200000000340 RDI: 0000000000000064 [ 464.655682][T15180] RBP: 00007f3b4faaf090 R08: 0000000000000000 R09: 0000000000000000 [ 464.655699][T15180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.655749][T15180] R13: 00007f3b512d6038 R14: 00007f3b512d5fa0 R15: 00007ffe236cca48 [ 464.655773][T15180] [ 465.178699][T15191] set_capacity_and_notify: 1 callbacks suppressed [ 465.178717][T15191] loop3: detected capacity change from 0 to 4096 [ 465.193453][T15191] EXT4-fs: Ignoring removed bh option [ 465.665509][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3457'. [ 465.706978][T15234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3457'. [ 465.829552][T15243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3460'. [ 465.839950][T15238] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 465.949893][T15246] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 466.007711][T15248] syzkaller0: entered promiscuous mode [ 466.013621][T15248] syzkaller0: entered allmulticast mode [ 466.565087][T15271] netlink: 'syz.4.3468': attribute type 4 has an invalid length. [ 466.573285][T15271] netlink: 'syz.4.3468': attribute type 30 has an invalid length. [ 466.586592][T15269] netlink: 'syz.3.3467': attribute type 4 has an invalid length. [ 466.594348][T15269] netlink: 'syz.3.3467': attribute type 30 has an invalid length. [ 467.131945][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3470'. [ 467.152110][T15273] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3470'. [ 467.385220][ T1031] usb usb8-port1: unable to enumerate USB device [ 467.461425][T15279] loop7: detected capacity change from 0 to 512 [ 467.486599][T15279] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 467.599250][T15279] EXT4-fs error (device loop7): xattr_find_entry:337: inode #15: comm syz.7.3472: corrupted xattr entries [ 467.622139][T15279] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 467.622426][T15279] EXT4-fs (loop7): 1 truncate cleaned up [ 467.631870][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 467.631888][ C0] EXT4-fs (loop7): initial error at time 2000000190: xattr_find_entry:337: inode 15 [ 467.631915][ C0] EXT4-fs (loop7): last error at time 2000000190: xattr_find_entry:337: inode 15 [ 468.023172][T15294] loop4: detected capacity change from 0 to 512 [ 468.038273][T15294] msdos: Bad value for 'time_offset' [ 468.075492][T15285] xfrm0 speed is unknown, defaulting to 1000 [ 468.086457][ T28] audit: type=1400 audit(2000000191.090:1146): avc: denied { create } for pid=15293 comm="syz.4.3478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=appletalk_socket permissive=1 [ 468.162608][ T28] audit: type=1400 audit(2000000191.160:1147): avc: denied { create } for pid=15293 comm="syz.4.3478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 468.310801][ T28] audit: type=1400 audit(2000000191.180:1148): avc: denied { setopt } for pid=15293 comm="syz.4.3478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 468.358687][T15285] chnl_net:caif_netlink_parms(): no params data found [ 468.368995][T15306] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 468.375714][T15306] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 468.479476][T15306] vhci_hcd vhci_hcd.0: Device attached [ 468.525387][T15285] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.525444][T15285] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.525533][T15285] bridge_slave_0: entered allmulticast mode [ 468.534534][T15285] bridge_slave_0: entered promiscuous mode [ 468.536997][T15285] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.537103][T15285] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.537237][T15285] bridge_slave_1: entered allmulticast mode [ 468.537837][T15285] bridge_slave_1: entered promiscuous mode [ 468.572070][T15285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.574953][T15285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.606257][T15285] team0: Port device team_slave_0 added [ 468.608961][T15285] team0: Port device team_slave_1 added [ 468.643563][T15285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.643582][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.643616][T15285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.645845][T15285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.645859][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.645885][T15285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.685654][T15285] hsr_slave_0: entered promiscuous mode [ 468.686136][T15285] hsr_slave_1: entered promiscuous mode [ 468.686450][T15285] debugfs: 'hsr0' already exists in 'hsr' [ 468.686466][T15285] Cannot create hsr debugfs directory [ 468.758853][ T1031] usb 6-1: SetAddress Request (2) to port 0 [ 468.758883][ T1031] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 468.823369][T15285] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 468.826861][T15285] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.827401][T15285] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 468.829886][T15285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.830548][T15285] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 468.832541][T15285] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.833143][T15285] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 468.835164][T15285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.852843][T15285] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.852882][T15285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.853036][T15285] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.853084][T15285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.878870][T15307] vhci_hcd: connection reset by peer [ 468.879001][ T8945] vhci_hcd vhci_hcd.2: stop threads [ 468.879023][ T8945] vhci_hcd vhci_hcd.2: release socket [ 468.879129][ T8945] vhci_hcd vhci_hcd.2: disconnect device [ 468.901780][T15285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.914015][ T8945] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.940671][ T8945] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.017925][T15285] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.021254][ T8950] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.021297][ T8950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.076808][ T2104] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.076851][ T2104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.243045][T15285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.327595][T15340] RDS: rds_bind could not find a transport for ::4002:0:20:0, load rds_tcp or rds_rdma? [ 469.328816][T15340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.328972][T15340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.373349][ T8947] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.412972][ T8947] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.451969][ T8947] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.495287][ T8947] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.509071][T15285] veth0_vlan: entered promiscuous mode [ 469.514402][T15285] veth1_vlan: entered promiscuous mode [ 469.540505][T15285] veth0_macvtap: entered promiscuous mode [ 469.770065][T15285] veth1_macvtap: entered promiscuous mode [ 469.788927][T15285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.823499][T15285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.841302][ T8950] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.865732][T15355] FAULT_INJECTION: forcing a failure. [ 469.865732][T15355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.889981][T15355] CPU: 1 UID: 0 PID: 15355 Comm: syz.4.3490 Tainted: G W syzkaller #0 PREEMPT(full) [ 469.890054][T15355] Tainted: [W]=WARN [ 469.890061][T15355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 469.890074][T15355] Call Trace: [ 469.890080][T15355] [ 469.890271][T15355] __dump_stack+0x1d/0x30 [ 469.890305][T15355] dump_stack_lvl+0x95/0xd0 [ 469.890344][T15355] dump_stack+0x15/0x1b [ 469.890438][T15355] should_fail_ex+0x263/0x280 [ 469.890469][T15355] should_fail+0xb/0x20 [ 469.890556][T15355] should_fail_usercopy+0x1a/0x20 [ 469.890597][T15355] _copy_from_user+0x1c/0xb0 [ 469.890680][T15355] input_event_from_user+0x5e/0x190 [ 469.890702][T15355] ? input_inject_event+0xe3/0x100 [ 469.890731][T15355] evdev_write+0x1b0/0x2b0 [ 469.890909][T15355] ? __pfx_evdev_write+0x10/0x10 [ 469.890979][T15355] vfs_write+0x269/0x9f0 [ 469.891013][T15355] ? __rcu_read_unlock+0x4e/0x70 [ 469.891042][T15355] ? __fget_files+0x184/0x1c0 [ 469.891130][T15355] ksys_write+0xdc/0x1a0 [ 469.891169][T15355] __x64_sys_write+0x40/0x50 [ 469.891203][T15355] x64_sys_call+0x27e1/0x3020 [ 469.891240][T15355] do_syscall_64+0x12c/0x3b0 [ 469.891293][T15355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.891321][T15355] RIP: 0033:0x7f910c07c819 [ 469.891340][T15355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.891364][T15355] RSP: 002b:00007f910aacf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 469.891410][T15355] RAX: ffffffffffffffda RBX: 00007f910c2f5fa0 RCX: 00007f910c07c819 [ 469.891429][T15355] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 469.891444][T15355] RBP: 00007f910aacf090 R08: 0000000000000000 R09: 0000000000000000 [ 469.891460][T15355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.891476][T15355] R13: 00007f910c2f6038 R14: 00007f910c2f5fa0 R15: 00007ffca4ece668 [ 469.891525][T15355] [ 469.918588][ T8950] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.189238][T15358] syzkaller0: entered promiscuous mode [ 470.198208][T15358] syzkaller0: entered allmulticast mode [ 470.209502][ T8950] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.229603][ T8950] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.406294][ T8956] smc: removing ib device syz1 [ 470.541712][ T8947] bond0 (unregistering): Released all slaves [ 470.561357][ T8947] bond1 (unregistering): Released all slaves [ 470.586806][ T3040] 8021q: adding VLAN 0 to HW filter on device eth17 [ 470.756459][T15402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=15402 comm=syz.3.3495 [ 470.773636][T15401] loop9: detected capacity change from 0 to 1024 [ 470.791540][T15401] EXT4-fs: Ignoring removed bh option [ 470.822743][T15402] netlink: 'syz.3.3495': attribute type 1 has an invalid length. [ 470.831072][T15402] netlink: 'syz.3.3495': attribute type 2 has an invalid length. [ 470.849080][T15401] EXT4-fs mount: 8 callbacks suppressed [ 470.849101][T15401] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.947356][T15285] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.952196][T15411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.999296][T15411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.050039][T15421] xfrm0 speed is unknown, defaulting to 1000 [ 471.080293][ T3040] 8021q: adding VLAN 0 to HW filter on device eth18 [ 471.093512][T15351] chnl_net:caif_netlink_parms(): no params data found [ 471.093501][T15421] xfrm0 speed is unknown, defaulting to 1000 [ 471.106843][ T8947] tipc: Disabling bearer [ 471.106873][ T8947] tipc: Left network mode [ 471.133810][T15425] RDS: rds_bind could not find a transport for ::4002:0:20:0, load rds_tcp or rds_rdma? [ 471.145129][T15425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.154665][T15425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.163859][ T8947] veth1_macvtap: left promiscuous mode [ 471.169806][ T8947] veth0_macvtap: left promiscuous mode [ 471.175333][ T8947] veth1_vlan: left promiscuous mode [ 471.181043][ T8947] veth0_vlan: left promiscuous mode [ 471.270646][T15421] xfrm0 speed is unknown, defaulting to 1000 [ 471.301991][T15351] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.320782][T15351] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.328354][T15421] infiniband syz1: set active [ 471.328491][T15351] bridge_slave_0: entered allmulticast mode [ 471.341065][T15351] bridge_slave_0: entered promiscuous mode [ 471.349155][T15421] infiniband syz1: added xfrm0 [ 471.353306][T15351] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.361791][T15351] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.369141][T15351] bridge_slave_1: entered allmulticast mode [ 471.376410][T15351] bridge_slave_1: entered promiscuous mode [ 471.383112][ T3394] xfrm0 speed is unknown, defaulting to 1000 [ 471.396904][T15351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.408392][T15351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.431562][T15351] team0: Port device team_slave_0 added [ 471.438704][T15351] team0: Port device team_slave_1 added [ 471.466166][T15351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.482284][T15351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.499302][T15421] RDS/IB: syz1: added [ 471.512161][T15351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.532973][T15351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.540559][T15351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.547777][T15421] smc: adding ib device syz1 with port count 1 [ 471.570425][T15351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.597148][T15421] smc: ib device syz1 port 1 has no pnetid [ 471.606280][ T8947] IPVS: stop unused estimator thread 0... [ 471.612226][ T3401] xfrm0 speed is unknown, defaulting to 1000 [ 471.629228][T15421] xfrm0 speed is unknown, defaulting to 1000 [ 471.637562][ T3040] 8021q: adding VLAN 0 to HW filter on device eth19 [ 471.685052][T15351] hsr_slave_0: entered promiscuous mode [ 471.704563][T15351] hsr_slave_1: entered promiscuous mode [ 471.718347][T15351] debugfs: 'hsr0' already exists in 'hsr' [ 471.740434][T15351] Cannot create hsr debugfs directory [ 471.793715][T15453] bridge0: entered promiscuous mode [ 471.807579][T15453] macvlan2: entered allmulticast mode [ 471.821257][T15453] bridge0: entered allmulticast mode [ 471.835344][T15453] bridge0: port 1(macvlan2) entered blocking state [ 471.850695][T15453] bridge0: port 1(macvlan2) entered disabled state [ 471.875004][T15453] bridge0: left allmulticast mode [ 471.896465][T15453] bridge0: left promiscuous mode [ 471.955001][T15421] xfrm0 speed is unknown, defaulting to 1000 [ 472.040724][T15466] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 472.080878][T15421] xfrm0 speed is unknown, defaulting to 1000 [ 472.140035][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3508'. [ 472.159887][T15478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3508'. [ 472.160002][T15421] xfrm0 speed is unknown, defaulting to 1000 [ 472.193211][ T3040] 8021q: adding VLAN 0 to HW filter on device eth20 [ 472.223350][T15421] xfrm0 speed is unknown, defaulting to 1000 [ 472.289859][T15421] xfrm0 speed is unknown, defaulting to 1000 [ 472.364817][T15421] xfrm0 speed is unknown, defaulting to 1000 [ 472.414974][T15461] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 472.508442][T15500] bridge_slave_0: left allmulticast mode [ 472.514470][T15500] bridge_slave_0: left promiscuous mode [ 472.521028][T15500] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.532580][T15500] bridge_slave_1: left allmulticast mode [ 472.542806][T15500] bridge_slave_1: left promiscuous mode [ 472.556801][T15500] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.573529][T15500] bond0: (slave bond_slave_0): Releasing backup interface [ 472.591612][T15500] bond0: (slave bond_slave_1): Releasing backup interface [ 472.612681][T15500] team0: Port device team_slave_0 removed [ 472.623895][T15500] team0: Port device team_slave_1 removed [ 472.631484][T15500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.639620][T15500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.661836][T15500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.662638][T15525] loop2: detected capacity change from 0 to 512 [ 472.677166][T15500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.684903][T15525] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 472.698704][T15500] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 472.724764][T15525] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.3513: corrupted xattr entries [ 472.737109][ T3482] xfrm0 speed is unknown, defaulting to 1000 [ 472.750871][T15525] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 472.752666][T15525] EXT4-fs (loop2): 1 truncate cleaned up [ 472.762073][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 472.762093][ C1] EXT4-fs (loop2): initial error at time 2000000195: xattr_find_entry:337: inode 15 [ 472.762138][ C1] EXT4-fs (loop2): last error at time 2000000195: xattr_find_entry:337: inode 15 [ 472.799055][T15525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.831001][T15351] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.843176][T15351] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.852880][T15351] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 472.871368][T15351] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.879575][T15351] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 472.889860][T15351] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.897755][T15351] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 472.910504][T15351] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.936387][T12402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.970614][T15351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.984599][T15351] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.995309][ T8947] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.002539][ T8947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.027680][ T8947] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.034922][ T8947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.156804][ T28] audit: type=1400 audit(2000000196.150:1149): avc: denied { lock } for pid=15563 comm="syz.2.3516" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 473.226214][T15351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.380947][T15591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.394921][T15591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.434932][T15598] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 473.451500][T15351] veth0_vlan: entered promiscuous mode [ 473.467491][T15351] veth1_vlan: entered promiscuous mode [ 473.485665][T15351] veth0_macvtap: entered promiscuous mode [ 473.510299][T15351] veth1_macvtap: entered promiscuous mode [ 473.534242][T15351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.561156][T15604] loop3: detected capacity change from 0 to 512 [ 473.568642][T15351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.593817][ T2104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.607093][ T2104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.624468][T15604] EXT4-fs error (device loop3): __ext4_iget:5481: inode #11: block 1: comm syz.3.3520: invalid block [ 473.650100][T15604] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 473.650293][T15604] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3520: couldn't read orphan inode 11 (err -117) [ 473.659752][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 473.659778][ C0] EXT4-fs (loop3): initial error at time 2000000196: __ext4_iget:5481: inode 11: block 1 [ 473.659822][ C0] EXT4-fs (loop3): last error at time 2000000196: __ext4_iget:5481: inode 11: block 1 [ 473.699860][T15604] loop3: lost filesystem error report for type 5 error -117 [ 473.700456][T15604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.703103][ T2104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.710688][ T28] audit: type=1400 audit(2000000196.710:1150): avc: denied { bind } for pid=15616 comm="syz.4.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 473.754361][ T2104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.770107][ T28] audit: type=1400 audit(2000000196.770:1151): avc: denied { map } for pid=15603 comm="syz.3.3520" path="/dev/tty1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 473.797523][ T28] audit: type=1400 audit(2000000196.770:1152): avc: denied { execute } for pid=15603 comm="syz.3.3520" path="/dev/tty1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 473.861148][ T1031] usb 6-1: device descriptor read/8, error -110 [ 473.861584][T13450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.871069][T15620] netlink: 'syz.2.3517': attribute type 4 has an invalid length. [ 473.974731][ T1031] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 473.990739][T15648] loop3: detected capacity change from 0 to 512 [ 474.018714][ T1031] usb 6-1: enqueue for inactive port 0 [ 474.024747][T15648] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 474.044298][ T1031] usb 6-1: enqueue for inactive port 0 [ 474.063120][ T1031] usb 6-1: enqueue for inactive port 0 [ 474.089298][T15620] netlink: 'syz.2.3517': attribute type 30 has an invalid length. [ 474.102163][T15648] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.3524: corrupted xattr entries [ 474.102251][T15648] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 474.102491][T15648] EXT4-fs (loop3): 1 truncate cleaned up [ 474.102926][T15648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.222511][T15667] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 474.231369][T13450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.339492][T15681] RDS: rds_bind could not find a transport for ::4002:0:20:0, load rds_tcp or rds_rdma? [ 474.357895][ T28] audit: type=1400 audit(2000000197.350:1153): avc: denied { setopt } for pid=15677 comm="syz.3.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 474.393010][T15681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.413193][T15681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.573604][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3533'. [ 474.976903][T15729] loop4: detected capacity change from 0 to 128 [ 475.014192][T15729] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 475.079464][T15729] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 475.108446][ T1031] usb usb6-port1: attempt power cycle [ 475.423445][T15760] loop4: detected capacity change from 0 to 4096 [ 475.449714][T15760] EXT4-fs: Ignoring removed bh option [ 475.490609][T15760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.591485][T12937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.683731][T15775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3540'. [ 475.704379][T15777] loop1: detected capacity change from 0 to 512 [ 475.729278][T15777] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 475.762565][T15775] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3540'. [ 475.773473][T15777] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.3541: corrupted xattr entries [ 475.788899][T15777] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 475.792207][T15777] EXT4-fs (loop1): 1 truncate cleaned up [ 475.801881][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 475.801910][ C1] EXT4-fs (loop1): initial error at time 2000000198: xattr_find_entry:337: inode 15 [ 475.801953][ C1] EXT4-fs (loop1): last error at time 2000000198: xattr_find_entry:337: inode 15 [ 475.802000][T15775] loop4: detected capacity change from 0 to 512 [ 475.845026][T15777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.849385][T15775] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 475.897062][T15775] EXT4-fs (loop4): 1 truncate cleaned up [ 475.911264][T15775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.939345][T15775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.010181][T15351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.075077][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3544'. [ 476.110878][T15789] loop4: detected capacity change from 0 to 256 [ 476.139205][T15789] vfat: Unknown parameter '°°6Ü(iôx4Ðõ­”°üÕ¬´¹Æs‚ñ' [ 476.170096][T15791] loop1: detected capacity change from 0 to 512 [ 476.214054][T15791] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 476.329362][T15791] EXT4-fs (loop1): failed to initialize system zone (-117) [ 476.336969][T15791] EXT4-fs (loop1): mount failed [ 476.374645][T15791] io-wq is not configured for unbound workers [ 476.507948][T15804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=15804 comm=syz.9.3552 [ 476.540350][T15803] usb usb7: usbfs: process 15803 (syz.4.3551) did not claim interface 0 before use [ 476.593919][T15810] loop1: detected capacity change from 0 to 512 [ 476.608716][T15808] loop9: detected capacity change from 0 to 1024 [ 476.622115][T15810] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 476.643839][T15808] EXT4-fs: Ignoring removed orlov option [ 476.677809][T15810] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.3554: corrupted xattr entries [ 476.690651][T15807] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 476.716353][T15808] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.731948][T15810] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 476.733806][T15810] EXT4-fs (loop1): 1 truncate cleaned up [ 476.743192][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 476.743229][ C0] EXT4-fs (loop1): initial error at time 2000000199: xattr_find_entry:337: inode 15 [ 476.743265][ C0] EXT4-fs (loop1): last error at time 2000000199: xattr_find_entry:337: inode 15 [ 476.776476][T15810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.937178][T15285] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.018419][ T1031] usb usb6-port1: unable to enumerate USB device [ 477.119261][T15351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.177251][T15835] loop1: detected capacity change from 0 to 512 [ 477.205491][T15835] msdos: Bad value for 'time_offset' [ 477.238571][T15829] loop9: detected capacity change from 0 to 512 [ 477.255550][T15829] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 477.278793][T15829] EXT4-fs (loop9): failed to initialize system zone (-117) [ 477.289296][T15829] EXT4-fs (loop9): mount failed [ 477.340611][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3565'. [ 477.350298][T15841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3565'. [ 477.398193][T15848] RDS: rds_bind could not find a transport for ::4002:0:20:0, load rds_tcp or rds_rdma? [ 477.415812][T15851] RDS: rds_bind could not find a transport for ::4002:0:20:0, load rds_tcp or rds_rdma? [ 477.430993][T15848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.450642][T15853] loop3: detected capacity change from 0 to 512 [ 477.452452][T15848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.466212][T15851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.480142][T15853] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 477.496190][T15851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.517682][T15859] loop1: detected capacity change from 0 to 512 [ 477.526053][T15859] ext3: Unknown parameter 'func' [ 477.526453][T15853] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.3571: corrupted xattr entries [ 477.585702][T15859] loop1: detected capacity change from 0 to 1024 [ 477.611307][T15853] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 477.612003][T15853] EXT4-fs (loop3): 1 truncate cleaned up [ 477.633470][T15851] Set syz1 is full, maxelem 6117 reached [ 477.640389][T15859] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 477.669473][T15859] System zones: 0-1, 3-36 [ 477.676720][T15859] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.3574: bad orphan inode 134217728 [ 477.688510][T15853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.701421][T15859] loop1: lost filesystem error report for type 5 error -117 [ 477.702035][T15865] syzkaller0: entered promiscuous mode [ 477.715277][T15865] syzkaller0: entered allmulticast mode [ 477.718370][T15859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.806089][T15351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.890798][T15869] IPVS: set_ctl: invalid protocol: 0 10.1.5.1:4 [ 477.899849][T13450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.903643][T15869] syzkaller0: entered promiscuous mode [ 477.915382][T15869] syzkaller0: entered allmulticast mode [ 478.530041][T15876] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 478.552378][T15881] netlink: 'syz.3.3582': attribute type 27 has an invalid length. [ 478.587319][T15883] netlink: 764 bytes leftover after parsing attributes in process `syz.9.3583'. [ 478.671799][T15889] netlink: 'syz.3.3582': attribute type 5 has an invalid length. [ 478.723204][T15881] ip6erspan0: left promiscuous mode [ 478.758102][T15885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.766506][T15885] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.777160][T15885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 478.829685][ T8947] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.846620][ T8947] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.859926][T15881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3582'. [ 478.871073][ T8947] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.885392][ T8947] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.908490][T15895] syz1: rxe_newlink: already configured on xfrm0 [ 478.989929][T15903] IPVS: set_ctl: invalid protocol: 0 10.1.5.1:4 [ 479.003402][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3590'. [ 479.014432][T15903] syzkaller0: entered promiscuous mode [ 479.020381][T15903] syzkaller0: entered allmulticast mode [ 479.062723][T15908] cgroup: fork rejected by pids controller in /syz3 [ 479.161143][T15917] EXT4-fs: Ignoring removed bh option [ 479.191345][T15917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.273995][T15351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.290024][T15921] netlink: 'syz.2.3587': attribute type 4 has an invalid length. [ 479.325070][T15923] msdos: Bad value for 'time_offset' [ 479.367612][T15921] netlink: 'syz.2.3587': attribute type 30 has an invalid length. [ 479.411247][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3601'. [ 479.427268][T15931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3601'. [ 479.503165][T15939] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 479.537373][T15939] EXT4-fs (loop1): 1 truncate cleaned up [ 479.551742][T15939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.723808][T15947] netlink: 676 bytes leftover after parsing attributes in process `syz.1.3604'. [ 479.799725][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3607'. [ 479.833392][T15946] bridge_slave_1: entered promiscuous mode [ 479.834368][T15950] syz.1.3604(15950): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 479.855470][ T28] audit: type=1400 audit(2000000202.820:1154): avc: denied { setattr } for pid=15938 comm="syz.1.3604" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 479.967982][T15953] netlink: 'syz.4.3606': attribute type 4 has an invalid length. [ 479.985494][T15953] netlink: 'syz.4.3606': attribute type 30 has an invalid length. [ 480.046564][T15351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.141696][T15958] bridge_slave_0: left allmulticast mode [ 480.147649][T15958] bridge_slave_0: left promiscuous mode [ 480.153902][T15958] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.170122][T15958] bridge_slave_1: left allmulticast mode [ 480.182271][T15958] bridge_slave_1: left promiscuous mode [ 480.196614][T15958] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.238602][T15958] bond0: (slave bond_slave_0): Releasing backup interface [ 480.262518][T15958] bond0: (slave bond_slave_1): Releasing backup interface [ 480.274712][T15961] EXT4-fs: Ignoring removed bh option [ 480.311516][T15958] team0: Port device team_slave_0 removed [ 480.319264][T15961] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.340127][T15958] team0: Port device team_slave_1 removed [ 480.354103][T15958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.368182][T15958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.377204][T15958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.399050][T15958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.419926][T15285] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.430722][T15958] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 481.141792][T15983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6145 sclass=netlink_route_socket pid=15983 comm=syz.1.3614 [ 481.190064][T15639] bond0 (unregistering): Released all slaves [ 481.260984][T15968] xfrm0 speed is unknown, defaulting to 1000 [ 481.275015][T15985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3615'. [ 481.328374][T15639] hsr_slave_0: left promiscuous mode [ 481.350576][T15639] hsr_slave_1: left promiscuous mode [ 481.656727][T16005] team1: entered promiscuous mode [ 481.668212][T16005] team1: entered allmulticast mode [ 481.680342][T16005] 8021q: adding VLAN 0 to HW filter on device team1 [ 481.709688][ T3040] 8021q: adding VLAN 0 to HW filter on device eth1 [ 481.806020][T16013] xfrm0 speed is unknown, defaulting to 1000 [ 481.948917][T15968] chnl_net:caif_netlink_parms(): no params data found [ 481.975408][T15639] IPVS: stop unused estimator thread 0... [ 482.099528][T15968] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.130212][T15968] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.137507][T15968] bridge_slave_0: entered allmulticast mode [ 482.153275][T15968] bridge_slave_0: entered promiscuous mode [ 482.191540][T16042] set_capacity_and_notify: 6 callbacks suppressed [ 482.191561][T16042] loop1: detected capacity change from 0 to 512 [ 482.210947][T15968] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.230622][T16042] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 482.256321][T15968] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.263796][T15968] bridge_slave_1: entered allmulticast mode [ 482.270557][T15968] bridge_slave_1: entered promiscuous mode [ 482.307713][T16042] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.3623: corrupted xattr entries [ 482.330002][T15968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.373051][T16042] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 482.373742][T16042] EXT4-fs (loop1): 1 truncate cleaned up [ 482.383041][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 482.383063][ C1] EXT4-fs (loop1): initial error at time 2000000205: xattr_find_entry:337: inode 15 [ 482.383116][ C1] EXT4-fs (loop1): last error at time 2000000205: xattr_find_entry:337: inode 15 [ 482.415206][T15968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.430592][T16042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.454895][T15968] team0: Port device team_slave_0 added [ 482.478228][T15968] team0: Port device team_slave_1 added [ 482.499527][ T3040] 8021q: adding VLAN 0 to HW filter on device eth2 [ 482.523506][T15351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.559785][T15968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.583734][T16050] FAULT_INJECTION: forcing a failure. [ 482.583734][T16050] name failslab, interval 1, probability 0, space 0, times 0 [ 482.586050][T15968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.631609][T16050] CPU: 0 UID: 0 PID: 16050 Comm: syz.1.3624 Tainted: G W syzkaller #0 PREEMPT(full) [ 482.631653][T16050] Tainted: [W]=WARN [ 482.631662][T16050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 482.631676][T16050] Call Trace: [ 482.631685][T16050] [ 482.631695][T16050] __dump_stack+0x1d/0x30 [ 482.631728][T16050] dump_stack_lvl+0x95/0xd0 [ 482.631775][T16050] dump_stack+0x15/0x1b [ 482.631803][T16050] should_fail_ex+0x263/0x280 [ 482.631909][T16050] should_failslab+0x8c/0xb0 [ 482.631933][T16050] kmem_cache_alloc_noprof+0x66/0x3f0 [ 482.631958][T16050] ? security_file_alloc+0x32/0xf0 [ 482.631983][T16050] security_file_alloc+0x32/0xf0 [ 482.632036][T16050] init_file+0x5b/0x1b0 [ 482.632066][T16050] alloc_empty_file+0x85/0x1e0 [ 482.632106][T16050] path_openat+0x65/0x2050 [ 482.632138][T16050] ? path_openat+0x1b01/0x2050 [ 482.632264][T16050] ? _parse_integer_limit+0x170/0x190 [ 482.632295][T16050] ? _parse_integer+0x27/0x40 [ 482.632323][T16050] ? kstrtoull+0x111/0x140 [ 482.632348][T16050] do_file_open+0x16c/0x290 [ 482.632456][T16050] do_sys_openat2+0x94/0x130 [ 482.632484][T16050] __se_sys_openat2+0x193/0x1f0 [ 482.632579][T16050] __x64_sys_openat2+0x55/0x70 [ 482.632668][T16050] x64_sys_call+0x2170/0x3020 [ 482.632713][T16050] do_syscall_64+0x12c/0x3b0 [ 482.632748][T16050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.632770][T16050] RIP: 0033:0x7f92e9b4c819 [ 482.632787][T16050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.632849][T16050] RSP: 002b:00007f92e859f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 482.632872][T16050] RAX: ffffffffffffffda RBX: 00007f92e9dc5fa0 RCX: 00007f92e9b4c819 [ 482.632890][T16050] RDX: 0000200000000240 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 482.632906][T16050] RBP: 00007f92e859f090 R08: 0000000000000000 R09: 0000000000000000 [ 482.632944][T16050] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 482.632957][T16050] R13: 00007f92e9dc6038 R14: 00007f92e9dc5fa0 R15: 00007ffe93ef4118 [ 482.632982][T16050] [ 482.667824][T15968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.956787][T16052] ip6erspan0: entered promiscuous mode [ 482.965011][T15968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.980408][T16054] __nla_validate_parse: 2 callbacks suppressed [ 482.980427][T16054] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3626'. [ 482.980654][T15968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.006352][T16056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3627'. [ 483.057709][T15968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.092426][T16056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3627'. [ 483.156087][T15968] hsr_slave_0: entered promiscuous mode [ 483.173636][T15968] hsr_slave_1: entered promiscuous mode [ 483.197490][T15968] debugfs: 'hsr0' already exists in 'hsr' [ 483.209640][T15968] Cannot create hsr debugfs directory [ 483.223333][T16065] bridge0: entered promiscuous mode [ 483.229022][T16065] macvlan2: entered allmulticast mode [ 483.234524][T16065] bridge0: entered allmulticast mode [ 483.244093][T16065] bridge0: port 1(macvlan2) entered blocking state [ 483.251559][T16065] bridge0: port 1(macvlan2) entered disabled state [ 483.259649][T16065] bridge0: left allmulticast mode [ 483.265150][T16065] bridge0: left promiscuous mode [ 483.384162][ T3040] 8021q: adding VLAN 0 to HW filter on device eth3 [ 483.508381][T16087] mmap: syz.9.3633 (16087): VmData 29114368 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 483.730126][T15968] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 483.767598][T15968] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 483.775743][T16109] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3637'. [ 483.794031][T16111] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3638'. [ 483.800587][T15968] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 483.835164][T15968] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 483.858991][T15968] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 483.879375][T15968] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 483.899947][T15968] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 483.941829][T15968] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.830858][T16070] syz.1.3630 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 484.848288][T16070] CPU: 1 UID: 0 PID: 16070 Comm: syz.1.3630 Tainted: G W syzkaller #0 PREEMPT(full) [ 484.848369][T16070] Tainted: [W]=WARN [ 484.848378][T16070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 484.848393][T16070] Call Trace: [ 484.848403][T16070] [ 484.848413][T16070] __dump_stack+0x1d/0x30 [ 484.848465][T16070] dump_stack_lvl+0x95/0xd0 [ 484.848579][T16070] dump_stack+0x15/0x1b [ 484.848610][T16070] dump_header+0x80/0x240 [ 484.848663][T16070] oom_kill_process+0x295/0x350 [ 484.848687][T16070] out_of_memory+0x97d/0xb80 [ 484.848719][T16070] try_charge_memcg+0x62f/0xa10 [ 484.848764][T16070] __memcg_kmem_charge_page+0x139/0x2b0 [ 484.848813][T16070] __alloc_frozen_pages_noprof+0x18a/0x350 [ 484.848866][T16070] alloc_pages_mpol+0xb3/0x260 [ 484.848894][T16070] alloc_pages_noprof+0x8f/0x140 [ 484.848927][T16070] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 484.848993][T16070] __kvmalloc_node_noprof+0x3d4/0x640 [ 484.849019][T16070] ? futex_hash_allocate+0x190/0x9a0 [ 484.849074][T16070] ? futex_hash_allocate+0x190/0x9a0 [ 484.849096][T16070] futex_hash_allocate+0x190/0x9a0 [ 484.849117][T16070] ? cap_task_prctl+0x13f/0x6b0 [ 484.849154][T16070] futex_hash_prctl+0xd8/0xf0 [ 484.849174][T16070] __se_sys_prctl+0x4f4/0x1400 [ 484.849243][T16070] __x64_sys_prctl+0x67/0x80 [ 484.849271][T16070] x64_sys_call+0x2533/0x3020 [ 484.849300][T16070] do_syscall_64+0x12c/0x3b0 [ 484.849402][T16070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.849451][T16070] RIP: 0033:0x7f92e9b4c819 [ 484.849503][T16070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.849527][T16070] RSP: 002b:00007f92e859f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 484.849553][T16070] RAX: ffffffffffffffda RBX: 00007f92e9dc5fa0 RCX: 00007f92e9b4c819 [ 484.849568][T16070] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 484.849581][T16070] RBP: 00007f92e9be2c91 R08: 0000000000000000 R09: 0000000000000000 [ 484.849595][T16070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.849663][T16070] R13: 00007f92e9dc6038 R14: 00007f92e9dc5fa0 R15: 00007ffe93ef4118 [ 484.849683][T16070] [ 484.849728][T16070] memory: usage 307200kB, limit 307200kB, failcnt 217 [ 485.123133][T15968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.142990][T15968] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.182767][T15643] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.190431][T15643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.214094][T16070] memory+swap: usage 278736kB, limit 9007199254740988kB, failcnt 0 [ 485.231028][T15643] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.238192][T15643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.248925][T16070] kmem: usage 278372kB, limit 9007199254740988kB, failcnt 0 [ 485.265507][T16070] Memory cgroup stats for /syz1: [ 485.265809][T16070] cache 0 [ 485.281178][T16147] loop4: detected capacity change from 0 to 512 [ 485.288058][T16147] msdos: Bad value for 'time_offset' [ 485.316244][T16070] rss 0 [ 485.329303][T15968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 485.345299][T16070] shmem 0 [ 485.357158][T16070] mapped_file 0 [ 485.369077][T16070] dirty 0 [ 485.376592][T16070] writeback 0 [ 485.385502][T16070] workingset_refault_anon 56 [ 485.390404][T16070] workingset_refault_file 870 [ 485.395426][T16070] swap 196608 [ 485.401953][T16070] swapcached 3665920 [ 485.406299][T16070] pgpgin 91533 [ 485.409967][T16070] pgpgout 91533 [ 485.413615][T16070] pgfault 95282 [ 485.417334][T16070] pgmajfault 34 [ 485.422940][T16070] inactive_anon 0 [ 485.426679][T16070] active_anon 0 [ 485.430370][T16070] inactive_file 0 [ 485.434147][T16070] active_file 0 [ 485.437918][T16070] unevictable 0 [ 485.442055][T16070] hierarchical_memory_limit 314572800 [ 485.447652][T16070] hierarchical_memsw_limit 9223372036854771712 [ 485.454624][T16070] total_cache 0 [ 485.460100][T16070] total_rss 0 [ 485.463571][T16070] total_shmem 0 [ 485.467239][T16070] total_mapped_file 0 [ 485.471936][T16070] total_dirty 0 [ 485.475537][T16070] total_writeback 0 [ 485.479902][T16070] total_workingset_refault_anon 56 [ 485.485318][T16070] total_workingset_refault_file 870 [ 485.491041][T16070] total_swap 196608 [ 485.495087][T16070] total_swapcached 3665920 [ 485.500068][T16070] total_pgpgin 91533 [ 485.504128][T16070] total_pgpgout 91533 [ 485.510741][T16070] total_pgfault 95282 [ 485.514989][T16070] total_pgmajfault 34 [ 485.519343][T16070] total_inactive_anon 0 [ 485.523744][T16070] total_active_anon 0 [ 485.527968][T16070] total_inactive_file 0 [ 485.534082][T16070] total_active_file 0 [ 485.538434][T16070] total_unevictable 0 [ 485.542656][T16070] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3630,pid=16069,uid=0 [ 485.558440][T16070] Memory cgroup out of memory: Killed process 16069 (syz.1.3630) total-vm:94164kB, anon-rss:1224kB, file-rss:22564kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 485.942056][T16150] bridge0: entered promiscuous mode [ 485.963277][T16150] macvlan2: entered allmulticast mode [ 485.987530][T16150] bridge0: entered allmulticast mode [ 486.010941][T16150] bridge0: port 1(macvlan2) entered blocking state [ 486.032889][T16150] bridge0: port 1(macvlan2) entered disabled state [ 486.066764][T16150] bridge0: left allmulticast mode [ 486.074360][T16150] bridge0: left promiscuous mode [ 486.099172][T16166] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 486.169510][T15968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.388090][T16204] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3650'. [ 486.393659][T15968] veth0_vlan: entered promiscuous mode [ 486.446638][T15968] veth1_vlan: entered promiscuous mode [ 486.499626][T15968] veth0_macvtap: entered promiscuous mode [ 486.522639][T15968] veth1_macvtap: entered promiscuous mode [ 486.555094][T15968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.596589][T15968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.626062][T15643] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.659501][T15643] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.674940][T15643] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.710658][T15643] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.813644][T16228] RDS: rds_bind could not find a transport for ::4002:0:20:0, load rds_tcp or rds_rdma? [ 486.830810][T16228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.843257][T16228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.914517][T16228] Set syz1 is full, maxelem 6117 reached [ 487.169661][T16238] loop1: detected capacity change from 0 to 4096 [ 487.198914][T16238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.437770][T16259] netlink: 'syz.9.3652': attribute type 4 has an invalid length. [ 487.446045][T16259] netlink: 'syz.9.3652': attribute type 30 has an invalid length. [ 487.466247][T16269] loop2: detected capacity change from 0 to 512 [ 487.497524][T16269] msdos: Bad value for 'time_offset' [ 487.976547][T15351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.194773][T16316] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3661'. [ 488.508464][T16311] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 488.629214][T16336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3663'. [ 488.787665][T16347] syzkaller0: entered promiscuous mode [ 488.800290][T16347] syzkaller0: entered allmulticast mode [ 489.044513][T16352] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 489.103043][T16361] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 489.132239][T16364] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3672'. [ 489.191762][ T28] audit: type=1400 audit(2000000212.190:1155): avc: denied { append } for pid=16365 comm="syz.4.3674" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 489.391214][T16375] netlink: 'syz.4.3674': attribute type 10 has an invalid length. [ 489.464558][T16375] veth0_vlan: entered allmulticast mode [ 489.542756][T16382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3678'. [ 489.571516][T16375] veth0_vlan: left promiscuous mode [ 489.587581][T16382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3678'. [ 489.617968][T16375] veth0_vlan: entered promiscuous mode [ 489.655915][T16387] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3679'. [ 489.684824][T16375] team0: Device veth0_vlan failed to register rx_handler [ 489.753235][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3677'. [ 489.781941][T16376] bridge_slave_1: entered promiscuous mode [ 489.855374][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3681'. [ 489.858745][T16392] syzkaller0: entered promiscuous mode [ 489.866411][T16394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3681'. [ 489.880913][T16392] syzkaller0: entered allmulticast mode [ 489.924995][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3681'. [ 489.927054][ T8947] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.963987][ T8947] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.008058][ T8947] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.024394][ T8947] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.106175][T16404] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 490.165557][T16402] loop1: detected capacity change from 0 to 4096 [ 490.231522][T16402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.370285][T16419] tipc: Started in network mode [ 490.379753][T16417] loop4: detected capacity change from 0 to 512 [ 490.400615][T16419] tipc: Node identity 9, cluster identity 6 [ 490.410441][T16417] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 490.436807][T16419] tipc: Node number set to 9 [ 490.466342][T16419] tipc: Cannot configure node identity twice [ 490.476829][T16417] EXT4-fs (loop4): 1 truncate cleaned up [ 490.491538][T16417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.619863][T15351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.685197][T16425] bridge0: entered promiscuous mode [ 490.691539][T16425] macvlan2: entered allmulticast mode [ 490.697635][T16425] bridge0: entered allmulticast mode [ 490.705464][T12937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.719906][T16425] bridge0: port 3(macvlan2) entered blocking state [ 490.734455][T16425] bridge0: port 3(macvlan2) entered disabled state [ 490.756025][T16425] bridge0: left allmulticast mode [ 490.776469][T16425] bridge0: left promiscuous mode [ 490.786592][T16431] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 490.804337][T16429] syzkaller0: entered promiscuous mode [ 490.815635][T16429] syzkaller0: entered allmulticast mode [ 490.822779][T16435] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 491.008868][ T28] audit: type=1400 audit(2000000213.870:1156): avc: denied { accept } for pid=16436 comm="syz.4.3700" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 491.056332][T16440] loop7: detected capacity change from 0 to 7 [ 491.095044][ C1] operation not supported error, dev loop7, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 2 [ 491.382176][T16449] loop1: detected capacity change from 0 to 1024 [ 491.404954][T16449] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 491.542257][T16452] xt_CT: You must specify a L4 protocol and not use inversions on it [ 491.630729][T16449] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.3705: lblock 2 mapped to illegal pblock 2 (length 1) [ 491.689680][T16449] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 491.691269][T16449] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 491.700820][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 491.700846][ C1] EXT4-fs (loop1): initial error at time 2000000214: ext4_map_blocks:791: inode 3: block 2 [ 491.700892][ C1] EXT4-fs (loop1): last error at time 2000000214: ext4_map_blocks:791: inode 3: block 2 [ 491.757949][T16449] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.3705: lblock 0 mapped to illegal pblock 48 (length 1) [ 491.779294][T16449] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 491.779420][T16449] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 491.799210][T16460] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 491.799373][T16449] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.3705: Failed to acquire dquot type 0 [ 491.819273][T16449] loop1: lost filesystem error report for type 5 error -117 [ 491.819398][T16449] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 491.836967][T16449] loop1: lost filesystem error report for type 5 error -117 [ 491.837105][T16449] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.3705: mark_inode_dirty error [ 491.856952][T16449] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 491.857311][T16449] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 491.888413][T16449] EXT4-fs (loop1): 1 orphan inode deleted [ 491.897241][T16449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.911203][ T6142] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 491.935100][T16466] syzkaller0: entered promiscuous mode [ 491.940944][T16464] syz1: rxe_newlink: already configured on xfrm0 [ 491.941211][ T6142] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 491.950234][T16466] syzkaller0: entered allmulticast mode [ 491.970518][ T6142] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 0 [ 491.985949][ T28] audit: type=1400 audit(2000000214.980:1157): avc: denied { create } for pid=16448 comm="syz.1.3705" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 492.029215][T15351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.058455][ T28] audit: type=1400 audit(2000000215.010:1158): avc: denied { create } for pid=16448 comm="syz.1.3705" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 492.079718][T15639] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 492.099951][T15639] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 492.100075][T15639] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 492.132233][T15639] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:31: Failed to release dquot type 0 [ 492.143962][T15639] loop1: lost filesystem error report for type 5 error -117 [ 492.144388][T15351] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 492.168044][T15351] loop1: lost filesystem error report for type 5 error -117 [ 492.168307][T15351] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 492.177228][T16471] Invalid logical block size (18) [ 492.182385][ T28] audit: type=1400 audit(2000000215.170:1159): avc: denied { connect } for pid=16473 comm="syz.2.3717" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 492.229149][T16474] xfrm0 speed is unknown, defaulting to 1000 [ 492.236017][T15351] loop1: lost filesystem error report for type 5 error -117 [ 492.236217][T15351] EXT4-fs error (device loop1): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 492.271044][T15351] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 492.582123][T16487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=16487 comm=syz.1.3720 [ 492.741055][T16490] netlink: 'syz.3.3716': attribute type 4 has an invalid length. [ 492.750940][T16490] netlink: 'syz.3.3716': attribute type 30 has an invalid length. [ 492.784697][T16492] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 493.209466][T16505] loop1: detected capacity change from 0 to 764 [ 493.247557][T16507] loop2: detected capacity change from 0 to 764 [ 493.271952][T16505] FAULT_INJECTION: forcing a failure. [ 493.271952][T16505] name failslab, interval 1, probability 0, space 0, times 0 [ 493.297287][T16507] __nla_validate_parse: 11 callbacks suppressed [ 493.297305][T16507] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3729'. [ 493.325073][T16505] CPU: 1 UID: 0 PID: 16505 Comm: syz.1.3728 Tainted: G W syzkaller #0 PREEMPT(full) [ 493.325137][T16505] Tainted: [W]=WARN [ 493.325145][T16505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 493.325158][T16505] Call Trace: [ 493.325167][T16505] [ 493.325177][T16505] __dump_stack+0x1d/0x30 [ 493.325212][T16505] dump_stack_lvl+0x95/0xd0 [ 493.325262][T16505] dump_stack+0x15/0x1b [ 493.325286][T16505] should_fail_ex+0x263/0x280 [ 493.325324][T16505] should_failslab+0x8c/0xb0 [ 493.325356][T16505] __kvmalloc_node_noprof+0x155/0x640 [ 493.325384][T16505] ? traverse+0xa2/0x3a0 [ 493.325484][T16505] ? __rcu_read_unlock+0x4e/0x70 [ 493.325578][T16505] traverse+0xa2/0x3a0 [ 493.325608][T16505] seq_lseek+0xb5/0x170 [ 493.325637][T16505] __x64_sys_lseek+0xe8/0x160 [ 493.325674][T16505] x64_sys_call+0x27ec/0x3020 [ 493.325735][T16505] do_syscall_64+0x12c/0x3b0 [ 493.325768][T16505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.325790][T16505] RIP: 0033:0x7f92e9b4c819 [ 493.325810][T16505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.325861][T16505] RSP: 002b:00007f92e859f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 493.325887][T16505] RAX: ffffffffffffffda RBX: 00007f92e9dc5fa0 RCX: 00007f92e9b4c819 [ 493.325902][T16505] RDX: 0000000000000000 RSI: 0000000000010001 RDI: 0000000000000004 [ 493.325915][T16505] RBP: 00007f92e859f090 R08: 0000000000000000 R09: 0000000000000000 [ 493.326036][T16505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.326057][T16505] R13: 00007f92e9dc6038 R14: 00007f92e9dc5fa0 R15: 00007ffe93ef4118 [ 493.326150][T16505] [ 493.342355][T16509] netlink: 'syz.9.3730': attribute type 1 has an invalid length. [ 493.474631][T16511] loop4: detected capacity change from 0 to 764 [ 493.621011][T16515] loop1: detected capacity change from 0 to 512 [ 493.633327][T16515] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 493.645991][T16515] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #13: comm syz.1.3731: inode has both inline data and extents flags [ 493.660378][T16515] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 493.668164][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 493.669755][T16515] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.3731: couldn't read orphan inode 13 (err -117) [ 493.677873][ C1] EXT4-fs (loop1): initial error at time 2000000216: ext4_orphan_get:1397: inode 13 [ 493.677914][ C1] EXT4-fs (loop1): last error at time 2000000216: ext4_orphan_get:1397 [ 493.704629][T16515] loop1: lost filesystem error report for type 5 error -117 [ 493.706137][ C1] : inode 13 [ 493.715462][T16515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.721977][ C1] [ 494.201114][T15351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.308473][T16526] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3732'. [ 494.327477][T16526] loop9: detected capacity change from 0 to 128 [ 494.785820][T16531] FAULT_INJECTION: forcing a failure. [ 494.785820][T16531] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 494.879565][T16531] CPU: 1 UID: 0 PID: 16531 Comm: syz.2.3735 Tainted: G W syzkaller #0 PREEMPT(full) [ 494.879674][T16531] Tainted: [W]=WARN [ 494.879683][T16531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 494.879696][T16531] Call Trace: [ 494.879705][T16531] [ 494.879715][T16531] __dump_stack+0x1d/0x30 [ 494.879751][T16531] dump_stack_lvl+0x95/0xd0 [ 494.879812][T16531] dump_stack+0x15/0x1b [ 494.879922][T16531] should_fail_ex+0x263/0x280 [ 494.879959][T16531] should_fail_alloc_page+0xf2/0x100 [ 494.879987][T16531] __alloc_frozen_pages_noprof+0x108/0x350 [ 494.880048][T16531] alloc_pages_mpol+0xb3/0x260 [ 494.880078][T16531] alloc_pages_noprof+0x8f/0x140 [ 494.880140][T16531] pte_alloc_one+0x1c/0xc0 [ 494.880164][T16531] handle_mm_fault+0x19d3/0x2e70 [ 494.880205][T16531] ? __pfx_shmem_fault+0x10/0x10 [ 494.880237][T16531] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 494.880264][T16531] do_user_addr_fault+0x3fd/0x1050 [ 494.880344][T16531] exc_page_fault+0x62/0xa0 [ 494.880372][T16531] asm_exc_page_fault+0x26/0x30 [ 494.880393][T16531] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 494.880421][T16531] Code: 1c 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 1c 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 494.880441][T16531] RSP: 0018:ffffc90002a77d48 EFLAGS: 00050206 [ 494.880538][T16531] RAX: ffff8881044b4ef8 RBX: 0000000000000090 RCX: 0000000000000090 [ 494.880556][T16531] RDX: 0000000000000000 RSI: ffffc90002a77da0 RDI: 0000200000000340 [ 494.880574][T16531] RBP: 0000000000000011 R08: 0000000000000248 R09: 0000000000000000 [ 494.880591][T16531] R10: 0001c90002a77da0 R11: 0001c90002a77e2f R12: 00002000000003d0 [ 494.880606][T16531] R13: 00007ffffffff000 R14: 0000200000000340 R15: ffffc90002a77da0 [ 494.880661][T16531] _copy_to_user+0x7c/0xa0 [ 494.880700][T16531] __se_sys_waitid+0x181/0x2d0 [ 494.880854][T16531] ? __pfx_child_wait_callback+0x10/0x10 [ 494.880881][T16531] __x64_sys_waitid+0x67/0x80 [ 494.880922][T16531] x64_sys_call+0x28b2/0x3020 [ 494.881013][T16531] do_syscall_64+0x12c/0x3b0 [ 494.881061][T16531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.881088][T16531] RIP: 0033:0x7f3b5105c819 [ 494.881162][T16531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.881183][T16531] RSP: 002b:00007f3b4fa8e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 494.881212][T16531] RAX: ffffffffffffffda RBX: 00007f3b512d6090 RCX: 00007f3b5105c819 [ 494.881230][T16531] RDX: 0000000000000000 RSI: 00000000000001f3 RDI: 0000000000000001 [ 494.881315][T16531] RBP: 00007f3b4fa8e090 R08: 0000200000000340 R09: 0000000000000000 [ 494.881332][T16531] R10: 0000000061000006 R11: 0000000000000246 R12: 0000000000000001 [ 494.881348][T16531] R13: 00007f3b512d6128 R14: 00007f3b512d6090 R15: 00007ffe236cca48 [ 494.881419][T16531] [ 495.674753][T16543] loop2: detected capacity change from 0 to 4096 [ 495.752077][T16543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.844809][T12402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.115738][T16558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.148539][T16558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.187538][T16560] netlink: 'syz.4.3742': attribute type 1 has an invalid length. [ 496.314327][T16565] tipc: Started in network mode [ 496.326377][T16565] tipc: Node identity 2, cluster identity 6 [ 496.333358][T16565] tipc: Node number set to 2 [ 496.339565][T16567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.349257][T16565] tipc: Cannot configure node identity twice [ 496.355486][T16567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.417555][T16571] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3747'. [ 496.447094][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3748'. [ 496.762303][T16580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3751'. [ 496.783119][ T28] audit: type=1400 audit(2000000219.780:1160): avc: denied { map } for pid=16579 comm="syz.2.3751" path="socket:[53499]" dev="sockfs" ino=53499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 496.795036][T16578] loop9: detected capacity change from 0 to 4096 [ 496.829500][T16578] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.858890][T15285] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.942725][T16592] loop9: detected capacity change from 0 to 764 [ 496.970174][T16592] rock: directory entry would overflow storage [ 496.983822][T16592] rock: sig=0x4f50, size=4, remaining=3 [ 497.002044][T16592] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 497.092414][T16609] RDS: rds_bind could not find a transport for ::4002:0:20:0, load rds_tcp or rds_rdma? [ 497.107692][T16609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.116755][T16609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.705462][T16618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.734342][T16618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.742778][T16616] loop1: detected capacity change from 0 to 4096 [ 497.764986][T16616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.796558][T16623] IPVS: set_ctl: invalid protocol: 0 10.1.5.1:4 [ 497.812743][T16623] syzkaller0: entered promiscuous mode [ 497.818800][T16623] syzkaller0: entered allmulticast mode [ 497.819957][T15351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.107603][T16641] loop1: detected capacity change from 0 to 8192 [ 498.174108][T16641] loop1: p1 < > p2 p4 < p5 > [ 498.189021][T16641] loop1: partition table partially beyond EOD, truncated [ 498.212408][T16641] loop1: p1 start 134217728 is beyond EOD, truncated [ 498.228187][T16641] loop1: p2 size 591360 extends beyond EOD, truncated [ 498.249591][T16641] loop1: p5 size 591360 extends beyond EOD, truncated [ 498.380893][T16649] bridge0: entered promiscuous mode [ 498.389913][T16649] macvlan2: entered allmulticast mode [ 498.396886][T16649] bridge0: entered allmulticast mode [ 498.406138][T16649] bridge0: port 1(macvlan2) entered blocking state [ 498.416166][T16649] bridge0: port 1(macvlan2) entered disabled state [ 498.427617][T16649] bridge0: left allmulticast mode [ 498.491063][T16649] bridge0: left promiscuous mode [ 499.040056][T16658] loop2: detected capacity change from 0 to 136 [ 499.120221][T16658] loop2: detected capacity change from 0 to 2048 [ 499.139875][T16658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.178399][T16660] loop1: detected capacity change from 0 to 512 [ 499.201520][T16660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.215210][T16660] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.227152][ T28] audit: type=1400 audit(2000000222.220:1161): avc: denied { read } for pid=16659 comm="syz.1.3779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 499.306063][T15351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.349857][T16671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.362923][T16679] FAULT_INJECTION: forcing a failure. [ 499.362923][T16679] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 499.390541][T16671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.407789][T16679] CPU: 0 UID: 0 PID: 16679 Comm: syz.3.3783 Tainted: G W syzkaller #0 PREEMPT(full) [ 499.407873][T16679] Tainted: [W]=WARN [ 499.407882][T16679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 499.407897][T16679] Call Trace: [ 499.407905][T16679] [ 499.407914][T16679] __dump_stack+0x1d/0x30 [ 499.407943][T16679] dump_stack_lvl+0x95/0xd0 [ 499.408051][T16679] dump_stack+0x15/0x1b [ 499.408078][T16679] should_fail_ex+0x263/0x280 [ 499.408149][T16679] should_fail_alloc_page+0xf2/0x100 [ 499.408186][T16679] __alloc_frozen_pages_noprof+0x108/0x350 [ 499.408214][T16679] alloc_pages_mpol+0xb3/0x260 [ 499.408242][T16679] ? __hrtimer_setup+0x169/0x1a0 [ 499.408345][T16679] alloc_frozen_pages_noprof+0x8f/0x110 [ 499.408378][T16679] __kmalloc_large_node_noprof+0x58/0x150 [ 499.408407][T16679] __kmalloc_noprof+0x268/0x4d0 [ 499.408430][T16679] ? __se_sys_futex_waitv+0x101/0x1c0 [ 499.408548][T16679] __se_sys_futex_waitv+0x101/0x1c0 [ 499.408577][T16679] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 499.408678][T16679] __x64_sys_futex_waitv+0x67/0x80 [ 499.408740][T16679] x64_sys_call+0x2f5b/0x3020 [ 499.408775][T16679] do_syscall_64+0x12c/0x3b0 [ 499.408807][T16679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.408876][T16679] RIP: 0033:0x7fe0478fc819 [ 499.408898][T16679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.408921][T16679] RSP: 002b:00007fe04634f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 499.408948][T16679] RAX: ffffffffffffffda RBX: 00007fe047b75fa0 RCX: 00007fe0478fc819 [ 499.408966][T16679] RDX: 0000000000000000 RSI: 0000000000000034 RDI: 0000200000002440 [ 499.408980][T16679] RBP: 00007fe04634f090 R08: 0000000000000000 R09: 0000000000000000 [ 499.409024][T16679] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 499.409040][T16679] R13: 00007fe047b76038 R14: 00007fe047b75fa0 R15: 00007ffddb89f2a8 [ 499.409061][T16679] [ 499.624253][T16683] syzkaller0: entered promiscuous mode [ 499.635202][T16683] syzkaller0: entered allmulticast mode [ 499.652778][T16687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.662217][T16687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.764911][T16687] Set syz1 is full, maxelem 6117 reached [ 499.828838][T16689] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 500.021901][T16699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=16699 comm=syz.9.3791 [ 500.206517][T16713] syzkaller0: entered promiscuous mode [ 500.213950][T16713] syzkaller0: entered allmulticast mode [ 500.375219][T16722] loop1: detected capacity change from 0 to 512 [ 500.378764][T16724] syz_tun: entered allmulticast mode [ 500.387704][T16722] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 500.409432][T16726] loop9: detected capacity change from 0 to 512 [ 500.411080][T16722] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.3799: corrupted xattr entries [ 500.416697][T16726] EXT4-fs: Ignoring removed nobh option [ 500.434321][T16722] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 500.436046][T16726] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 500.445422][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 500.445460][ C1] EXT4-fs (loop1): initial error at time 2000000223: xattr_find_entry:337: inode 15 [ 500.445491][ C1] EXT4-fs (loop1): last error at time 2000000223: xattr_find_entry:337: inode 15 [ 500.450189][T16722] EXT4-fs (loop1): 1 truncate cleaned up [ 500.485126][ T28] audit: type=1400 audit(2000000223.490:1162): avc: denied { getattr } for pid=16717 comm="syz.3.3797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 500.490949][T16722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.530528][T16726] EXT4-fs (loop9): 1 truncate cleaned up [ 500.537509][T16726] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.610311][T15285] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.620475][T15351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.678331][T16547] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 500.715461][T16742] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 500.731176][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3805'. [ 500.826313][T16749] netlink: 'syz.4.3808': attribute type 10 has an invalid length. [ 500.971418][T16749] geneve1: entered promiscuous mode [ 500.987944][T16753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.998902][T16753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.002791][T16749] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 501.069326][T16757] loop4: detected capacity change from 0 to 512 [ 501.077968][T16757] journal_path: Non-blockdev passed as './file2' [ 501.082676][T16755] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3810'. [ 501.084970][T16757] EXT4-fs: error: could not find journal device path [ 501.094196][T16755] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3810'. [ 501.183548][T16764] loop1: detected capacity change from 0 to 512 [ 501.210318][T16764] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 501.235422][T16764] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.3813: corrupted xattr entries [ 501.246972][T16764] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 501.249656][T16764] EXT4-fs (loop1): 1 truncate cleaned up [ 501.265196][T16764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.318622][T15351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.348935][T16773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3815'. [ 501.543398][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3820'. [ 501.613294][T16785] bridge0: entered promiscuous mode [ 501.620622][T16785] macvlan2: entered allmulticast mode [ 501.626587][T16785] bridge0: entered allmulticast mode [ 501.634455][T16785] bridge0: port 3(macvlan2) entered blocking state [ 501.641160][T16785] bridge0: port 3(macvlan2) entered disabled state [ 501.649746][T16785] bridge0: left allmulticast mode [ 501.654988][T16785] bridge0: left promiscuous mode [ 501.891983][T16788] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 501.934493][T16790] xfrm0 speed is unknown, defaulting to 1000 [ 502.099021][T12402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.110464][T16796] loop4: detected capacity change from 0 to 512 [ 502.121315][T16796] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 502.162926][ T28] audit: type=1326 audit(2000000225.160:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16793 comm="syz.1.3824" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92e9b4c819 code=0x0 [ 502.205067][T16796] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.3825: corrupted xattr entries [ 502.219846][T16796] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 502.222864][T16835] loop1: detected capacity change from 0 to 512 [ 502.232333][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 502.232357][ C0] EXT4-fs (loop4): initial error at time 2000000225: xattr_find_entry:337: inode 15 [ 502.232403][ C0] EXT4-fs (loop4): last error at time 2000000225: xattr_find_entry:337: inode 15 [ 502.241336][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3826'. [ 502.273389][T16796] EXT4-fs (loop4): 1 truncate cleaned up [ 502.324179][T16840] loop9: detected capacity change from 0 to 2048 [ 502.333017][T16796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.369927][T16840] loop9: p1 < > p4 [ 502.379131][T16840] loop9: p4 size 722688 extends beyond EOD, truncated [ 502.409672][ T28] audit: type=1400 audit(2000000225.410:1164): avc: denied { read } for pid=16834 comm="syz.9.3829" name="loop9p4" dev="devtmpfs" ino=3522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 502.435792][T16840] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16840 comm=syz.9.3829 [ 502.461068][ T28] audit: type=1400 audit(2000000225.410:1165): avc: denied { open } for pid=16834 comm="syz.9.3829" path="/dev/loop9p4" dev="devtmpfs" ino=3522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 502.485935][T12937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.509330][T16848] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 502.520037][ T28] audit: type=1400 audit(2000000225.460:1166): avc: denied { ioctl } for pid=16834 comm="syz.9.3829" path="/dev/loop9p4" dev="devtmpfs" ino=3522 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 502.558182][T16848] EXT4-fs (loop3): orphan cleanup on readonly fs [ 502.574718][T16855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3833'. [ 502.585146][T16848] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.3832: bad orphan inode 15 [ 502.598721][T16848] loop3: lost filesystem error report for type 5 error -117 [ 502.601326][T16848] ext4_test_bit(bit=14, block=18) = 1 [ 502.608841][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 502.608876][ C1] EXT4-fs (loop3): initial error at time 2000000225: ext4_orphan_get:1423 [ 502.608898][ C1] EXT4-fs (loop3): last error at time 2000000225: ext4_orphan_get:1423 [ 502.638801][T16848] is_bad_inode(inode)=0 [ 502.643262][T16848] NEXT_ORPHAN(inode)=1023 [ 502.647838][T16848] max_ino=32 [ 502.652958][T16848] i_nlink=0 [ 502.656802][T16848] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz.3.3832: corrupted xattr block 19: e_value size too large [ 502.671535][T16848] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 502.673597][T16848] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 502.695860][T16848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 ro without journal. Quota mode: none. [ 502.730438][T15968] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 502.775688][T16858] bridge0: entered promiscuous mode [ 502.784564][T16858] macvlan2: entered allmulticast mode [ 502.791258][T16858] bridge0: entered allmulticast mode [ 502.797807][T16858] bridge0: port 1(macvlan2) entered blocking state [ 502.805832][T16858] bridge0: port 1(macvlan2) entered disabled state [ 502.941732][T16858] bridge0: left allmulticast mode [ 502.954592][T16858] bridge0: left promiscuous mode [ 503.167868][T16879] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.481643][T15285] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.542327][T16884] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 503.564175][T16884] EXT4-fs error (device loop9): xattr_find_entry:337: inode #15: comm syz.9.3843: corrupted xattr entries [ 503.564277][T16884] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 503.586166][T16884] EXT4-fs (loop9): 1 truncate cleaned up [ 503.602007][T16884] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.672123][T15285] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.707068][T16890] FAULT_INJECTION: forcing a failure. [ 503.707068][T16890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.724791][T16890] CPU: 0 UID: 0 PID: 16890 Comm: syz.9.3845 Tainted: G W syzkaller #0 PREEMPT(full) [ 503.724870][T16890] Tainted: [W]=WARN [ 503.724880][T16890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 503.724896][T16890] Call Trace: [ 503.724905][T16890] [ 503.724916][T16890] __dump_stack+0x1d/0x30 [ 503.724949][T16890] dump_stack_lvl+0x95/0xd0 [ 503.725027][T16890] dump_stack+0x15/0x1b [ 503.725053][T16890] should_fail_ex+0x263/0x280 [ 503.725083][T16890] should_fail+0xb/0x20 [ 503.725189][T16890] should_fail_usercopy+0x1a/0x20 [ 503.725224][T16890] _copy_from_user+0x1c/0xb0 [ 503.725306][T16890] ___sys_sendmsg+0xc1/0x1e0 [ 503.725341][T16890] __x64_sys_sendmsg+0xd4/0x160 [ 503.725364][T16890] x64_sys_call+0x194c/0x3020 [ 503.725468][T16890] do_syscall_64+0x12c/0x3b0 [ 503.725500][T16890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.725579][T16890] RIP: 0033:0x7f0456b3c819 [ 503.725620][T16890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.725643][T16890] RSP: 002b:00007f0455597028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.725670][T16890] RAX: ffffffffffffffda RBX: 00007f0456db5fa0 RCX: 00007f0456b3c819 [ 503.725716][T16890] RDX: 00000000000440e0 RSI: 0000200000000100 RDI: 0000000000000003 [ 503.725732][T16890] RBP: 00007f0455597090 R08: 0000000000000000 R09: 0000000000000000 [ 503.725747][T16890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.725761][T16890] R13: 00007f0456db6038 R14: 00007f0456db5fa0 R15: 00007fffd58bc3f8 [ 503.725781][T16890] [ 504.014527][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3850'. [ 504.048138][T16902] netlink: 'syz.9.3851': attribute type 1 has an invalid length. [ 504.068838][T16900] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 504.472970][T16906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3852'. [ 504.545897][T16911] set_capacity_and_notify: 3 callbacks suppressed [ 504.546038][T16911] loop3: detected capacity change from 0 to 512 [ 504.608757][T16911] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 0 [ 505.101165][T16911] loop3: detected capacity change from 0 to 512 [ 505.135131][T16911] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 505.190393][T16911] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 505.218125][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 505.224612][ C1] EXT4-fs (loop3): initial error at time 2000000228: ext4_mb_generate_buddy:1317 [ 505.233800][ C1] EXT4-fs (loop3): last error at time 2000000228: ext4_mb_generate_buddy:1317 [ 505.253578][T16911] Quota error (device loop3): write_blk: dquota write failed [ 505.282782][T16911] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 505.299399][T16926] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3857'. [ 505.318215][T16911] Quota error (device loop3): write_blk: dquota write failed [ 505.342571][T16911] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 505.387147][T16911] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.3853: Failed to acquire dquot type 1 [ 505.432707][T16911] loop3: lost filesystem error report for type 5 error -28 [ 505.433084][T16911] EXT4-fs (loop3): 1 truncate cleaned up [ 505.490037][T16911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.549005][T16911] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 505.583554][T16911] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 505.730098][T16929] FAULT_INJECTION: forcing a failure. [ 505.730098][T16929] name failslab, interval 1, probability 0, space 0, times 0 [ 505.743135][T16929] CPU: 0 UID: 0 PID: 16929 Comm: syz.3.3853 Tainted: G W syzkaller #0 PREEMPT(full) [ 505.743175][T16929] Tainted: [W]=WARN [ 505.743184][T16929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 505.743199][T16929] Call Trace: [ 505.743206][T16929] [ 505.743216][T16929] __dump_stack+0x1d/0x30 [ 505.743338][T16929] dump_stack_lvl+0x95/0xd0 [ 505.743370][T16929] dump_stack+0x15/0x1b [ 505.743398][T16929] should_fail_ex+0x263/0x280 [ 505.743511][T16929] should_failslab+0x8c/0xb0 [ 505.743535][T16929] kmem_cache_alloc_noprof+0x66/0x3f0 [ 505.743557][T16929] ? do_getname+0x2e/0x1c0 [ 505.743585][T16929] do_getname+0x2e/0x1c0 [ 505.743610][T16929] __se_sys_mkdirat+0x21/0xf0 [ 505.743716][T16929] __x64_sys_mkdirat+0x43/0x50 [ 505.743800][T16929] x64_sys_call+0x2c4e/0x3020 [ 505.743827][T16929] do_syscall_64+0x12c/0x3b0 [ 505.743892][T16929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.743918][T16929] RIP: 0033:0x7fe0478fb687 [ 505.743938][T16929] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.743957][T16929] RSP: 002b:00007fe04632de58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 505.744026][T16929] RAX: ffffffffffffffda RBX: 00007fe04632dee0 RCX: 00007fe0478fb687 [ 505.744041][T16929] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 00000000ffffff9c [ 505.744055][T16929] RBP: 0000200000000180 R08: 0000200000000000 R09: 0000000000000000 [ 505.744069][T16929] R10: 0000200000000180 R11: 0000000000000246 R12: 0000200000000100 [ 505.744083][T16929] R13: 00007fe04632dea0 R14: 0000000000000000 R15: 00002000000001c0 [ 505.744131][T16929] [ 505.744349][T16929] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 505.971825][T16937] vcan0: tx drop: invalid sa for name 0x0000000020000000 [ 505.999488][T16929] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 506.000518][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.088674][T15968] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.118650][T16945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3865'. [ 506.132172][T14881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.233639][T16947] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 506.251279][T16949] loop4: detected capacity change from 0 to 512 [ 506.263269][T16949] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 506.276731][T16949] EXT4-fs (loop4): 1 truncate cleaned up [ 506.283157][T16949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.462242][T16958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3869'. [ 506.498284][T16959] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3866'. [ 506.520053][T16959] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3866'. [ 506.653273][T16968] loop1: detected capacity change from 0 to 512 [ 506.691875][T16968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.732314][T16968] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.773817][T16966] loop2: detected capacity change from 0 to 4096 [ 506.785471][T12937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.797897][T16968] EXT4-fs error (device loop1): __ext4_remount:6837: comm syz.1.3873: Abort forced by user [ 506.837279][T16966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.839067][T16968] EXT4-fs (loop1): Remounting filesystem read-only [ 506.878410][T16968] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 506.891350][T16979] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 507.033659][T16986] syz1: rxe_newlink: already configured on xfrm0 [ 507.033984][T15351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.163547][ T3601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.339971][T16990] loop1: detected capacity change from 0 to 4096 [ 507.384445][T16990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.736785][T12402] ================================================================== [ 507.744941][T12402] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 507.752897][T12402] [ 507.755290][T12402] read-write to 0xffff888109830478 of 8 bytes by task 8942 on cpu 0: [ 507.764340][T12402] __xa_clear_mark+0xf5/0x1e0 [ 507.769235][T12402] __folio_end_writeback+0xf4/0x360 [ 507.774571][T12402] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 507.780954][T12402] folio_end_writeback+0x1c/0x70 [ 507.785928][T12402] ext4_finish_bio+0x450/0x760 [ 507.790824][T12402] ext4_release_io_end+0x9f/0x1f0 [ 507.795985][T12402] ext4_end_io_end+0x18d/0x240 [ 507.800880][T12402] ext4_end_io_rsv_work+0x15b/0x1f0 [ 507.806217][T12402] process_scheduled_works+0x4f0/0x9c0 [ 507.811945][T12402] worker_thread+0x58a/0x780 [ 507.816584][T12402] kthread+0x22a/0x280 [ 507.820768][T12402] ret_from_fork+0x146/0x330 [ 507.825491][T12402] ret_from_fork_asm+0x1a/0x30 [ 507.830296][T12402] [ 507.832726][T12402] read to 0xffff888109830478 of 8 bytes by task 12402 on cpu 1: [ 507.840565][T12402] xas_find_marked+0x213/0x620 [ 507.845435][T12402] filemap_get_folios_tag+0xfa/0x430 [ 507.850734][T12402] filemap_fdatawait_keep_errors+0x6c/0x190 [ 507.856746][T12402] sync_inodes_sb+0x424/0x4d0 [ 507.861445][T12402] sync_filesystem+0x102/0x190 [ 507.866231][T12402] generic_shutdown_super+0x4c/0x220 [ 507.871979][T12402] kill_block_super+0x2a/0x70 [ 507.876722][T12402] ext4_kill_sb+0x42/0x80 [ 507.881161][T12402] deactivate_locked_super+0x75/0x1c0 [ 507.886724][T12402] deactivate_super+0x97/0xa0 [ 507.891700][T12402] cleanup_mnt+0x2bb/0x330 [ 507.896247][T12402] __cleanup_mnt+0x19/0x20 [ 507.900691][T12402] task_work_run+0x130/0x1a0 [ 507.905301][T12402] exit_to_user_mode_loop+0x1f4/0x6f0 [ 507.910710][T12402] do_syscall_64+0x232/0x3b0 [ 507.915323][T12402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.921230][T12402] [ 507.923559][T12402] value changed: 0xfffffe0000000000 -> 0xffff000000000000 [ 507.930769][T12402] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 507.933093][T12402] Reported by Kernel Concurrency Sanitizer on: [ 507.939340][T12402] CPU: 1 UID: 0 PID: 12402 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 507.950896][T12402] Tainted: [W]=WARN [ 507.954707][T12402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 507.965122][T12402] ================================================================== [ 508.008738][ T28] audit: type=1400 audit(2000000230.990:1167): avc: denied { write } for pid=3301 comm="syz-executor" path="pipe:[2577]" dev="pipefs" ino=2577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 508.049426][T12402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.118257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.126998][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.201282][T14881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.209543][T14881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.303613][T15968] syz_tun (unregistering): left allmulticast mode [ 508.434388][T16831] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.501983][T16989] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.514270][T16831] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.591007][T16831] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.671687][T16831] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.816513][T16831] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 508.839969][T16831] bond0 (unregistering): Released all slaves [ 508.915257][T16831] hsr_slave_0: left promiscuous mode [ 508.921189][T16831] hsr_slave_1: left promiscuous mode [ 508.931129][T16831] veth1_macvtap: left promiscuous mode [ 508.936892][T16831] veth0_macvtap: left promiscuous mode [ 508.942945][T16831] veth1_vlan: left promiscuous mode [ 509.034464][ T3040] 8021q: adding VLAN 0 to HW filter on device eth1 [ 509.140387][ T3040] 8021q: adding VLAN 0 to HW filter on device eth2 [ 509.240812][ T3422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.253162][ T3040] 8021q: adding VLAN 0 to HW filter on device eth3 [ 509.382007][ T3040] 8021q: adding VLAN 0 to HW filter on device eth4 [ 509.451662][T16831] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.521744][T16831] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.601483][T16831] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.641395][T16831] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.700950][T16831] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.711835][T16831] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.762796][T16831] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.773628][T16831] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.811983][T16831] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.822733][T16831] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.835139][ T3040] 8021q: adding VLAN 0 to HW filter on device eth21 [ 509.881495][T16831] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.892264][T16831] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.963133][T16831] bridge_slave_1: left allmulticast mode [ 509.969419][T16831] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.977245][T16831] bridge_slave_0: left allmulticast mode [ 509.983078][T16831] bridge_slave_0: left promiscuous mode [ 509.989020][T16831] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.070070][T16831] bond0 (unregistering): Released all slaves [ 510.141025][T16831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.151924][T16831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.161897][T16831] bond0 (unregistering): Released all slaves [ 510.169684][ T3040] 8021q: adding VLAN 0 to HW filter on device eth22 [ 510.221642][T16831] tipc: Disabling bearer [ 510.227008][T16831] tipc: Left network mode [ 510.232666][T16831] tipc: Left network mode [ 510.284872][T16831] hsr_slave_0: left promiscuous mode [ 510.294587][T16831] hsr_slave_1: left promiscuous mode [ 510.305911][T16831] hsr_slave_0: left promiscuous mode [ 510.312386][T16831] hsr_slave_1: left promiscuous mode [ 510.318291][T16831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.325934][T16831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.333768][T16831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.341277][T16831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.354682][T16831] veth1_macvtap: left promiscuous mode [ 510.360879][T16831] veth0_macvtap: left promiscuous mode [ 510.366788][T16831] veth1_vlan: left promiscuous mode [ 510.372418][T16831] veth0_vlan: left promiscuous mode [ 510.379044][T16831] veth1_macvtap: left promiscuous mode [ 510.384723][T16831] veth0_macvtap: left promiscuous mode [ 510.390501][T16831] veth1_vlan: left promiscuous mode [ 510.395784][T16831] veth0_vlan: left promiscuous mode [ 510.547525][T16831] team0 (unregistering): Port device team_slave_1 removed [ 510.557412][T16831] team0 (unregistering): Port device team_slave_0 removed [ 510.591594][ T3040] 8021q: adding VLAN 0 to HW filter on device eth23 [ 510.701284][ T3040] 8021q: adding VLAN 0 to HW filter on device eth24 [ 510.825189][ T3040] 8021q: adding VLAN 0 to HW filter on device eth25 [ 510.931191][ T3040] 8021q: adding VLAN 0 to HW filter on device eth26 [ 511.056425][ T3040] 8021q: adding VLAN 0 to HW filter on device eth27 [ 511.183906][ T3040] 8021q: adding VLAN 0 to HW filter on device eth28