last executing test programs: 7m36.579232036s ago: executing program 32 (id=381): r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x100000, 0x1}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYRESOCT=r0, @ANYRESOCT=r3, @ANYRES8=r2], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100085064bdb0000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r7}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000340)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x58, r8}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000440)=0x2, 0x4) r10 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b45, 0x4) connect$unix(r11, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7m23.729317696s ago: executing program 3 (id=664): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000200001}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="e107a24de64c39f6f5e95bfbfc43673f41770da8f44070ed257791c170fab2f16574c58a1ef3ea87e2a937ce9a68fd270a7b6e3a7fcf1c0ea0534a69262c5a2cb1aeaebe2353a8de", 0x48}], 0x1}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000130100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0) 7m23.729151416s ago: executing program 33 (id=664): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000200001}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="e107a24de64c39f6f5e95bfbfc43673f41770da8f44070ed257791c170fab2f16574c58a1ef3ea87e2a937ce9a68fd270a7b6e3a7fcf1c0ea0534a69262c5a2cb1aeaebe2353a8de", 0x48}], 0x1}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000130100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0) 7m6.149338704s ago: executing program 34 (id=842): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004050}, 0x8080) 6m28.665937067s ago: executing program 35 (id=1270): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r0, &(0x7f0000001f80)=""/4096, 0x1000) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000ac18864b575d80e1545aadb94c67eb15776f270000008085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x277) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) (async) rename(&(0x7f0000000380)='./cgroup\x00', &(0x7f0000000400)='./file1/file4/file5\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x401, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x1, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x9) (async) syz_clone3(&(0x7f0000000300)={0x101080, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') (async, rerun: 64) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000200001}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x900000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@sq={'sq', 0x3d, 0x2}}, {@rq={'rq', 0x3d, 0xffffffffffffffff}}, {@common=@msize={'msize', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0x3}}, {@rq={'rq', 0x3d, 0x401}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="e107a24de64c39f6f5e95bfbfc43673f41770da8f44070ed257791c170fab2f16574c58a1ef3ea87e2a937ce9a68fd270a7b6e3a7fcf1c0ea0534a69262c5a2cb1aeaebe2353a8de", 0x48}], 0x1}, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0) (async) preadv(r4, &(0x7f0000000540)=[{&(0x7f0000000680)=""/9, 0x9}], 0x1, 0x20033, 0x51b) (async, rerun: 64) socket(0xa, 0x5, 0x0) (rerun: 64) 6m23.813744246s ago: executing program 36 (id=1319): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x46, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60020000001c2c00fe8000000000000000000000000000bbfe8000000000000002000000000000aa3300000c"], 0x0) 4m33.235499963s ago: executing program 8 (id=2118): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000007fffffe000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000007f000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 4m33.172702233s ago: executing program 37 (id=2022): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0x3) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 4m33.12934597s ago: executing program 8 (id=2121): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3008800, &(0x7f00000001c0)={[{@nojournal_checksum}, {@inlinecrypt}, {@bsdgroups}, {@debug}]}, 0x1, 0x520, &(0x7f0000000d00)="$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") r0 = open(0x0, 0x66842, 0x8) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x2c400}], 0x14, 0x7800, 0x0, 0x3) 4m32.970979256s ago: executing program 8 (id=2122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000011240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002"], 0x64}}, 0x0) 4m32.76946232s ago: executing program 8 (id=2124): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) (fail_nth: 2) 4m32.338423522s ago: executing program 8 (id=2125): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) perf_event_open(0x0, 0x0, 0xff67bfffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x229c022, &(0x7f0000000240)=ANY=[]) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000580)=@known='user.syz\x00', &(0x7f00000005c0)=""/234, 0xea) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 4m30.735899369s ago: executing program 8 (id=2127): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x3, @loopback, 0xff}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000200), 0x4) (async, rerun: 32) listen(r3, 0xfff) (async, rerun: 32) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x4e22, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x8, 0x0, 0x400}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) (async, rerun: 32) close_range(r5, 0xffffffffffffffff, 0x0) (async, rerun: 32) accept4(r3, &(0x7f0000000240)=@x25, 0x0, 0x800) (async) write$P9_RVERSION(r2, &(0x7f0000000b80)=ANY=[@ANYBLOB="1300000065ffffdd913bd58600"], 0xc8) (async, rerun: 64) r6 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) getsockopt$SO_COOKIE(r6, 0x1, 0x4a, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000240)={[{@grpid}, {@auto_da_alloc}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4da, &(0x7f0000000900)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1f81ca7, 0x0, 0x83, 0x0, &(0x7f0000000080)) (async, rerun: 64) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000001240)='./bus\x00', 0x0, 0xcf2c39061c7b83f2) (rerun: 64) getdents(r7, 0x0, 0x58) 4m16.404457106s ago: executing program 38 (id=2127): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x3, @loopback, 0xff}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000200), 0x4) (async, rerun: 32) listen(r3, 0xfff) (async, rerun: 32) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x4e22, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x8, 0x0, 0x400}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) (async, rerun: 32) close_range(r5, 0xffffffffffffffff, 0x0) (async, rerun: 32) accept4(r3, &(0x7f0000000240)=@x25, 0x0, 0x800) (async) write$P9_RVERSION(r2, &(0x7f0000000b80)=ANY=[@ANYBLOB="1300000065ffffdd913bd58600"], 0xc8) (async, rerun: 64) r6 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) getsockopt$SO_COOKIE(r6, 0x1, 0x4a, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000240)={[{@grpid}, {@auto_da_alloc}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4da, &(0x7f0000000900)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1f81ca7, 0x0, 0x83, 0x0, &(0x7f0000000080)) (async, rerun: 64) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000001240)='./bus\x00', 0x0, 0xcf2c39061c7b83f2) (rerun: 64) getdents(r7, 0x0, 0x58) 4m11.169816677s ago: executing program 3 (id=2243): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000fe00000079a00000000000006200000000000000950074000000000002bf7ac06b0bba6dae5599772183b0be1ce6508a4bcdfe52782f28f91e7fdaa8e2e6dbedd2309cbbdb7835c610f677b40089f20c1250843791e0e134073a88cfcabe01ba5e03ab30"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) 4m10.883036275s ago: executing program 3 (id=2297): sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x4000) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000300aa0000000000000000080012000000000003000000000000003000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) 4m10.715535683s ago: executing program 3 (id=2300): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x5, 0x6, 0x0, 0x81, 0xffffffff}) prctl$PR_SET_SECUREBITS(0x1c, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$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") r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000001500000000004e2200000000ffffffff000000000100000000000000fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="010000000300000002000000000000000800030011006e"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000014) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x208004, 0x21fffc, 0xc, 0x2000, 0x2, 0xfffffffe}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r3 = syz_clone(0x400011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000100)='smaps_rollup\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r4, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r4, 0xc) r5 = epoll_create1(0x80000) r6 = socket$unix(0x1, 0x5, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x1000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0xb0000005}) socket$inet6_tcp(0xa, 0x1, 0x0) 4m10.154046647s ago: executing program 3 (id=2309): socket(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000012000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 4m7.498533579s ago: executing program 3 (id=2331): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x120}}, 0x20) 4m7.345771704s ago: executing program 39 (id=2331): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x120}}, 0x20) 3m4.661276025s ago: executing program 0 (id=2950): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x2f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0xd, 0x4, 0x7fff, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x1, 0x10, 0x6acd0593, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x20, 0x40, 0x8, 0x2, {{0xc, 0x4, 0x0, 0x3d, 0x30, 0x64, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x1c, 0x0, [{0x5, 0x11, "ec06d09d31ff5e5c9c38c36f755603"}, {0x2, 0x5, "3e98dc"}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x2f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0xd, 0x4, 0x7fff, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x1, 0x10, 0x6acd0593, 0x3}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x20, 0x40, 0x8, 0x2, {{0xc, 0x4, 0x0, 0x3d, 0x30, 0x64, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x1c, 0x0, [{0x5, 0x11, "ec06d09d31ff5e5c9c38c36f755603"}, {0x2, 0x5, "3e98dc"}]}]}}}}}) (async) 3m4.660805405s ago: executing program 0 (id=2952): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value=0xb000000}, 0x20) 3m4.648580057s ago: executing program 0 (id=2953): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) perf_event_open(0x0, 0x0, 0xff67bfffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x229c022, &(0x7f0000000240)=ANY=[]) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000580)=@known='user.syz\x00', &(0x7f00000005c0)=""/234, 0xea) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 3m3.015952819s ago: executing program 0 (id=2958): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10000, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4211, r2, 0x408, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) 3m2.70785241s ago: executing program 0 (id=2961): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r2, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x1c000000, 0x0, 0x8004800}, 0x8) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$inet_sctp(0x2, 0x5, 0x84) 3m2.529512449s ago: executing program 0 (id=2963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000840900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180"], 0x290}}, 0x0) 3m2.52919689s ago: executing program 40 (id=2963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000840900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180"], 0x290}}, 0x0) 1m44.272732423s ago: executing program 4 (id=3502): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010000104000002000000000000000300", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1m43.028950521s ago: executing program 4 (id=3508): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x5, 0xffc, 0xffff, 0x7fff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffefbfbfffffffff, 0xffffffffffffffff, 0xb) syz_clone3(&(0x7f0000000080)={0x901500, 0x0, 0x0, 0x0, {0x20a}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c00}}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r1], 0x1000f) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x80, 0x7, 0x9, 0x18, r4, 0x1d8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3, 0xb}, 0x50) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$TIOCSISO7816(r6, 0xc0285443, &(0x7f0000000180)={0x2, 0x6, 0x4, 0x101, 0x81}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) 1m42.890794304s ago: executing program 4 (id=3511): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) perf_event_open(0x0, 0x0, 0xff67bfffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x229c022, &(0x7f0000000240)=ANY=[]) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000580)=@known='user.syz\x00', &(0x7f00000005c0)=""/234, 0xea) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500"], 0x48}}, 0x4084) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1m41.310482097s ago: executing program 4 (id=3517): mkdir(&(0x7f0000000040)='./file0\x00', 0x93) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x9, 0x102) mount$bpf(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x44000, 0x0) 1m41.17328238s ago: executing program 4 (id=3519): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x10003}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x4002, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu>=0|&!') 1m41.17269799s ago: executing program 4 (id=3520): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0xf0, 0x360, 0xffffffff, 0x0, 0xf0, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x5, @ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00', @port=0x4e23, @gre_key=0x833}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffff00, 0x0, 0xff0000ff], [0x0, 0xffffffff, 0xff, 0xffffffff], 'veth1_to_hsr\x00', 'gre0\x00', {}, {}, 0x2f, 0x6, 0x2, 0x21}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv4=@local, @ipv6=@mcast1, @gre_key=0x4, @port=0x4e20}}}, {{@ipv6={@private0, @mcast2, [0xffffff00, 0x0, 0xff0000ff, 0xffffffff], [0xffffffff, 0xffffffff, 0xff000000, 0xff0000ff], 'xfrm0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x0, 0x0, 0xf, 0x54}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x44}, @ipv6=@empty, @gre_key=0x1, @icmp_id=0x65}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, [0xff, 0x0, 0xffffffff, 0xff], [0xff, 0xff, 0xff000000], 'bond_slave_1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x1d, 0x7, 0x1, 0x8}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x6, @ipv6=@local, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e20, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900028473797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) 1m41.17250086s ago: executing program 41 (id=3520): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0xf0, 0x360, 0xffffffff, 0x0, 0xf0, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x5, @ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00', @port=0x4e23, @gre_key=0x833}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffff00, 0x0, 0xff0000ff], [0x0, 0xffffffff, 0xff, 0xffffffff], 'veth1_to_hsr\x00', 'gre0\x00', {}, {}, 0x2f, 0x6, 0x2, 0x21}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv4=@local, @ipv6=@mcast1, @gre_key=0x4, @port=0x4e20}}}, {{@ipv6={@private0, @mcast2, [0xffffff00, 0x0, 0xff0000ff, 0xffffffff], [0xffffffff, 0xffffffff, 0xff000000, 0xff0000ff], 'xfrm0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x0, 0x0, 0xf, 0x54}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x44}, @ipv6=@empty, @gre_key=0x1, @icmp_id=0x65}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, [0xff, 0x0, 0xffffffff, 0xff], [0xff, 0xff, 0xff000000], 'bond_slave_1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x1d, 0x7, 0x1, 0x8}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x6, @ipv6=@local, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e20, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900028473797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) 34.529385719s ago: executing program 5 (id=4044): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x10}}], 0x10}, 0x4000004) 34.356760938s ago: executing program 5 (id=4046): syz_open_dev$tty20(0xc, 0x4, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0xff8d) 34.261060294s ago: executing program 5 (id=4047): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/2, 0x2, 0x0, &(0x7f0000000080)=""/175, 0xaf}}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa05000000000000001414bbac1414418803f3860800000000f70200"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000286, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @dev={0xfe, 0x80, '\x00', 0x31}, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000840)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x2, [{{0xa, 0x4e24, 0x1, @local, 0x7fffffff}}, {{0xa, 0x4e23, 0x3, @local, 0xffff}}]}, 0x190) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000008510000002000000850000008a000000950000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) shutdown(0xffffffffffffffff, 0x4aa73b083165c032) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) keyctl$set_reqkey_keyring(0xe, 0x3) r4 = socket$inet(0x2, 0x3, 0x46) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000180)={[{@errors_remount}, {@barrier}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x74, 0x9, 0xfe, 0x0, 0x0, 0x1, 0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, @perf_bp, 0x16c4c, 0x0, 0x80000000, 0x2, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0xf21, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840) 33.075269692s ago: executing program 5 (id=4054): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x24, r1, 0x1, 0x703d25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '/,\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044040}, 0x8842) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xae, 0xae, 0x7, [@float={0x3, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0xe, 0x0, 0xd, 0x0, [{0xd, 0x1}, {0x7, 0x3}, {0x7, 0x3}, {0x9}, {0x9, 0x5}, {0x4}, {0x3, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x8, 0x5}, {0x889, 0x2}, {0x6, 0x3}, {0xf, 0x5}, {0x6, 0x5}]}, @union={0xc}, @datasec={0x6, 0x1, 0x0, 0xf, 0x2, [{0x5, 0x7ff, 0x1}], '\vU'}]}, {0x0, [0xe80b7aa39ca7ca1d, 0x5f, 0x0, 0x2e, 0x0]}}, &(0x7f00000004c0)=""/4096, 0xcf, 0x1000, 0x1, 0xf93, 0x10000}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x0, 0x0, 0x8000, 0x8c00, 0xffffffffffffffff, 0x615a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r2}, 0x50) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000080)={&(0x7f0000000100)=""/120, 0x78}) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) sched_setscheduler(r4, 0x6, &(0x7f0000000240)=0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x27, 0xe, 0x0, &(0x7f0000000080)="3275973bb0023f54907f75fa982a", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 32.866313886s ago: executing program 5 (id=4058): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0xffffffdf, {[@generic={0x44, 0x2}]}}}], 0x18}, 0x4000004) 32.744186227s ago: executing program 5 (id=4060): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x8d350, 0x1000, 0x20da, 0x4, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0xd, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x9, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x31}, @broadcast}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400200007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 32.670420799s ago: executing program 42 (id=4060): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x8d350, 0x1000, 0x20da, 0x4, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0xd, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x9, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x31}, @broadcast}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400200007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 7.213255249s ago: executing program 1 (id=4323): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES16=r0], 0x50}}, 0x4000040) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001000010001000000ff00000000000000", @ANYRES32=r3, @ANYBLOB="850b0100009804000a000100aaaaaaaaaaaa0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 7.186273583s ago: executing program 1 (id=4326): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x40, r1, 0x1, 0x3, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r5, r5, 0x0, 0xb) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000011140100299d700000000000080001000000000008004b001300000008004f000400000008000300feffffffa2e9d2f9e042a0f0eb1de79ecdeafb3f620e4c0238f8d154ed572759e225306972cd563dad215d36bbbe82711175c4ca0100000000000000137835592caa797d8b99193ed5f395fd6e427688ae52ce48fa1a260fa695911858920173ad123889a7fa7b80e2f5fdd8f32f2fd405158da37fd104404ed5ace3abbeaed97bdbc56930e261dc2667ddb16831febc455d09396351cf5d8ca0252fcd52ef3c497406fc949cab3f3caa185aba0bd8aa3b5033b2f0ae6d0dc1117b01198b8d0b9d022341618f9c84571ab6ac15915901242cbd5b6bb9574e16cf419d"], 0x30}, 0x1, 0x0, 0x0, 0x2004c0d4}, 0x40441d0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000400)=0x40) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000140)=0x1) read(r6, &(0x7f0000000180)=""/65, 0x41) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 5.70752052s ago: executing program 1 (id=4342): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty=0xbaff, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) 4.653059565s ago: executing program 1 (id=4353): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) perf_event_open(0x0, 0x0, 0xff67bfffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x229c022, &(0x7f0000000240)=ANY=[]) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000580)=@known='user.syz\x00', &(0x7f00000005c0)=""/234, 0xea) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c00"], 0x48}}, 0x4084) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 3.84834157s ago: executing program 1 (id=4365): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60000000}, 0x94) 3.788306739s ago: executing program 1 (id=4367): listen(0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32], 0xff, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000200)=""/85, 0xaa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xc4}}, 0x0) sendmmsg(r6, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x41, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}}) creat(&(0x7f0000000080)='./file0\x00', 0xc7) 3.787983399s ago: executing program 7 (id=4368): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @empty}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40045304, &(0x7f0000000280)={{0x6, 0x81}, 'port1\x00', 0x19, 0x21000, 0x8, 0x9, 0x100, 0x0, 0x40, 0x0, 0x6, 0x1f}) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)}, 0x4004850) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000340)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100c404, &(0x7f0000000600)=ANY=[@ANYBLOB='quiet,fmask=00000000000000000006673,nodots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',discard,nodots,nodots,tz=UTC,nodots,dots,umask=00000000000000003,nodots,nodots,dots,showexec,nfs=stale_rw,nodots,showexec,dots,dots,dots,dots,\x00'], 0x1, 0x1fa, &(0x7f0000000800)="$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") ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080)={0x0, 0x44}, 0x18) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) bind$l2tp(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x400, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) listen(r5, 0x200201) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffff9}}}, 0x108) 3.629546526s ago: executing program 7 (id=4370): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) fchown(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, &(0x7f00000002c0)) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)={[{@grpjquota}, {@i_version}, {@discard}, {@noload}, {@resuid}]}, 0x3, 0x4fe, &(0x7f0000000dc0)="$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") 2.312331635s ago: executing program 7 (id=4380): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @empty}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40045304, &(0x7f0000000280)={{0x6, 0x81}, 'port1\x00', 0x19, 0x21000, 0x8, 0x9, 0x100, 0x0, 0x40, 0x0, 0x6, 0x1f}) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)}, 0x4004850) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000340)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100c404, &(0x7f0000000600)=ANY=[@ANYBLOB='quiet,fmask=00000000000000000006673,nodots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',discard,nodots,nodots,tz=UTC,nodots,dots,umask=00000000000000003,nodots,nodots,dots,showexec,nfs=stale_rw,nodots,showexec,dots,dots,dots,dots,\x00'], 0x1, 0x1fa, &(0x7f0000000800)="$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") ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080)={0x0, 0x44}, 0x18) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) bind$l2tp(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x400, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) listen(r5, 0x200201) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffff9}}}, 0x108) 2.244968286s ago: executing program 6 (id=4381): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0xf3ffffffffffffff, 0x20000000}, 0x0) 2.212834592s ago: executing program 7 (id=4382): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000e0a1a4ed002dbd7000feffffff090002bd7d00000000000000081b3aadc98a0a3611b0a57887413e00410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000cc0)={0x2d0, r2, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfdaa, 0x68}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x274, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x4, 0x9, 0x1, 0x3, 0x4, 0xcc0, 0xff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x79b0, 0xa]}, @beacon_params=[@NL80211_ATTR_IE={0x20, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x7, 0xbd}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x40, 0xbe}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_FTM_RESPONDER={0x120, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x31, 0x3, "a5d950542ce99a9a3a8961affdf0d4344978cd6581616d950a4aacb33b66b5ce07049b963853eb78aa61b65e17"}, @NL80211_FTM_RESP_ATTR_LCI={0x8b, 0x2, "8789ea6a3afec7b3fb57fb7c3aab5357c45b4e9e485365c9878ff5feff6da39534d8fa172e0024c15ced130bd246cc61f576d1e3f425f1bcf55adfa062a31087e8f57a82683607b8524450d4baceac72ebcfe30459ef5209ffd8e83ff793497a74fdc207d2be2ea5e597ef849912e31f7ac90ba428c176d9188c3d7f4f010d11201fedc4fccec5"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x53, 0x2, "4c177d2089bcc16c662d10a266f3b0bd24c01a0aedf8d4fb6e8fd7e7d29194f35f0611d5930490dc28a70af4735bd60b38d861fa76e90042e83eae13f531fb59cbb59245244ffbfccee800bd001f5f"}]}, @NL80211_ATTR_FTM_RESPONDER={0x114, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x34, 0x2, "4ae4b8e710cce921b158538066d09644473fc60f4cf2e381842a0bcfe646c41c09f3a3e932578cd2d95d675bea7f9671"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xca, 0x2, "c8f3621ea5169e1790371ebe664fef196fef53872b31c664e27a797ba6a241cddf9eae7d71e1345275b966a189aba3cd7a0b6524dd3008ce7d06e742e405d28210a87f343001cffc61adaeba16b6570218189b8e44720371677620003287e17f81d6ff0f1335078c985e27d6c54743f574c775be4fd58aea300520fdca517df87624d5d1832a7adb982ffe169fc17210860ed5c08fae179dd02b80f4a88baa17756197c04ee92eef26144be076f29ddc1f2b846dbdd9f4b7cf427f8717f6357d088febd9732a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x14}, 0x40000) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') pread64(r3, &(0x7f0000000480)=""/177, 0xb1, 0xe0) (async) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f00006e5000/0x1000)=nil, 0x1000, 0x15) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=r2], 0x50}}, 0x20008001) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b40500002000800061108d0000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x428, 0x2e8, 0x428, 0xe0, 0xe0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2b, 0x8, 0x1, 0x18}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x23}, 0x6, 0x7ff}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x2, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x2}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x300c}]}, 0x40}}, 0x0) (async) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x28d, &(0x7f0000000640)="$eJzs3b9qFF0cBuCTTUI+8pGQStDGg1Y2Q5LaIkESCC4omhVUECZkosuOu2Fni51gEWsbwdI7EEs7QbyB3IVdmpAqlRGd/DEBq5DdIs/TzMu8c+D8GDhTzu7d969bG0WykfZCbWEk1BZCqB2MhJlQC8e2w50Pbz++e/z02f3Fen3pUYzLi6tz8zHG6Zvfnr/5fOt77/8nX6a/ToSdmRe7e/M/dq7tXN/9ufqqWcRmEdudXkzjWqfTS9fyLK43i1YS48M8S4ssNttF1j3Tb+Sdzc0ypu31qcnNblYUMW2XsZWVsdeJvW4Z05dpsx2TJIlTk4GLaHw6ODwMe4eVYe+GwfP+r7a/DvX/Qtjf7jf6jepa9csr9aXZ+Mf46ar9fr8xetLPVX0824+HyaN+/nx//Gm5XfW/u3sP6ufWT4T1S54dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAqyuJJ2ZO7+73+43Rqk/+1VdpeaW+NHv0wNl+LNwYG9gYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAhRbnVSvM86wqCIJyEYZ9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMHinP/0e9k4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpqLcaqV5nnUvMQx7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4qF8BAAD//3nQbMU=") (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5, 0x0, 0x10000000}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r11], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) (async) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) (async) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x70bd2c, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xfffe}, {@in6=@local, 0x0, 0x2b}, @in=@multicast1, {}, {0x0, 0x0, 0x0, 0x7f0}, {}, 0x70bd25, 0x0, 0x2}, [@algo_crypt={0x48, 0x4, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 2.147912993s ago: executing program 6 (id=4384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008110100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002"], 0x64}}, 0x0) 2.081347564s ago: executing program 2 (id=4386): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0200001900010025bd70000000000000000000000000000000ffff64010102ff01000000000000000200000000000100030003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.080863774s ago: executing program 7 (id=4387): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x1c, &(0x7f0000000000), 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10) tkill(r0, 0x2f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="8400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000200300480012800e00010069701865727300000400120014000700fc00000000000000000000000000000108000d000100000008000c00feffffff08000500000000000000000000000000000000009cf9f99c79bfd5f3143940c8323453ea4f80cbde1a9b841f46abee38a7c2f318a343f9427e11c294f1dc2f90e59139b61f09a15a4892653a67d16a52b1e7532f20b6220909aa8212b7626f8ac87fe4686185605e0929645c46e374c18fb1e231e02c4ef14981c7da9c27", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x84}, 0x1, 0x0, 0x0, 0x9d5543b42ef2d5c9}, 0x0) ptrace(0x4208, r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000000070000000000070000060900010073797a31000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x48085) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x4810) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) socket(0x6, 0xe, 0x87) 2.079015364s ago: executing program 2 (id=4388): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4d6, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x70bd2d, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000002000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 2.072711225s ago: executing program 6 (id=4389): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) fchown(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, 0x0, 0x0, 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_opts(r3, 0x29, 0x3b, 0x0, &(0x7f00000002c0)) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x9a) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002}) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)={[{@grpjquota}, {@i_version}, {@discard}, {@noload}, {@resuid}]}, 0x3, 0x4fe, &(0x7f0000000dc0)="$eJzs3E9sFNUfAPDvbFta/v3oDxEFUatobCS2UFA4mChGEw+aGDFRj01bCFKooSURgrpc8GhIvBuPXj14VS/EcDLxikcTQ0IMF8CEsGZ2Z9rtdnfbLduupZ9P0u57Mzvz3ts3b/bNezsTwLo1kP5LKuHrEbEtIgq1bxiovNy5dXHs7q2LY1EslY79nZQ3u53GM9luYnMWGSxEvJ4GkoXpTp+/cGp0cnLibBYfnjn96fD0+QsvnezLlhw5cujggcOvjLzceqHqpJeW6/buL6b27Hr74yvvjnXny/PUqsvRLgMxUC8rZc+3O7EO21oVTro7mBFakh7/aXX1lNv/tuiKZpVXXMWcASutVCqV7pdKXzZYXSzVurRgCbBmRV+ncwB0Rv5Fn17/5n/1OgIbVqwH0lk3j1YugNJy38n+Ip4uL8zHQXpqrm/baSAiPir+8236F43GIbpWKHEAYF36+WjeE6zp//VXZkbunbv6Wvr6v2wOpT8i/h8R2yPikYjYERGPRsTOiHgsIh6v2X/adSk1SX+gJj6b/uwkVOFGm4paV9r/ezWb25rr/83LQH9XFtsakXeYJ/Znn8lg9PQePzk5caBJGr+8+fvXjdaV+3/pzrM+YJp+3hfM8nGju3f+NuOjM6PLLnCNm5cidnfXlj/pjkhmZwKSiNgVEbtb2G9/Vfjki9/vmY30zH9fdf+3fvnLSnXn0dowz1T6LuKFSO7duXWxGPPqfy7FZN785OnRExMnJs6MzM5PDvfF5MT+4fQo2F83jWu/XX6vUfqLlv/HP2s3eevwT8fadlGQ1v+mquM/8vnbufL3JxHJ7HztdOtpXP7jq4Zzq4vXf/3jf0PyQTmcX5d+Njozc/ZAxIbknYXLR+a2zePpaxQr5R/cW7/9b8+2ST+JJyIiPYifjIinonKFmOb9mYh4NiL2Nin/r28890nL5S802WEbpeUfrzn/VWp+Xv3Pzdc3CiTZ3GCdVV2neq7fbXDyWFr9HyqHBrMl9c9/ybxTRKOc5t926ZL7D/zpAQAAwNpQiIgtVWNJW6JQGBqqjAHtiE2FyanpmX3Hp86dGU/XRfRHTyEf6aqMB/ck+fhnf1V8pCZ+MBs3/qZrYzk+NDY1Od7RkgOby20+KQxFfNhV1f5Tf/ndCTz83K8F61ez9p924ndeWcXMAKtq6d//Vz9f0YwAq66q/Te6w7+4jN99AWuA639gzuIP+nHOgLWvpC3DutZS+9/nIYDwMOmO92fDq3TfIfAfsdz+f6OnhgJrwiL39fc2vJF+SYFSb/1VfbHwzdHXfIddsbxsbKyTVkcCac+qI6lvXM5W+dMUGr4nCq3tsDfaU6fHH/DTKJ6dPrFzSQd/K4FS9lv5dtfgD43b6bXeJrXz4IGOnI4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa7t8AAAD//1l74Q0=") getdents64(0xffffffffffffffff, 0x0, 0x0) 1.837153394s ago: executing program 2 (id=4390): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [0xa10, 0x6, 0x101, 0x100000001, 0xf, 0x80000001]}, &(0x7f0000000180)=0x7b) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7385f8fe6099bee9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\t\x00\x00\x00\f\x00\x00\x00B\x00\x00\x00@'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r2}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000200), 0x0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) 1.769460785s ago: executing program 6 (id=4391): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x10003}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee00, 0x0, 0x0) prlimit64(r0, 0xd, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x4002, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu>=0|&!') 1.768983226s ago: executing program 9 (id=4392): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @empty}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40045304, &(0x7f0000000280)={{0x6, 0x81}, 'port1\x00', 0x19, 0x21000, 0x8, 0x9, 0x100, 0x0, 0x40, 0x0, 0x6, 0x1f}) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)}, 0x4004850) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000340)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100c404, &(0x7f0000000600)=ANY=[@ANYBLOB='quiet,fmask=00000000000000000006673,nodots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',discard,nodots,nodots,tz=UTC,nodots,dots,umask=00000000000000003,nodots,nodots,dots,showexec,nfs=stale_rw,nodots,showexec,dots,dots,dots,dots,\x00'], 0x1, 0x1fa, &(0x7f0000000800)="$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") ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080)={0x0, 0x44}, 0x18) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) bind$l2tp(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x400, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) listen(r5, 0x200201) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffff9}}}, 0x108) 1.617235731s ago: executing program 2 (id=4393): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0x8, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0xfffffff9, 0x2376}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r2, 0x742f, 0x77ae, 0x1, 0x0, 0x0) r6 = fcntl$dupfd(r0, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000040)={0x20000001}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc3}], 0x1, &(0x7f00000001c0)}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f00000001c0)={0x1, 0x1000, "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"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001240)={0x3, &(0x7f0000001200)=[{0x4, 0x1f, 0x1, 0x401}, {0x7fff, 0x7, 0x3, 0xfffffff9}, {0x9a, 0x1, 0x9, 0x5}]}) 1.596629394s ago: executing program 6 (id=4394): munmap(&(0x7f000007b000/0x3000)=nil, 0x3000) (async) mlock2(&(0x7f000083d000/0x2000)=nil, 0x2000, 0x1) r0 = epoll_create(0xce1) sigaltstack(&(0x7f0000000040)={0x0, 0x80000001, 0xfffffffffffffda6}, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) (async) mmap(&(0x7f0000361000/0x4000)=nil, 0x4000, 0x8, 0x10, r0, 0x4b598000) (async) r2 = perf_event_open(&(0x7f0000000080)={0x4, 0xc3, 0xf3, 0x4, 0x2, 0x0, 0x0, 0xfff, 0x4021, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x0, 0x4}, 0x20, 0x3, 0x7fffffff, 0x5, 0x5, 0x40, 0x8, 0x0, 0xfffffffc, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000216000/0x4000)=nil, 0x4000, 0x200000c, 0x2010, r2, 0x9) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x29c, &(0x7f0000000300)={0x0, 0x4454, 0x1000, 0xfffffffd, 0x2, 0x0, r3}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000762000/0x4000)=nil, 0x4000, &(0x7f0000000100)='\xe5') (async) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x14, &(0x7f0000001780), 0x1) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000d98000/0x9000)=nil, 0x9000, 0x3000008, 0x50, r4, 0x0) 1.526324496s ago: executing program 2 (id=4395): syz_usb_disconnect(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000380)={&(0x7f0000004000)=""/4126, 0x1, 0x101e}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.507509409s ago: executing program 9 (id=4396): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0xa600}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 1.397311928s ago: executing program 9 (id=4397): socket(0x400000000010, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf2502c1000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 1.359349874s ago: executing program 9 (id=4398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd49032800030020000000600000000404730081e949b93897bc3b0000070000007d01ff0200000000bfffffffffffffff0001"], 0xfdef) 1.225768686s ago: executing program 9 (id=4399): r0 = epoll_create(0x80000000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'netdevsim0\x00', {0x1}, 0xfff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a0104000000efff0000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 1.048697396s ago: executing program 6 (id=4400): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000580)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@noload}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@noblock_validity}, {@usrjquota}, {@nolazytime}, {@mblk_io_submit}]}, 0xfe, 0x477, &(0x7f0000000f40)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x5, 0x0, 0x6, 0x9, 0x8001, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdb01000000000000000105002b009c99182869ebaddf00"/42], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8000002) munlockall() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pread64(r0, &(0x7f00000013c0)=""/4096, 0x1000, 0x4) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}]}}, &(0x7f00000005c0)=""/240, 0x26, 0xf0, 0x1}, 0x28) r8 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) syz_emit_ethernet(0x3e, 0x0, 0x0) 300.462931ms ago: executing program 9 (id=4401): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x24002850) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') readv(r2, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000540)={0x808001, 0xfffffff8, 0xfffffff5, 0x9, 0x1, "000108010000000000000000000000010400", 0x240000, 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f00000d2000/0x2000)=nil, 0x2000, 0x2000001, 0x10, r3, 0x74f6a000) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sched\x00') exit(0x1f52b4ba) write$cgroup_pid(r7, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/30, 0x1e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 124.878509ms ago: executing program 7 (id=4402): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0xe000200c}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x6}}, 0x20) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4145, 0xed8d, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 0s ago: executing program 2 (id=4403): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x147542, 0x2) pwritev2(r1, &(0x7f0000000600)=[{&(0x7f0000000280)="a1", 0x1}], 0x1, 0x1ff, 0x5, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)=@newsa={0x258, 0x10, 0x2, 0x70bd29, 0x25dfdbfc, {{@in6=@private2, @in6=@private2, 0x4e22, 0x5, 0x4e23, 0x4, 0xa, 0xa0, 0xa0, 0x11, 0x0, 0xee01}, {@in=@empty, 0x4d3, 0xff}, @in6=@remote, {0x600000000, 0x8, 0x4, 0x3, 0x6, 0xf, 0xffffffffffffffff, 0x3}, {0x100000001, 0xb38c, 0x1, 0x7}, {0x0, 0x6, 0x9}, 0x70bd29, 0x34ff, 0xa, 0x3, 0xf8, 0xa}, [@tmpl={0xc4, 0x5, [{{@in=@private=0xa010102, 0x4d3, 0xff}, 0xa, @in=@remote, 0x3504, 0x1, 0x3, 0x1, 0x4, 0x1, 0x10001}, {{@in=@multicast2, 0x4d4, 0x33}, 0x8, @in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x0, 0x2, 0x0, 0xc, 0xb1, 0x40, 0x7fffffff}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x4d6, 0x6c}, 0x2, @in6=@mcast1, 0x2686ba08, 0x2, 0x3, 0x1, 0x8, 0x7, 0x9}]}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd26, 0x8}}, @algo_auth={0x8b, 0x1, {{'sha1\x00'}, 0x218, "df6faedbe8853af30f2ced119a71a0188f4e3cab24417258ee4fc40223babdc1b2bf9a2c5831ab08cd8e68739996ba05007a7f7c6c911b859887f9ba44ffb4e5a0535f"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xfffff549}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c000) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tmmm'], 0xa) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r4, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7aad6979}, {0x6, 0x11, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001006cbd7000ffdbdf25000000f9", @ANYRES32=0x0, @ANYBLOB="4db20200305b010014000300626174616476300000000000000000001800168014000180100006000100000001000000001e000008000400ff010000"], 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) kernel console output (not intermixed with test programs): _file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947484kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 479.438684][T17753] FAULT_INJECTION: forcing a failure. [ 479.438684][T17753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.439568][T17751] lowmem_reserve[]: 0 0 4978 4978 [ 479.457698][T17751] Node 0 Normal free:4396436kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:70288kB inactive_anon:132kB active_file:97228kB inactive_file:11132kB unevictable:0kB writepending:1160kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:43440kB local_pcp:31852kB free_cma:0kB [ 479.490965][T17751] lowmem_reserve[]: 0 0 0 0 [ 479.495596][T17751] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 479.508484][T17751] Node 0 DMA32: 4*4kB (M) 5*8kB (M) 4*16kB (M) 1*32kB (M) 5*64kB (M) 2*128kB (M) 1*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2943960kB [ 479.509039][T17753] CPU: 0 UID: 0 PID: 17753 Comm: syz.7.3765 Tainted: G W syzkaller #0 PREEMPT(full) [ 479.509104][T17753] Tainted: [W]=WARN [ 479.509111][T17753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 479.509124][T17753] Call Trace: [ 479.509130][T17753] [ 479.509137][T17753] __dump_stack+0x1d/0x30 [ 479.509163][T17753] dump_stack_lvl+0x95/0xd0 [ 479.509266][T17753] dump_stack+0x15/0x1b [ 479.509286][T17753] should_fail_ex+0x263/0x280 [ 479.509310][T17753] should_fail+0xb/0x20 [ 479.509373][T17753] should_fail_usercopy+0x1a/0x20 [ 479.509396][T17753] _copy_from_user+0x1c/0xb0 [ 479.509421][T17753] copy_from_sockptr_offset+0x66/0xa0 [ 479.509449][T17753] do_tcp_getsockopt+0x72f/0x1b90 [ 479.509516][T17753] ? __rcu_read_unlock+0x4e/0x70 [ 479.509593][T17753] ? xa_load+0xb1/0xe0 [ 479.509692][T17753] ? mptcp_release_cb+0x6a7/0x7f0 [ 479.509739][T17753] tcp_getsockopt+0x6e/0xe0 [ 479.509765][T17753] mptcp_getsockopt+0x76b/0x1850 [ 479.509792][T17753] ? selinux_file_open+0x2e6/0x330 [ 479.509880][T17753] ? lockref_put_return+0xf7/0x130 [ 479.509909][T17753] ? __rcu_read_unlock+0x4e/0x70 [ 479.509927][T17753] ? terminate_walk+0x1e6/0x210 [ 479.509962][T17753] ? path_openat+0x1ab2/0x2050 [ 479.509985][T17753] ? path_openat+0x1b01/0x2050 [ 479.510008][T17753] ? __rcu_read_unlock+0x4e/0x70 [ 479.510028][T17753] ? avc_has_perm_noaudit+0xab/0x130 [ 479.510089][T17753] ? avc_has_perm+0x101/0x190 [ 479.510113][T17753] ? selinux_socket_getsockopt+0x192/0x1c0 [ 479.510229][T17753] sock_common_getsockopt+0x60/0x70 [ 479.510281][T17753] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 479.510379][T17753] do_sock_getsockopt+0x2f5/0x570 [ 479.510460][T17753] __x64_sys_getsockopt+0x11d/0x1a0 [ 479.510484][T17753] x64_sys_call+0x2dcf/0x3020 [ 479.510508][T17753] do_syscall_64+0x12c/0x3b0 [ 479.510547][T17753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.510615][T17753] RIP: 0033:0x7fae70e7c819 [ 479.510631][T17753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.510648][T17753] RSP: 002b:00007fae6f8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 479.510668][T17753] RAX: ffffffffffffffda RBX: 00007fae710f5fa0 RCX: 00007fae70e7c819 [ 479.510683][T17753] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000003 [ 479.510757][T17753] RBP: 00007fae6f8d7090 R08: 0000200000001540 R09: 0000000000000000 [ 479.510771][T17753] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 479.510784][T17753] R13: 00007fae710f6038 R14: 00007fae710f5fa0 R15: 00007ffe0086c578 [ 479.510802][T17753] [ 479.685836][T17760] loop1: detected capacity change from 0 to 1024 [ 479.689209][T17751] Node 0 [ 479.758702][T17760] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 479.766098][T17751] Normal: 3573*4kB (UM) 1924*8kB (UME) 354*16kB (UME) 162*32kB (UME) 563*64kB (UM) 553*128kB (UME) 330*256kB (UM) 242*512kB (UM) 164*1024kB (UM) 89*2048kB (UM) 901*4096kB (UM) = 4396436kB [ 479.817212][T17760] System zones: [ 479.821644][T17751] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 479.833858][T17760] 0-1, 3-36 [ 479.834572][T17751] 33323 total pagecache pages [ 479.842345][T17751] 103 pages in swap cache [ 479.846709][T17751] Free swap = 124448kB [ 479.850985][T17751] Total swap = 124996kB [ 479.855300][T17751] 2097051 pages RAM [ 479.859156][T17751] 0 pages HighMem/MovableOnly [ 479.860620][T17760] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.3767: bad orphan inode 134217728 [ 479.863892][T17751] 81781 pages reserved [ 479.885622][T17763] loop7: detected capacity change from 0 to 256 [ 479.929603][T17760] loop1: lost filesystem error report for type 5 error -117 [ 479.969050][T17768] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3768'. [ 479.993670][T17760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.184496][T17774] xt_hashlimit: size too large, truncated to 1048576 [ 480.210206][T14657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.267508][T17774] xt_hashlimit: max too large, truncated to 1048576 [ 480.353088][T17777] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3772'. [ 480.353407][T17776] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3772'. [ 480.506331][T17777] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3772'. [ 480.532897][T17777] 0ªî{X¹¦: renamed from gretap0 [ 480.550786][T17777] 0ªî{X¹¦: entered allmulticast mode [ 480.603073][T17777] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 480.672637][T17786] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 480.686533][T17786] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 481.037631][ T28] audit: type=1326 audit(2000000132.129:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17795 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8262e9c819 code=0x7ffc0000 [ 481.230666][ T28] audit: type=1326 audit(2000000132.150:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17795 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8262e9c819 code=0x7ffc0000 [ 481.562273][ T28] audit: type=1326 audit(2000000132.171:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17795 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8262e9c819 code=0x7ffc0000 [ 481.657461][ T28] audit: type=1326 audit(2000000132.171:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17795 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8262e9c819 code=0x7ffc0000 [ 481.817768][ T28] audit: type=1326 audit(2000000132.171:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17795 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8262e9c819 code=0x7ffc0000 [ 481.947771][ T28] audit: type=1326 audit(2000000132.171:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17795 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8262e9c819 code=0x7ffc0000 [ 481.972727][T17806] loop6: detected capacity change from 0 to 2048 [ 482.008163][ T28] audit: type=1326 audit(2000000132.171:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17795 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8262e9c819 code=0x7ffc0000 [ 482.227144][T17814] loop2: detected capacity change from 0 to 512 [ 482.242225][T17814] EXT4-fs: Ignoring removed bh option [ 482.259638][T17814] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 482.349378][ T28] audit: type=1326 audit(2000000132.171:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17795 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8262e9c819 code=0x7ffc0000 [ 482.349986][T17806] loop6: p1 < > p4 < > [ 482.372909][ T28] audit: type=1326 audit(2000000132.171:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17795 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8262e9c819 code=0x7ffc0000 [ 482.400915][ T28] audit: type=1326 audit(2000000132.171:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17795 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8262e9c819 code=0x7ffc0000 [ 482.401718][T17814] EXT4-fs (loop2): 1 truncate cleaned up [ 482.424729][ T28] audit: type=1326 audit(2000000132.182:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17795 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8262e9c819 code=0x7ffc0000 [ 482.433601][T17814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.501403][ T28] audit: type=1326 audit(2000000132.182:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17795 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8262e9c819 code=0x7ffc0000 [ 482.525391][ T28] audit: type=1326 audit(2000000132.182:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17795 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8262e9c819 code=0x7ffc0000 [ 482.525898][T12112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.561360][T17806] __nla_validate_parse: 1 callbacks suppressed [ 482.561376][T17806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3781'. [ 482.582705][T17806] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 482.588269][T17818] loop7: detected capacity change from 0 to 1024 [ 482.593185][T15459] udevd[15459]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 482.607875][T15458] udevd[15458]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 482.618386][T17806] macvlan2: entered allmulticast mode [ 482.625942][T17818] EXT4-fs: test_dummy_encryption option not supported [ 482.671582][T17806] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 482.693708][T17806] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 483.169770][T17833] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3787'. [ 483.190474][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3788'. [ 483.292288][T17832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3788'. [ 483.442593][T17839] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3791'. [ 483.468940][T17839] netlink: 348 bytes leftover after parsing attributes in process `syz.6.3791'. [ 483.497853][T17840] loop2: detected capacity change from 0 to 1024 [ 483.506942][T17832] wireguard0: entered promiscuous mode [ 483.526426][T17839] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3791'. [ 483.536302][T17832] wireguard0: entered allmulticast mode [ 483.546338][T17840] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 483.572209][T17839] netlink: 348 bytes leftover after parsing attributes in process `syz.6.3791'. [ 483.616905][T17839] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3791'. [ 483.867196][T17844] loop6: detected capacity change from 0 to 8192 [ 483.945707][T17844] loop6: p1 p2 p3 p4 [ 483.979390][T17844] loop6: p3 start 117772289 is beyond EOD, truncated [ 484.016144][T17844] loop6: p4 size 720896 extends beyond EOD, truncated [ 484.491482][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3801'. [ 484.643010][T17882] ip6tnl0: Caught tx_queue_len zero misconfig [ 484.704155][T17888] loop1: detected capacity change from 0 to 256 [ 484.833848][T17902] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 485.253604][ T6744] IPVS: starting estimator thread 0... [ 485.490875][T17935] FAULT_INJECTION: forcing a failure. [ 485.490875][T17935] name failslab, interval 1, probability 0, space 0, times 0 [ 485.504261][T17935] CPU: 0 UID: 0 PID: 17935 Comm: syz.2.3821 Tainted: G W syzkaller #0 PREEMPT(full) [ 485.504289][T17935] Tainted: [W]=WARN [ 485.504297][T17935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 485.504333][T17935] Call Trace: [ 485.504341][T17935] [ 485.504348][T17935] __dump_stack+0x1d/0x30 [ 485.504429][T17935] dump_stack_lvl+0x95/0xd0 [ 485.504450][T17935] dump_stack+0x15/0x1b [ 485.504484][T17935] should_fail_ex+0x263/0x280 [ 485.504506][T17935] should_failslab+0x8c/0xb0 [ 485.504530][T17935] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 485.504605][T17935] ? __alloc_skb+0x2d6/0x690 [ 485.504627][T17935] __alloc_skb+0x2d6/0x690 [ 485.504707][T17935] ? __alloc_skb+0x200/0x690 [ 485.504724][T17935] netlink_alloc_large_skb+0xbf/0xf0 [ 485.504748][T17935] netlink_sendmsg+0x40c/0x6f0 [ 485.504775][T17935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.504864][T17935] ____sys_sendmsg+0x563/0x5b0 [ 485.504886][T17935] ___sys_sendmsg+0x195/0x1e0 [ 485.504930][T17935] ? ktime_get+0x212/0x240 [ 485.504962][T17935] __x64_sys_sendmsg+0xd4/0x160 [ 485.504987][T17935] x64_sys_call+0x194c/0x3020 [ 485.505130][T17935] do_syscall_64+0x12c/0x3b0 [ 485.505155][T17935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.505287][T17935] RIP: 0033:0x7f469d3ec819 [ 485.505305][T17935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.505321][T17935] RSP: 002b:00007f469be47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.505338][T17935] RAX: ffffffffffffffda RBX: 00007f469d665fa0 RCX: 00007f469d3ec819 [ 485.505429][T17935] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 485.505442][T17935] RBP: 00007f469be47090 R08: 0000000000000000 R09: 0000000000000000 [ 485.505456][T17935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.505470][T17935] R13: 00007f469d666038 R14: 00007f469d665fa0 R15: 00007ffe94b5fd38 [ 485.505490][T17935] [ 486.027280][T17935] loop2: detected capacity change from 0 to 1024 [ 486.066064][T17935] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 486.130181][T17935] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3821: Invalid block bitmap block 0 in block_group 0 [ 486.157059][T17935] loop2: lost filesystem error report for type 5 error -117 [ 486.158413][T17933] IPVS: using max 2352 ests per chain, 117600 per kthread [ 486.171251][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 486.179370][ C0] EXT4-fs (loop2): initial error at time 2000000137: ext4_read_block_bitmap_nowait:483 [ 486.189026][ C0] EXT4-fs (loop2): last error at time 2000000137: ext4_read_block_bitmap_nowait:483 [ 486.201553][T17935] EXT4-fs error (device loop2): ext4_acquire_dquot:7028: comm syz.2.3821: Failed to acquire dquot type 0 [ 486.213649][T17935] loop2: lost filesystem error report for type 5 error -117 [ 486.215070][T17935] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.3821: Freeing blocks not in datazone - block = 0, count = 4096 [ 486.249699][T17935] loop2: lost filesystem error report for type 5 error -117 [ 486.254842][T17940] loop6: detected capacity change from 0 to 256 [ 486.300377][T17935] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3821: Invalid inode bitmap blk 0 in block_group 0 [ 486.313369][T17935] loop2: lost filesystem error report for type 5 error -117 [ 486.409069][T17935] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 486.436751][T17935] loop2: lost filesystem error report for type 5 error -117 [ 486.438651][T17935] EXT4-fs (loop2): 1 orphan inode deleted [ 486.468818][T17935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.491607][ T6125] __quota_error: 159 callbacks suppressed [ 486.494764][ T6125] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7 [ 486.595747][ T6125] EXT4-fs error (device loop2): ext4_release_dquot:7064: comm kworker/u8:17: Failed to release dquot type 0 [ 487.287689][T12112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.369816][T17958] __nla_validate_parse: 7 callbacks suppressed [ 487.369832][T17958] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3830'. [ 487.472751][T17973] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3835'. [ 487.653665][T17990] loop1: detected capacity change from 0 to 256 [ 487.755915][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3840'. [ 488.684613][ T28] audit: type=1400 audit(2000000140.150:2770): avc: denied { lock } for pid=18004 comm="syz.1.3843" path="socket:[50937]" dev="sockfs" ino=50937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 488.814736][T18013] netlink: 'syz.1.3847': attribute type 4 has an invalid length. [ 488.864941][T18022] netlink: 'syz.1.3847': attribute type 4 has an invalid length. [ 489.092262][T18015] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.099521][T18015] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.122730][T18027] loop5: detected capacity change from 0 to 128 [ 489.236105][T18034] loop2: detected capacity change from 0 to 512 [ 489.309202][T18038] netlink: 'syz.1.3847': attribute type 4 has an invalid length. [ 489.378945][T18015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.394794][T18015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.403188][T18043] bio_check_eod: 43 callbacks suppressed [ 489.403202][T18043] syz.5.3851: attempt to access beyond end of device [ 489.403202][T18043] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 489.479889][T18015] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 489.500959][T18046] loop7: detected capacity change from 0 to 256 [ 489.547557][T18043] syz.5.3851: attempt to access beyond end of device [ 489.547557][T18043] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 489.580391][T18049] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3853'. [ 489.609057][T18043] syz.5.3851: attempt to access beyond end of device [ 489.609057][T18043] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 489.629999][T18043] syz.5.3851: attempt to access beyond end of device [ 489.629999][T18043] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 489.643915][T18043] syz.5.3851: attempt to access beyond end of device [ 489.643915][T18043] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 489.662430][T17916] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.688289][T18043] syz.5.3851: attempt to access beyond end of device [ 489.688289][T18043] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 489.708543][T17916] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.731670][T17916] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.755281][T18043] syz.5.3851: attempt to access beyond end of device [ 489.755281][T18043] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 489.774969][T17916] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.788801][T18043] syz.5.3851: attempt to access beyond end of device [ 489.788801][T18043] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 489.819455][T18034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.835035][T18043] syz.5.3851: attempt to access beyond end of device [ 489.835035][T18043] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 489.850914][T18043] syz.5.3851: attempt to access beyond end of device [ 489.850914][T18043] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 489.889176][T12112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.128006][T18069] loop6: detected capacity change from 0 to 512 [ 490.547757][T18077] FAULT_INJECTION: forcing a failure. [ 490.547757][T18077] name failslab, interval 1, probability 0, space 0, times 0 [ 490.630380][T18079] loop1: detected capacity change from 0 to 512 [ 490.647727][T18077] CPU: 1 UID: 0 PID: 18077 Comm: syz.7.3864 Tainted: G W syzkaller #0 PREEMPT(full) [ 490.647880][T18077] Tainted: [W]=WARN [ 490.647886][T18077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 490.647897][T18077] Call Trace: [ 490.647903][T18077] [ 490.647910][T18077] __dump_stack+0x1d/0x30 [ 490.648039][T18077] dump_stack_lvl+0x95/0xd0 [ 490.648063][T18077] dump_stack+0x15/0x1b [ 490.648089][T18077] should_fail_ex+0x263/0x280 [ 490.648112][T18077] should_failslab+0x8c/0xb0 [ 490.648213][T18077] __kmalloc_noprof+0xb8/0x4d0 [ 490.648240][T18077] ? ip_options_get+0x52/0x350 [ 490.648269][T18077] ip_options_get+0x52/0x350 [ 490.648298][T18077] ip_cmsg_send+0x49e/0x5f0 [ 490.648321][T18077] udp_sendmsg+0x87a/0x1500 [ 490.648353][T18077] ? _raw_spin_lock+0x52/0xa0 [ 490.648378][T18077] ? udp_lib_get_port+0xcb0/0xe60 [ 490.648403][T18077] ? __rcu_read_unlock+0x4e/0x70 [ 490.648502][T18077] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 490.648532][T18077] ? __pfx_udp_sendmsg+0x10/0x10 [ 490.648563][T18077] inet_sendmsg+0xac/0xd0 [ 490.648672][T18077] ? __pfx_inet_sendmsg+0x10/0x10 [ 490.648762][T18077] ____sys_sendmsg+0x519/0x5b0 [ 490.648791][T18077] ___sys_sendmsg+0x195/0x1e0 [ 490.648825][T18077] __x64_sys_sendmsg+0xd4/0x160 [ 490.648879][T18077] x64_sys_call+0x194c/0x3020 [ 490.648899][T18077] do_syscall_64+0x12c/0x3b0 [ 490.648917][T18077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.649002][T18077] RIP: 0033:0x7fae70e7c819 [ 490.649017][T18077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.649032][T18077] RSP: 002b:00007fae6f8d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.649090][T18077] RAX: ffffffffffffffda RBX: 00007fae710f5fa0 RCX: 00007fae70e7c819 [ 490.649105][T18077] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000004 [ 490.649120][T18077] RBP: 00007fae6f8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 490.649134][T18077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.649145][T18077] R13: 00007fae710f6038 R14: 00007fae710f5fa0 R15: 00007ffe0086c578 [ 490.649239][T18077] [ 491.047970][T18079] EXT4-fs error (device loop1): ext4_iget_extra_inode:5042: inode #15: comm syz.1.3865: corrupted in-inode xattr: invalid ea_ino [ 491.070315][T18079] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 491.070575][T18079] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.3865: couldn't read orphan inode 15 (err -117) [ 491.079780][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 491.079800][ C0] EXT4-fs (loop1): initial error at time 2000000142: ext4_iget_extra_inode:5042: inode 15 [ 491.079825][ C0] EXT4-fs (loop1): last error at time 2000000142: ext4_iget_extra_inode:5042: inode 15 [ 491.226411][T18079] loop1: lost filesystem error report for type 5 error -117 [ 491.248233][T18079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.472380][T14657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.906957][T18096] 9pnet_fd: p9_fd_create_unix (18096): problem connecting socket: ./file0: -2 [ 491.966691][T18103] loop1: detected capacity change from 0 to 2048 [ 492.012058][T18103] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 492.037135][T18110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3877'. [ 492.046611][T18110] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3877'. [ 492.059494][T18103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.751685][T14657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.790343][T18120] gretap0: entered promiscuous mode [ 492.836924][T18120] vlan2: entered promiscuous mode [ 493.065910][T18147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3889'. [ 493.145898][T18147] bond2: entered promiscuous mode [ 493.167448][T18147] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.249509][T18160] loop7: detected capacity change from 0 to 2048 [ 493.298734][T18160] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.321355][T18169] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 493.330486][T18169] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3895'. [ 493.340813][T18160] EXT4-fs error (device loop7): ext4_find_extent:904: inode #2: comm syz.7.3892: inode has invalid extent depth: 7 [ 493.368768][T18168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3897'. [ 493.415915][T18168] bond4: entered promiscuous mode [ 493.435334][T18168] 8021q: adding VLAN 0 to HW filter on device bond4 [ 493.673639][T18182] loop1: detected capacity change from 0 to 512 [ 493.714220][T18182] EXT4-fs (loop1): 1 orphan inode deleted [ 493.722647][T18182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.719280][T16558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.954106][T18190] loop7: detected capacity change from 0 to 512 [ 495.015606][T18190] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.102800][T18190] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.513962][T16558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.577937][T18257] loop5: detected capacity change from 0 to 512 [ 495.646707][T18273] loop7: detected capacity change from 0 to 128 [ 495.660918][T18257] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3905: bg 0: block 4: invalid block bitmap [ 495.700639][T18273] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 495.715538][T18257] loop5: lost filesystem error report for type 5 error -117 [ 495.716032][T18257] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 495.732184][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 495.732216][ C1] EXT4-fs (loop5): initial error at time 2000000147: ext4_validate_block_bitmap:432 [ 495.732235][ C1] EXT4-fs (loop5): last error at time 2000000147: ext4_validate_block_bitmap:432 [ 495.757905][T18257] loop5: lost filesystem error report for type 5 error -117 [ 495.759428][T18257] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3905: invalid indirect mapped block 1 (level 1) [ 495.780607][T18257] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 495.781008][T18257] EXT4-fs (loop5): 1 truncate cleaned up [ 495.798018][T18257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.898409][T12311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.930184][T18299] syzkaller0: Caught tx_queue_len zero misconfig [ 495.953622][T18299] tipc: Enabled bearer , priority 0 [ 496.048314][T18306] netlink: 'syz.5.3914': attribute type 9 has an invalid length. [ 496.225737][T18318] FAULT_INJECTION: forcing a failure. [ 496.225737][T18318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.252221][T18318] CPU: 1 UID: 0 PID: 18318 Comm: syz.6.3917 Tainted: G W syzkaller #0 PREEMPT(full) [ 496.252401][T18318] Tainted: [W]=WARN [ 496.252408][T18318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 496.252422][T18318] Call Trace: [ 496.252473][T18318] [ 496.252480][T18318] __dump_stack+0x1d/0x30 [ 496.252549][T18318] dump_stack_lvl+0x95/0xd0 [ 496.252610][T18318] dump_stack+0x15/0x1b [ 496.252639][T18318] should_fail_ex+0x263/0x280 [ 496.252662][T18318] should_fail+0xb/0x20 [ 496.252679][T18318] should_fail_usercopy+0x1a/0x20 [ 496.252723][T18318] _copy_to_user+0x20/0xa0 [ 496.252744][T18318] copy_to_sockptr+0x5e/0xa0 [ 496.252764][T18318] do_tcp_getsockopt+0xe19/0x1b90 [ 496.252789][T18318] ? __rcu_read_unlock+0x4e/0x70 [ 496.252846][T18318] ? xa_load+0xb1/0xe0 [ 496.252867][T18318] ? mptcp_release_cb+0x6a7/0x7f0 [ 496.252895][T18318] tcp_getsockopt+0x6e/0xe0 [ 496.252964][T18318] mptcp_getsockopt+0x76b/0x1850 [ 496.252993][T18318] ? selinux_file_open+0x2e6/0x330 [ 496.253063][T18318] ? lockref_put_return+0xf7/0x130 [ 496.253087][T18318] ? __rcu_read_unlock+0x4e/0x70 [ 496.253122][T18318] ? terminate_walk+0x1e6/0x210 [ 496.253142][T18318] ? path_openat+0x1ab2/0x2050 [ 496.253166][T18318] ? path_openat+0x1b01/0x2050 [ 496.253248][T18318] ? __rcu_read_unlock+0x4e/0x70 [ 496.253268][T18318] ? avc_has_perm_noaudit+0xab/0x130 [ 496.253295][T18318] ? avc_has_perm+0x101/0x190 [ 496.253333][T18318] ? selinux_socket_getsockopt+0x192/0x1c0 [ 496.253366][T18318] sock_common_getsockopt+0x60/0x70 [ 496.253396][T18318] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 496.253460][T18318] do_sock_getsockopt+0x2f5/0x570 [ 496.253485][T18318] __x64_sys_getsockopt+0x11d/0x1a0 [ 496.253510][T18318] x64_sys_call+0x2dcf/0x3020 [ 496.253551][T18318] do_syscall_64+0x12c/0x3b0 [ 496.253573][T18318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.253676][T18318] RIP: 0033:0x7f7c05fec819 [ 496.253740][T18318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.253755][T18318] RSP: 002b:00007f7c04a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 496.253835][T18318] RAX: ffffffffffffffda RBX: 00007f7c06265fa0 RCX: 00007f7c05fec819 [ 496.253850][T18318] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000003 [ 496.253863][T18318] RBP: 00007f7c04a47090 R08: 0000200000001540 R09: 0000000000000000 [ 496.253876][T18318] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 496.253887][T18318] R13: 00007f7c06266038 R14: 00007f7c06265fa0 R15: 00007ffc6c847928 [ 496.253903][T18318] [ 496.550278][T14657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.613348][T18323] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 496.906050][ T3392] tipc: Node number set to 2114510273 [ 497.118714][T18346] xt_hashlimit: size too large, truncated to 1048576 [ 497.166423][T18346] xt_hashlimit: max too large, truncated to 1048576 [ 497.228100][T18349] loop2: detected capacity change from 0 to 512 [ 497.247637][T18349] EXT4-fs: Ignoring removed i_version option [ 497.281054][T18349] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 497.290617][T18349] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 497.301885][T18349] EXT4-fs (loop2): group descriptors corrupted! [ 497.349913][T18358] loop5: detected capacity change from 0 to 512 [ 497.367993][T18358] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 497.398914][T18358] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 497.411454][T18360] loop2: detected capacity change from 0 to 128 [ 497.425666][T18358] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.3939: bad orphan inode 4 [ 497.443433][T18358] loop5: lost filesystem error report for type 5 error -117 [ 497.448952][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 497.462686][ C1] EXT4-fs (loop5): initial error at time 2000000149: ext4_orphan_get:1423 [ 497.471197][ C1] EXT4-fs (loop5): last error at time 2000000149: ext4_orphan_get:1423 [ 497.521432][T18358] EXT4-fs (loop5): 1 orphan inode deleted [ 497.575874][T18358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.624026][T18366] bio_check_eod: 3 callbacks suppressed [ 497.624040][T18366] syz.2.3929: attempt to access beyond end of device [ 497.624040][T18366] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 497.681147][T18353] loop7: detected capacity change from 0 to 4096 [ 498.023494][T18366] syz.2.3929: attempt to access beyond end of device [ 498.023494][T18366] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 498.024605][T18353] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.055434][T18366] syz.2.3929: attempt to access beyond end of device [ 498.055434][T18366] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 498.055476][T18366] syz.2.3929: attempt to access beyond end of device [ 498.055476][T18366] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 498.055513][T18366] syz.2.3929: attempt to access beyond end of device [ 498.055513][T18366] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 498.055552][T18366] syz.2.3929: attempt to access beyond end of device [ 498.055552][T18366] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 498.055587][T18366] syz.2.3929: attempt to access beyond end of device [ 498.055587][T18366] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 498.055621][T18366] syz.2.3929: attempt to access beyond end of device [ 498.055621][T18366] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 498.055728][T18366] syz.2.3929: attempt to access beyond end of device [ 498.055728][T18366] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 498.315355][T16558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.342165][T18372] loop2: detected capacity change from 0 to 512 [ 498.382747][T18372] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 498.425476][T18372] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3933: bad orphan inode 15 [ 498.568603][T18372] loop2: lost filesystem error report for type 5 error -117 [ 498.569236][T18372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.659763][T18372] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3933'. [ 498.764245][T18372] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 499.597527][T12112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.835144][T18400] loop7: detected capacity change from 0 to 512 [ 499.848439][T18400] EXT4-fs: Ignoring removed i_version option [ 499.857850][T18400] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 499.867489][T18400] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 499.877529][T18400] EXT4-fs (loop7): group descriptors corrupted! [ 500.314567][T18406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3942'. [ 500.443306][T18415] lo speed is unknown, defaulting to 1000 [ 500.449102][T18415] lo speed is unknown, defaulting to 1000 [ 500.455321][T18415] lo speed is unknown, defaulting to 1000 [ 500.461711][T18415] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 500.469532][T18415] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 500.511984][T18416] lo speed is unknown, defaulting to 1000 [ 500.650032][T18362] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 500.688147][T18415] lo speed is unknown, defaulting to 1000 [ 500.694382][T18415] lo speed is unknown, defaulting to 1000 [ 500.700817][T18415] lo speed is unknown, defaulting to 1000 [ 500.707214][T18415] lo speed is unknown, defaulting to 1000 [ 500.713571][T18415] lo speed is unknown, defaulting to 1000 [ 500.720137][T18415] lo speed is unknown, defaulting to 1000 [ 500.726436][T18415] lo speed is unknown, defaulting to 1000 [ 500.732968][T18415] lo speed is unknown, defaulting to 1000 [ 500.972121][T18412] loop6: detected capacity change from 0 to 4096 [ 501.152620][T18412] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.329343][T12311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.434787][T17095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.482898][T18428] netlink: 'syz.2.3948': attribute type 3 has an invalid length. [ 501.629157][T18436] Unsupported ieee802154 address type: 0 [ 501.633680][T18437] loop6: detected capacity change from 0 to 256 [ 501.712586][T18437] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3953'. [ 501.793561][T18427] loop5: detected capacity change from 0 to 1024 [ 501.952561][T18427] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 502.041648][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3956'. [ 502.051250][T18427] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 502.072362][T18427] EXT4-fs error (device loop5): ext4_get_journal_inode:5890: comm syz.5.3949: inode #1: comm syz.5.3949: iget: illegal inode # [ 502.076224][T18449] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3956'. [ 502.113877][T18427] loop5: lost filesystem error report for type 5 error -117 [ 502.125972][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 502.139819][ C0] EXT4-fs (loop5): initial error at time 2000000154: ext4_get_journal_inode:5890 [ 502.149005][ C0] EXT4-fs (loop5): last error at time 2000000154: ext4_get_journal_inode:5890 [ 502.163412][T18427] EXT4-fs (loop5): no journal found [ 502.173957][T18427] EXT4-fs (loop5): can't get journal size [ 502.188722][T18427] EXT4-fs (loop5): failed to initialize system zone (-22) [ 502.195475][T18451] loop6: detected capacity change from 0 to 2048 [ 502.203213][T18427] EXT4-fs (loop5): mount failed [ 502.225393][T18451] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 502.254704][T18451] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.795447][T18463] loop7: detected capacity change from 0 to 1764 [ 502.887207][T18463] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3959'. [ 503.043897][T17095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.132826][T18467] loop2: detected capacity change from 0 to 4096 [ 503.195752][T18467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.279117][T12112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.504110][T18485] loop2: detected capacity change from 0 to 8192 [ 503.551356][T18485] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 503.597545][T18488] 1ªî{X¹¦: left allmulticast mode [ 503.638389][T18489] loop5: detected capacity change from 0 to 512 [ 503.645454][T18489] ext4: Unknown parameter 'permit_directio' [ 503.657421][T18489] loop5: detected capacity change from 0 to 256 [ 503.664469][T18489] vfat: Bad value for 'gid' [ 503.669155][T18489] vfat: Bad value for 'gid' [ 503.702342][T18488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 503.874534][ T28] audit: type=1400 audit(2000000155.719:2771): avc: denied { shutdown } for pid=18478 comm="syz.5.3966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 503.881749][T18491] loop1: detected capacity change from 0 to 1024 [ 503.917985][T18491] EXT4-fs: Ignoring removed i_version option [ 503.970345][T18493] syzkaller0: entered promiscuous mode [ 503.976094][T18493] syzkaller0: entered allmulticast mode [ 504.022263][T18499] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3970'. [ 504.064899][T18499] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3970'. [ 504.089890][T18499] netlink: 348 bytes leftover after parsing attributes in process `syz.6.3970'. [ 504.129560][T18505] loop1: detected capacity change from 0 to 512 [ 504.146728][T18499] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3970'. [ 504.161609][T18499] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3970'. [ 504.184205][T18505] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3974: bg 0: block 4: invalid block bitmap [ 504.211454][T18499] netlink: 348 bytes leftover after parsing attributes in process `syz.6.3970'. [ 504.220686][T18499] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3970'. [ 504.236107][T18505] loop1: lost filesystem error report for type 5 error -117 [ 504.237843][T18505] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 504.245164][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 504.245176][ C0] EXT4-fs (loop1): initial error at time 2000000156: ext4_validate_block_bitmap:432 [ 504.245190][ C0] EXT4-fs (loop1): last error at time 2000000156: ext4_validate_block_bitmap:432 [ 504.321005][T18505] loop1: lost filesystem error report for type 5 error -117 [ 504.321175][T18505] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3974: invalid indirect mapped block 1 (level 1) [ 504.342513][T18508] loop5: detected capacity change from 0 to 4096 [ 504.371791][T18508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.402115][T18505] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 504.402346][T18505] EXT4-fs (loop1): 1 truncate cleaned up [ 504.435173][T18505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.450969][T12311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.490016][T18518] netlink: 'syz.2.3979': attribute type 1 has an invalid length. [ 504.503613][T18518] bond5: entered promiscuous mode [ 504.509163][T18518] 8021q: adding VLAN 0 to HW filter on device bond5 [ 504.531044][T18519] 8021q: adding VLAN 0 to HW filter on device bond5 [ 504.544592][T14657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.549067][T18525] loop6: detected capacity change from 0 to 512 [ 504.555284][T18519] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 504.570424][T18522] usb usb8: usbfs: process 18522 (\) did not claim interface 0 before use [ 504.580620][T18525] FAT-fs (loop6): Directory bread(block 199916) failed [ 504.593013][T18525] FAT-fs (loop6): Directory bread(block 199917) failed [ 504.601887][T18519] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 504.618401][T18525] FAT-fs (loop6): Directory bread(block 199918) failed [ 504.630425][T18519] bond5: (slave vti0): making interface the new active one [ 504.650600][T18525] FAT-fs (loop6): Directory bread(block 199919) failed [ 504.661826][T18519] vti0: entered promiscuous mode [ 504.676923][T18525] FAT-fs (loop6): Directory bread(block 199920) failed [ 504.698148][T18519] bond5: (slave vti0): Enslaving as an active interface with an up link [ 504.707691][T18525] FAT-fs (loop6): Directory bread(block 199921) failed [ 504.714601][T18525] FAT-fs (loop6): Directory bread(block 199922) failed [ 504.721726][T18525] FAT-fs (loop6): Directory bread(block 199923) failed [ 504.851977][T18525] FAT-fs (loop6): FAT read failed (blocknr 128) [ 505.001776][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3986'. [ 505.287237][T18542] loop2: detected capacity change from 0 to 1024 [ 505.482613][T18551] loop2: detected capacity change from 0 to 2048 [ 505.571720][T18551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.606350][T18559] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 507.477323][T12112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.492139][T18562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.522898][T18562] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #12: block 80: comm syz.1.3992: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 507.542095][T18562] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #12: comm syz.1.3992: directory missing '..' [ 507.569599][T18562] netlink: 'syz.1.3992': attribute type 1 has an invalid length. [ 507.577517][T18562] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3992'. [ 507.646186][T14657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.811294][T18576] set_capacity_and_notify: 1 callbacks suppressed [ 508.811447][T18576] loop7: detected capacity change from 0 to 256 [ 508.943449][T18576] FAT-fs (loop7): Directory bread(block 1285) failed [ 508.958206][T18576] FAT-fs (loop7): Directory bread(block 1286) failed [ 508.965529][T18576] FAT-fs (loop7): Directory bread(block 1287) failed [ 508.973168][T18576] FAT-fs (loop7): Directory bread(block 1288) failed [ 509.164819][T18587] loop1: detected capacity change from 0 to 2048 [ 509.310873][T18591] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4000'. [ 509.444196][T18600] loop6: detected capacity change from 0 to 512 [ 509.481435][T18600] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 509.529121][T18600] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 509.556058][T18600] System zones: 0-2, 18-18, 34-35 [ 509.567342][T18600] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.584608][T18600] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 509.609149][T18587] loop1: p1 < > p4 < > [ 509.638357][T18587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3998'. [ 509.690488][T15458] udevd[15458]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 509.709262][T15459] udevd[15459]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 509.724018][T18587] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 509.737487][T18587] macvlan2: entered allmulticast mode [ 509.748733][T18587] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 509.757178][T18587] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 509.952107][T18636] lo speed is unknown, defaulting to 1000 [ 509.964603][T18643] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4004'. [ 510.045068][T18650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4005'. [ 510.067390][T18650] netlink: 580 bytes leftover after parsing attributes in process `syz.2.4005'. [ 510.176890][T17095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.214623][T18701] loop6: detected capacity change from 0 to 128 [ 511.619181][T18710] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4015'. [ 512.238833][T18717] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4017'. [ 512.314996][T18717] bond1: entered promiscuous mode [ 512.346106][T18717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 512.492566][T18721] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4018'. [ 512.678870][T18723] loop7: detected capacity change from 0 to 2048 [ 512.722847][T18723] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 512.793644][T18723] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.987551][T18739] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 513.099012][ T28] audit: type=1400 audit(2000000165.681:2772): avc: denied { relabelto } for pid=18738 comm="syz.2.4025" name="356" dev="tmpfs" ino=1900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 513.299732][ T28] audit: type=1400 audit(2000000165.681:2773): avc: denied { associate } for pid=18738 comm="syz.2.4025" name="356" dev="tmpfs" ino=1900 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 513.436839][ T28] audit: type=1326 audit(2000000165.944:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18738 comm="syz.2.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469d3ec819 code=0x7ffc0000 [ 513.474992][ T28] audit: type=1326 audit(2000000165.944:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18738 comm="syz.2.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469d3ec819 code=0x7ffc0000 [ 513.489944][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 513.499362][ T28] audit: type=1326 audit(2000000165.944:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18738 comm="syz.2.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469d3ec819 code=0x7ffc0000 [ 513.530042][ T28] audit: type=1326 audit(2000000165.954:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18738 comm="syz.2.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469d3ec819 code=0x7ffc0000 [ 513.543260][T16558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.593725][ T28] audit: type=1326 audit(2000000165.954:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18738 comm="syz.2.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f469d3ec819 code=0x7ffc0000 [ 513.618375][ T28] audit: type=1326 audit(2000000165.954:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18738 comm="syz.2.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469d3ec819 code=0x7ffc0000 [ 513.671534][T18748] loop7: detected capacity change from 0 to 1024 [ 513.690039][ T28] audit: type=1326 audit(2000000165.954:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18738 comm="syz.2.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469d3ec819 code=0x7ffc0000 [ 513.733606][T18748] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 513.749893][ T28] audit: type=1326 audit(2000000165.954:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18738 comm="syz.2.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469d3ec819 code=0x7ffc0000 [ 513.766273][T18748] System zones: 0-1, 3-36 [ 513.814055][T18748] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.4028: bad orphan inode 134217728 [ 513.859479][T18748] loop7: lost filesystem error report for type 5 error -117 [ 513.860017][T18748] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.259088][T16558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.602895][T18771] loop7: detected capacity change from 0 to 128 [ 514.745292][T18777] lo speed is unknown, defaulting to 1000 [ 514.914043][T18777] program syz.5.4038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 515.183921][T18786] loop5: detected capacity change from 0 to 512 [ 515.197506][T18786] EXT4-fs: Ignoring removed i_version option [ 515.212029][T18786] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 515.303286][T18786] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 515.327193][T18786] EXT4-fs (loop5): group descriptors corrupted! [ 516.090990][T18811] tipc: Enabling of bearer rejected, failed to enable media [ 516.241293][T18818] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4050'. [ 516.600156][T18809] loop5: detected capacity change from 0 to 4096 [ 516.858070][T18809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.072383][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4053'. [ 517.122750][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4053'. [ 517.181276][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4053'. [ 517.247916][T12311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.455130][T18778] syz.7.4036: attempt to access beyond end of device [ 517.455130][T18778] loop7: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 517.508830][T18778] syz.7.4036: attempt to access beyond end of device [ 517.508830][T18778] loop7: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 517.551590][ T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.599345][T18778] syz.7.4036: attempt to access beyond end of device [ 517.599345][T18778] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 517.618616][ T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.658557][T18778] syz.7.4036: attempt to access beyond end of device [ 517.658557][T18778] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 517.696418][T18778] syz.7.4036: attempt to access beyond end of device [ 517.696418][T18778] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 517.735151][ T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.757689][T18778] syz.7.4036: attempt to access beyond end of device [ 517.757689][T18778] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 517.777823][ T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.802435][T18778] syz.7.4036: attempt to access beyond end of device [ 517.802435][T18778] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 517.843121][T18778] syz.7.4036: attempt to access beyond end of device [ 517.843121][T18778] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 517.874816][ T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.916003][T18778] syz.7.4036: attempt to access beyond end of device [ 517.916003][T18778] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 517.927696][ T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.968385][T18778] syz.7.4036: attempt to access beyond end of device [ 517.968385][T18778] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 518.053722][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 518.118911][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.129423][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.245046][T18845] lo speed is unknown, defaulting to 1000 [ 518.267568][ T46] bridge_slave_1: left allmulticast mode [ 518.274101][ T46] bridge_slave_1: left promiscuous mode [ 518.281960][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.293904][ T46] ¾x9ÿ: left allmulticast mode [ 518.298724][ T46] ¾x9ÿ: left promiscuous mode [ 518.305036][ T46] bridge0: port 1(1¾x9ÿ) entered disabled state [ 518.315091][ T46] pimreg: left allmulticast mode [ 518.323031][ T46] tipc: Resetting bearer [ 518.431559][ T46] bond1 (unregistering): (slave gretap1): Releasing active interface [ 518.484202][ T46] tipc: Disabling bearer [ 518.557710][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.578100][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.581882][T18873] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4069'. [ 518.610244][ T46] bond0 (unregistering): Released all slaves [ 518.616936][T18876] loop2: detected capacity change from 0 to 512 [ 518.626692][T18876] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 518.639969][ T46] bond1 (unregistering): Released all slaves [ 518.660710][ T46] bond2 (unregistering): Released all slaves [ 518.688605][T18876] EXT4-fs (loop2): 1 truncate cleaned up [ 518.698839][T18876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.740254][ T28] kauditd_printk_skb: 163 callbacks suppressed [ 518.740329][ T28] audit: type=1400 audit(2000000171.707:2945): avc: denied { write } for pid=18883 comm="syz.7.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 518.785051][T18864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4066'. [ 518.799493][ T46] tipc: Left network mode [ 518.851903][T12112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.874672][ T46] veth1_macvtap: left promiscuous mode [ 518.907742][ T46] veth0_macvtap: left promiscuous mode [ 518.931954][ T46] veth1_vlan: left promiscuous mode [ 518.952315][ T46] veth0_vlan: left promiscuous mode [ 519.192082][T18894] loop2: detected capacity change from 0 to 4096 [ 519.249324][ T46] team0 (unregistering): Port device team_slave_1 removed [ 519.252226][T18894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.271895][ T46] team0 (unregistering): Port device team_slave_0 removed [ 519.335029][ T3037] 8021q: adding VLAN 0 to HW filter on device eth9 [ 519.406660][T18845] chnl_net:caif_netlink_parms(): no params data found [ 519.444203][T12112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.486498][T18845] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.502427][T18845] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.510350][T18845] bridge_slave_0: entered allmulticast mode [ 519.516977][T18845] bridge_slave_0: entered promiscuous mode [ 519.526692][T18845] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.533859][T18845] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.541433][T18845] bridge_slave_1: entered allmulticast mode [ 519.548016][T18845] bridge_slave_1: entered promiscuous mode [ 519.567398][T18928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4076'. [ 519.569952][T18845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.587778][T18845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.612919][T18845] team0: Port device team_slave_0 added [ 519.629314][T18845] team0: Port device team_slave_1 added [ 519.666344][T18845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.681922][T18845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.716508][T18845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.756741][T18845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.763921][T18845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.840315][T18845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.851837][ T3037] 8021q: adding VLAN 0 to HW filter on device eth10 [ 519.888438][T18845] hsr_slave_0: entered promiscuous mode [ 519.896553][T18845] hsr_slave_1: entered promiscuous mode [ 519.903302][T18845] debugfs: 'hsr0' already exists in 'hsr' [ 519.909141][T18845] Cannot create hsr debugfs directory [ 520.126773][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4082'. [ 520.157438][T18957] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4082'. [ 520.170418][ T3037] 8021q: adding VLAN 0 to HW filter on device eth11 [ 520.273721][T18845] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 520.285841][T18845] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 520.297743][T18845] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 520.310833][T18845] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 520.324121][T18845] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 520.340373][T18845] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 520.365632][T18845] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 520.379621][T18845] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 520.414714][T18987] loop6: detected capacity change from 0 to 2048 [ 520.437770][T18987] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 520.457066][T18845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.467783][ T3037] 8021q: adding VLAN 0 to HW filter on device eth12 [ 520.476690][T18987] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.497824][T18845] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.520867][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.527934][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.642338][T17920] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.649430][T17920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.171897][T18845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 521.251461][T17095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.319231][T19029] FAULT_INJECTION: forcing a failure. [ 521.319231][T19029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.331777][T19031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4091'. [ 521.348623][T18845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.371845][T19031] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4091'. [ 521.378801][T19029] CPU: 1 UID: 0 PID: 19029 Comm: syz.2.4090 Tainted: G W syzkaller #0 PREEMPT(full) [ 521.378832][T19029] Tainted: [W]=WARN [ 521.378839][T19029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 521.378851][T19029] Call Trace: [ 521.378859][T19029] [ 521.378867][T19029] __dump_stack+0x1d/0x30 [ 521.378926][T19029] dump_stack_lvl+0x95/0xd0 [ 521.378950][T19029] dump_stack+0x15/0x1b [ 521.378987][T19029] should_fail_ex+0x263/0x280 [ 521.379012][T19029] should_fail+0xb/0x20 [ 521.379032][T19029] should_fail_usercopy+0x1a/0x20 [ 521.379119][T19029] _copy_from_user+0x1c/0xb0 [ 521.379144][T19029] kstrtouint_from_user+0x69/0xf0 [ 521.379165][T19029] ? 0xffffffff81000000 [ 521.379179][T19029] ? selinux_file_permission+0x1e1/0x320 [ 521.379231][T19029] proc_fail_nth_write+0x50/0x160 [ 521.379266][T19029] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 521.379290][T19029] vfs_write+0x269/0x9f0 [ 521.379314][T19029] ? __rcu_read_unlock+0x4e/0x70 [ 521.379398][T19029] ? __fget_files+0x184/0x1c0 [ 521.379485][T19029] ? mutex_lock+0x57/0x90 [ 521.379511][T19029] ksys_write+0xdc/0x1a0 [ 521.379536][T19029] __x64_sys_write+0x40/0x50 [ 521.379558][T19029] x64_sys_call+0x27e1/0x3020 [ 521.379633][T19029] do_syscall_64+0x12c/0x3b0 [ 521.379654][T19029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.379675][T19029] RIP: 0033:0x7f469d3ad04e [ 521.379689][T19029] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 521.379739][T19029] RSP: 002b:00007f469be46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 521.379758][T19029] RAX: ffffffffffffffda RBX: 00007f469be476c0 RCX: 00007f469d3ad04e [ 521.379772][T19029] RDX: 0000000000000001 RSI: 00007f469be470a0 RDI: 0000000000000004 [ 521.379835][T19029] RBP: 00007f469be47090 R08: 0000000000000000 R09: 0000000000000000 [ 521.379847][T19029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.379860][T19029] R13: 00007f469d666038 R14: 00007f469d665fa0 R15: 00007ffe94b5fd38 [ 521.379877][T19029] [ 521.568044][T19036] loop6: detected capacity change from 0 to 4096 [ 521.573555][T19031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4091'. [ 521.607556][T19031] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4091'. [ 521.616742][T19031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4091'. [ 521.660483][T19036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.772953][T17095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.810287][T18845] veth0_vlan: entered promiscuous mode [ 521.843172][T18845] veth1_vlan: entered promiscuous mode [ 521.862650][T19071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4097'. [ 521.902034][T18845] veth0_macvtap: entered promiscuous mode [ 521.925874][T18845] veth1_macvtap: entered promiscuous mode [ 521.948886][T18845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.957336][ T28] audit: type=1400 audit(2000000175.077:2946): avc: denied { ioctl } for pid=19070 comm="syz.1.4097" path="pid:[4026532377]" dev="nsfs" ino=4026532377 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 521.986147][T18845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.018917][T19089] xt_policy: neither incoming nor outgoing policy selected [ 522.045950][ T308] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.202905][T19091] loop6: detected capacity change from 0 to 512 [ 522.218498][T19091] EXT4-fs: Ignoring removed i_version option [ 522.239334][T19091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 522.255054][T19091] EXT4-fs error (device loop6): __ext4_fill_super:5590: inode #2: comm syz.6.4099: invalid fast symlink length 4227924007 [ 522.278991][T19091] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 522.281023][ T308] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.290127][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 522.290148][ C0] EXT4-fs (loop6): initial error at time 2000000175: __ext4_fill_super:5590: inode 2 [ 522.290183][ C0] EXT4-fs (loop6): last error at time 2000000175: __ext4_fill_super:5590: inode 2 [ 522.325128][T19091] EXT4-fs (loop6): get root inode failed [ 522.341788][T19091] EXT4-fs (loop6): mount failed [ 522.371225][ T308] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.389234][ T308] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.451843][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4103'. [ 523.497464][T19157] loop7: detected capacity change from 0 to 256 [ 523.524171][T19157] FAT-fs (loop7): Directory bread(block 64) failed [ 523.530776][T19157] FAT-fs (loop7): Directory bread(block 65) failed [ 523.537791][T19157] FAT-fs (loop7): Directory bread(block 66) failed [ 523.545098][T19157] FAT-fs (loop7): Directory bread(block 67) failed [ 523.552379][T19157] FAT-fs (loop7): Directory bread(block 68) failed [ 523.559323][ T28] audit: type=1400 audit(2000000176.767:2947): avc: denied { bind } for pid=19158 comm="syz.9.4108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 523.580391][T19157] FAT-fs (loop7): Directory bread(block 69) failed [ 523.587064][T19157] FAT-fs (loop7): Directory bread(block 70) failed [ 523.594113][T19157] FAT-fs (loop7): Directory bread(block 71) failed [ 523.601136][T19157] FAT-fs (loop7): Directory bread(block 72) failed [ 523.608148][T19157] FAT-fs (loop7): Directory bread(block 73) failed [ 524.018260][T19170] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4109'. [ 524.100624][T19179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4113'. [ 524.114439][T19181] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4114'. [ 524.132484][T19185] FAULT_INJECTION: forcing a failure. [ 524.132484][T19185] name failslab, interval 1, probability 0, space 0, times 0 [ 524.161977][T19185] CPU: 0 UID: 0 PID: 19185 Comm: syz.6.4117 Tainted: G W syzkaller #0 PREEMPT(full) [ 524.162011][T19185] Tainted: [W]=WARN [ 524.162019][T19185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 524.162031][T19185] Call Trace: [ 524.162037][T19185] [ 524.162048][T19185] __dump_stack+0x1d/0x30 [ 524.162153][T19185] dump_stack_lvl+0x95/0xd0 [ 524.162177][T19185] dump_stack+0x15/0x1b [ 524.162258][T19185] should_fail_ex+0x263/0x280 [ 524.162278][T19185] should_failslab+0x8c/0xb0 [ 524.162304][T19185] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 524.162366][T19185] ? __alloc_skb+0x2d6/0x690 [ 524.162386][T19185] __alloc_skb+0x2d6/0x690 [ 524.162421][T19185] ? __alloc_skb+0x200/0x690 [ 524.162496][T19185] alloc_skb_with_frags+0x7e/0x3d0 [ 524.162514][T19185] ? is_bpf_text_address+0x141/0x160 [ 524.162538][T19185] ? kernel_text_address+0x94/0xb0 [ 524.162568][T19185] sock_alloc_send_pskb+0x44d/0x500 [ 524.162627][T19185] ? stack_depot_save_flags+0x4d4/0x8d0 [ 524.162651][T19185] __ip_append_data+0x1817/0x23a0 [ 524.162680][T19185] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 524.162721][T19185] ? should_fail_ex+0xd9/0x280 [ 524.162743][T19185] ? should_failslab+0x8c/0xb0 [ 524.162803][T19185] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 524.162833][T19185] ip_make_skb+0x150/0x2d0 [ 524.162855][T19185] udp_sendmsg+0x1098/0x1500 [ 524.162901][T19185] ? __pfx_udp_sendmsg+0x10/0x10 [ 524.162923][T19185] inet_sendmsg+0xac/0xd0 [ 524.162975][T19185] ? __pfx_inet_sendmsg+0x10/0x10 [ 524.162998][T19185] ____sys_sendmsg+0x519/0x5b0 [ 524.163083][T19185] ___sys_sendmsg+0x195/0x1e0 [ 524.163195][T19185] __x64_sys_sendmsg+0xd4/0x160 [ 524.163222][T19185] x64_sys_call+0x194c/0x3020 [ 524.163264][T19185] do_syscall_64+0x12c/0x3b0 [ 524.163283][T19185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.163301][T19185] RIP: 0033:0x7f7c05fec819 [ 524.163315][T19185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.163405][T19185] RSP: 002b:00007f7c04a47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.163423][T19185] RAX: ffffffffffffffda RBX: 00007f7c06265fa0 RCX: 00007f7c05fec819 [ 524.163435][T19185] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000004 [ 524.163448][T19185] RBP: 00007f7c04a47090 R08: 0000000000000000 R09: 0000000000000000 [ 524.163459][T19185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.163506][T19185] R13: 00007f7c06266038 R14: 00007f7c06265fa0 R15: 00007ffc6c847928 [ 524.163527][T19185] [ 524.723188][T19217] loop2: detected capacity change from 0 to 512 [ 524.742149][T19217] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 524.784765][T19217] EXT4-fs error (device loop2): ext4_iget_extra_inode:5042: inode #15: comm syz.2.4120: corrupted in-inode xattr: e_value size too large [ 524.802679][T19220] bridge_slave_0: left allmulticast mode [ 524.805544][T19229] loop1: detected capacity change from 0 to 1024 [ 524.815635][T19217] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 524.816352][T19217] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4120: couldn't read orphan inode 15 (err -117) [ 524.825631][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 524.825659][ C1] EXT4-fs (loop2): initial error at time 2000000178: ext4_iget_extra_inode:5042: inode 15 [ 524.825692][ C1] EXT4-fs (loop2): last error at time 2000000178: ext4_iget_extra_inode:5042: inode 15 [ 524.827749][T19220] bridge_slave_0: left promiscuous mode [ 524.837816][T19217] loop2: lost filesystem error report for type 5 error -117 [ 524.848017][T19229] EXT4-fs: Ignoring removed i_version option [ 524.854990][T19217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.897723][T19220] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.912633][T19220] bridge_slave_1: left allmulticast mode [ 524.918388][T19220] bridge_slave_1: left promiscuous mode [ 524.924544][T19220] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.957087][T19220] bond0: (slave bond_slave_0): Releasing backup interface [ 524.972515][T19220] bond0: (slave bond_slave_1): Releasing backup interface [ 524.990836][T19220] team0: Port device team_slave_0 removed [ 525.013268][T19220] team0: Port device team_slave_1 removed [ 525.020441][T19220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.040372][T19220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.062260][T19220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.070832][T19220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.079678][T12112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.110355][T19220] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 525.146353][T19245] bond1: entered promiscuous mode [ 525.165661][T19245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 525.246306][T19257] loop9: detected capacity change from 0 to 1024 [ 525.333319][T19257] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 525.349388][T19257] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 525.361757][T19257] EXT4-fs error (device loop9): ext4_get_journal_inode:5890: comm syz.9.4131: inode #1: comm syz.9.4131: iget: illegal inode # [ 525.367994][T19263] syzkaller0: entered promiscuous mode [ 525.378565][T19257] loop9: lost filesystem error report for type 5 error -117 [ 525.382075][T19257] EXT4-fs (loop9): no journal found [ 525.391220][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 525.391267][ C1] EXT4-fs (loop9): initial error at time 2000000178: ext4_get_journal_inode:5890 [ 525.391371][ C1] EXT4-fs (loop9): last error at time 2000000178: ext4_get_journal_inode:5890 [ 525.400938][T19263] syzkaller0: entered allmulticast mode [ 525.405390][T19257] EXT4-fs (loop9): can't get journal size [ 525.450388][T19271] tipc: Started in network mode [ 525.457129][T19271] tipc: Node identity 3ac6b9df75, cluster identity 4711 [ 525.467736][T19271] tipc: Enabled bearer , priority 0 [ 525.484185][T19257] EXT4-fs (loop9): failed to initialize system zone (-22) [ 525.498979][T19257] EXT4-fs (loop9): mount failed [ 525.730717][T19301] hub 8-0:1.0: USB hub found [ 525.735619][T19301] hub 8-0:1.0: 8 ports detected [ 526.172068][T19270] tipc: Disabling bearer [ 526.259144][T19327] loop7: detected capacity change from 0 to 512 [ 526.276151][T19327] Quota error (device loop7): dq_insert_tree: Quota tree root isn't allocated! [ 526.307368][T19327] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 526.324777][T19327] EXT4-fs error (device loop7): ext4_acquire_dquot:7028: comm syz.7.4139: Failed to acquire dquot type 0 [ 526.348164][T19333] hub 8-0:1.0: USB hub found [ 526.353800][T19333] hub 8-0:1.0: 8 ports detected [ 526.459851][T19323] __nla_validate_parse: 6 callbacks suppressed [ 526.459866][T19323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4138'. [ 526.482474][T19332] loop2: detected capacity change from 0 to 1024 [ 526.535616][T19327] loop7: lost filesystem error report for type 5 error -5 [ 526.536903][T19327] EXT4-fs error (device loop7): ext4_do_update_inode:5604: inode #16: comm syz.7.4139: corrupted inode contents [ 526.544941][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 526.544963][ C0] EXT4-fs (loop7): initial error at time 2000000179: ext4_acquire_dquot:7028 [ 526.544990][ C0] EXT4-fs (loop7): last error at time 2000000179: ext4_acquire_dquot:7028 [ 526.755920][T19327] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 526.756314][T19327] EXT4-fs error (device loop7): ext4_dirty_inode:6497: inode #16: comm syz.7.4139: mark_inode_dirty error [ 526.796698][T19327] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 526.800715][T19327] EXT4-fs error (device loop7): ext4_do_update_inode:5604: inode #16: comm syz.7.4139: corrupted inode contents [ 526.822621][T19327] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 526.822867][T19327] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.4139: mark_inode_dirty error [ 526.844358][T19327] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 526.855175][T19327] EXT4-fs error (device loop7): ext4_do_update_inode:5604: inode #16: comm syz.7.4139: corrupted inode contents [ 526.876923][T19327] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 526.884297][T19327] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 526.911377][T19327] loop7: lost filesystem error report for type 5 error -117 [ 526.912440][T19327] EXT4-fs error (device loop7): ext4_do_update_inode:5604: inode #16: comm syz.7.4139: corrupted inode contents [ 526.933278][T19327] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 526.933438][T19327] EXT4-fs error (device loop7): ext4_truncate:4604: inode #16: comm syz.7.4139: mark_inode_dirty error [ 526.964015][T19327] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 526.974530][T19327] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 526.995529][T19327] loop7: lost filesystem error report for type 5 error -117 [ 526.997794][T19327] EXT4-fs (loop7): 1 truncate cleaned up [ 527.018811][T19327] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.032341][T19327] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.217228][T16558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.279594][T19354] loop7: detected capacity change from 0 to 1024 [ 527.311786][T19354] EXT4-fs: Ignoring removed mblk_io_submit option [ 527.324642][T19354] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 527.359945][T19354] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 527.386233][T19354] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #11: comm syz.7.4145: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 527.388566][T19352] pim6reg: entered allmulticast mode [ 527.426166][T19354] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 527.426289][T19354] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.4145: couldn't read orphan inode 11 (err -117) [ 527.435685][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 527.435705][ C1] EXT4-fs (loop7): initial error at time 2000000180: ext4_ext_check_inode:521: inode 11 [ 527.435732][ C1] EXT4-fs (loop7): last error at time 2000000180: ext4_ext_check_inode:521: inode 11 [ 527.476315][T19354] loop7: lost filesystem error report for type 5 error -117 [ 527.476854][T19354] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.503829][T19352] pim6reg: left allmulticast mode [ 527.520789][ T28] audit: type=1400 audit(2000000180.914:2948): avc: denied { create } for pid=19353 comm="syz.7.4145" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 527.551623][T19354] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4145: Invalid block bitmap block 0 in block_group 0 [ 527.569228][T19354] Quota error (device loop7): write_blk: dquota write failed [ 527.587784][T19354] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 527.597862][T19354] EXT4-fs error (device loop7): ext4_acquire_dquot:7028: comm syz.7.4145: Failed to acquire dquot type 0 [ 527.734135][T19365] lo speed is unknown, defaulting to 1000 [ 527.753715][T19369] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4150'. [ 527.770631][T19369] loop6: detected capacity change from 0 to 512 [ 527.782444][T19369] EXT4-fs: Ignoring removed mblk_io_submit option [ 527.792010][T19369] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 527.802711][T19369] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 527.811049][T19369] EXT4-fs (loop6): orphan cleanup on readonly fs [ 527.818802][T19369] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4150: bg 0: block 361: padding at end of block bitmap is not set [ 527.833353][T19369] loop6: lost filesystem error report for type 5 error -117 [ 527.833647][T19369] EXT4-fs (loop6): Remounting filesystem read-only [ 527.841064][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 527.841095][ C0] EXT4-fs (loop6): initial error at time 2000000181: ext4_validate_block_bitmap:441 [ 527.841158][ C0] EXT4-fs (loop6): last error at time 2000000181: ext4_validate_block_bitmap:441 [ 527.874980][T19369] EXT4-fs (loop6): 1 truncate cleaned up [ 527.881259][T19369] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 527.897153][T19369] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.4150: dx entry: limit 0 != root limit 125 [ 527.909958][T19369] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4150: Corrupt directory, running e2fsck is recommended [ 527.936392][T17095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 527.963891][T19376] loop6: detected capacity change from 0 to 128 [ 527.981165][T19376] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 527.993559][T19376] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.020263][T17095] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 528.079897][T16558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.163529][T19383] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4153'. [ 528.191613][T19383] xt_hashlimit: overflow, try lower: 18446744073709551614/4 [ 528.395811][T19390] hub 8-0:1.0: USB hub found [ 528.401481][T19390] hub 8-0:1.0: 8 ports detected [ 528.888345][T19398] loop1: detected capacity change from 0 to 512 [ 528.898771][T19398] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 528.909640][T19398] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4160: Invalid block bitmap block 0 in block_group 0 [ 528.923666][T19398] loop1: lost filesystem error report for type 5 error -117 [ 528.923773][T19398] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 528.931078][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 528.931098][ C1] EXT4-fs (loop1): initial error at time 2000000182: ext4_read_block_bitmap_nowait:483 [ 528.931123][ C1] EXT4-fs (loop1): last error at time 2000000182: ext4_read_block_bitmap_nowait:483 [ 528.965315][T19398] loop1: lost filesystem error report for type 5 error -117 [ 528.965480][T19398] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.4160: attempt to clear invalid blocks 983261 len 1 [ 528.986095][T19398] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 528.986326][T19398] EXT4-fs error (device loop1): __ext4_get_inode_loc:4799: comm syz.1.4160: Invalid inode table block 0 in block_group 0 [ 529.008284][T19398] loop1: lost filesystem error report for type 5 error -117 [ 529.008543][T19398] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6293: Corrupt filesystem [ 529.025397][T19398] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 529.031557][ T28] audit: type=1326 audit(2000000182.510:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19400 comm="syz.6.4161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c05fec819 code=0x0 [ 529.036159][T19398] EXT4-fs error (device loop1): __ext4_get_inode_loc:4799: comm syz.1.4160: Invalid inode table block 0 in block_group 0 [ 529.070077][T19398] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6293: Corrupt filesystem [ 529.079948][T19398] EXT4-fs error (device loop1): ext4_truncate:4604: inode #11: comm syz.1.4160: mark_inode_dirty error [ 529.091156][T19398] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 529.091297][T19398] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 529.113244][T19403] netlink: 'syz.9.4162': attribute type 10 has an invalid length. [ 529.114205][T19398] EXT4-fs error (device loop1): __ext4_get_inode_loc:4799: comm syz.1.4160: Invalid inode table block 0 in block_group 0 [ 529.121413][T19403] team0: Device wg1 is up. Set it down before adding it as a team port [ 529.135238][T19398] EXT4-fs (loop1): 1 truncate cleaned up [ 529.149102][T19398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.239960][T19412] lo speed is unknown, defaulting to 1000 [ 529.404361][T19418] loop7: detected capacity change from 0 to 512 [ 529.661633][T19344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 529.686992][T14657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.711398][T19423] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4169'. [ 529.726758][ T28] audit: type=1400 audit(2000000183.234:2950): avc: denied { ioctl } for pid=19426 comm="syz.7.4170" path="/dev/uhid" dev="devtmpfs" ino=253 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 529.803230][T19438] netlink: 'syz.1.4171': attribute type 10 has an invalid length. [ 529.803762][T19436] loop9: detected capacity change from 0 to 128 [ 529.816501][T19438] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4171'. [ 529.997694][T19449] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4178'. [ 530.036198][T19448] ip6tnl0: entered promiscuous mode [ 530.080395][T19448] netlink: 'syz.2.4178': attribute type 1 has an invalid length. [ 530.109721][T19453] loop1: detected capacity change from 0 to 1024 [ 530.117099][T19453] EXT4-fs: Ignoring removed orlov option [ 530.153402][T19448] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4178'. [ 530.164078][T19453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.543683][T14657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.757311][T19469] loop2: detected capacity change from 0 to 512 [ 531.770403][T19473] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4182'. [ 531.788509][T19469] ext4: Unknown parameter 'dont_measure' [ 531.802383][T19470] lo speed is unknown, defaulting to 1000 [ 531.875004][T19480] FAULT_INJECTION: forcing a failure. [ 531.875004][T19480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.890846][T19480] CPU: 1 UID: 0 PID: 19480 Comm: syz.2.4185 Tainted: G W syzkaller #0 PREEMPT(full) [ 531.891003][T19480] Tainted: [W]=WARN [ 531.891010][T19480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 531.891020][T19480] Call Trace: [ 531.891026][T19480] [ 531.891032][T19480] __dump_stack+0x1d/0x30 [ 531.891054][T19480] dump_stack_lvl+0x95/0xd0 [ 531.891076][T19480] dump_stack+0x15/0x1b [ 531.891155][T19480] should_fail_ex+0x263/0x280 [ 531.891180][T19480] should_fail+0xb/0x20 [ 531.891263][T19480] should_fail_usercopy+0x1a/0x20 [ 531.891306][T19480] _copy_from_user+0x1c/0xb0 [ 531.891327][T19480] ___sys_sendmsg+0xc1/0x1e0 [ 531.891391][T19480] __x64_sys_sendmsg+0xd4/0x160 [ 531.891419][T19480] x64_sys_call+0x194c/0x3020 [ 531.891445][T19480] do_syscall_64+0x12c/0x3b0 [ 531.891498][T19480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.891521][T19480] RIP: 0033:0x7f469d3ec819 [ 531.891537][T19480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.891555][T19480] RSP: 002b:00007f469be47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.891573][T19480] RAX: ffffffffffffffda RBX: 00007f469d665fa0 RCX: 00007f469d3ec819 [ 531.891584][T19480] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 531.891603][T19480] RBP: 00007f469be47090 R08: 0000000000000000 R09: 0000000000000000 [ 531.891615][T19480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.891628][T19480] R13: 00007f469d666038 R14: 00007f469d665fa0 R15: 00007ffe94b5fd38 [ 531.891649][T19480] [ 532.001809][T19483] dummy0: mtu less than device minimum [ 532.038190][T19476] loop7: detected capacity change from 0 to 4096 [ 532.116452][T19487] loop9: detected capacity change from 0 to 512 [ 532.127732][T19487] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 532.166070][T19476] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.182990][T19487] EXT4-fs error (device loop9): xattr_find_entry:337: inode #15: comm syz.9.4188: corrupted xattr entries [ 532.236077][T19487] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 532.239325][T19487] EXT4-fs (loop9): 1 truncate cleaned up [ 532.248470][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 532.248493][ C0] EXT4-fs (loop9): initial error at time 2000000185: xattr_find_entry:337: inode 15 [ 532.248559][ C0] EXT4-fs (loop9): last error at time 2000000185: xattr_find_entry:337: inode 15 [ 532.285223][T16558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.294724][T19487] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.323924][T19494] loop1: detected capacity change from 0 to 512 [ 532.390964][T19494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.469585][ T28] audit: type=1400 audit(2000000186.121:2951): avc: denied { kexec_image_load } for pid=19484 comm="syz.1.4187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 532.604574][T19510] loop2: detected capacity change from 0 to 1024 [ 532.612018][T19510] EXT4-fs: test_dummy_encryption option not supported [ 532.660361][T19513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4194'. [ 532.671121][T19513] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4194'. [ 532.683074][T19513] netlink: 348 bytes leftover after parsing attributes in process `syz.6.4194'. [ 532.693229][T19513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4194'. [ 532.713633][T19513] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4194'. [ 532.731418][T19513] netlink: 348 bytes leftover after parsing attributes in process `syz.6.4194'. [ 532.741808][T19513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4194'. [ 532.835919][T19517] loop6: detected capacity change from 0 to 1756 [ 532.960654][T18845] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.984800][T14657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.997244][T19524] netlink: 'syz.6.4198': attribute type 16 has an invalid length. [ 533.006421][T19524] netlink: 'syz.6.4198': attribute type 17 has an invalid length. [ 533.034632][T19526] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 533.045921][T19524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.048268][T19524] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.062158][T19527] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4199'. [ 533.076880][T19524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 533.149044][T19526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.179900][T14657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.213062][ T28] audit: type=1400 audit(2000000186.898:2952): avc: denied { ioctl } for pid=19529 comm="syz.1.4201" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=56145 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 533.272191][T19527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.288185][T19527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.304797][T19539] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) [ 533.491941][T19560] hub 8-0:1.0: USB hub found [ 533.496775][T19560] hub 8-0:1.0: 8 ports detected [ 533.975365][T19589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.985114][T19589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.027798][T19588] set_capacity_and_notify: 2 callbacks suppressed [ 534.027812][T19588] loop7: detected capacity change from 0 to 8192 [ 534.145165][T19607] syzkaller0: entered promiscuous mode [ 534.150721][T19607] syzkaller0: entered allmulticast mode [ 534.247894][ T6742] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 534.266135][ T6742] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 534.314398][T19622] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4217'. [ 534.339758][T19622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.353524][T19612] loop7: detected capacity change from 0 to 4096 [ 534.363047][T19622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.372526][T19622] bond0 (unregistering): Released all slaves [ 534.395842][T19612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.441199][T19616] n: the hash_elasticity option has been deprecated and is always 16 [ 534.441357][T16558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.459338][T19616] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 534.485758][T19624] loop2: detected capacity change from 0 to 8192 [ 534.497382][T19616] n: the hash_elasticity option has been deprecated and is always 16 [ 534.505803][T19616] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 534.528824][ T28] audit: type=1400 audit(2000000188.284:2953): avc: denied { write } for pid=19621 comm="syz.2.4217" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 534.643166][T19635] loop7: detected capacity change from 0 to 4096 [ 534.655324][T19635] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.708536][T16558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.759519][ T28] audit: type=1326 audit(2000000188.515:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19642 comm="syz.6.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c05fec819 code=0x7ffc0000 [ 534.878027][T19650] hub 8-0:1.0: USB hub found [ 534.882768][T19650] hub 8-0:1.0: 8 ports detected [ 534.907287][ T28] audit: type=1326 audit(2000000188.515:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19642 comm="syz.6.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c05fec819 code=0x7ffc0000 [ 534.938903][ T28] audit: type=1326 audit(2000000188.557:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19642 comm="syz.6.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c05fec819 code=0x7ffc0000 [ 534.986516][T19643] loop6: detected capacity change from 0 to 512 [ 535.077914][T19643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.245876][ T28] audit: type=1326 audit(2000000188.641:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19642 comm="syz.6.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c05fec819 code=0x7ffc0000 [ 535.271358][T19643] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.328895][ T28] audit: type=1326 audit(2000000188.641:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19642 comm="syz.6.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c05fec819 code=0x7ffc0000 [ 535.664957][T19671] Cannot find del_set index 0 as target [ 535.683091][T19670] loop2: detected capacity change from 0 to 512 [ 535.808855][T19670] EXT4-fs (loop2): orphan cleanup on readonly fs [ 535.848942][T19670] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.4229: EA inode hash validation failed [ 535.861718][ T28] audit: type=1326 audit(2000000188.704:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19642 comm="syz.6.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c05fec819 code=0x7ffc0000 [ 535.888412][T19670] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 535.943092][ T28] audit: type=1326 audit(2000000188.704:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19642 comm="syz.6.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7c05fec582 code=0x7ffc0000 [ 535.969597][T19670] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #15: comm syz.2.4229: corrupted inode contents [ 535.982722][T19670] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 535.982935][T19670] EXT4-fs error (device loop2): ext4_dirty_inode:6497: inode #15: comm syz.2.4229: mark_inode_dirty error [ 535.992076][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 535.992095][ C0] EXT4-fs (loop2): initial error at time 2000000189: ext4_do_update_inode:5604: inode 15 [ 535.992120][ C0] EXT4-fs (loop2): last error at time 2000000189: ext4_do_update_inode:5604: inode 15 [ 536.037558][ T28] audit: type=1326 audit(2000000188.704:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19642 comm="syz.6.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7c05fec617 code=0x7ffc0000 [ 536.069178][T19689] lo speed is unknown, defaulting to 1000 [ 536.087108][T19670] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 536.087954][T19670] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #15: comm syz.2.4229: corrupted inode contents [ 536.108936][ T28] audit: type=1326 audit(2000000188.704:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19642 comm="syz.6.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7c05fa9511 code=0x7ffc0000 [ 536.108992][T19670] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 536.109160][T19670] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.4229: mark_inode_dirty error [ 536.154278][T19670] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 536.157427][T19670] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.4229: mark inode dirty (error -117) [ 536.193476][T17095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.205237][T19670] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 536.205463][T19670] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 536.217225][T19696] loop9: detected capacity change from 0 to 512 [ 536.227340][T19670] EXT4-fs (loop2): 1 orphan inode deleted [ 536.253381][T19703] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 536.255838][T19670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 536.266955][T19696] EXT4-fs: Ignoring removed nobh option [ 536.326015][T19696] EXT4-fs: Ignoring removed mblk_io_submit option [ 536.358170][T19696] EXT4-fs (loop9): orphan cleanup on readonly fs [ 536.395492][T19696] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 536.425621][T19696] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.4233: attempt to clear invalid blocks 2 len 1 [ 536.439483][T19696] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 536.441957][T19696] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, [ 536.451101][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 536.451118][ C0] EXT4-fs (loop9): initial error at time 2000000190: ext4_clear_blocks:876: inode 13 [ 536.451159][ C0] EXT4-fs (loop9): last error at time 2000000190: ext4_clear_blocks:876: inode 13 [ 536.485844][T19696] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 536.494646][T19696] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.4233: invalid indirect mapped block 1819239214 (level 0) [ 536.509331][T19696] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 536.518220][T19696] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.4233: invalid indirect mapped block 1819239214 (level 1) [ 536.568855][T19724] __nla_validate_parse: 4 callbacks suppressed [ 536.568867][T19724] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4237'. [ 536.589602][T12112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.607906][T19696] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 536.613541][T19696] EXT4-fs (loop9): 1 truncate cleaned up [ 536.629921][T19724] batadv_slave_0: Caught tx_queue_len zero misconfig [ 536.679487][T19696] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 536.743160][T19696] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.813652][T19747] loop2: detected capacity change from 0 to 512 [ 536.850302][T19747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.864483][T19747] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 536.965624][T19752] loop1: detected capacity change from 0 to 164 [ 536.998500][T19747] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #2: comm syz.2.4243: corrupted inode contents [ 537.012497][T19747] EXT4-fs error (device loop2): ext4_dirty_inode:6497: inode #2: comm syz.2.4243: mark_inode_dirty error [ 537.024319][T19747] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #2: comm syz.2.4243: corrupted inode contents [ 537.036578][T19747] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.4243: mark_inode_dirty error [ 537.266738][T19756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.723082][T19765] hub 8-0:1.0: USB hub found [ 537.728153][T19765] hub 8-0:1.0: 8 ports detected [ 537.884778][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 537.942046][T12112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.112967][T19775] loop6: detected capacity change from 0 to 128 [ 538.149727][T19775] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 538.205988][T19775] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.250703][T17095] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 538.424498][T19800] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4253'. [ 538.639732][T19798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.695239][T17095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.714373][T19807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.766954][T12112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.858467][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4260'. [ 538.888100][T19822] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4260'. [ 538.943597][T19833] set_capacity_and_notify: 3 callbacks suppressed [ 538.943614][T19833] loop6: detected capacity change from 0 to 512 [ 538.971537][T19833] EXT4-fs: Ignoring removed bh option [ 538.981879][T19833] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 539.015986][T19833] EXT4-fs (loop6): 1 truncate cleaned up [ 539.033076][T19833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.090295][T17095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.281732][T19849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4269'. [ 539.515021][T19865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4268'. [ 539.524051][T19865] tipc: Cannot configure node identity twice [ 539.544556][T19864] loop1: detected capacity change from 0 to 4096 [ 539.627023][T19864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.644042][T19864] EXT4-fs (loop1): shut down requested (1) [ 539.651939][T19864] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 539.696849][T19864] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 539.724872][ T28] kauditd_printk_skb: 149 callbacks suppressed [ 539.724886][ T28] audit: type=1400 audit(2000000193.743:3112): avc: denied { setattr } for pid=19863 comm="syz.1.4274" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 539.753996][T14657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.901204][ T3392] hid-generic 0100:0000:0000.0007: unknown main item tag 0x0 [ 539.915904][ T3392] hid-generic 0100:0000:0000.0007: unknown main item tag 0x0 [ 539.939803][ T3392] hid-generic 0100:0000:0000.0007: unknown main item tag 0x0 [ 539.957404][ T3392] hid-generic 0100:0000:0000.0007: unknown main item tag 0x0 [ 539.977242][ T3392] hid-generic 0100:0000:0000.0007: unknown main item tag 0x0 [ 539.995455][ T3392] hid-generic 0100:0000:0000.0007: unknown main item tag 0x0 [ 540.013074][ T3392] hid-generic 0100:0000:0000.0007: unknown main item tag 0x0 [ 540.040377][ T3392] hid-generic 0100:0000:0000.0007: unknown main item tag 0x0 [ 540.117451][ T3392] hid-generic 0100:0000:0000.0007: unknown main item tag 0x0 [ 540.174694][ T3392] hid-generic 0100:0000:0000.0007: unknown main item tag 0x0 [ 540.182299][T19879] loop7: detected capacity change from 0 to 4096 [ 540.199031][T19879] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.234882][ T3392] hid-generic 0100:0000:0000.0007: hidraw0: HID v0.03 Device [syz0] on syz1 [ 540.474261][T19887] loop2: detected capacity change from 0 to 128 [ 540.536634][T16558] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.623880][T19893] FAULT_INJECTION: forcing a failure. [ 540.623880][T19893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.675690][T19893] CPU: 1 UID: 0 PID: 19893 Comm: syz.6.4283 Tainted: G W syzkaller #0 PREEMPT(full) [ 540.675756][T19893] Tainted: [W]=WARN [ 540.675764][T19893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 540.675776][T19893] Call Trace: [ 540.675784][T19893] [ 540.675792][T19893] __dump_stack+0x1d/0x30 [ 540.675822][T19893] dump_stack_lvl+0x95/0xd0 [ 540.675884][T19893] dump_stack+0x15/0x1b [ 540.675906][T19893] should_fail_ex+0x263/0x280 [ 540.675928][T19893] should_fail+0xb/0x20 [ 540.675948][T19893] should_fail_usercopy+0x1a/0x20 [ 540.676003][T19893] strncpy_from_user+0x27/0x250 [ 540.676058][T19893] ? __kmalloc_cache_noprof+0x18a/0x400 [ 540.676088][T19893] __se_sys_memfd_create+0x20f/0x3b0 [ 540.676130][T19893] __x64_sys_memfd_create+0x31/0x40 [ 540.676154][T19893] x64_sys_call+0x1f22/0x3020 [ 540.676177][T19893] do_syscall_64+0x12c/0x3b0 [ 540.676223][T19893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.676327][T19893] RIP: 0033:0x7f7c05fec819 [ 540.676344][T19893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.676362][T19893] RSP: 002b:00007f7c04a46e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 540.676383][T19893] RAX: ffffffffffffffda RBX: 00000000000004fe RCX: 00007f7c05fec819 [ 540.676399][T19893] RDX: 00007f7c04a46ee0 RSI: 0000000000000000 RDI: 00007f7c06082e71 [ 540.676438][T19893] RBP: 0000200000000dc0 R08: 00000000ffffffff R09: 0000000000000000 [ 540.676453][T19893] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 540.676465][T19893] R13: 00007f7c04a46ee0 R14: 00007f7c04a46ea0 R15: 0000200000000200 [ 540.676485][T19893] [ 540.680262][T19897] loop1: detected capacity change from 0 to 512 [ 540.722961][T19887] loop2: detected capacity change from 0 to 1024 [ 540.789650][T19897] EXT4-fs: Ignoring removed i_version option [ 540.835359][T19887] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 540.859391][T19897] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 540.860167][T19897] EXT4-fs error (device loop1): __ext4_fill_super:5590: inode #2: comm syz.1.4284: invalid fast symlink length 4227924007 [ 540.876636][T19897] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 540.924449][T19907] loop7: detected capacity change from 0 to 128 [ 540.929130][T19897] EXT4-fs (loop1): get root inode failed [ 540.943155][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 540.943174][ C0] EXT4-fs (loop1): initial error at time 2000000195: __ext4_fill_super:5590: inode 2 [ 540.943200][ C0] EXT4-fs (loop1): last error at time 2000000195: __ext4_fill_super:5590: inode 2 [ 540.971586][T19907] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 540.975978][T19897] EXT4-fs (loop1): mount failed [ 541.000731][T19907] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 541.047788][T19912] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4290'. [ 541.081836][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4292'. [ 541.082665][T19887] loop2: detected capacity change from 0 to 128 [ 541.110725][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4292'. [ 541.110744][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4292'. [ 541.136322][ T3653] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 541.150364][T19887] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 541.183528][T19887] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.265271][T19921] loop9: detected capacity change from 0 to 4096 [ 541.303310][T12112] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 541.320641][T19933] netlink: 'syz.7.4299': attribute type 4 has an invalid length. [ 541.349644][T19921] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.368823][T19933] netlink: 'syz.7.4299': attribute type 4 has an invalid length. [ 541.380303][T19933] netlink: 'syz.7.4299': attribute type 4 has an invalid length. [ 542.353256][T18845] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.409519][T19955] __nla_validate_parse: 1 callbacks suppressed [ 542.409533][T19955] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4300'. [ 542.762363][T19976] loop1: detected capacity change from 0 to 4096 [ 542.792008][T19979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4312'. [ 542.867234][T19976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.947243][T14657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.110304][T20011] 8021q: VLANs not supported on gre0 [ 543.258768][T20018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.353412][T17095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.530589][T20070] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4338'. [ 544.630405][T20087] xt_hashlimit: size too large, truncated to 1048576 [ 544.643936][T20087] xt_hashlimit: max too large, truncated to 1048576 [ 544.694100][T20089] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4344'. [ 544.718771][T20091] set_capacity_and_notify: 4 callbacks suppressed [ 544.718785][T20091] loop9: detected capacity change from 0 to 512 [ 544.753674][T20091] EXT4-fs: inline encryption not supported [ 544.766611][T20093] loop6: detected capacity change from 0 to 512 [ 544.779611][T20091] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 544.788729][T20093] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 544.805872][T20091] System zones: 0-2, 18-18, 34-35 [ 544.816415][T20091] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.829908][T20093] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 544.850194][T20091] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 544.862133][ T28] audit: type=1400 audit(2000000199.118:3113): avc: denied { ioctl } for pid=20092 comm="syz.6.4345" path="socket:[57251]" dev="sockfs" ino=57251 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 544.891124][T20093] team_slave_1: Caught tx_queue_len zero misconfig [ 544.935330][T18845] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.984021][T20098] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4348'. [ 545.582080][T20108] tipc: Started in network mode [ 545.587032][T20108] tipc: Node identity 12f5afd9ea75, cluster identity 4711 [ 545.594327][T20108] tipc: Enabled bearer , priority 0 [ 545.605330][T20107] tipc: Disabling bearer [ 545.647274][T20114] loop2: detected capacity change from 0 to 512 [ 545.718090][T20115] lo speed is unknown, defaulting to 1000 [ 545.761412][T20122] hub 8-0:1.0: USB hub found [ 545.766389][T20122] hub 8-0:1.0: 8 ports detected [ 545.802254][T20114] EXT4-fs error (device loop2): ext4_quota_enable:7215: comm syz.2.4354: Bad quota inum: 1, type: 0 [ 545.802357][T20114] fserror_report: 6 callbacks suppressed [ 545.802378][T20114] loop2: lost filesystem error report for type 5 error -117 [ 545.802603][T20114] EXT4-fs warning (device loop2): ext4_enable_quotas:7263: Failed to enable quota tracking (type=0, err=-117, ino=1). Please run e2fsck to fix. [ 545.802998][T20114] EXT4-fs (loop2): mount failed [ 546.175425][T20135] loop6: detected capacity change from 0 to 256 [ 546.211773][T20135] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 546.428580][T20151] loop7: detected capacity change from 0 to 1756 [ 546.532497][T20155] lo speed is unknown, defaulting to 1000 [ 546.534427][T20157] loop1: detected capacity change from 0 to 128 [ 546.546528][T20145] loop2: detected capacity change from 0 to 8192 [ 546.550195][T20159] loop7: detected capacity change from 0 to 256 [ 546.611476][T20159] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4368'. [ 546.704970][T20168] IPVS: set_ctl: invalid protocol: 22 100.1.1.1:20000 [ 546.911634][T20178] loop6: detected capacity change from 0 to 2048 [ 546.955575][T20178] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 547.009318][T20178] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.331535][T20173] loop7: detected capacity change from 0 to 512 [ 547.443404][T20173] EXT4-fs: Ignoring removed i_version option [ 547.559660][T20173] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 547.597688][T20186] EXT4-fs: Ignoring removed i_version option [ 547.658108][T20173] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 547.685161][T20186] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 547.700620][T20173] EXT4-fs (loop7): group descriptors corrupted! [ 547.750970][T17095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.760910][T20186] EXT4-fs error (device loop2): __ext4_fill_super:5590: inode #2: comm syz.2.4374: invalid fast symlink length 4227924007 [ 547.774644][T20186] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 547.781649][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 547.797186][ C1] EXT4-fs (loop2): initial error at time 2000000202: __ext4_fill_super:5590: inode 2 [ 547.806706][ C1] EXT4-fs (loop2): last error at time 2000000202: __ext4_fill_super:5590: inode 2 [ 547.817867][T20186] EXT4-fs (loop2): get root inode failed [ 547.836528][T20186] EXT4-fs (loop2): mount failed [ 547.883972][T20191] netlink: 'syz.2.4376': attribute type 10 has an invalid length. [ 547.964250][T20200] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 548.070689][T20202] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4380'. [ 548.121519][ T28] audit: type=1400 audit(2000000202.551:3114): avc: denied { read } for pid=20208 comm="syz.7.4382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 548.158277][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4384'. [ 548.189983][T20214] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4384'. [ 548.223221][T20218] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4385'. [ 548.256402][T20226] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4387'. [ 548.258162][T20225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4388'. [ 548.276620][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4387'. [ 548.311301][ T28] audit: type=1400 audit(2000000202.750:3115): avc: denied { create } for pid=20217 comm="syz.9.4385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 548.594928][T20239] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4392'. [ 548.624812][T20234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.699019][T12112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.236083][T20272] EXT4-fs: Ignoring removed mblk_io_submit option [ 549.405318][ T28] audit: type=1326 audit(2000000203.800:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20268 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2bcac819 code=0x7ffc0000 [ 549.580692][ T28] audit: type=1326 audit(2000000203.800:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20268 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2bcac819 code=0x7ffc0000 [ 549.678774][ T28] audit: type=1326 audit(2000000203.800:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20268 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c2bcac819 code=0x7ffc0000 [ 549.680649][T20272] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 549.702207][ T28] audit: type=1326 audit(2000000203.800:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20268 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2bcac819 code=0x7ffc0000 [ 549.702233][ T28] audit: type=1326 audit(2000000203.800:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20268 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2bcac819 code=0x7ffc0000 [ 549.702252][ T28] audit: type=1326 audit(2000000203.800:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20268 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2c2bcac819 code=0x7ffc0000 [ 549.795160][T20272] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8043c11c, mo2=0002] [ 549.803466][ T28] audit: type=1326 audit(2000000203.800:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20268 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2bcac819 code=0x7ffc0000 [ 549.827868][T20272] EXT4-fs error (device loop6): ext4_iget_extra_inode:5042: inode #15: comm syz.6.4400: corrupted in-inode xattr: e_value size too large [ 549.841914][T20272] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 549.842006][ T28] audit: type=1326 audit(2000000203.800:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20268 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2bcac819 code=0x7ffc0000 [ 549.851147][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 549.851189][ C0] EXT4-fs (loop6): initial error at time 2000000204: ext4_iget_extra_inode:5042: inode 15 [ 549.851223][ C0] EXT4-fs (loop6): last error at time 2000000204: ext4_iget_extra_inode:5042: inode 15 [ 549.858547][T20272] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4400: couldn't read orphan inode 15 (err -117) [ 549.875352][ T28] audit: type=1326 audit(2000000203.800:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20268 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2c2bcac819 code=0x7ffc0000 [ 549.939186][ T28] audit: type=1326 audit(2000000204.000:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20268 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2bcac819 code=0x7ffc0000 [ 549.972638][T20272] loop6: lost filesystem error report for type 5 error -117 [ 549.973231][T20272] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.013361][ T28] audit: type=1326 audit(2000000204.000:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20268 comm="syz.9.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2bcac819 code=0x7ffc0000 [ 550.328191][T20287] ================================================================== [ 550.336297][T20287] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 550.344012][T20287] [ 550.346326][T20287] write to 0xffff888103a3aa28 of 8 bytes by task 20285 on cpu 0: [ 550.354028][T20287] mas_wr_store_entry+0x3405/0x5ad0 [ 550.359218][T20287] mas_store_prealloc+0x43e/0x690 [ 550.364228][T20287] commit_merge+0x6a1/0x720 [ 550.368720][T20287] vma_expand+0x301/0x460 [ 550.373039][T20287] vma_merge_new_range+0x29c/0x320 [ 550.378156][T20287] mmap_region+0x1073/0x2110 [ 550.382736][T20287] do_mmap+0x9b2/0xbd0 [ 550.386793][T20287] vm_mmap_pgoff+0x183/0x2d0 [ 550.391371][T20287] ksys_mmap_pgoff+0xc1/0x310 [ 550.396044][T20287] x64_sys_call+0x14df/0x3020 [ 550.400711][T20287] do_syscall_64+0x12c/0x3b0 [ 550.405286][T20287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.411164][T20287] [ 550.413470][T20287] read to 0xffff888103a3aa28 of 8 bytes by task 20287 on cpu 1: [ 550.421080][T20287] mtree_range_walk+0x203/0x490 [ 550.425928][T20287] mas_walk+0x1cc/0x370 [ 550.430069][T20287] lock_vma_under_rcu+0xc9/0x210 [ 550.434997][T20287] do_user_addr_fault+0x232/0x1050 [ 550.440097][T20287] exc_page_fault+0x62/0xa0 [ 550.444589][T20287] asm_exc_page_fault+0x26/0x30 [ 550.449429][T20287] [ 550.451737][T20287] value changed: 0x00007f469be26fff -> 0x00007f469be05fff [ 550.458830][T20287] [ 550.461135][T20287] Reported by Kernel Concurrency Sanitizer on: [ 550.467270][T20287] CPU: 1 UID: 0 PID: 20287 Comm: syz.2.4403 Tainted: G W syzkaller #0 PREEMPT(full) [ 550.478188][T20287] Tainted: [W]=WARN [ 550.481973][T20287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 550.492009][T20287] ================================================================== [ 551.075857][T17095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.