last executing test programs: 3m11.615084821s ago: executing program 32 (id=82): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f00000025c0)={0x6c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xc}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x6c}}, 0x48040) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x8101, 0x0, 0x0, 0x0, 0x0, 0x14004051}}, {{&(0x7f00000000c0)=@file={0x1, './cgroup\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x73bfe3da, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x10000, 0x100, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000008000000073114200000000008510000002000000850000004900000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000010401040000000000000000000b0007050001000100000008000540000000010a0002000000083e30"], 0x38}, 0x1, 0x0, 0x0, 0x8014}, 0x20000000) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f0000000200)=[0x0]) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x761641, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/139, 0x8b}, {&(0x7f0000002680)=""/191, 0xbf}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/238, 0xee}], 0x7}, 0x4}], 0x1, 0x42, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xec}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) flock(r6, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 3m7.721171678s ago: executing program 33 (id=123): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ptrace$pokeuser(0x6, 0x0, 0x388, 0x7a09280d) ptrace$pokeuser(0x6, 0x0, 0x358, 0xafe8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000121000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x1, 0x570, &(0x7f0000000680)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={0xffffffffffffffff, 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, 0x0, 0x0) 2m58.265806829s ago: executing program 34 (id=269): socket(0x6, 0x4, 0x4) r0 = epoll_create1(0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='-bl'], 0x7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2, r1}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r1}, 0x38) 2m56.590979826s ago: executing program 35 (id=292): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x20000002}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f00000001c0)={0xa0002008}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$FS_IOC_SETVERSION(r8, 0x40087602, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f00000000c0)={0x10}) 2m52.898026742s ago: executing program 36 (id=332): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0xf8000000, 0x6, 0x400]}, &(0x7f0000000000)=0x44) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket(0x28, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @mcast1, 0xa6}, 0x1c) 2m50.34450895s ago: executing program 37 (id=350): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r3, 0x0, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x6f6) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r10, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) (fail_nth: 2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0) 2m41.264062809s ago: executing program 38 (id=468): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xb0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x6c, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xf8}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r0, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r0}]}, 0x28}}, 0x20040000) 2m33.234092997s ago: executing program 39 (id=548): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x4, 0x0, 0x8}]}) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000000)=0xffffffff, 0x4) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x3}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000700)=ANY=[], 0x8) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x80400251}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x8006, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={r0, 0x2, 0x8000, 0x7f}) 2m27.969870543s ago: executing program 40 (id=597): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x2800, 0x0, 0x20, 0x9, 0xc, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) mlockall(0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000400000008000000050000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="97d6d700000002"], 0x48) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x7ff, &(0x7f0000006680)) syz_read_part_table(0x5cb, &(0x7f0000000000)="$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") 2m27.5139328s ago: executing program 41 (id=599): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x92, '\x00', 0x0, r0, 0x1, 0x1, 0x0, 0x100000000000000}, 0x50) 2m26.588434294s ago: executing program 42 (id=606): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x0, @perf_config_ext={0x8001, 0xf}, 0x0, 0x2e, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pause() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$ARCH_SET_CPUID(0x1e, r4, 0x1, 0x1012) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x6, 0xd, "85de"}]}}}]}, 0x54}}, 0x8080) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x2, 0xb, 0x6, 0x8, 0x0, 0x4, 0x20000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x108c, 0xbb97, 0x44ef, 0x2, 0x1, 0x4, 0x9, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8048, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffff7fffffffffff, r8, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) fsync(r1) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r10, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) pwritev(r9, 0x0, 0x0, 0x1, 0x1f5) pwritev(r7, &(0x7f0000000700)=[{&(0x7f0000000140)="b9d6b7845fcca0dcc1bfde9f58dafa4df6b013074d34134157574ba8eb6d9e60d2ac46aa5156020b87912da8aa163c0ba57617eaf085a5fec989965c3e3ddccb84dadfa6a545dc9287eb1bda57bb20ee43ebdc547a68f36bf6fc", 0x5a}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f00000001c0)="10e9cfcb1e5b8441a935b743bbb559a3632e5dfda7fb5118023309f3b8af06f00a1b4e07", 0x24}, {&(0x7f0000000200)="f03657f04b457763031b82a365625d29ed5f41098e64b9f2d3381aeb4824448e5a336b2e721a6a8be3fb9054151bd3c71094d9699ac4327fd7323b6cc3f34e65d5d0d96fc2ce1ccebe80c2c6c650e9106fa8d86f9a31ff97900d34f47984d9fd009fa359777b29085d31bb33fbbd49e7ba4a6d1a405f045ae0c97eb67fbe60df2e201764ac2cce3b634ded3c43598c88ae1090e402dddebf6427a4257f66aa54b9bec02f413c3638984f363d1fa323e0207e", 0xb2}, {&(0x7f00000002c0)="536de556f17b67b0071527273da87716ae0f6bc863e7cc1490592274c767d756ec1cde1c5915390772f348e924acb4190baf6b5c27436ec0446d0c1ecfdb52dd7b670fb72c438c929329a87d135d4a47bc91e11acd6c6e516a05b1fd85aea632c274cc50145bb026274d8d7be71eb81a7fb78bced9b7fd406fc19a410d6a99e4c546f482f0dda46a883a7750", 0x8c}, {&(0x7f0000000380)="15b7cca640fe2f3d887587be1eae71d2f0d4d3969ef833b8fdc0b06b90875c015c3fb959ba8af2400754606302b66ed13a99fe3ac63f69c856c5ddefa4021c6fc5ab7a11c4e6779b16607f233cac06e437b535f973e184b984de1557bccb1babb37af89a8b21a7df77341b2e71f12d2e1947409220f97280c82b40e536c539ac2bb9bfa503917d4f4ddc10e23f2d2707ecb706ea1936b87a77dbb0cfd4ddfc", 0x9f}, {&(0x7f0000000440)="ad4eb78daed270e77e62469fd4ba40ed1a390d6caa9bb05fc0f7b17c6c74b08177c6d4ed5c17df5dd341302991aac5cb7b78d9857df30d34ede4adee2499ece97b6f30359441ab65ba79a0dad21d83c39edc9cb7a8831c9bf4024376c5ad559a1fe957b14edb4c65da5379842b9c58c5bebcb15b4d36106a2778f4759ebc176838d6b2219b981b5be99dcad190ea6516328c91d5763b644be3ba966ee4e1eba524e13556937ee32a8dee847d6bb733f72a5143ff523a8f65c555f4151bc9b25383f47935a74b0a6dee84ff943bb6ddb21189a7c016216450311ccd154aa5a9434f9ec4db2d6d3d1112fa2fa4e07a0b3013a06f", 0xf3}, {&(0x7f0000000540)="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", 0xfd}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="b6", 0x1}], 0xa, 0xfffff000, 0x0) 2m23.873075382s ago: executing program 43 (id=494): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0xb40}}, 0x30009000) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x2000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7ffffcb9}]}) timerfd_settime(0xffffffffffffffff, 0x6, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2m18.020681793s ago: executing program 44 (id=663): close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0xfffe, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x321}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000070000007000fcdbdf2500001800", @ANYRES32=0x0, @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x68810}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010426bd70000000000100000000", @ANYRES32=0x0, @ANYBLOB="7b150000000000001c0019800b00010067656e65766500000c000280060005004e220000"], 0x3c}}, 0x40800) fcntl$setstatus(r0, 0x4, 0x6c00) write$UHID_INPUT(r0, &(0x7f00000011c0)={0x8, {"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", 0x1000}}, 0x1006) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x31, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TIOCSLCKTRMIOS(r7, 0x5457, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000002060300000000c756720e51ac02a557a68131591b3fa9daadf05fa1c784a1ed7345cf00000000000000000700000805060000010000000500010006000000050005000200000009"], 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x9}, 0x8) sendmmsg$inet6(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000640)='b', 0x1}], 0x1}}], 0x2, 0x4048c80) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r9, 0x107, 0x13, 0x0, &(0x7f0000000380)) write$UHID_INPUT(r8, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) process_vm_readv(0x0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x65, 0x0, 0x3, 0x0, 0x0, 0x5, 0x40000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x9, 0x3}, 0x14, 0x0, 0x11004, 0x0, 0x4, 0x6, 0x0, 0x0, 0xbd4, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, r0, 0xb) 2m10.787608244s ago: executing program 8 (id=767): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) 2m10.785953054s ago: executing program 8 (id=768): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="3d57f1018a2d7cb4a85ab0884d1420af5b90bb8021be2ca120d533555fd0916976dfa4e700469864ac76c02673629d3dcfba24236a015a64549302ba67a06e77f650302f7488810b91cea686aa023833cdf3115a8f65c5915afec967558e26b60f789bd5d114b064b225641a0a8234560eb48d11df3b16405500dff59d9300372c007d3bb983e45d93", 0x89}, {0x0}], 0x4e) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f0000000000)=0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0xfffffffffffffffe) 2m10.756333796s ago: executing program 8 (id=769): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000faffffff00000000030000008500000036000000670000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001c40)={r0, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8f7}}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000b00)=ANY=[@ANYBLOB="5b37182347bcffffffffff83d66d369d008000143afffc000000000000000000000000000001ff02000000000000000000000000000187009078fe8000000000000000000000000000aa"], 0x0) 2m10.731258688s ago: executing program 8 (id=770): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), r1) r3 = socket(0x200000000000011, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = getpgrp(0xffffffffffffffff) syz_open_procfs(r5, &(0x7f0000000ac0)='cgroup\x00') setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0xfffffffd, 0x10000, 0xfffffffd, 0x0, 0x0, 0xdfb}, 0x1c) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e394456", @ANYRES16, @ANYRES16], 0xef, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) syz_clone3(&(0x7f00000009c0)={0x840100, &(0x7f00000000c0), &(0x7f00000003c0), &(0x7f0000000400)=0x0, {0x3f}, &(0x7f0000000440)=""/123, 0x7b, &(0x7f00000008c0)=""/144, &(0x7f0000000980)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x7}, 0x58) accept4$inet(r3, 0x0, &(0x7f0000000a80), 0x800) syz_open_procfs(r7, &(0x7f0000000a40)='fdinfo/3\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x4, 0x7fe2, 0x1, 0x40, 0xffffffffffffffff, 0x8}, 0x48) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0xfffffffffffffdaa) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002c000000021011907800000000000000004e214e23007c7b23e61b18907804000000010100000a4300"], 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf250700000008000400ac1414bb14000300fc000000000000000000000000000000140002"], 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004004) 2m10.629775344s ago: executing program 8 (id=771): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c894) r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x4, 0x0, 0x7ffc0002}]}) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x8188ca, &(0x7f0000000080)={[{@nodots}, {@nodots}, {@nodots}, {@fat=@dos1xfloppy}, {@nodots}, {@dots}, {@nodots}]}, 0x5, 0x11f8, &(0x7f0000002440)="$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") prctl$PR_CAPBSET_DROP(0x18, 0x1000005) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a, 0x0, 0x0, 0x1, [0x0, 0x1ff]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x100004, 0x9, 0x4, 0x1, r1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) getgroups(0x0, 0x0) setgroups(0x0, 0x0) 2m10.471299052s ago: executing program 8 (id=776): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x37, 0x37, 0x62, 0x66, 0x63, 0x31, 0x30, 0x35, 0x32, 0x38, 0x38, 0x62, 0x37, 0x65, 0x63, 0x64]}, &(0x7f0000000080)={0x0, "9b02fca023714fa86cf992e3633590de91fa3959438efc9a144a7cc2aae8c36834a5558696eee3595f88764f0c16736f5eb384866a439f7faf3064ad48ee5942", 0x1f}, 0x48, 0xfffffffffffffffe) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRES8], 0x1, 0x36e, &(0x7f0000000c00)="$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") prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x113) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000440)=[{0x1, 0x2, 0x3, 0xc}, {0x5, 0x5, 0xf, 0x1}], 0x10, 0xe}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x5}]}, 0x10) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r6, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c00010029bd700000dcdf2507000000", @ANYRES32=r5, @ANYBLOB="80007f0a0a0002000180c20000030000060005"], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x4040004) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r7, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r3}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}]) r8 = syz_clone(0x80020100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(r8, &(0x7f00000004c0)='auxv\x00') r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 2m10.427934935s ago: executing program 45 (id=776): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x37, 0x37, 0x62, 0x66, 0x63, 0x31, 0x30, 0x35, 0x32, 0x38, 0x38, 0x62, 0x37, 0x65, 0x63, 0x64]}, &(0x7f0000000080)={0x0, "9b02fca023714fa86cf992e3633590de91fa3959438efc9a144a7cc2aae8c36834a5558696eee3595f88764f0c16736f5eb384866a439f7faf3064ad48ee5942", 0x1f}, 0x48, 0xfffffffffffffffe) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRES8], 0x1, 0x36e, &(0x7f0000000c00)="$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") prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x113) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000440)=[{0x1, 0x2, 0x3, 0xc}, {0x5, 0x5, 0xf, 0x1}], 0x10, 0xe}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x5}]}, 0x10) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r6, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c00010029bd700000dcdf2507000000", @ANYRES32=r5, @ANYBLOB="80007f0a0a0002000180c20000030000060005"], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x4040004) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r7, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r3}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}]) r8 = syz_clone(0x80020100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(r8, &(0x7f00000004c0)='auxv\x00') r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 1m36.164008691s ago: executing program 6 (id=1311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x3a, 0xffffffffffffffd0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x27) 1m36.060328077s ago: executing program 6 (id=1313): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x20000002}) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0xa0002008}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000000c0)={0x10, 0x300000000000000}) 1m36.01417192s ago: executing program 6 (id=1317): r0 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) write$binfmt_misc(r2, &(0x7f0000000480)="dc", 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x130, r4, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf5}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffb}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x40}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5e}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xb483}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}]}, @NL80211_ATTR_REG_RULES={0x70, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) (async) splice(r1, 0x0, r0, &(0x7f0000000140)=0x8008, 0x4, 0x0) 1m35.894222347s ago: executing program 6 (id=1321): io_uring_setup(0x6750, &(0x7f0000000340)={0x0, 0xa04e, 0x1, 0x40, 0x2d}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0, 0xa8}}, 0x10000000) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e22, 0x2, @private0, 0x5}}}, 0x84) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x4, 0x8, 0x0, 0x78}, 0x10) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c000280"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000100), 0x2, 0x46b, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0xafe8) setfsgid(0xee00) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000100)={&(0x7f0000000040)=@canfd={{0x4, 0x1, 0x1}, 0x1c, 0x3, 0x0, 0x0, "7da2c7b49b869c87ea9f33909b17bddca28c561739ca8f876ee9a236afb6a089503f2cbcbe5459b5e55466ee1283801bdf8f36f318143a09eaccffc3225f8cc0"}, 0x48}, 0x1, 0x0, 0x0, 0x20000045}, 0x8000) 1m35.66831888s ago: executing program 6 (id=1325): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000800000000000000040000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5121b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a0100000000000000e28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c251112e2a59ea0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe91bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6c597eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e64103602000000db47d7990d5a007faccb2f86660079f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab2127cd472a2e4a7f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d8418351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)='GE', 0x2}], 0x1}}], 0x2, 0x28048005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}, 0x0) unshare(0x2c020400) close_range(r0, 0xffffffffffffffff, 0x0) 1m35.32129696s ago: executing program 46 (id=1328): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) pipe2(&(0x7f0000000140)={0x0, 0x0}, 0x0) unshare(0x2c020400) close_range(r0, 0xffffffffffffffff, 0x0) 1m16.472147038s ago: executing program 4 (id=1671): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 1m16.43911842s ago: executing program 4 (id=1673): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x3, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x616d, 0xa, 0x0, 0x0, 0x1, 0x1, 0xb, 0x0, 0x7f, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0), 0x87, 0x3, 0x0, 0x0, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'pim6reg1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7, 0x7}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, r4, 0x25, 0x2, @val=@perf_event={0x800}}, 0x18) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r5, 0x1c, 0x0, @val=@perf_event={0x8}}, 0x18) r6 = socket(0x10, 0x3, 0xffffffba) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x15, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xba, 0x0, &(0x7f0000000300)="b80b914b3f677210a5befd00000500989db20f0662b801fef89afbb675cb01432dd8cd95924b7b096543351f34a033c11b61beac0ec459e7f82c630d786eef8a8cb885ac1cf5ea467cf9e911d7f6ee40b13b462398f753f98131af5b58e36eaede9b9a20007c50712f0136efcfbd0fa24e06b4ee4bf432015d89fabfc4fa000000000000000000007e822ac645e8aae143dcf8970acff0fe89688eeccea0d77cd5975ce824733e52081f06d998d94af84f000000000000000000", 0x0, 0x10012002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 1m16.216981973s ago: executing program 4 (id=1678): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_DOWN(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001380), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000001500), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd2c, 0x7ff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000000}, 0x40448d0) 1m16.09534337s ago: executing program 4 (id=1680): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0xa}}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0x3, 0x43d, &(0x7f0000000580)="$eJzs3MtvG8UfAPDvrp3219cvAZVHH0CgICoeSZOW0gMXEEgcQEKCQzmGJK1C3QYlQaJVBIFDOaJK3BFHJP4CTnBBwAmJK9xRpQrl0sLJaO3d2nHsNDFOXPDnI607szvWzNe7Y8/sdBPAwBrNXpKI/RHxa0QM17NrC4zW/7m1ujz95+rydBLV6pt/JLVyN1eXp4uixfv2FZlyPXGkTb2Ll69cmKpUZhfy/PjSxffGFy9feXbu4tT52fOzlybPnDl1cuL505PP9STOLK6bhz+cP3ro1bevvT599to7P36dFPG3xNEjoxsdfKJa7XF1/XWgKZ2U+9gQtqSUd9OhWv8fjlI0Tt5wvPJJXxsHbKtqtVq9v/PhlSrwH5ZEv1sA9EfxQ5/Nf4tth4Yed4UbL9YnQFnct/KtfqQcaV5mqGV+20ujEXF25a8vsi225z4EAMAa32bjn2fajf/SaL4v9P98DWUkIu6JiHsj4nREHIyI+yJqZR+IiAe3WH/rIsn68U96vavANikb/72Qr21lWxqN+HMjpTx3oBb/UHJurjJ7Iv9MjsfQ7iw/sUEd3738y2edjjWP/7Ita0MxFmy20pSemVqa6jrgFjc+jjhcbsTfGP8mt1cCkog4FBGHu6xj7qmvjnY6ttn42+rBOlP1y4gn6+d/JVriLyQbr0+O/y8qsyfGi6tivZ9+vvpGp/r/Ufw9kJ3/vdH+/OdGkub12sWt13H1t087zmnuHH96vbx77Xuy639X8taafR9MLS0tTETsSl6rN7qxv7Qw2VJuslE+i//4sXbxp7XvuOKTOBIR2UX8UEQ8HBGP5G1/NCIei4hjG8T/w0uPv9t9/Nsri39mS+e/kdgVrXvaJ0oXvv9mTaUjW4k/O/+naqnj+Z7NfP9tpl3dXc0AAADw75NGxP5I0rHb6TQdG6v/H/6DsTetzC8uPX1u/v1LM/VnBEZiKC3udA033Q+dyKf1RX6yJX8yv2/8eWlPLT82PV+Z6XfwMOD2dej/md9L/W4dsO26W0dLe94OYOd5XhMGl/4Pg0v/h8HVpv/v6Uc7gJ3X7vf/oz60A9h55abX/G+CAQPC/B8Gl/4Pg0v/h4G0uCfu/JC8hMS6RKR3RTMktinR728mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3vg7AAD//yMi44c=") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f0000000200)='?\bts', 0x4) fsetxattr$security_evm(r3, &(0x7f0000000000), &(0x7f0000000100)=@v1={0x2, "030383fd5401"}, 0x7, 0x2) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 1m15.698897943s ago: executing program 4 (id=1686): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) r2 = timerfd_create(0x8, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) 1m14.672745092s ago: executing program 4 (id=1697): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000100)={[{@nogrpid}, {@oldalloc}, {@noquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@debug}]}, 0x7, 0x4fc, &(0x7f0000001500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) r1 = socket(0x1, 0x803, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x240000}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x12, 0xf9, 0x2, 0x3, 0x0, 0x0, 0xa088c, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xfff, 0x5}, 0x80, 0x0, 0x4815, 0x8, 0x3, 0x1000, 0x7, 0x0, 0x2, 0x0, 0x4750}, r2, 0x3, r0, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x2e, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=@setlink={0x30, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50601}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x48000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x2, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000080), &(0x7f0000000340)=r7}, 0x20) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r7, r9, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000380)={@local, @remote, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x2f}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) 1m14.618315586s ago: executing program 47 (id=1697): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000100)={[{@nogrpid}, {@oldalloc}, {@noquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@debug}]}, 0x7, 0x4fc, &(0x7f0000001500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) r1 = socket(0x1, 0x803, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x240000}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x12, 0xf9, 0x2, 0x3, 0x0, 0x0, 0xa088c, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xfff, 0x5}, 0x80, 0x0, 0x4815, 0x8, 0x3, 0x1000, 0x7, 0x0, 0x2, 0x0, 0x4750}, r2, 0x3, r0, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x2e, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=@setlink={0x30, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50601}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x48000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x2, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000080), &(0x7f0000000340)=r7}, 0x20) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r7, r9, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000380)={@local, @remote, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x2f}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) 57.071396808s ago: executing program 7 (id=2031): listen(0xffffffffffffffff, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}}, 0x0, 0x2a}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b82, 0x0, @perf_bp={0x0, 0x1}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb56}, 0x48) 56.779810865s ago: executing program 7 (id=2034): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITE_FIXED={0x5, 0x8, 0x0, @fd_index=0x8, 0x10001, 0xffffffffffffffff, 0x4, 0x7, 0x0, {0x3, r3}}) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x589, &(0x7f0000000880)="$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") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000540)=ANY=[], 0x700, 0x1) 56.493770601s ago: executing program 7 (id=2041): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) (fail_nth: 1) 55.921972335s ago: executing program 7 (id=2049): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@grpquota}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300"], 0x50) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/333], 0x13c}}, 0x0) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) read$msr(r0, &(0x7f0000000400)=""/11, 0xb) 55.635556642s ago: executing program 7 (id=2053): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) socket$kcm(0x10, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000580), 0x1008801, &(0x7f0000000a00)=ANY=[@ANYBLOB='huge=!dvisu,\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x16c4, &(0x7f0000000380)={0x0, 0x5121, 0x80, 0x3, 0x258}, &(0x7f0000000040), &(0x7f0000000600)) r0 = socket(0x10, 0x803, 0x0) unshare(0x22020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="81101000000095000000000000000000528cd3fc00c850c0f05516c1222167531258a94a5fe8d4df5c0feeacfc7638e868ae26470e50cd20a0feabdf16ff917674fb098ce041b7de9a3c32126cb69629838aa6eca8dc85990f626351b10e8ce84cf43a5abff3dd5d4cb60a9f9732d666cdf86a0821b04d0f85a4ffe108cd1b2200"/141], &(0x7f0000000280)='GPL\x00'}, 0x90) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) getpriority(0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x7b9, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x4}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = semget$private(0x0, 0x1, 0x301) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x8001, 0x1]) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) 54.692391766s ago: executing program 7 (id=2071): syz_usb_connect$cdc_ncm(0x6, 0x74, &(0x7f0000000700)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40ae, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) eventfd2(0x5, 0x1) io_submit(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x40010, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) read(r1, &(0x7f0000000300)=""/250, 0xfa) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xf00, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 54.691821297s ago: executing program 48 (id=2071): syz_usb_connect$cdc_ncm(0x6, 0x74, &(0x7f0000000700)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40ae, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) eventfd2(0x5, 0x1) io_submit(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x40010, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) read(r1, &(0x7f0000000300)=""/250, 0xfa) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xf00, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 45.713527019s ago: executing program 1 (id=2213): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xa, 0x6403f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x8, @mcast1, 0x79}}, 0x0, 0x0, 0x14, 0x0, "aa1cda12482ce936fe2707b31f549402157745ea281f88ea79321f8931e69fff9996d6cc77adb40b96e90df08b90b2a7f62e807928e17a869290e49ecf42b43e5dfc7650c208e65bbb7e7dd058ed1d57"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xaf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = eventfd2(0x800, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x8, 0xb, r3, 0x0, 0x0, 0x1397, 0x0, 0x1, r5}]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000800180001801400020073797a5f74756e00000000000000000018000280140003800c0001800800010000000000040001"], 0x44}}, 0x4000080) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xa83}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x28048010}, 0x20000800) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e400000063f799e31cf7e5e8050c768d56ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd74c4c2b19ebef230a335d6857bacfcf3b6e9633bd997ab7fcf08f6700"}, 0xd8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 45.52533973s ago: executing program 1 (id=2215): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x7) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x4ffffff) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x5) r5 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(0x0, r5, 0x15, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x100, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), r7) 45.414399317s ago: executing program 1 (id=2217): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) add_key$keyring(&(0x7f0000000300), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x100000000000000, 0xfffffffffffffffe) 45.330432412s ago: executing program 1 (id=2219): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="050000000000000073114300000000008510000002000000850000003600000095000000000000009500a505000000002f248f1d388d58348f0c0856e5092374c9c30f97f1f034930db1c3958d21cefed7c77b73e8fe49fe1e0297c2d6b4ff56bfc2fc1e0708cf84c3f20eecff10988dc8ba0092e0a412eddbbe5cbc3738b7"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1, 0xfffffff6}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$eJzs3U9rK1UUAPAz+TOJukgWrkRwQBeuHu+9rZsUeQ/ErnxkoS60+FqQJggtFKri2JVbNy78DILgB3HjNxDcCu6sUBiZyaRJ2pg2palof79Fe3vnnLlnboZ2WujJx6+O959nsXfy5a/R7SbRGMQgTpPoRyOmvo4Fg28DAPgvOy2K+KOYWCcviYju5soCADboej//W7PhT3dSFgCwQc/e/+Ddre3tJ+9lWTeejr85Gpa/2ZefJ8e39uLTGMVuPIxenEVUDwrtqJ4WyuHToijyVlbqxxvj/GhYZo4/+rk+/9bv9R8LSv3q4/nTRpX/zvaTR9nEXH5e1vFivf6gXP9x9OLl8+SF/MdL8mOYxpuvz9X/IHrxyyfxWYzieVXELP+rR1n2dvHdn198WJZX5if50bBTxc0UzTt8WQAAAAAAAAAAAAAAAAAAAAAA+J97UPfO6UTVv6ecqvvvNM/KL9qRTfUX+/NM8qetfRb6AxVFkVftcib9dR5mWVbUgbP8VrzSmm8sCAAAAAAAAAAAAAAAAAAAAPfX4fHn+zuj0e7BrQym3QBaEfHXs4ibnmcwN/NarA7u1GvujEaNergY05qfieY0JolYWUZ5Ebe0LVcNXrhUcz344cd1T9i9Oqa9fK3D4+ZNX6/84sz07trfSZbvYSemM9160e/TiFlMGtdcPf2nQ0Wsc/ulSw/11t6N9KVqkK+IiWRVYW/9Ntm5eia5eBVptatL09v1YC79wr1xrfs5upP0y98rEt06AAAAAAAAAAAAAAAAAABgo2b//bvk4MnK1EbR2VhZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCnZu//v8Ygj4h2fYIrgtM4OPyXLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB74O8AAAD//0aWVl0=") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r1, &(0x7f0000000d40)=""/34, 0x22) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x9, 0x34f, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) ftruncate(r2, 0xc17a) sync_file_range(r2, 0x2, 0x808, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioperm(0x2, 0x7ff, 0x8) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x9, 0x6, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x10, 0x8000, 0xb, 0x5, {{0x1c, 0x4, 0x0, 0x13, 0x70, 0x68, 0x0, 0x4b, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2}, {[@timestamp_prespec={0x44, 0xc, 0xe3, 0x3, 0x3, [{@empty, 0x1}]}, @lsrr={0x83, 0x1f, 0x68, [@rand_addr=0x64010101, @broadcast, @loopback, @broadcast, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0x6, 0x1, 0x5, [{@empty, 0xaa3e}, {@private=0xa010101, 0xdd4}, {@empty, 0x9}]}, @lsrr={0x83, 0x7, 0x4d, [@multicast2]}, @end, @lsrr={0x83, 0x7, 0x3f, [@multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x767, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r4}, 0xc) io_submit(0x0, 0x0, 0x0) 44.969361003s ago: executing program 1 (id=2225): openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000080)={0x0, 0x86f7, 0x8, 0x10000003, 0xfffffffe}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x4796, 0xad0c, 0x0, 0x0, 0xffffffffffffff1b) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f00000003c0)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x79, 0x4, 0x0, 0xa, 0x0, 0x2, 0x20000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0x9}, 0x110010, 0x5, 0x9, 0x4, 0x9, 0x101, 0x8, 0x0, 0x7, 0x0, 0x8}, r4, 0xa, r3, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700", 0x3f}, 0x48, 0xfffffffffffffffe) r6 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x4e23, 0x6, @remote, 0x3}, 0x1c) sendmmsg$sock(r7, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="bc407e", 0x3}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, 0x0, 0x0) keyctl$search(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) 44.619176573s ago: executing program 1 (id=2233): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) io_setup(0x2, &(0x7f0000000000)=0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x52f, 0x7ff, 0x81}) (async) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) (async) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000002c0)={0x2018}) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) (async, rerun: 64) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) (async, rerun: 64) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r7, &(0x7f0000000a00)=[{0x0, 0x47}, {&(0x7f0000000080)="9d", 0x1}], 0x2, 0x9) (async) fchdir(r6) ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000400)=""/213) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) (async) read(r4, &(0x7f0000000240)=""/28, 0xffd2) 44.586671615s ago: executing program 49 (id=2233): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) io_setup(0x2, &(0x7f0000000000)=0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x52f, 0x7ff, 0x81}) (async) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) (async) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000002c0)={0x2018}) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) (async, rerun: 64) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) (async, rerun: 64) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r7, &(0x7f0000000a00)=[{0x0, 0x47}, {&(0x7f0000000080)="9d", 0x1}], 0x2, 0x9) (async) fchdir(r6) ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000400)=""/213) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) (async) read(r4, &(0x7f0000000240)=""/28, 0xffd2) 2.665744435s ago: executing program 2 (id=3041): setfsgid(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) (async) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) (async) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002000010027bd7000fcdbdf250a002040000000070000000014000200fe880000200000000000000000000401080018"], 0x38}, 0x1, 0x0, 0x0, 0x2404c804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x14) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.933943767s ago: executing program 3 (id=3053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000101010200000000010000000a000009300001802c00018014000300ff020000000000000000000000005c0c00000000000000000000000000000000000000010c0019800800010046d5"], 0x50}, 0x1, 0x0, 0x0, 0x406c450}, 0x8040000) (fail_nth: 1) 1.766868377s ago: executing program 3 (id=3054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000101010200000000010000000a000009300001802c00018014000300ff020000000000000000000000005c0c00000000000000000000000000000000000000010c0019800800010046d5"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x28040000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'pimreg1\x00', 0x1}) read(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x5e48, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x20, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00 \x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}, &(0x7f0000000800)=0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000a00)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@resuid={'resuid', 0x3d, r1}}, {@max_batch_time}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}], [{@obj_user={'obj_user', 0x3d, '*'}}, {@pcr={'pcr', 0x3d, 0xf}}, {@uid_lt={'uid<', r1}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000780)={0x73622a85, 0x10a, 0x2}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x6, 0x4}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000001880)={@broadcast, @broadcast, @void, {@llc_tr={0x11, {@llc={0x42, 0xff, "0f", "417148049d706f4cb7e1e1332110"}}}}}, 0x0) bind$bt_l2cap(r4, &(0x7f00000004c0)={0x1f, 0x4a70, @none, 0x0, 0x1}, 0xe) munlockall() setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x27, 0x0, "c4b730f7e967bc9f81178d3cf692b38891aa7fd2b9e407bb8387c5efa65fcebba9c968d53cb8e1ed9ff69c9484633529331a0bbb6c7a89e3843dc9d51872ba5100600dc2dfe8a3f45237faf96ec09b6a"}, 0xd8) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) write$UHID_CREATE(r6, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc00}}, 0x120) readv(r6, &(0x7f0000000240)=[{&(0x7f0000000280)=""/16, 0x10}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000100)=""/27, 0x1b}], 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.54503738s ago: executing program 2 (id=3062): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000040)=ANY=[], 0x4, 0x812, &(0x7f0000000680)="$eJzs3U9sHOXZAPBnnAQSIwXE9ykfikKYBD4pSGB212A+fxxgWY+dgfWutbupElUVjcBBVhygUNSSC0SVoK1aVT31SLly642qUlv10FaqVKkceukNiVMFUv+JqkJyNbO7yTrxvySOKeT3s+KZnXnmfZ+Z3cwzs/a+DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgksZMpVJNopl/7cTJdH2NmU57foP1w/Z+sWqyyhOr+o1Iin+xd2988rf+sv++tPpA8e1oHOo/OhR7i8neOH/bgTse+6/dY8PtN0joWh3ZYlwS8UaR1NnTy8uLL9+ARHbQd3921Zv8c6X4Ppe18m47n6/PZWnebafTU1OVh47Prtw+mzez7qluL5tPG52s3mt30mON+9Pq9PRkmk2cap9ozc3Um9lw4aMP1iqVqfSpiYWs3um2Ww89Fd3G8bzZzFtzZUyt8o0oYh4tXohP5720l9Xn0/TM0vLi5EhWyVqpFkHVtVbs6r9+Dt13x4evfvDXpcXiBbne/iaDF2atWq3VqlOPTD/yaKWyu1aprV5QuUxcjIixiCLihrxo+RzZ3hM4XIexQf2PZuTRihNxMtLLvvZExJ5oxEx0oh3zxbI/7rkiamBY///3oY9/v1G/o/V/WOXvurT6YJT1/3D/0eH16v8VWWz4teeqojf9+uX+fnbn42ycjuVYjsV4eTt7+Hh4NLaxzbHrbSFZ9WgusmhFHt1oRx7zUS+XpIMlaUzHVExFJZ6J4zEb3UhjNvJoRhbdOBXd6EVWvqIa0Yks6tGLdnQijWPRiPsjjWpMx3RMRhpZTMSpaMeJaMVcPBj1spUzsVQe98nLsjywL376/B8+fLuYvxhU3Wi3iou5IugvGwSNlvt9g+dm/fq/slKsvvwKQf2/2W3TmRuu38qw/gMAAABfWEn57ntSvsV/dzk3mzezL29hy97uHUgPAAAA2AblT/4PFZM9xdzdkRT3/5U1It/f8dwAAACA7ZGUn7FLImI87unPnYmleCMWY603AQAAAIDPofLn/4eLyXjE6+WC4XAp7v8BAADgC+Lb642x/8FwjN3uwq3Jz8sxgJMLCyfvS87Vi7j6uV397QaTL11ssTd7MNk/aKScTO0+f1sSEbsb2aFkOPrlp7f2px+V3w9eGktgvbH+k06nTGAs1k4gNk6gfBTfiyP9mCPPRRQZPDdYk/R7GZ/Nm9lEo918rBwSsfjXe/WFpW9GFL1/pzW/P4kzS8uLE8++uPxceTAuFK1dODcYQHHVOIort2+Yy8rgCMTda+/xnvKDGIN+x/v9VkafgLFy63+tlOPMrrv/yWifb8bRfszR8f50fLim3+feos/qxGPVqNf3j/Wyk71XV0b2fjyJwXax4Z5v8iy8Gff2Y+49dm9/skYWtVVZvLA6i+JY1EaPf/9YxNg2ZfH2kddP/uPX7SSb3CyLyU2zGA4UfP62lV0Rl2cB8Fk5U476c6kK7SurUFFUCkX9H9TdYd0Zns62cq79+6Ve+lcZnw6ajYiRWrc7Llb3QS+X2t5adV+J/hn9WD/mWP96YvfBNepKZY0z+ktLL/1mcEZ/+N0f/fgrh3/7k7Lfa6pu78b9/ZjBJO781To1ttjn71+sJNVy798ptnhnzX6La7Bus5bEhYhdXz/3Uhx45bXzDy6dO/384vOLL9Rqk1OVhyuVR2qxp7xUGEw2yBSAm9fmf2Nn3YhbBk0kD4/eVcfIXfWg4t158VcKJuLZeDGWo7gCuKcfe8+V/b5X3ImP/BrCA5vctY6P/IWXBza5t7wUW7syNol1YidHjtj//LCcfHJDng4A2BFHR+vwSnI19f/iO/MPbHLfvbqWX3Z3HGvFFvf/1TXz/b8bezgA4KaQdT5KxntvJZ1OvvBMdXq6Wu8dz9JOu/F02sln5rI0b/WyTuN4vTWXpQuddq/dGL5xPJN10yQWFtqdXjrb7qQx1s1PprN5M0sHf/q9m83XW7280V1oZvVuljbarV690Utn8m4jXTjxZDPvHs865cbdhayRz+aNei9vt9Ju+0SnkU2kaTfLRgLzmazVy2fzYraVLnTy+XrnQkQ0T8xn6UzWbXTyhV673+Cwr7w12+7Ml81OXLn7f97p4w0A/wleee382dPLy4svX9vMn7YS/FnvIwCw2paq9KpfMN9345MCAAAAAAAAAAAAAABWGfm4XhLlTLH0Oj4ReHUzt8YN7+Immvn/wZCM/SXF3M6nMex9y1uNxXam8bvBkMn9Jfviq48/fna94Cdfv+v41lqO2Lu1T8rGW/sjbnnvB/0lT6wf/K3B/7/t2ff3I+IaNl9JNohZdZq4ZUdPSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwjn8HAAD//4esYLQ=") r0 = socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @random="bec51dfbaf24", 'ip6gre0\x00'}}, 0x1e) signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) write$UHID_CREATE2(r1, &(0x7f0000000140)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x39, 0x3, 0x0, 0xf, 0x1000, 0x7fffffff, "8a91bd6707c95c09561a4a9beafcd12d786a87314676fe8a6737c58e4540624e21afba474683f29b30e667f0ff4aecaad64f2dd1c18e3b1b1a"}}, 0x151) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0xffffffffffffff2e, 0x0}}], 0x1, 0x0) (async) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0xffffffffffffff2e, 0x0}}], 0x1, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") openat(r4, &(0x7f00000000c0)='./file1\x00', 0x145841, 0x0) (async) r5 = openat(r4, &(0x7f00000000c0)='./file1\x00', 0x145841, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000040)={0xa, 0x0, 0x9d, @loopback, 0x0, 0x5}, 0x20) (async) bind$l2tp6(r6, &(0x7f0000000040)={0xa, 0x0, 0x9d, @loopback, 0x0, 0x5}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) socket$netlink(0x10, 0x3, 0x4) socket(0xb, 0x6, 0x0) (async) socket(0xb, 0x6, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) 1.213224409s ago: executing program 5 (id=3072): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) close(r0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x111, 0xc, 0x0, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0xee01, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = creat(0x0, 0x433bb3aa2b6fc245) signalfd4(r3, 0x0, 0x0, 0x80800) r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) pwrite64(r4, 0x0, 0x0, 0xe7c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x87}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_UNLINKAT={0x24, 0x49, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r8, 0x4afd, 0xe1ba, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) 1.071403538s ago: executing program 5 (id=3076): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0xfd}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000040)=0xe8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x53a23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0xfd}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x11) (async) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000040)=0xe8) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x53a23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async) 1.03632698s ago: executing program 5 (id=3077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='!\v\x00\x00\x00\x00\x00\x00\x00\x00g\x00\x00\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="0c002b01"], 0x28}}, 0x0) 1.014780851s ago: executing program 5 (id=3079): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r1, 0x7, 0x1098}, &(0x7f0000000040)=0x10) 774.758485ms ago: executing program 3 (id=3080): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x12, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000740)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x3, r1}, 0x38) 724.362638ms ago: executing program 0 (id=3081): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = fsopen(&(0x7f0000000000)='aufs\x00', 0x0) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r1, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) readv(r1, &(0x7f00000000c0)=[{0x0}], 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x50a902, 0x9f667fd378a54ec2) 724.064637ms ago: executing program 9 (id=3082): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa0900"/527], 0x610) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 723.361498ms ago: executing program 3 (id=3083): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket(0x2c, 0x3, 0x0) getsockname$packet(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = dup3(r4, r5, 0x80000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe84, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe70, 0x1, [@m_pedit={0xe6c, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x8, 0x2, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x13, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe84}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) fstat(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, r14, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x1000000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}], [{@fowner_eq={'fowner', 0x3d, r12}}, {@smackfshat={'smackfshat', 0x3d, 'pedit\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@hash}, {@uid_lt={'uid<', r13}}, {@fowner_gt={'fowner>', r14}}, {@obj_role={'obj_role', 0x3d, '.\\\',};!-,-*{'}}, {@appraise}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}]}}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa080019"], 0x58}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f00000000c0)={0x785c, {0x37, 0x200, 0x8, 0x100, 0xeec}}) 703.992379ms ago: executing program 0 (id=3084): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xe4]}, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x3, 0x1, 0x3, 0x0, 0x0, {0x5}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040840) unshare(0x40000000) 679.078791ms ago: executing program 2 (id=3085): socket(0x2, 0x3, 0xff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xdf, 0xffdfffbc) process_vm_writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/68, 0x44}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/179, 0xb3}, {&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f00000026c0)=""/245, 0xf5}, {&(0x7f0000000040)}], 0x8, &(0x7f0000003a40)=[{&(0x7f0000000440)=""/7, 0x7}, {&(0x7f00000027c0)=""/204, 0xcc}, {&(0x7f0000000580)=""/102, 0x66}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/158, 0x9e}, {&(0x7f0000003980)=""/144, 0x90}], 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0xa6282) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000000)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711092000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) ioctl$EVIOCSCLOCKID(r1, 0x40084504, &(0x7f0000ffcffc)) 602.373235ms ago: executing program 2 (id=3086): r0 = socket$packet(0x11, 0x2, 0x300) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') close_range(r0, 0xffffffffffffffff, 0x0) 602.051255ms ago: executing program 9 (id=3087): r0 = socket$packet(0x11, 0x2, 0x300) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 600.967745ms ago: executing program 3 (id=3088): r0 = socket$packet(0x11, 0x2, 0x300) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x5, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0xbf7ffffb) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)=ANY=[@ANYBLOB="6e61740000004000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025c8c5b8"], 0x68) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) r6 = dup(r4) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r11, 0x0) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, &(0x7f00000001c0)=[0x9, 0xfffffff7, 0x6, 0x7fffffff, 0x6, 0x3, 0x5, 0x1]) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000280)={0x11, 0x0, r12, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010100000000000000000100000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x8000) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="020114008cdc18000e1a80009f0001140000002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d2a894a83e57c67d5b98dcbcacadd248e5dc8f20ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9"], 0xdd12}, {&(0x7f0000000640)={0x10, 0x37, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x10}], 0x2, 0x0, 0x0, 0x4000007}, 0x20004000) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r3, &(0x7f0000002280)=[{&(0x7f0000000100)="2ec0b70007e03d3e000000000000000508060000", 0x14}, {&(0x7f0000000200)="f66e736ea839a9504f36ab39e83fc1310000400000000000", 0x18}, {&(0x7f0000001080)="5cf5", 0x2}], 0x3) 551.392318ms ago: executing program 2 (id=3089): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) getpgrp(0xffffffffffffffff) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), 0xffffffffffffffff) 204.392468ms ago: executing program 9 (id=3090): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00fd0010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 203.675138ms ago: executing program 0 (id=3091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2714, &(0x7f0000032200)=""/102400, &(0x7f00000191c0)=0x19000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) pread64(r3, 0x0, 0x0, 0x7ff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x24000840, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaa0200000000000000080045007821000000000006020000000000000014aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6c1000009078000004020000"], 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r4, 0x852ac000) creat(&(0x7f0000000100)='./file0\x00', 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r2, 0x2000, 0x0) 189.471378ms ago: executing program 9 (id=3092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000104050000000000000000000a000000050001"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) 167.09881ms ago: executing program 2 (id=3093): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x1c025, 0xac5d, 0x0, 0x4, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x4, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1ff, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000a40)={0xfffff430, 0x0, &(0x7f0000000980)=[{&(0x7f00000001c0)=""/206, 0xce}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000480)=""/215, 0xd7}, {&(0x7f0000000600)=""/214, 0xd6}, {&(0x7f00000002c0)}, {&(0x7f0000000700)=""/83, 0x53}, {&(0x7f0000000300)=""/16, 0x10}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/137, 0x89}, {&(0x7f00000008c0)=""/148, 0x94}], &(0x7f0000000580)=[0x7fffffffffffffff, 0x9428, 0x100000000, 0x6, 0x10, 0xd], 0xa}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000340)="1800000072006bcd", 0x8}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 120.428723ms ago: executing program 5 (id=3094): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x1405, 0x621, 0x70bd26}, 0x10}, 0x1, 0xf00000000000000, 0x0, 0x40011}, 0x0) 120.086283ms ago: executing program 0 (id=3095): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x0, 0xfffffffc, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) write$cgroup_int(r1, &(0x7f0000000100)=0x5, 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r2, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x30, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fec, &(0x7f0000000040)={0x0, 0x9086, 0x1c080, 0x7, 0x157}) 116.848023ms ago: executing program 9 (id=3096): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000018000)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @broadcast}], 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\x92Ync_\x00le\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) getdents64(r3, &(0x7f0000000040)=""/56, 0x38) getdents(r3, 0x0, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f0000000200)="a6159f"}, 0x20) 110.820143ms ago: executing program 5 (id=3097): socket$packet(0x11, 0x3, 0x300) (async) socket(0x2, 0xa, 0x300) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x130, 0x11, 0x148, 0x240, 0x0, 0x240, 0x2a8, 0x2a8, 0x240, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0x0, 0xee00, 0x0, 0xc}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x1, 0x2, 0x1, 0x2, 0x1], 0x1, 0x3}, {0x2, [0x1, 0x0, 0x3, 0x5, 0x3, 0x6], 0x5, 0x1}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'ip6gre0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x20, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x338) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26b04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbfe0932164f3c124a0000000000"], 0x0) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 78.677245ms ago: executing program 9 (id=3098): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa0900"/527], 0x610) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 0s ago: executing program 0 (id=3099): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) sendmmsg$unix(r3, &(0x7f0000006040)=[{{&(0x7f0000004d40)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x1, 0x140088d1) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080200001"], 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000ea04850000005095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$rxrpc(0x21, 0x2, 0xa) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x0, 0x9}) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f0000000200)={0x18, {{0x29, 0x0, 0x3000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}, 0x88) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="ff4b84c3f04d2b0182eef6af", 0xc}, {&(0x7f00000003c0)="f5b91889f08739068b768bda18749c720872395b6196ffb12dfbeda24c9627dd121fb3327b1a6c39c827b79bc798e151925100c0d18595a889e89e77fe653596742a077f53c6ab7d75b3002f760e4d00a96180d05a658266296f66d8af177644f11cf7c8bacfcf7426d5a7fcfa8f76fff71bcf18f3495579af62656ed65b06254f646b9725caa781f69888ab7234bf1a08f83c06285f9b9d4eda020ea00634c68647bd4383b2bec7617065375115d7f4219fb9f80e2d481fb50bdfda0471d0ba9a6c0bb755886eb8060bc19ebf89712812d5f6297da1aa1a782c473464daa447e98de35ff3fda265697a31debf44b96474a1", 0xf2}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4080) kernel console output (not intermixed with test programs): 14386] ? pcpu_block_update+0x24e/0x3b0 [ 194.320853][T14386] ? _find_next_zero_bit+0x64/0xa0 [ 194.326111][T14386] ? pcpu_block_refresh_hint+0x157/0x170 [ 194.331968][T14386] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 194.338161][T14386] ? css_rstat_updated+0xbb/0x280 [ 194.343315][T14386] ? mod_memcg_state+0x182/0x260 [ 194.348453][T14386] ? __rcu_read_unlock+0x4e/0x70 [ 194.353483][T14386] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 194.359461][T14386] ? pcpu_alloc_noprof+0xb08/0x1010 [ 194.364758][T14386] ? should_fail_ex+0x30/0x280 [ 194.369690][T14386] ? __kmalloc_noprof+0x2a3/0x580 [ 194.374828][T14386] ? security_bpf_prog_load+0x60/0x140 [ 194.380392][T14386] ? selinux_bpf_prog_load+0xac/0xd0 [ 194.385749][T14386] ? security_bpf_prog_load+0x9e/0x140 [ 194.391337][T14386] bpf_prog_load+0xf76/0x1140 [ 194.396147][T14386] ? security_bpf+0x2b/0x90 [ 194.400761][T14386] __sys_bpf+0x469/0x7b0 [ 194.405076][T14386] __x64_sys_bpf+0x41/0x50 [ 194.407839][ T29] audit: type=1400 audit(1769633870.545:5305): avc: denied { ioctl } for pid=14428 comm="syz.9.2264" path="socket:[44383]" dev="sockfs" ino=44383 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 194.409692][T14386] x64_sys_call+0x28e1/0x3000 [ 194.439114][T14386] do_syscall_64+0xc0/0x2a0 [ 194.443767][T14386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.449810][T14386] RIP: 0033:0x7f00b58eaeb9 [ 194.454335][T14386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.474461][T14386] RSP: 002b:00007f00b4326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.482976][T14386] RAX: ffffffffffffffda RBX: 00007f00b5b66090 RCX: 00007f00b58eaeb9 [ 194.491017][T14386] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005 [ 194.499136][T14386] RBP: 00007f00b5958c1f R08: 0000000000000000 R09: 0000000000000000 [ 194.507288][T14386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.515296][T14386] R13: 00007f00b5b66128 R14: 00007f00b5b66090 R15: 00007ffd316350d8 [ 194.516300][T14429] loop9: detected capacity change from 0 to 128 [ 194.523391][T14386] [ 194.523401][T14386] ---[ end trace 0000000000000000 ]--- [ 194.557640][T14288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.565313][T14288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.591461][T14288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.617100][T14288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.624380][T14288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.650478][T14288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.695663][T14288] hsr_slave_0: entered promiscuous mode [ 194.702507][T14288] hsr_slave_1: entered promiscuous mode [ 194.717232][T14288] debugfs: 'hsr0' already exists in 'hsr' [ 194.723197][T14288] Cannot create hsr debugfs directory [ 195.122521][T14489] loop9: detected capacity change from 0 to 512 [ 195.138359][T14489] EXT4-fs: Ignoring removed nobh option [ 195.159065][T14489] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 195.193292][T14489] EXT4-fs (loop9): 1 truncate cleaned up [ 195.199746][T14489] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.347317][ T29] audit: type=1400 audit(1769633871.485:5306): avc: denied { watch watch_reads } for pid=14477 comm="syz.0.2278" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 195.373144][T14288] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 195.420401][T14288] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.445747][T14479] lo speed is unknown, defaulting to 1000 [ 195.451970][T14288] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.470170][T14288] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.677096][T14288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.706359][T14288] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.729358][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.736545][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.752435][T14533] loop2: detected capacity change from 0 to 512 [ 195.769303][T14288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.779758][T14288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.803049][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.810431][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.822074][T14533] EXT4-fs (loop2): orphan cleanup on readonly fs [ 195.869666][T14533] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2288: error while reading EA inode 32 err=-116 [ 195.897362][T10038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.944443][T14533] EXT4-fs (loop2): Remounting filesystem read-only [ 195.994226][T14533] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 196.007788][T14533] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 196.056565][T14533] EXT4-fs (loop2): 1 orphan inode deleted [ 196.083364][T14533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 196.205106][ T29] audit: type=1400 audit(1769633872.305:5307): avc: denied { create } for pid=14556 comm="syz.9.2291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.245430][T14559] loop9: detected capacity change from 0 to 512 [ 196.252287][T14559] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 196.270644][ T29] audit: type=1400 audit(1769633872.385:5308): avc: denied { ioctl } for pid=14556 comm="syz.9.2291" path="socket:[44648]" dev="sockfs" ino=44648 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.341227][T14288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.377809][T14533] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.513127][ T29] audit: type=1400 audit(1769633872.655:5309): avc: denied { map } for pid=14588 comm="syz.9.2295" path="socket:[44682]" dev="sockfs" ino=44682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.537025][ T29] audit: type=1400 audit(1769633872.655:5310): avc: denied { read } for pid=14588 comm="syz.9.2295" path="socket:[44682]" dev="sockfs" ino=44682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.562950][T14591] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2295'. [ 196.619573][ T29] audit: type=1326 audit(1769633872.705:5311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14588 comm="syz.9.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 196.643367][ T29] audit: type=1326 audit(1769633872.705:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14588 comm="syz.9.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 196.666914][ T29] audit: type=1326 audit(1769633872.705:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14588 comm="syz.9.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 196.749352][T14288] veth0_vlan: entered promiscuous mode [ 196.771482][T14288] veth1_vlan: entered promiscuous mode [ 196.828414][T14288] veth0_macvtap: entered promiscuous mode [ 196.835903][T14288] veth1_macvtap: entered promiscuous mode [ 196.862753][T14288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.892993][T14288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.921102][T13681] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.932839][T14618] tmpfs: Bad value for 'huge' [ 196.936704][T13681] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.956307][T13681] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.987931][T13681] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.105821][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2234'. [ 197.284194][T14649] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 197.290771][T14649] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 197.299158][T14649] vhci_hcd vhci_hcd.0: Device attached [ 197.341002][T14649] vhci_hcd vhci_hcd.0: port 0 already used [ 197.365484][T14655] loop2: detected capacity change from 0 to 164 [ 197.403801][T14650] vhci_hcd: connection closed [ 197.404076][ T3338] vhci_hcd vhci_hcd.9: stop threads [ 197.414137][ T3338] vhci_hcd vhci_hcd.9: release socket [ 197.419571][ T3338] vhci_hcd vhci_hcd.9: disconnect device [ 197.867247][T14721] bridge_slave_0: entered promiscuous mode [ 197.890167][T14721] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.944220][T14727] loop9: detected capacity change from 0 to 164 [ 197.961290][T14727] Unable to read rock-ridge attributes [ 197.981301][T14727] Unable to read rock-ridge attributes [ 197.994584][T14727] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 198.007617][T14727] Unable to read rock-ridge attributes [ 198.020966][T14727] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2316'. [ 198.041169][T14738] loop5: detected capacity change from 0 to 512 [ 198.058427][T14738] EXT4-fs: Ignoring removed nobh option [ 198.083912][T14738] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.2318: corrupted inode contents [ 198.099041][T14738] EXT4-fs (loop5): Remounting filesystem read-only [ 198.105868][T14738] EXT4-fs (loop5): 1 truncate cleaned up [ 198.105897][T14746] loop2: detected capacity change from 0 to 512 [ 198.118562][T14738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.127863][ T12] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 198.141574][ T12] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 198.152903][T14738] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.185920][T14747] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2316'. [ 198.208927][T14738] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.236613][T14746] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 198.260405][T14746] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 198.278639][ T12] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 198.285649][T14746] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2319: bg 0: block 248: padding at end of block bitmap is not set [ 198.303756][T14746] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2319: Failed to acquire dquot type 1 [ 198.316133][T14746] EXT4-fs (loop2): 1 truncate cleaned up [ 198.322714][T14746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 198.418673][T14746] syz.2.2319 (14746) used greatest stack depth: 8992 bytes left [ 198.429977][T13598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 198.556555][T14770] loop5: detected capacity change from 0 to 1024 [ 198.583504][T14770] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 198.623492][T14770] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 198.657691][T14770] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.2325: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1536(1536) [ 198.680746][T14780] loop9: detected capacity change from 0 to 764 [ 198.704720][T14770] EXT4-fs (loop5): no journal found [ 198.710435][T14770] EXT4-fs (loop5): can't get journal size [ 198.746685][T14770] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.2325: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1536(1536) [ 198.775690][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2329'. [ 198.797087][T14770] EXT4-fs (loop5): get root inode failed [ 198.802919][T14770] EXT4-fs (loop5): mount failed [ 198.878036][T14800] loop5: detected capacity change from 0 to 1024 [ 198.914403][T14800] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 198.936857][T14800] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 198.979327][T14800] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.2325: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1536(1536) [ 199.020742][T14800] EXT4-fs (loop5): no journal found [ 199.025998][T14800] EXT4-fs (loop5): can't get journal size [ 199.042239][T14800] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.2325: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1536(1536) [ 199.076885][T14800] EXT4-fs (loop5): get root inode failed [ 199.082701][T14800] EXT4-fs (loop5): mount failed [ 199.434014][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2284'. [ 199.442951][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2284'. [ 199.598763][T14821] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2333'. [ 199.607856][T14821] netlink: 'syz.9.2333': attribute type 30 has an invalid length. [ 199.635274][ T3338] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.644136][ T3338] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.668715][ T3338] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.684744][ T3338] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.839863][T14827] FAULT_INJECTION: forcing a failure. [ 199.839863][T14827] name failslab, interval 1, probability 0, space 0, times 0 [ 199.852696][T14827] CPU: 1 UID: 0 PID: 14827 Comm: syz.9.2336 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 199.852802][T14827] Tainted: [W]=WARN [ 199.852811][T14827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.852828][T14827] Call Trace: [ 199.852843][T14827] [ 199.852853][T14827] __dump_stack+0x1d/0x30 [ 199.852881][T14827] dump_stack_lvl+0x95/0xd0 [ 199.852951][T14827] dump_stack+0x15/0x1b [ 199.852979][T14827] should_fail_ex+0x263/0x280 [ 199.853022][T14827] should_failslab+0x8c/0xb0 [ 199.853152][T14827] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 199.853184][T14827] ? __alloc_skb+0x2f0/0x4b0 [ 199.853214][T14827] __alloc_skb+0x2f0/0x4b0 [ 199.853295][T14827] ? __alloc_skb+0x219/0x4b0 [ 199.853376][T14827] netlink_alloc_large_skb+0xbf/0xf0 [ 199.853435][T14827] netlink_sendmsg+0x40c/0x6f0 [ 199.853475][T14827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.853560][T14827] ____sys_sendmsg+0x5af/0x600 [ 199.853624][T14827] ___sys_sendmsg+0x195/0x1e0 [ 199.853663][T14827] __sys_sendmmsg+0x185/0x320 [ 199.853692][T14827] __x64_sys_sendmmsg+0x57/0x70 [ 199.853711][T14827] x64_sys_call+0x1e28/0x3000 [ 199.853798][T14827] do_syscall_64+0xc0/0x2a0 [ 199.853846][T14827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.853889][T14827] RIP: 0033:0x7f7e45e0aeb9 [ 199.853909][T14827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.853939][T14827] RSP: 002b:00007f7e44867028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 199.853966][T14827] RAX: ffffffffffffffda RBX: 00007f7e46085fa0 RCX: 00007f7e45e0aeb9 [ 199.853980][T14827] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 199.853994][T14827] RBP: 00007f7e44867090 R08: 0000000000000000 R09: 0000000000000000 [ 199.854006][T14827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.854018][T14827] R13: 00007f7e46086038 R14: 00007f7e46085fa0 R15: 00007fffb19f0028 [ 199.854115][T14827] [ 200.061098][T14829] loop3: detected capacity change from 0 to 1024 [ 200.118670][T14838] futex_wake_op: syz.5.2340 tries to shift op by 32; fix this program [ 200.133954][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 200.133974][ T29] audit: type=1400 audit(1769633876.275:5416): avc: denied { setopt } for pid=14755 comm="syz.0.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 200.161641][T14834] IPv6: Can't replace route, no match found [ 200.171056][T14829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.203866][T14842] bridge_slave_0: left allmulticast mode [ 200.209598][T14842] bridge_slave_0: left promiscuous mode [ 200.215329][T14842] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.234318][ T29] audit: type=1400 audit(1769633876.375:5417): avc: denied { create } for pid=14828 comm="syz.3.2337" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 200.256990][T14842] bridge_slave_1: left allmulticast mode [ 200.262882][T14842] bridge_slave_1: left promiscuous mode [ 200.268755][T14842] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.288770][T14842] bond0: (slave bond_slave_0): Releasing backup interface [ 200.300206][T14842] bond0: (slave bond_slave_1): Releasing backup interface [ 200.323328][T14842] team0: Port device team_slave_0 removed [ 200.323373][ T29] audit: type=1400 audit(1769633876.405:5418): avc: denied { read write open } for pid=14828 comm="syz.3.2337" path="/112/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 200.361347][T14842] team0: Port device team_slave_1 removed [ 200.375623][T14852] netlink: 'syz.5.2340': attribute type 10 has an invalid length. [ 200.383603][T14852] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2340'. [ 200.401857][T14842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.409444][T14842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.433742][T14842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.441215][T14842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.454288][T14842] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 200.489216][T14852] team0: entered promiscuous mode [ 200.494425][T14852] bridge0: port 1(team0) entered blocking state [ 200.500773][T14852] bridge0: port 1(team0) entered disabled state [ 200.526884][T14852] team0: entered allmulticast mode [ 200.709665][T12185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.804345][ T29] audit: type=1400 audit(1769633876.945:5419): avc: granted { setsecparam } for pid=14862 comm="syz.3.2343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 200.824000][T14863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2343'. [ 200.965393][ T29] audit: type=1400 audit(1769633877.105:5420): avc: denied { watch } for pid=14875 comm="syz.3.2348" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 200.988568][T14879] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 200.993772][ T29] audit: type=1400 audit(1769633877.135:5421): avc: denied { relabelfrom } for pid=14875 comm="syz.3.2348" name="UDPv6" dev="sockfs" ino=43968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 201.022462][ T29] audit: type=1400 audit(1769633877.145:5422): avc: denied { relabelto } for pid=14875 comm="syz.3.2348" name="UDPv6" dev="sockfs" ino=43968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:mouse_device_t:s0" [ 201.050144][ T29] audit: type=1400 audit(1769633877.145:5423): avc: denied { name_bind } for pid=14875 comm="syz.3.2348" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 201.181852][T14885] loop3: detected capacity change from 0 to 1024 [ 201.191450][T14885] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 201.212811][T14885] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 201.226347][T14885] EXT4-fs (loop3): orphan cleanup on readonly fs [ 201.234041][T14885] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #3: block 3: comm syz.3.2351: lblock 3 mapped to illegal pblock 3 (length 1) [ 201.248360][T14885] Quota error (device loop3): write_blk: dquota write failed [ 201.255828][T14885] Quota error (device loop3): find_free_dqentry: Can't write quota data block 3 [ 201.264151][T14895] vlan2: entered promiscuous mode [ 201.265819][T14885] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2351: Failed to acquire dquot type 0 [ 201.270864][T14895] bond_slave_0: entered promiscuous mode [ 201.284704][T14885] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 3: comm syz.3.2351: lblock 3 mapped to illegal pblock 3 (length 1) [ 201.288331][T14895] vlan2: entered allmulticast mode [ 201.306557][T14895] bond_slave_0: entered allmulticast mode [ 201.314072][T14885] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2351: Failed to acquire dquot type 0 [ 201.326136][T14885] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.2351: Freeing blocks not in datazone - block = 0, count = 4096 [ 201.340316][T14885] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 3: comm syz.3.2351: lblock 3 mapped to illegal pblock 3 (length 1) [ 201.357835][T14885] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2351: Failed to acquire dquot type 0 [ 201.369620][T14885] EXT4-fs (loop3): 1 orphan inode deleted [ 201.387966][T14885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.402759][T14885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.424330][T14900] loop5: detected capacity change from 0 to 128 [ 201.471905][T14900] lo speed is unknown, defaulting to 1000 [ 201.532482][T14905] syz.5.2358: attempt to access beyond end of device [ 201.532482][T14905] loop5: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 201.550248][T14905] syz.5.2358: attempt to access beyond end of device [ 201.550248][T14905] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 201.564143][T14905] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 201.623302][T14915] __nla_validate_parse: 2 callbacks suppressed [ 201.623318][T14915] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2363'. [ 201.649405][T14916] loop9: detected capacity change from 0 to 512 [ 201.684932][T14905] syz.5.2358: attempt to access beyond end of device [ 201.684932][T14905] loop5: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 201.698836][T14905] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 201.710136][T14905] syz.5.2358: attempt to access beyond end of device [ 201.710136][T14905] loop5: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 201.723926][T14905] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 201.737868][T14905] syz.5.2358: attempt to access beyond end of device [ 201.737868][T14905] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 201.751695][T14905] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 201.762380][T14905] syz.5.2358: attempt to access beyond end of device [ 201.762380][T14905] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 201.776115][T14905] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 201.899456][T14932] netlink: 'syz.9.2369': attribute type 21 has an invalid length. [ 201.920941][T14932] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2369'. [ 201.930101][T14932] netlink: 'syz.9.2369': attribute type 1 has an invalid length. [ 202.001150][T14939] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 202.012938][T14941] veth0_to_batadv: entered promiscuous mode [ 202.025540][T14946] FAT-fs (loop2): bogus logical sector size 13 [ 202.031808][T14946] FAT-fs (loop2): Can't find a valid FAT filesystem [ 202.034416][T14939] EXT4-fs (loop3): 1 truncate cleaned up [ 202.044651][T14939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.056965][T14941] veth0_to_batadv: left promiscuous mode [ 202.103552][T12185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.134146][T14955] sd 0:0:1:0: device reset [ 202.239626][T14964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.267312][T14964] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.320327][T14971] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 202.384884][T13598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.523764][T14989] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.568324][T14989] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.638217][T14996] EXT4-fs: Ignoring removed orlov option [ 202.683811][T14996] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #4: comm syz.3.2393: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 202.716185][T13598] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.737445][T14996] EXT4-fs error (device loop3): ext4_quota_enable:7180: comm syz.3.2393: Bad quota inode: 4, type: 1 [ 202.748838][T14996] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 202.764088][T14996] EXT4-fs (loop3): mount failed [ 202.939337][T15018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 202.960375][T15018] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.980502][T15018] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.2401: lblock 3 mapped to illegal pblock 3 (length 3) [ 202.997736][T15018] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 203.010118][T15018] EXT4-fs (loop2): This should not happen!! Data will be lost [ 203.010118][T15018] [ 203.026301][T15020] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2400'. [ 203.091086][T15025] set_capacity_and_notify: 8 callbacks suppressed [ 203.091108][T15025] loop5: detected capacity change from 0 to 128 [ 203.116616][T15030] netlink: 'syz.3.2404': attribute type 1 has an invalid length. [ 203.124613][T15018] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2401: bg 0: block 112: padding at end of block bitmap is not set [ 203.143230][T15018] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.2401: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 203.180091][T15018] EXT4-fs error (device loop2) in ext4_setattr:6035: Corrupt filesystem [ 203.213404][T15030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.251068][T15034] bond1: (slave veth3): Enslaving as an active interface with a down link [ 203.313866][T13598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 203.361204][T15030] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 203.405547][T15030] bond1: (slave batadv1): making interface the new active one [ 203.414590][T15030] batadv1: entered promiscuous mode [ 203.422650][T15030] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 203.535264][T15051] netlink: 'syz.0.2411': attribute type 7 has an invalid length. [ 203.543105][T15051] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2411'. [ 203.600777][T15054] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2412'. [ 203.621485][T15054] 8021q: VLANs not supported on ip_vti0 [ 203.676049][T15059] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2414'. [ 203.723430][T15065] netlink: 'syz.3.2418': attribute type 11 has an invalid length. [ 203.731339][T15065] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2418'. [ 203.826807][T15072] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15072 comm=syz.0.2420 [ 203.869008][T15072] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15072 comm=syz.0.2420 [ 203.997696][T15086] FAULT_INJECTION: forcing a failure. [ 203.997696][T15086] name failslab, interval 1, probability 0, space 0, times 0 [ 204.010536][T15086] CPU: 0 UID: 0 PID: 15086 Comm: syz.3.2425 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 204.010576][T15086] Tainted: [W]=WARN [ 204.010586][T15086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.010604][T15086] Call Trace: [ 204.010613][T15086] [ 204.010624][T15086] __dump_stack+0x1d/0x30 [ 204.010701][T15086] dump_stack_lvl+0x95/0xd0 [ 204.010723][T15086] dump_stack+0x15/0x1b [ 204.010811][T15086] should_fail_ex+0x263/0x280 [ 204.010963][T15086] should_failslab+0x8c/0xb0 [ 204.010992][T15086] kmem_cache_alloc_noprof+0x68/0x490 [ 204.011074][T15086] ? getname_flags+0x7f/0x3b0 [ 204.011099][T15086] ? fput+0x8f/0xc0 [ 204.011133][T15086] getname_flags+0x7f/0x3b0 [ 204.011165][T15086] __x64_sys_mkdirat+0x40/0x60 [ 204.011226][T15086] x64_sys_call+0x30c/0x3000 [ 204.011252][T15086] do_syscall_64+0xc0/0x2a0 [ 204.011291][T15086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.011338][T15086] RIP: 0033:0x7f463f14aeb9 [ 204.011360][T15086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.011386][T15086] RSP: 002b:00007f463dba7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 204.011409][T15086] RAX: ffffffffffffffda RBX: 00007f463f3c5fa0 RCX: 00007f463f14aeb9 [ 204.011424][T15086] RDX: 00000000000001ff RSI: 0000200000000b80 RDI: 0000000000000004 [ 204.011441][T15086] RBP: 00007f463dba7090 R08: 0000000000000000 R09: 0000000000000000 [ 204.011520][T15086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.011538][T15086] R13: 00007f463f3c6038 R14: 00007f463f3c5fa0 R15: 00007ffd303d10a8 [ 204.011564][T15086] [ 204.187621][T15093] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2426'. [ 204.278329][T15105] loop2: detected capacity change from 0 to 2048 [ 204.280489][T15106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2427'. [ 204.314576][T15105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.349852][T15111] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2428'. [ 204.396154][T13598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.426402][T15115] loop5: detected capacity change from 0 to 128 [ 204.432872][T15117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pid=15117 comm=syz.9.2434 [ 204.447685][T15117] loop9: detected capacity change from 0 to 256 [ 204.457922][T15115] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.493547][T15115] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 204.622657][T15127] loop2: detected capacity change from 0 to 512 [ 204.639056][T15127] EXT4-fs (loop2): too many log groups per flexible block group [ 204.647206][T15127] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 204.654433][T15127] EXT4-fs (loop2): mount failed [ 204.708578][T14288] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.773780][T15135] tmpfs: Bad value for 'huge' [ 204.849743][T15138] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.857096][T15138] IPv6: NLM_F_CREATE should be set when creating new route [ 205.088012][ T4968] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 205.095512][ T4968] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 205.103051][ T4968] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 205.110523][ T4968] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 205.118022][ T4968] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 205.125477][ T4968] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 205.132945][ T4968] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 205.140451][ T4968] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 205.147909][ T4968] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 205.155346][ T4968] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 205.175261][ T4968] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 205.295554][T15166] loop3: detected capacity change from 0 to 128 [ 205.421936][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 205.422029][ T29] audit: type=1400 audit(1769633881.565:5602): avc: denied { connect } for pid=15168 comm="syz.3.2451" lport=49093 faddr=::ffff:100.1.1.0 fport=20011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 205.487126][T15173] tmpfs: Bad value for 'huge' [ 205.652367][ T29] audit: type=1400 audit(1769633881.795:5603): avc: denied { module_load } for pid=15189 comm="syz.3.2458" path="/145/bus" dev="tmpfs" ino=801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 205.675949][T15190] Invalid ELF header magic: != ELF [ 205.806176][T15209] loop3: detected capacity change from 0 to 512 [ 205.837674][T15209] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 205.859320][T15212] FAULT_INJECTION: forcing a failure. [ 205.859320][T15212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.872451][T15212] CPU: 0 UID: 0 PID: 15212 Comm: syz.2.2467 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 205.872571][T15212] Tainted: [W]=WARN [ 205.872580][T15212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.872597][T15212] Call Trace: [ 205.872605][T15212] [ 205.872616][T15212] __dump_stack+0x1d/0x30 [ 205.872679][T15212] dump_stack_lvl+0x95/0xd0 [ 205.872732][T15212] dump_stack+0x15/0x1b [ 205.872757][T15212] should_fail_ex+0x263/0x280 [ 205.872862][T15212] should_fail+0xb/0x20 [ 205.872918][T15212] should_fail_usercopy+0x1a/0x20 [ 205.872957][T15212] _copy_to_user+0x20/0xa0 [ 205.873014][T15212] simple_read_from_buffer+0xb5/0x130 [ 205.873059][T15212] proc_fail_nth_read+0x10e/0x150 [ 205.873099][T15212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.873142][T15212] vfs_read+0x1ab/0x7f0 [ 205.873161][T15212] ? __rcu_read_unlock+0x4e/0x70 [ 205.873202][T15212] ? __fget_files+0x184/0x1c0 [ 205.873258][T15212] ? mutex_lock+0x57/0x90 [ 205.873290][T15212] ksys_read+0xdc/0x1a0 [ 205.873319][T15212] __x64_sys_read+0x40/0x50 [ 205.873345][T15212] x64_sys_call+0x2889/0x3000 [ 205.873384][T15212] do_syscall_64+0xc0/0x2a0 [ 205.873438][T15212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.873469][T15212] RIP: 0033:0x7f5c92a9b78e [ 205.873491][T15212] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 205.873515][T15212] RSP: 002b:00007f5c91536fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.873541][T15212] RAX: ffffffffffffffda RBX: 00007f5c915376c0 RCX: 00007f5c92a9b78e [ 205.873619][T15212] RDX: 000000000000000f RSI: 00007f5c915370a0 RDI: 0000000000000005 [ 205.873633][T15212] RBP: 00007f5c91537090 R08: 0000000000000000 R09: 0000000000000000 [ 205.873692][T15212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.873706][T15212] R13: 00007f5c92d56038 R14: 00007f5c92d55fa0 R15: 00007ffd4684c048 [ 205.873732][T15212] [ 205.916963][T15213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.047792][T15209] loop3: detected capacity change from 0 to 1024 [ 206.067597][T15213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.129664][T15209] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 206.138185][T15209] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 206.187456][T15215] raw_sendmsg: syz.9.2468 forgot to set AF_INET. Fix it! [ 206.320667][T15227] tipc: Enabling of bearer rejected, failed to enable media [ 206.333160][T15233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.342034][T15233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.350541][T15233] hub 1-0:1.0: USB hub found [ 206.355277][T15233] hub 1-0:1.0: 8 ports detected [ 206.708016][T15235] __nla_validate_parse: 5 callbacks suppressed [ 206.708081][T15235] netlink: 376 bytes leftover after parsing attributes in process `syz.5.2475'. [ 206.724806][T15235] netlink: 'syz.5.2475': attribute type 29 has an invalid length. [ 206.771618][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2477'. [ 206.781941][T15242] loop9: detected capacity change from 0 to 128 [ 206.788884][T15242] FAT-fs (loop9): bread failed, FSINFO block (sector = 2048) [ 206.822906][T15241] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2476'. [ 206.861195][ T29] audit: type=1326 audit(1769633883.005:5604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.5.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb26bdaeb9 code=0x7ffc0000 [ 206.885106][ T29] audit: type=1326 audit(1769633883.005:5605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.5.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb26bdaeb9 code=0x7ffc0000 [ 206.908715][ T29] audit: type=1326 audit(1769633883.005:5606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.5.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb26bdaeb9 code=0x7ffc0000 [ 206.932291][ T29] audit: type=1326 audit(1769633883.005:5607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.5.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb26bdaeb9 code=0x7ffc0000 [ 206.955891][ T29] audit: type=1326 audit(1769633883.005:5608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.5.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb26bdaeb9 code=0x7ffc0000 [ 206.979444][ T29] audit: type=1326 audit(1769633883.005:5609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.5.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ffb26bdaeb9 code=0x7ffc0000 [ 207.003721][ T29] audit: type=1326 audit(1769633883.005:5610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.5.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb26bdaeb9 code=0x7ffc0000 [ 207.027464][ T29] audit: type=1326 audit(1769633883.005:5611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.5.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7ffb26bdaeb9 code=0x7ffc0000 [ 207.096521][T15261] tmpfs: Bad value for 'huge' [ 207.252205][T15290] bridge_slave_1: entered promiscuous mode [ 207.330053][T15300] xt_hashlimit: size too large, truncated to 1048576 [ 207.337179][T15297] loop3: detected capacity change from 0 to 1024 [ 207.350733][T15297] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.401599][T15297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.415959][T15297] sch_fq: defrate 4294967295 ignored. [ 207.483352][T12185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.526336][T15314] netlink: 'syz.3.2498': attribute type 11 has an invalid length. [ 207.534272][T15314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2498'. [ 207.547909][T15314] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 207.589104][T15318] tmpfs: Bad value for 'huge' [ 207.614096][T15322] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2504'. [ 207.700370][T15322] tmpfs: Bad value for 'huge' [ 207.816021][T15332] EXT4-fs: Ignoring removed orlov option [ 207.835816][T15332] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #4: comm syz.9.2508: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 207.865815][T15332] EXT4-fs error (device loop9): ext4_quota_enable:7180: comm syz.9.2508: Bad quota inode: 4, type: 1 [ 207.877098][T15332] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 207.899876][T15332] EXT4-fs (loop9): mount failed [ 207.949564][T15339] FAULT_INJECTION: forcing a failure. [ 207.949564][T15339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.962857][T15339] CPU: 0 UID: 0 PID: 15339 Comm: syz.5.2510 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 207.962887][T15339] Tainted: [W]=WARN [ 207.962893][T15339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 207.962905][T15339] Call Trace: [ 207.962972][T15339] [ 207.962981][T15339] __dump_stack+0x1d/0x30 [ 207.963011][T15339] dump_stack_lvl+0x95/0xd0 [ 207.963043][T15339] dump_stack+0x15/0x1b [ 207.963132][T15339] should_fail_ex+0x263/0x280 [ 207.963169][T15339] should_fail+0xb/0x20 [ 207.963269][T15339] should_fail_usercopy+0x1a/0x20 [ 207.963305][T15339] strncpy_from_user+0x27/0x250 [ 207.963342][T15339] getname_flags+0xad/0x3b0 [ 207.963367][T15339] __x64_sys_link+0x40/0x70 [ 207.963387][T15339] x64_sys_call+0x1325/0x3000 [ 207.963421][T15339] do_syscall_64+0xc0/0x2a0 [ 207.963458][T15339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.963485][T15339] RIP: 0033:0x7ffb26bdaeb9 [ 207.963503][T15339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.963652][T15339] RSP: 002b:00007ffb25637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 207.963675][T15339] RAX: ffffffffffffffda RBX: 00007ffb26e55fa0 RCX: 00007ffb26bdaeb9 [ 207.963693][T15339] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 00002000000006c0 [ 207.963710][T15339] RBP: 00007ffb25637090 R08: 0000000000000000 R09: 0000000000000000 [ 207.963726][T15339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.963771][T15339] R13: 00007ffb26e56038 R14: 00007ffb26e55fa0 R15: 00007ffd2b1f65e8 [ 207.963789][T15339] [ 208.144164][T15343] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2512'. [ 208.271245][T15354] tmpfs: Bad value for 'huge' [ 208.392706][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2520'. [ 208.401722][T15366] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2520'. [ 208.666732][T15386] set_capacity_and_notify: 1 callbacks suppressed [ 208.666753][T15386] loop2: detected capacity change from 0 to 1024 [ 208.691481][T15392] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2526'. [ 208.768443][T15386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 208.825130][T15386] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.888857][T13598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 209.064532][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'. [ 209.164332][T15437] loop2: detected capacity change from 0 to 512 [ 209.340363][T15447] usb usb7: usbfs: process 15447 (syz.5.2541) did not claim interface 0 before use [ 209.366915][T15447] loop5: detected capacity change from 0 to 128 [ 209.385396][T15447] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 209.413391][T15447] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 209.421607][T15447] FAT-fs (loop5): Filesystem has been set read-only [ 209.736462][T15466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2589 sclass=netlink_route_socket pid=15466 comm=syz.0.2546 [ 209.904195][T15486] x_tables: duplicate underflow at hook 1 [ 209.916644][T15486] x_tables: duplicate underflow at hook 2 [ 210.368914][T15517] tmpfs: Bad value for 'huge' [ 210.524716][T15529] xt_connbytes: Forcing CT accounting to be enabled [ 210.532130][T15529] set match dimension is over the limit! [ 210.798825][T15557] sctp: [Deprecated]: syz.5.2563 (pid 15557) Use of int in max_burst socket option. [ 210.798825][T15557] Use struct sctp_assoc_value instead [ 210.853033][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 210.853053][ T29] audit: type=1400 audit(1769633886.995:5716): avc: denied { map } for pid=15559 comm="syz.9.2572" path="socket:[47172]" dev="sockfs" ino=47172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.511205][ T29] audit: type=1400 audit(1769633887.635:5717): avc: denied { mount } for pid=15592 comm="syz.3.2585" name="/" dev="configfs" ino=2083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 211.534225][ T29] audit: type=1400 audit(1769633887.635:5718): avc: denied { search } for pid=15592 comm="syz.3.2585" name="/" dev="configfs" ino=2083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.556696][ T29] audit: type=1400 audit(1769633887.635:5719): avc: denied { search } for pid=15592 comm="syz.3.2585" name="/" dev="configfs" ino=2083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.579144][ T29] audit: type=1400 audit(1769633887.635:5720): avc: denied { read open } for pid=15592 comm="syz.3.2585" path="/" dev="configfs" ino=2083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.601725][ T29] audit: type=1400 audit(1769633887.635:5721): avc: denied { ioctl } for pid=15592 comm="syz.3.2585" path="/" dev="configfs" ino=2083 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.627569][ T29] audit: type=1400 audit(1769633887.775:5722): avc: denied { prog_load } for pid=15586 comm="syz.0.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 211.646946][ T29] audit: type=1400 audit(1769633887.775:5723): avc: denied { prog_run } for pid=15586 comm="syz.0.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 211.815731][T15607] bridge0: entered promiscuous mode [ 211.824293][ T29] audit: type=1400 audit(1769633887.955:5724): avc: denied { map_create } for pid=15610 comm="syz.9.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 211.843741][ T29] audit: type=1400 audit(1769633887.955:5725): avc: denied { map_read map_write } for pid=15610 comm="syz.9.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 211.889133][T15607] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 211.965176][T15620] __nla_validate_parse: 11 callbacks suppressed [ 211.965198][T15620] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.2594'. [ 212.074537][T15627] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2598'. [ 212.232691][T15631] netlink: 'syz.0.2596': attribute type 2 has an invalid length. [ 212.303573][T15655] xt_hashlimit: size too large, truncated to 1048576 [ 212.438131][T15665] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2607'. [ 212.567532][T15672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2612'. [ 212.577627][T15672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2612'. [ 212.675222][T15682] netlink: 'syz.9.2617': attribute type 11 has an invalid length. [ 212.684392][T15682] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2617'. [ 213.063491][T15697] tmpfs: Bad value for 'huge' [ 213.337282][T15707] loop3: detected capacity change from 0 to 512 [ 213.352298][T15707] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2626: bg 0: block 248: padding at end of block bitmap is not set [ 213.496452][T15707] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2626: Failed to acquire dquot type 1 [ 213.553290][T15707] EXT4-fs (loop3): 1 truncate cleaned up [ 213.569635][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2627'. [ 213.591647][T15714] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2628'. [ 213.604299][T15707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.617055][T15707] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.724145][T15714] bond0 (unregistering): Released all slaves [ 213.804624][T15721] netlink: 'syz.2.2630': attribute type 4 has an invalid length. [ 213.933446][T12185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.947473][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 214.021767][T15739] loop3: detected capacity change from 0 to 1024 [ 214.030979][T15737] loop2: detected capacity change from 0 to 512 [ 214.106680][T15739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.135858][T15739] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 214.138256][T15737] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2638: bg 0: block 248: padding at end of block bitmap is not set [ 214.152066][T15739] EXT4-fs (loop3): Remounting filesystem read-only [ 214.172068][T15739] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.3.2636: cleanup dec ref error -28 [ 214.220788][T12185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.237763][T15737] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2638: Failed to acquire dquot type 1 [ 214.269376][T15737] EXT4-fs (loop2): 1 truncate cleaned up [ 214.275599][T15737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.299177][T15737] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.443139][T15756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2644'. [ 214.645547][T15764] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2646'. [ 214.779687][T15730] IPv6: Can't replace route, no match found [ 214.799049][T15767] tmpfs: Bad value for 'huge' [ 215.173339][ T3338] batadv1: left promiscuous mode [ 215.463309][T13598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.482709][T13679] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 215.750829][T15798] lo speed is unknown, defaulting to 1000 [ 215.812070][T15814] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 215.919816][T15816] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.992929][T15816] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.062402][T15816] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.139888][T15816] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.193368][T15822] lo speed is unknown, defaulting to 1000 [ 216.217382][ T57] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.231201][ T2024] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.249375][ T2024] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.272057][ T2024] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.546601][T15825] 9p: Unknown access argument 18446744073709551615: -34 [ 216.647370][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 216.647404][ T29] audit: type=1400 audit(1769633892.785:5820): avc: denied { create } for pid=15837 comm="syz.0.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 216.673345][ T29] audit: type=1400 audit(1769633892.785:5821): avc: denied { ioctl } for pid=15837 comm="syz.0.2670" path="socket:[48497]" dev="sockfs" ino=48497 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 216.745678][T15842] loop9: detected capacity change from 0 to 512 [ 216.764711][T15842] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 216.798834][T15842] EXT4-fs (loop9): 1 truncate cleaned up [ 216.805775][T15842] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.820516][T15842] EXT4-fs error (device loop9): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.9.2671: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 216.856430][T15842] EXT4-fs error (device loop9) in ext4_delete_entry:2737: Corrupt filesystem [ 216.865777][T15842] EXT4-fs warning (device loop9): ext4_rename_delete:3729: inode #2: comm syz.9.2671: Deleting old file: nlink 4, error=-117 [ 216.893022][T10038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.017102][T15865] loop9: detected capacity change from 0 to 1024 [ 217.028542][T15865] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 217.050274][T15865] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 217.060372][T15865] EXT4-fs (loop9): orphan cleanup on readonly fs [ 217.070745][T15865] EXT4-fs error (device loop9): __ext4_get_inode_loc:4830: comm syz.9.2676: Invalid inode table block 0 in block_group 0 [ 217.089759][T15865] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 217.105250][T15865] EXT4-fs error (device loop9): ext4_quota_write:7375: inode #3: comm syz.9.2676: mark_inode_dirty error [ 217.117059][T15865] Quota error (device loop9): write_blk: dquota write failed [ 217.124561][T15865] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 217.134537][T15865] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.2676: Failed to acquire dquot type 0 [ 217.159815][T15865] EXT4-fs error (device loop9): __ext4_get_inode_loc:4830: comm syz.9.2676: Invalid inode table block 0 in block_group 0 [ 217.175634][T15870] lo speed is unknown, defaulting to 1000 [ 217.198205][T15865] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 217.199442][T15868] __nla_validate_parse: 6 callbacks suppressed [ 217.199471][T15868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2681'. [ 217.218430][T15865] EXT4-fs error (device loop9): ext4_ext_truncate:4475: inode #15: comm syz.9.2676: mark_inode_dirty error [ 217.222958][T15868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2681'. [ 217.244240][T15865] EXT4-fs error (device loop9): __ext4_get_inode_loc:4830: comm syz.9.2676: Invalid inode table block 0 in block_group 0 [ 217.280815][T15865] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 217.298970][T15865] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 217.318503][T15865] EXT4-fs error (device loop9): __ext4_get_inode_loc:4830: comm syz.9.2676: Invalid inode table block 0 in block_group 0 [ 217.362781][T15865] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 217.373387][T15865] EXT4-fs error (device loop9): ext4_truncate:4635: inode #15: comm syz.9.2676: mark_inode_dirty error [ 217.385193][T15865] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 217.394397][T15865] EXT4-fs (loop9): 1 truncate cleaned up [ 217.430342][T15865] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 217.451592][T15887] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2688'. [ 217.470790][T15885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2687'. [ 217.584920][T15885] lo speed is unknown, defaulting to 1000 [ 217.666844][T15898] tmpfs: Bad value for 'huge' [ 217.796506][T10038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.825444][T15900] loop3: detected capacity change from 0 to 1024 [ 217.832306][T15900] EXT4-fs: dax option not supported [ 217.865426][T15902] loop9: detected capacity change from 0 to 512 [ 217.899281][T15902] EXT4-fs (loop9): corrupt root inode, run e2fsck [ 217.910401][T15902] EXT4-fs (loop9): mount failed [ 217.925713][T15902] loop9: detected capacity change from 0 to 1024 [ 217.932666][T15902] EXT4-fs: inline encryption not supported [ 217.960874][T15902] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.026078][T15902] netlink: 'syz.9.2694': attribute type 4 has an invalid length. [ 218.047200][ T29] audit: type=1400 audit(1769633894.185:5822): avc: denied { append } for pid=15901 comm="syz.9.2694" path="/311/file1/cpu.stat" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 218.082749][T10038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.085244][T15911] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2696'. [ 218.155514][T15917] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2699'. [ 218.388868][T15930] tmpfs: Bad value for 'huge' [ 218.438773][T15931] loop2: detected capacity change from 0 to 1024 [ 218.452427][T15931] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 218.465891][T15931] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 218.475863][T15931] EXT4-fs (loop2): orphan cleanup on readonly fs [ 218.483250][T15931] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.2704: Invalid inode table block 0 in block_group 0 [ 218.519067][T15931] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 218.542225][T15931] EXT4-fs error (device loop2): ext4_quota_write:7375: inode #3: comm syz.2.2704: mark_inode_dirty error [ 218.559975][T15931] Quota error (device loop2): write_blk: dquota write failed [ 218.567635][T15931] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 218.577679][T15931] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2704: Failed to acquire dquot type 0 [ 218.589147][T15931] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.2704: Invalid inode table block 0 in block_group 0 [ 218.602467][T15931] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 218.614488][T15931] EXT4-fs error (device loop2): ext4_ext_truncate:4475: inode #15: comm syz.2.2704: mark_inode_dirty error [ 218.626808][T15931] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.2704: Invalid inode table block 0 in block_group 0 [ 218.640818][T15931] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 218.655325][T15933] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2706'. [ 218.687722][T15931] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 218.698332][T15931] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.2704: Invalid inode table block 0 in block_group 0 [ 218.727750][T15931] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 218.755102][T15931] EXT4-fs error (device loop2): ext4_truncate:4635: inode #15: comm syz.2.2704: mark_inode_dirty error [ 218.770613][T15931] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 218.779893][T15931] EXT4-fs (loop2): 1 truncate cleaned up [ 218.800704][T15931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 218.898690][T15959] tmpfs: Bad value for 'huge' [ 219.078086][ T29] audit: type=1326 audit(1769633895.225:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15970 comm="syz.9.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 219.101795][ T29] audit: type=1326 audit(1769633895.225:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15970 comm="syz.9.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 219.137435][ T29] audit: type=1326 audit(1769633895.225:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15970 comm="syz.9.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 219.209962][T15975] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2723'. [ 219.235971][T13598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.312888][T15987] loop9: detected capacity change from 0 to 128 [ 219.325856][T15987] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.342441][T15987] ext4 filesystem being mounted at /327/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 219.350241][T15990] netlink: 'syz.2.2725': attribute type 1 has an invalid length. [ 219.420291][T15987] FAULT_INJECTION: forcing a failure. [ 219.420291][T15987] name failslab, interval 1, probability 0, space 0, times 0 [ 219.433311][T15987] CPU: 1 UID: 0 PID: 15987 Comm: syz.9.2727 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 219.433357][T15987] Tainted: [W]=WARN [ 219.433364][T15987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.433398][T15987] Call Trace: [ 219.433404][T15987] [ 219.433414][T15987] __dump_stack+0x1d/0x30 [ 219.433448][T15987] dump_stack_lvl+0x95/0xd0 [ 219.433476][T15987] dump_stack+0x15/0x1b [ 219.433564][T15987] should_fail_ex+0x263/0x280 [ 219.433609][T15987] should_failslab+0x8c/0xb0 [ 219.433642][T15987] __kmalloc_noprof+0xb8/0x580 [ 219.433669][T15987] ? copy_splice_read+0xc2/0x6c0 [ 219.433788][T15987] copy_splice_read+0xc2/0x6c0 [ 219.433838][T15987] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 219.433912][T15987] splice_direct_to_actor+0x28f/0x670 [ 219.433950][T15987] ? __pfx_direct_splice_actor+0x10/0x10 [ 219.434042][T15987] do_splice_direct+0x119/0x1a0 [ 219.434064][T15987] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 219.434097][T15987] do_sendfile+0x382/0x650 [ 219.434158][T15987] __x64_sys_sendfile64+0x105/0x150 [ 219.434195][T15987] x64_sys_call+0x2db1/0x3000 [ 219.434230][T15987] do_syscall_64+0xc0/0x2a0 [ 219.434340][T15987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.434370][T15987] RIP: 0033:0x7f7e45e0aeb9 [ 219.434391][T15987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.434415][T15987] RSP: 002b:00007f7e44867028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 219.434452][T15987] RAX: ffffffffffffffda RBX: 00007f7e46085fa0 RCX: 00007f7e45e0aeb9 [ 219.434467][T15987] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 219.434481][T15987] RBP: 00007f7e44867090 R08: 0000000000000000 R09: 0000000000000000 [ 219.434499][T15987] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 219.434563][T15987] R13: 00007f7e46086038 R14: 00007f7e46085fa0 R15: 00007fffb19f0028 [ 219.434586][T15987] [ 219.638957][T15990] bond1: entered promiscuous mode [ 219.644038][T15990] bond1: entered allmulticast mode [ 219.649523][T15990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.706398][T10038] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.752072][T16000] 9pnet_fd: Insufficient options for proto=fd [ 219.795327][T16005] loop9: detected capacity change from 0 to 512 [ 219.806988][T16005] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 219.828678][T16008] loop3: detected capacity change from 0 to 512 [ 219.850046][T16005] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 219.864275][T16005] EXT4-fs (loop9): 1 truncate cleaned up [ 219.882921][T16008] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.2735: corrupted inode contents [ 219.897764][T16013] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 219.900221][T16005] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.906234][T16014] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 219.928495][T16008] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #3: comm syz.3.2735: mark_inode_dirty error [ 219.940613][T16008] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.2735: corrupted inode contents [ 219.956767][T16008] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.2735: mark_inode_dirty error [ 219.978059][T16016] FAULT_INJECTION: forcing a failure. [ 219.978059][T16016] name failslab, interval 1, probability 0, space 0, times 0 [ 219.990923][T16016] CPU: 1 UID: 0 PID: 16016 Comm: syz.0.2737 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 219.990965][T16016] Tainted: [W]=WARN [ 219.990975][T16016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.990992][T16016] Call Trace: [ 219.991001][T16016] [ 219.991011][T16016] __dump_stack+0x1d/0x30 [ 219.991044][T16016] dump_stack_lvl+0x95/0xd0 [ 219.991107][T16016] dump_stack+0x15/0x1b [ 219.991183][T16016] should_fail_ex+0x263/0x280 [ 219.991225][T16016] should_failslab+0x8c/0xb0 [ 219.991257][T16016] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 219.991294][T16016] ? __alloc_skb+0x2f0/0x4b0 [ 219.991348][T16016] ? __pfx_ipmr_hash_cmp+0x10/0x10 [ 219.991409][T16016] __alloc_skb+0x2f0/0x4b0 [ 219.991448][T16016] ? __alloc_skb+0x219/0x4b0 [ 219.991503][T16016] mroute_netlink_event+0x7b/0x110 [ 219.991597][T16016] ipmr_mfc_add+0x10c6/0x13d0 [ 219.991665][T16016] ip_mroute_setsockopt+0x743/0x980 [ 219.991764][T16016] do_ip_setsockopt+0xcea/0x2290 [ 219.991799][T16016] ip_setsockopt+0x58/0x110 [ 219.991882][T16016] raw_setsockopt+0xbd/0x150 [ 219.991920][T16016] sock_common_setsockopt+0x69/0x80 [ 219.992032][T16016] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 219.992094][T16016] __sys_setsockopt+0x184/0x200 [ 219.992179][T16016] __x64_sys_setsockopt+0x64/0x80 [ 219.992219][T16016] x64_sys_call+0x21d5/0x3000 [ 219.992253][T16016] do_syscall_64+0xc0/0x2a0 [ 219.992319][T16016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.992349][T16016] RIP: 0033:0x7f00b58eaeb9 [ 219.992426][T16016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.992451][T16016] RSP: 002b:00007f00b4347028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 219.992476][T16016] RAX: ffffffffffffffda RBX: 00007f00b5b65fa0 RCX: 00007f00b58eaeb9 [ 219.992502][T16016] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000003 [ 219.992518][T16016] RBP: 00007f00b4347090 R08: 000000000000003c R09: 0000000000000000 [ 219.992540][T16016] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 219.992553][T16016] R13: 00007f00b5b66038 R14: 00007f00b5b65fa0 R15: 00007ffd316350d8 [ 219.992579][T16016] [ 219.992740][T16008] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2735: Failed to acquire dquot type 0 [ 220.225910][T16008] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.2735: corrupted inode contents [ 220.273049][T10038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.277399][T16008] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #16: comm syz.3.2735: mark_inode_dirty error [ 220.302774][T16008] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.2735: corrupted inode contents [ 220.317181][T16008] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.2735: mark_inode_dirty error [ 220.328832][T16028] FAULT_INJECTION: forcing a failure. [ 220.328832][T16028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.342139][T16028] CPU: 0 UID: 0 PID: 16028 Comm: syz.9.2741 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 220.342178][T16028] Tainted: [W]=WARN [ 220.342186][T16028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.342318][T16028] Call Trace: [ 220.342328][T16028] [ 220.342339][T16028] __dump_stack+0x1d/0x30 [ 220.342373][T16028] dump_stack_lvl+0x95/0xd0 [ 220.342513][T16028] dump_stack+0x15/0x1b [ 220.342535][T16028] should_fail_ex+0x263/0x280 [ 220.342573][T16028] should_fail+0xb/0x20 [ 220.342704][T16028] should_fail_usercopy+0x1a/0x20 [ 220.342743][T16028] _copy_to_user+0x20/0xa0 [ 220.342765][T16028] simple_read_from_buffer+0xb5/0x130 [ 220.342863][T16028] proc_fail_nth_read+0x10e/0x150 [ 220.342969][T16028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.342996][T16028] vfs_read+0x1ab/0x7f0 [ 220.343014][T16028] ? __rcu_read_unlock+0x4e/0x70 [ 220.343102][T16028] ? __fget_files+0x184/0x1c0 [ 220.343130][T16028] ? mutex_lock+0x57/0x90 [ 220.343161][T16028] ksys_read+0xdc/0x1a0 [ 220.343187][T16028] __x64_sys_read+0x40/0x50 [ 220.343278][T16028] x64_sys_call+0x2889/0x3000 [ 220.343312][T16028] do_syscall_64+0xc0/0x2a0 [ 220.343403][T16028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.343435][T16028] RIP: 0033:0x7f7e45dcb78e [ 220.343457][T16028] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 220.343476][T16028] RSP: 002b:00007f7e44866fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.343549][T16028] RAX: ffffffffffffffda RBX: 00007f7e448676c0 RCX: 00007f7e45dcb78e [ 220.343568][T16028] RDX: 000000000000000f RSI: 00007f7e448670a0 RDI: 0000000000000004 [ 220.343586][T16028] RBP: 00007f7e44867090 R08: 0000000000000000 R09: 0000000000000000 [ 220.343667][T16028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.343685][T16028] R13: 00007f7e46086038 R14: 00007f7e46085fa0 R15: 00007fffb19f0028 [ 220.343712][T16028] [ 220.345383][T16008] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.2735: corrupted inode contents [ 220.562589][T16008] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 220.571890][T16008] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.2735: corrupted inode contents [ 220.583968][T16008] EXT4-fs error (device loop3): ext4_truncate:4635: inode #16: comm syz.3.2735: mark_inode_dirty error [ 220.603272][T16039] loop9: detected capacity change from 0 to 128 [ 220.615629][T16039] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.628161][T16008] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 220.639653][T16008] EXT4-fs (loop3): 1 truncate cleaned up [ 220.646004][T16008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.659067][T16039] ext4 filesystem being mounted at /331/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 220.692827][T16008] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.733804][T16008] FAULT_INJECTION: forcing a failure. [ 220.733804][T16008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.747031][T16008] CPU: 1 UID: 0 PID: 16008 Comm: syz.3.2735 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 220.747074][T16008] Tainted: [W]=WARN [ 220.747085][T16008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.747103][T16008] Call Trace: [ 220.747112][T16008] [ 220.747123][T16008] __dump_stack+0x1d/0x30 [ 220.747156][T16008] dump_stack_lvl+0x95/0xd0 [ 220.747255][T16008] dump_stack+0x15/0x1b [ 220.747348][T16008] should_fail_ex+0x263/0x280 [ 220.747391][T16008] should_fail+0xb/0x20 [ 220.747481][T16008] should_fail_usercopy+0x1a/0x20 [ 220.747520][T16008] strncpy_from_user+0x27/0x250 [ 220.747556][T16008] getname_flags+0xad/0x3b0 [ 220.747620][T16008] path_setxattrat+0x223/0x310 [ 220.747673][T16008] __x64_sys_setxattr+0x6e/0x90 [ 220.747758][T16008] x64_sys_call+0xf1e/0x3000 [ 220.747793][T16008] do_syscall_64+0xc0/0x2a0 [ 220.747835][T16008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.747867][T16008] RIP: 0033:0x7f463f14aeb9 [ 220.747893][T16008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.747939][T16008] RSP: 002b:00007f463dba7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 220.747966][T16008] RAX: ffffffffffffffda RBX: 00007f463f3c5fa0 RCX: 00007f463f14aeb9 [ 220.747986][T16008] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000200000000280 [ 220.748003][T16008] RBP: 00007f463dba7090 R08: 0000000000000002 R09: 0000000000000000 [ 220.748022][T16008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.748054][T16008] R13: 00007f463f3c6038 R14: 00007f463f3c5fa0 R15: 00007ffd303d10a8 [ 220.748081][T16008] [ 220.936751][T10038] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.970299][T12185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.009712][T16057] netlink: 360 bytes leftover after parsing attributes in process `syz.9.2755'. [ 221.062150][T16059] loop2: detected capacity change from 0 to 1024 [ 221.089411][T16059] ext4: Bad value for 'journal_dev' [ 221.339257][T16101] xt_limit: Overflow, try lower: 268435456/134217728 [ 221.472658][T16115] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2777'. [ 221.564382][T16128] tmpfs: Bad value for 'huge' [ 221.654472][T16143] netlink: 'syz.3.2788': attribute type 10 has an invalid length. [ 221.664360][T16143] team0: Port device dummy0 added [ 221.670548][T16143] netlink: 'syz.3.2788': attribute type 10 has an invalid length. [ 221.681630][T16143] team0: Port device dummy0 removed [ 221.689546][T16143] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 221.780309][T16158] loop3: detected capacity change from 0 to 128 [ 221.817006][T16158] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.829994][T16158] ext4 filesystem being mounted at /216/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 221.877461][T12185] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.903496][ T5268] hid_parser_main: 8 callbacks suppressed [ 221.903519][ T5268] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 221.916952][ T5268] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 221.924765][ T5268] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 221.932326][ T5268] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 221.939879][ T5268] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 221.947398][ T5268] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 221.954839][ T5268] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 221.962338][ T5268] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 221.969840][ T5268] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 221.977358][ T5268] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 221.986104][ T5268] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 222.115658][T16174] tmpfs: Bad value for 'huge' [ 222.185181][T16179] team0: Cannot enslave team device to itself [ 222.191419][T16179] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 222.216356][T16181] __nla_validate_parse: 2 callbacks suppressed [ 222.216374][T16181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2802'. [ 222.239344][T16181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.253002][T16181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.345931][T16192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2807'. [ 222.349981][T16191] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2806'. [ 222.427468][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 222.427485][ T29] audit: type=1400 audit(1769633898.555:5997): avc: denied { map } for pid=16189 comm="syz.5.2806" path="socket:[50182]" dev="sockfs" ino=50182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.584812][T16209] loop2: detected capacity change from 0 to 512 [ 222.609795][T16212] bridge0: port 3(macvtap1) entered blocking state [ 222.616476][T16212] bridge0: port 3(macvtap1) entered disabled state [ 222.625038][T16209] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2811: couldn't read orphan inode 26 (err -116) [ 222.637601][T16212] macvtap1: entered allmulticast mode [ 222.637802][T16209] EXT4-fs (loop2): Remounting filesystem read-only [ 222.643030][T16212] bridge0: entered allmulticast mode [ 222.644062][T16212] macvtap1: left allmulticast mode [ 222.655546][T16209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.660020][T16212] bridge0: left allmulticast mode [ 222.677867][T16209] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.701384][T13598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.751894][T16221] tmpfs: Bad value for 'huge' [ 222.786593][ T29] audit: type=1400 audit(1769633898.925:5998): avc: denied { read } for pid=16223 comm="syz.3.2816" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 222.786707][ T29] audit: type=1400 audit(1769633898.925:5999): avc: denied { open } for pid=16223 comm="syz.3.2816" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 222.918920][T16231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2819'. [ 222.968000][ T29] audit: type=1326 audit(1769633899.115:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.9.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 223.011601][ T29] audit: type=1326 audit(1769633899.115:6001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.9.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 223.035699][ T29] audit: type=1326 audit(1769633899.115:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.9.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 223.059411][ T29] audit: type=1326 audit(1769633899.115:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.9.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 223.083098][ T29] audit: type=1326 audit(1769633899.115:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.9.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 223.106827][ T29] audit: type=1326 audit(1769633899.115:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.9.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 223.130695][ T29] audit: type=1326 audit(1769633899.115:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.9.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 223.193020][ T5268] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 223.265716][T16251] fido_id[16251]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 223.294192][T16259] tmpfs: Bad value for 'huge' [ 223.312797][T16261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2832'. [ 223.381738][T16266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2834'. [ 223.419609][T16272] loop9: detected capacity change from 0 to 512 [ 223.460478][T16272] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 223.468698][T16272] EXT4-fs (loop9): orphan cleanup on readonly fs [ 223.485655][T16272] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.2837: Failed to acquire dquot type 1 [ 223.497900][T16272] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2837: bg 0: block 40: padding at end of block bitmap is not set [ 223.531177][T16272] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 223.540324][T16272] EXT4-fs (loop9): 1 truncate cleaned up [ 223.546847][T16272] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 223.579754][T16278] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 223.735883][T16291] serio: Serial port ptm0 [ 223.754191][T16289] loop2: detected capacity change from 0 to 8192 [ 223.761069][T10038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.804538][T16296] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2844'. [ 223.813138][ T3983] loop2: p3 p4 < > [ 223.817758][ T3983] loop2: p3 start 458496 is beyond EOD, truncated [ 223.826717][T16289] loop2: p3 p4 < > [ 223.831167][T16289] loop2: p3 start 458496 is beyond EOD, truncated [ 223.877844][ T3983] udevd[3983]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 223.896555][ T3983] udevd[3983]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 223.922942][T16291] serio: Serial port ptm0 [ 223.937752][T16304] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.950817][T16304] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2848'. [ 223.986408][T16308] sctp: [Deprecated]: syz.9.2850 (pid 16308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.986408][T16308] Use struct sctp_sack_info instead [ 224.023163][T16312] FAULT_INJECTION: forcing a failure. [ 224.023163][T16312] name failslab, interval 1, probability 0, space 0, times 0 [ 224.036034][T16312] CPU: 1 UID: 0 PID: 16312 Comm: syz.0.2851 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 224.036079][T16312] Tainted: [W]=WARN [ 224.036141][T16312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.036159][T16312] Call Trace: [ 224.036168][T16312] [ 224.036178][T16312] __dump_stack+0x1d/0x30 [ 224.036279][T16312] dump_stack_lvl+0x95/0xd0 [ 224.036304][T16312] dump_stack+0x15/0x1b [ 224.036405][T16312] should_fail_ex+0x263/0x280 [ 224.036449][T16312] should_failslab+0x8c/0xb0 [ 224.036483][T16312] kmem_cache_alloc_noprof+0x68/0x490 [ 224.036563][T16312] ? skb_clone+0x151/0x1f0 [ 224.036591][T16312] skb_clone+0x151/0x1f0 [ 224.036614][T16312] nfnetlink_rcv+0x316/0x1720 [ 224.036649][T16312] ? __kfree_skb+0x109/0x150 [ 224.036686][T16312] ? consume_skb+0x49/0x140 [ 224.036777][T16312] ? nlmon_xmit+0x4f/0x60 [ 224.036822][T16312] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 224.036918][T16312] ? __dev_queue_xmit+0x139a/0x1f20 [ 224.036964][T16312] ? __dev_queue_xmit+0x148/0x1f20 [ 224.037011][T16312] ? ref_tracker_free+0x37d/0x3e0 [ 224.037066][T16312] netlink_unicast+0x5c0/0x690 [ 224.037189][T16312] netlink_sendmsg+0x5c8/0x6f0 [ 224.037237][T16312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.037270][T16312] ____sys_sendmsg+0x5af/0x600 [ 224.037299][T16312] ___sys_sendmsg+0x195/0x1e0 [ 224.037414][T16312] __x64_sys_sendmsg+0xd4/0x160 [ 224.037444][T16312] x64_sys_call+0x17ba/0x3000 [ 224.037588][T16312] do_syscall_64+0xc0/0x2a0 [ 224.037686][T16312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.037715][T16312] RIP: 0033:0x7f00b58eaeb9 [ 224.037734][T16312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.037820][T16312] RSP: 002b:00007f00b4347028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.037846][T16312] RAX: ffffffffffffffda RBX: 00007f00b5b65fa0 RCX: 00007f00b58eaeb9 [ 224.037863][T16312] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 224.037955][T16312] RBP: 00007f00b4347090 R08: 0000000000000000 R09: 0000000000000000 [ 224.037972][T16312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.037985][T16312] R13: 00007f00b5b66038 R14: 00007f00b5b65fa0 R15: 00007ffd316350d8 [ 224.038008][T16312] [ 224.053545][ T5268] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 224.351959][T16325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2856'. [ 224.401926][T16318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2853'. [ 224.432246][T16332] netlink: 'syz.3.2860': attribute type 10 has an invalid length. [ 224.450295][T16332] team0: Port device geneve1 added [ 224.455863][T15799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.487110][T15799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.506222][T16337] kernel profiling enabled (shift: 6) [ 224.621321][T15799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.632353][T15799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.666793][T16353] loop9: detected capacity change from 0 to 512 [ 224.707072][T16353] EXT4-fs: Invalid want_extra_isize 9 [ 224.829321][T16367] tmpfs: Bad value for 'huge' [ 225.428771][T16391] FAULT_INJECTION: forcing a failure. [ 225.428771][T16391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.441918][T16391] CPU: 0 UID: 0 PID: 16391 Comm: syz.3.2880 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 225.442039][T16391] Tainted: [W]=WARN [ 225.442049][T16391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.442112][T16391] Call Trace: [ 225.442119][T16391] [ 225.442128][T16391] __dump_stack+0x1d/0x30 [ 225.442154][T16391] dump_stack_lvl+0x95/0xd0 [ 225.442183][T16391] dump_stack+0x15/0x1b [ 225.442224][T16391] should_fail_ex+0x263/0x280 [ 225.442305][T16391] should_fail+0xb/0x20 [ 225.442339][T16391] should_fail_usercopy+0x1a/0x20 [ 225.442375][T16391] _copy_from_iter+0xcf/0xea0 [ 225.442467][T16391] ? __alloc_skb+0x397/0x4b0 [ 225.442498][T16391] ? __alloc_skb+0x219/0x4b0 [ 225.442532][T16391] netlink_sendmsg+0x4ae/0x6f0 [ 225.442558][T16391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.442591][T16391] ____sys_sendmsg+0x5af/0x600 [ 225.442623][T16391] ___sys_sendmsg+0x195/0x1e0 [ 225.442663][T16391] __x64_sys_sendmsg+0xd4/0x160 [ 225.442691][T16391] x64_sys_call+0x17ba/0x3000 [ 225.442762][T16391] do_syscall_64+0xc0/0x2a0 [ 225.442805][T16391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.442869][T16391] RIP: 0033:0x7f463f14aeb9 [ 225.442892][T16391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.442924][T16391] RSP: 002b:00007f463dba7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.442951][T16391] RAX: ffffffffffffffda RBX: 00007f463f3c5fa0 RCX: 00007f463f14aeb9 [ 225.442966][T16391] RDX: 0000000020000090 RSI: 00002000000000c0 RDI: 0000000000000003 [ 225.442980][T16391] RBP: 00007f463dba7090 R08: 0000000000000000 R09: 0000000000000000 [ 225.443029][T16391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.443046][T16391] R13: 00007f463f3c6038 R14: 00007f463f3c5fa0 R15: 00007ffd303d10a8 [ 225.443074][T16391] [ 225.734429][T16403] netlink: 'syz.9.2886': attribute type 11 has an invalid length. [ 225.744231][T16403] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 226.546727][T13681] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 226.725213][T16477] tun0: tun_chr_ioctl cmd 1074025675 [ 226.730627][T16477] tun0: persist enabled [ 226.735075][T16477] tun0: tun_chr_ioctl cmd 1074025675 [ 226.740457][T16477] tun0: persist enabled [ 226.766644][T16479] netlink: 'syz.5.2918': attribute type 1 has an invalid length. [ 226.827663][T16488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13332 sclass=netlink_route_socket pid=16488 comm=syz.5.2918 [ 227.348955][T16507] tmpfs: Bad value for 'huge' [ 227.375921][T16509] loop2: detected capacity change from 0 to 1764 [ 227.457674][T16515] loop9: detected capacity change from 0 to 512 [ 227.464452][T16515] ext4: Bad value for 'barrier' [ 227.504887][T16518] loop2: detected capacity change from 0 to 512 [ 227.575315][T16528] __nla_validate_parse: 18 callbacks suppressed [ 227.575336][T16528] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2937'. [ 227.626755][T16530] FAULT_INJECTION: forcing a failure. [ 227.626755][T16530] name failslab, interval 1, probability 0, space 0, times 0 [ 227.639507][T16530] CPU: 0 UID: 0 PID: 16530 Comm: syz.2.2938 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 227.639555][T16530] Tainted: [W]=WARN [ 227.639563][T16530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.639580][T16530] Call Trace: [ 227.639665][T16530] [ 227.639673][T16530] __dump_stack+0x1d/0x30 [ 227.639703][T16530] dump_stack_lvl+0x95/0xd0 [ 227.639726][T16530] dump_stack+0x15/0x1b [ 227.639753][T16530] should_fail_ex+0x263/0x280 [ 227.639836][T16530] should_failslab+0x8c/0xb0 [ 227.639865][T16530] __kvmalloc_node_noprof+0x148/0x680 [ 227.639902][T16530] ? file_tty_write+0x1a3/0x690 [ 227.639990][T16530] ? mutex_trylock+0x81/0xc0 [ 227.640076][T16530] file_tty_write+0x1a3/0x690 [ 227.640111][T16530] tty_write+0x25/0x30 [ 227.640139][T16530] do_iter_readv_writev+0x4fd/0x5a0 [ 227.640165][T16530] vfs_writev+0x2e1/0x900 [ 227.640204][T16530] do_writev+0xe9/0x210 [ 227.640266][T16530] __x64_sys_writev+0x45/0x50 [ 227.640372][T16530] x64_sys_call+0x1ba5/0x3000 [ 227.640406][T16530] do_syscall_64+0xc0/0x2a0 [ 227.640446][T16530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.640613][T16530] RIP: 0033:0x7f5c92adaeb9 [ 227.640660][T16530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.640685][T16530] RSP: 002b:00007f5c91537028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 227.640712][T16530] RAX: ffffffffffffffda RBX: 00007f5c92d55fa0 RCX: 00007f5c92adaeb9 [ 227.640731][T16530] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 227.640756][T16530] RBP: 00007f5c91537090 R08: 0000000000000000 R09: 0000000000000000 [ 227.640852][T16530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.640868][T16530] R13: 00007f5c92d56038 R14: 00007f5c92d55fa0 R15: 00007ffd4684c048 [ 227.640966][T16530] [ 227.725184][T16533] x_tables: unsorted underflow at hook 2 [ 227.863249][T16535] sg_write: data in/out 26332/1 bytes for SCSI command 0xbd-- guessing data in; [ 227.863249][T16535] program syz.0.2934 not setting count and/or reply_len properly [ 227.928166][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2941'. [ 227.968381][T16547] netlink: 'syz.0.2943': attribute type 1 has an invalid length. [ 227.982992][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 227.983011][ T29] audit: type=1326 audit(1769633904.125:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.5.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb26bdaeb9 code=0x7ffc0000 [ 228.012914][ T29] audit: type=1326 audit(1769633904.125:6104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.5.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb26bdaeb9 code=0x7ffc0000 [ 228.036480][ T29] audit: type=1326 audit(1769633904.125:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.5.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ffb26bdaeb9 code=0x7ffc0000 [ 228.060022][ T29] audit: type=1326 audit(1769633904.125:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.5.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb26bdaeb9 code=0x7ffc0000 [ 228.083578][ T29] audit: type=1326 audit(1769633904.125:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.5.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb26bdaeb9 code=0x7ffc0000 [ 228.146110][ T29] audit: type=1326 audit(1769633904.225:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.5.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ffb26bdaeb9 code=0x7ffc0000 [ 228.169907][ T29] audit: type=1326 audit(1769633904.225:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.5.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb26bdaeb9 code=0x7ffc0000 [ 228.193636][ T29] audit: type=1326 audit(1769633904.225:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.5.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb26bdaeb9 code=0x7ffc0000 [ 228.254281][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'. [ 228.288288][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'. [ 228.323308][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'. [ 228.364802][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'. [ 228.434779][T16576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16576 comm=syz.5.2952 [ 228.617949][T16596] netlink: 'syz.9.2955': attribute type 15 has an invalid length. [ 228.676457][ T29] audit: type=1326 audit(1769633904.815:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16595 comm="syz.3.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463f14aeb9 code=0x7ffc0000 [ 228.700448][ T29] audit: type=1326 audit(1769633904.815:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16595 comm="syz.3.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f463f14aeb9 code=0x7ffc0000 [ 229.079222][T16605] loop3: detected capacity change from 0 to 512 [ 229.082892][T16609] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2963'. [ 229.098479][T16605] ext4: Unknown parameter 'nouser_xattr' [ 229.109742][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2961'. [ 229.123299][T16605] vlan2: entered allmulticast mode [ 229.128549][T16605] bridge_slave_0: entered allmulticast mode [ 229.221511][T16621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2969'. [ 229.327593][T16615] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.338700][T16615] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.454258][T16637] loop2: detected capacity change from 0 to 1024 [ 229.477821][T16637] ext4: Bad value for 'barrier' [ 229.502290][T16615] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.513922][T16615] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.587839][T16628] netlink: 'syz.5.2970': attribute type 3 has an invalid length. [ 229.622664][T16615] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.633485][T16615] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.705059][T16615] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.715326][T16615] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.797535][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2982'. [ 229.905556][ T52] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.913930][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.938042][T16670] FAULT_INJECTION: forcing a failure. [ 229.938042][T16670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.951248][T16670] CPU: 1 UID: 0 PID: 16670 Comm: syz.2.2985 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 229.951292][T16670] Tainted: [W]=WARN [ 229.951302][T16670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.951356][T16670] Call Trace: [ 229.951365][T16670] [ 229.951374][T16670] __dump_stack+0x1d/0x30 [ 229.951406][T16670] dump_stack_lvl+0x95/0xd0 [ 229.951471][T16670] dump_stack+0x15/0x1b [ 229.951499][T16670] should_fail_ex+0x263/0x280 [ 229.951541][T16670] should_fail+0xb/0x20 [ 229.951587][T16670] should_fail_usercopy+0x1a/0x20 [ 229.951697][T16670] _copy_from_iter+0xcf/0xea0 [ 229.951743][T16670] ? __alloc_skb+0x397/0x4b0 [ 229.951858][T16670] ? __alloc_skb+0x219/0x4b0 [ 229.951897][T16670] netlink_sendmsg+0x4ae/0x6f0 [ 229.951926][T16670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.951949][T16670] ____sys_sendmsg+0x5af/0x600 [ 229.952023][T16670] ___sys_sendmsg+0x195/0x1e0 [ 229.952063][T16670] __x64_sys_sendmsg+0xd4/0x160 [ 229.952095][T16670] x64_sys_call+0x17ba/0x3000 [ 229.952129][T16670] do_syscall_64+0xc0/0x2a0 [ 229.952211][T16670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.952240][T16670] RIP: 0033:0x7f5c92adaeb9 [ 229.952261][T16670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.952294][T16670] RSP: 002b:00007f5c91516028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.952316][T16670] RAX: ffffffffffffffda RBX: 00007f5c92d56090 RCX: 00007f5c92adaeb9 [ 229.952335][T16670] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 229.952353][T16670] RBP: 00007f5c91516090 R08: 0000000000000000 R09: 0000000000000000 [ 229.952370][T16670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.952387][T16670] R13: 00007f5c92d56128 R14: 00007f5c92d56090 R15: 00007ffd4684c048 [ 229.952412][T16670] [ 230.027008][T13681] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.155290][T13681] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.223178][T13681] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.231557][T13681] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.247464][T13681] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.255765][T13681] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.285778][T16683] loop3: detected capacity change from 0 to 128 [ 230.310448][T16683] msdos: Unknown parameter '{Å1º' [ 230.378621][T16688] tmpfs: Bad value for 'huge' [ 230.513481][T16701] lo speed is unknown, defaulting to 1000 [ 230.563112][T16711] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 230.574196][T16711] netlink: 'syz.5.3003': attribute type 4 has an invalid length. [ 230.616047][T16711] netlink: 'syz.5.3003': attribute type 4 has an invalid length. [ 230.743641][T16720] 9p: Bad value for 'wfdno' [ 231.015610][T16740] loop9: detected capacity change from 0 to 1024 [ 231.022957][T16740] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 231.045235][T16740] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 231.217532][T16740] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 231.225814][T16740] EXT4-fs (loop9): orphan cleanup on readonly fs [ 231.232856][T16740] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.2999: Freeing blocks not in datazone - block = 0, count = 4096 [ 231.409294][T16740] EXT4-fs (loop9): Remounting filesystem read-only [ 231.416060][T16740] EXT4-fs (loop9): 1 orphan inode deleted [ 231.444057][T16740] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.461518][T16750] tipc: Started in network mode [ 231.466443][T16750] tipc: Node identity 84e, cluster identity 4711 [ 231.472848][T16750] tipc: Node number set to 2126 [ 231.572017][T16701] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 231.636111][ T10] hid_parser_main: 44 callbacks suppressed [ 231.636131][ T10] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 231.649723][ T10] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 231.657137][ T10] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 231.664581][ T10] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 231.672102][ T10] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 231.679647][ T10] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 231.687169][ T10] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 231.694728][ T10] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 231.702184][ T10] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 231.709662][ T10] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 231.746237][ T10] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 231.794900][T16764] FAULT_INJECTION: forcing a failure. [ 231.794900][T16764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.808413][T16764] CPU: 1 UID: 0 PID: 16764 Comm: syz.3.3020 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 231.808467][T16764] Tainted: [W]=WARN [ 231.808477][T16764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.808493][T16764] Call Trace: [ 231.808500][T16764] [ 231.808570][T16764] __dump_stack+0x1d/0x30 [ 231.808604][T16764] dump_stack_lvl+0x95/0xd0 [ 231.808634][T16764] dump_stack+0x15/0x1b [ 231.808662][T16764] should_fail_ex+0x263/0x280 [ 231.808705][T16764] should_fail+0xb/0x20 [ 231.808744][T16764] should_fail_usercopy+0x1a/0x20 [ 231.808786][T16764] _copy_from_iter+0xcf/0xea0 [ 231.808906][T16764] ? __build_skb_around+0x164/0x1c0 [ 231.809014][T16764] ? __build_skb+0x59/0x70 [ 231.809052][T16764] ? is_vmalloc_addr+0x37/0x90 [ 231.809137][T16764] netlink_sendmsg+0x4ae/0x6f0 [ 231.809166][T16764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.809191][T16764] __sys_sendto+0x470/0x4d0 [ 231.809231][T16764] __x64_sys_sendto+0x76/0x90 [ 231.809350][T16764] x64_sys_call+0x29a7/0x3000 [ 231.809454][T16764] do_syscall_64+0xc0/0x2a0 [ 231.809495][T16764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.809525][T16764] RIP: 0033:0x7f463f14aeb9 [ 231.809546][T16764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.809646][T16764] RSP: 002b:00007f463dba7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 231.809673][T16764] RAX: ffffffffffffffda RBX: 00007f463f3c5fa0 RCX: 00007f463f14aeb9 [ 231.809688][T16764] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000003 [ 231.809704][T16764] RBP: 00007f463dba7090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 231.809718][T16764] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 231.809732][T16764] R13: 00007f463f3c6038 R14: 00007f463f3c5fa0 R15: 00007ffd303d10a8 [ 231.809799][T16764] [ 231.810327][T16766] netlink: 'syz.5.3017': attribute type 21 has an invalid length. [ 232.025767][T10038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.084542][T16772] FAULT_INJECTION: forcing a failure. [ 232.084542][T16772] name failslab, interval 1, probability 0, space 0, times 0 [ 232.097549][T16772] CPU: 1 UID: 0 PID: 16772 Comm: syz.9.3021 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 232.097607][T16772] Tainted: [W]=WARN [ 232.097617][T16772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.097635][T16772] Call Trace: [ 232.097644][T16772] [ 232.097654][T16772] __dump_stack+0x1d/0x30 [ 232.097686][T16772] dump_stack_lvl+0x95/0xd0 [ 232.097715][T16772] dump_stack+0x15/0x1b [ 232.097776][T16772] should_fail_ex+0x263/0x280 [ 232.097817][T16772] should_failslab+0x8c/0xb0 [ 232.097915][T16772] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 232.097965][T16772] ? __alloc_skb+0x2f0/0x4b0 [ 232.097998][T16772] __alloc_skb+0x2f0/0x4b0 [ 232.098044][T16772] ? __alloc_skb+0x219/0x4b0 [ 232.098084][T16772] pfkey_sendmsg+0x75d/0x9b0 [ 232.098128][T16772] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 232.098157][T16772] ____sys_sendmsg+0x5af/0x600 [ 232.098264][T16772] ___sys_sendmsg+0x195/0x1e0 [ 232.098315][T16772] __x64_sys_sendmsg+0xd4/0x160 [ 232.098342][T16772] x64_sys_call+0x17ba/0x3000 [ 232.098376][T16772] do_syscall_64+0xc0/0x2a0 [ 232.098476][T16772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.098504][T16772] RIP: 0033:0x7f7e45e0aeb9 [ 232.098525][T16772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.098549][T16772] RSP: 002b:00007f7e44867028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.098617][T16772] RAX: ffffffffffffffda RBX: 00007f7e46085fa0 RCX: 00007f7e45e0aeb9 [ 232.098637][T16772] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 232.098655][T16772] RBP: 00007f7e44867090 R08: 0000000000000000 R09: 0000000000000000 [ 232.098672][T16772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.098689][T16772] R13: 00007f7e46086038 R14: 00007f7e46085fa0 R15: 00007fffb19f0028 [ 232.098711][T16772] [ 232.378164][T16779] loop2: detected capacity change from 0 to 512 [ 232.391169][T16779] ext4: Unknown parameter 'veth1_macvtap' [ 232.556286][T16785] FAULT_INJECTION: forcing a failure. [ 232.556286][T16785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.569493][T16785] CPU: 1 UID: 0 PID: 16785 Comm: syz.0.3026 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 232.569533][T16785] Tainted: [W]=WARN [ 232.569596][T16785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.569613][T16785] Call Trace: [ 232.569622][T16785] [ 232.569631][T16785] __dump_stack+0x1d/0x30 [ 232.569680][T16785] dump_stack_lvl+0x95/0xd0 [ 232.569752][T16785] dump_stack+0x15/0x1b [ 232.569822][T16785] should_fail_ex+0x263/0x280 [ 232.569855][T16785] should_fail+0xb/0x20 [ 232.569904][T16785] should_fail_usercopy+0x1a/0x20 [ 232.569945][T16785] _copy_from_iter+0xcf/0xea0 [ 232.570059][T16785] ? __alloc_skb+0x397/0x4b0 [ 232.570169][T16785] ? __alloc_skb+0x219/0x4b0 [ 232.570249][T16785] netlink_sendmsg+0x4ae/0x6f0 [ 232.570354][T16785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.570374][T16785] ____sys_sendmsg+0x5af/0x600 [ 232.570400][T16785] ___sys_sendmsg+0x195/0x1e0 [ 232.570458][T16785] __x64_sys_sendmsg+0xd4/0x160 [ 232.570494][T16785] x64_sys_call+0x17ba/0x3000 [ 232.570524][T16785] do_syscall_64+0xc0/0x2a0 [ 232.570556][T16785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.570633][T16785] RIP: 0033:0x7f00b58eaeb9 [ 232.570653][T16785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.570679][T16785] RSP: 002b:00007f00b4347028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.570743][T16785] RAX: ffffffffffffffda RBX: 00007f00b5b65fa0 RCX: 00007f00b58eaeb9 [ 232.570763][T16785] RDX: 0000000000040404 RSI: 0000200000000240 RDI: 0000000000000003 [ 232.570860][T16785] RBP: 00007f00b4347090 R08: 0000000000000000 R09: 0000000000000000 [ 232.570878][T16785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.570895][T16785] R13: 00007f00b5b66038 R14: 00007f00b5b65fa0 R15: 00007ffd316350d8 [ 232.570922][T16785] [ 232.797825][T16792] tmpfs: Bad value for 'huge' [ 232.928531][T16796] netlink: 'syz.5.3030': attribute type 29 has an invalid length. [ 233.040647][T16802] __nla_validate_parse: 8 callbacks suppressed [ 233.040670][T16802] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3031'. [ 233.055980][T16802] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3031'. [ 233.120737][T16805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3032'. [ 233.132093][T16805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3032'. [ 233.330642][T16813] loop9: detected capacity change from 0 to 1024 [ 233.349692][T16813] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 233.359113][T16813] System zones: 0-1, 3-36 [ 233.365608][T16813] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.3034: bad orphan inode 134217728 [ 233.377601][T16813] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.523441][ T10] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 233.760624][T16826] loop2: detected capacity change from 0 to 764 [ 233.767216][T16826] iso9660: Unknown parameter '²' [ 233.788764][T10038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.842243][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 233.842261][ T29] audit: type=1326 audit(1769633909.985:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 233.872561][ T29] audit: type=1326 audit(1769633909.985:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 233.896086][ T29] audit: type=1326 audit(1769633909.985:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 233.919980][ T29] audit: type=1326 audit(1769633909.985:6221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 233.943859][ T29] audit: type=1326 audit(1769633909.985:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 233.967602][ T29] audit: type=1326 audit(1769633909.995:6223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 233.991426][ T29] audit: type=1326 audit(1769633909.995:6224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 234.015261][ T29] audit: type=1326 audit(1769633909.995:6225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 234.038866][ T29] audit: type=1326 audit(1769633909.995:6226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 234.063090][ T29] audit: type=1326 audit(1769633909.995:6227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f7e45e0aeb9 code=0x7ffc0000 [ 234.389455][T16861] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3050'. [ 234.417593][T16863] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3051'. [ 234.426628][T16863] netlink: 35 bytes leftover after parsing attributes in process `syz.5.3051'. [ 234.435665][T16863] netlink: 'syz.5.3051': attribute type 6 has an invalid length. [ 234.443533][T16863] netlink: 'syz.5.3051': attribute type 5 has an invalid length. [ 234.451410][T16863] netlink: 35 bytes leftover after parsing attributes in process `syz.5.3051'. [ 234.537138][T16869] FAULT_INJECTION: forcing a failure. [ 234.537138][T16869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.550410][T16869] CPU: 1 UID: 0 PID: 16869 Comm: syz.3.3053 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 234.550508][T16869] Tainted: [W]=WARN [ 234.550517][T16869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.550534][T16869] Call Trace: [ 234.550543][T16869] [ 234.550553][T16869] __dump_stack+0x1d/0x30 [ 234.550579][T16869] dump_stack_lvl+0x95/0xd0 [ 234.550604][T16869] dump_stack+0x15/0x1b [ 234.550624][T16869] should_fail_ex+0x263/0x280 [ 234.550663][T16869] should_fail+0xb/0x20 [ 234.550699][T16869] should_fail_usercopy+0x1a/0x20 [ 234.550758][T16869] _copy_from_user+0x1c/0xb0 [ 234.550829][T16869] ___sys_sendmsg+0xc1/0x1e0 [ 234.550887][T16869] __x64_sys_sendmsg+0xd4/0x160 [ 234.550915][T16869] x64_sys_call+0x17ba/0x3000 [ 234.550952][T16869] do_syscall_64+0xc0/0x2a0 [ 234.550986][T16869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.551047][T16869] RIP: 0033:0x7f463f14aeb9 [ 234.551068][T16869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.551117][T16869] RSP: 002b:00007f463dba7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.551207][T16869] RAX: ffffffffffffffda RBX: 00007f463f3c5fa0 RCX: 00007f463f14aeb9 [ 234.551226][T16869] RDX: 0000000008040000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 234.551244][T16869] RBP: 00007f463dba7090 R08: 0000000000000000 R09: 0000000000000000 [ 234.551260][T16869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.551276][T16869] R13: 00007f463f3c6038 R14: 00007f463f3c5fa0 R15: 00007ffd303d10a8 [ 234.551303][T16869] [ 234.553382][T16870] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3052'. [ 234.756481][T16874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3056'. [ 234.776409][T16872] nfs: Unknown parameter '' [ 234.873686][ T4562] hid-generic 0003:0004:0000.0009: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 234.970708][T16896] loop2: detected capacity change from 0 to 764 [ 235.105651][T16907] rock: directory entry would overflow storage [ 235.111994][T16907] rock: sig=0x4f50, size=4, remaining=3 [ 235.117634][T16907] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 235.169606][T16915] loop9: detected capacity change from 0 to 8192 [ 235.303008][T16922] batman_adv: batadv0: Adding interface: dummy0 [ 235.309355][T16922] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.339155][T16924] loop9: detected capacity change from 0 to 128 [ 235.345699][T16922] batman_adv: batadv0: Interface activated: dummy0 [ 235.355186][T16924] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 235.432705][T16930] bond0: entered allmulticast mode [ 235.438130][T16930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.483378][T16938] FAULT_INJECTION: forcing a failure. [ 235.483378][T16938] name failslab, interval 1, probability 0, space 0, times 0 [ 235.496190][T16938] CPU: 1 UID: 0 PID: 16938 Comm: syz.9.3078 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 235.496224][T16938] Tainted: [W]=WARN [ 235.496344][T16938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.496382][T16938] Call Trace: [ 235.496392][T16938] [ 235.496402][T16938] __dump_stack+0x1d/0x30 [ 235.496452][T16938] dump_stack_lvl+0x95/0xd0 [ 235.496482][T16938] dump_stack+0x15/0x1b [ 235.496503][T16938] should_fail_ex+0x263/0x280 [ 235.496559][T16938] should_failslab+0x8c/0xb0 [ 235.496604][T16938] kmem_cache_alloc_noprof+0x68/0x490 [ 235.496629][T16938] ? security_file_alloc+0x32/0xf0 [ 235.496657][T16938] security_file_alloc+0x32/0xf0 [ 235.496710][T16938] init_file+0x5c/0x1c0 [ 235.496741][T16938] alloc_empty_file+0x8b/0x200 [ 235.496778][T16938] path_openat+0x62/0x23c0 [ 235.496818][T16938] ? _parse_integer_limit+0x170/0x190 [ 235.496883][T16938] ? _parse_integer+0x27/0x40 [ 235.496919][T16938] ? kstrtoull+0x111/0x140 [ 235.496947][T16938] ? kstrtouint+0x76/0xc0 [ 235.497059][T16938] do_filp_open+0x15d/0x280 [ 235.497107][T16938] do_sys_openat2+0xa6/0x150 [ 235.497138][T16938] __x64_sys_openat+0xf2/0x120 [ 235.497177][T16938] x64_sys_call+0x2b07/0x3000 [ 235.497264][T16938] do_syscall_64+0xc0/0x2a0 [ 235.497368][T16938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.497399][T16938] RIP: 0033:0x7f7e45e0aeb9 [ 235.497419][T16938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.497438][T16938] RSP: 002b:00007f7e44867028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 235.497459][T16938] RAX: ffffffffffffffda RBX: 00007f7e46085fa0 RCX: 00007f7e45e0aeb9 [ 235.497475][T16938] RDX: 000000000010a942 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 235.497576][T16938] RBP: 00007f7e44867090 R08: 0000000000000000 R09: 0000000000000000 [ 235.497589][T16938] R10: 9f667fd378a54fd2 R11: 0000000000000246 R12: 0000000000000001 [ 235.497601][T16938] R13: 00007f7e46086038 R14: 00007f7e46085fa0 R15: 00007fffb19f0028 [ 235.497759][T16938] [ 235.798991][T16953] netlink: 'syz.0.3084': attribute type 12 has an invalid length. [ 235.841551][T16957] 9p: Bad value for 'rfdno' [ 235.852875][T16953] lo speed is unknown, defaulting to 1000 [ 235.953168][T16963] lo speed is unknown, defaulting to 1000 [ 236.011312][T16962] FAULT_INJECTION: forcing a failure. [ 236.011312][T16962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.024619][T16962] CPU: 1 UID: 0 PID: 16962 Comm: syz.9.3087 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 236.024748][T16962] Tainted: [W]=WARN [ 236.024758][T16962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.024775][T16962] Call Trace: [ 236.024785][T16962] [ 236.024795][T16962] __dump_stack+0x1d/0x30 [ 236.024828][T16962] dump_stack_lvl+0x95/0xd0 [ 236.024939][T16962] dump_stack+0x15/0x1b [ 236.024960][T16962] should_fail_ex+0x263/0x280 [ 236.025092][T16962] should_fail+0xb/0x20 [ 236.025242][T16962] should_fail_usercopy+0x1a/0x20 [ 236.025283][T16962] _copy_from_iter+0xcf/0xea0 [ 236.025345][T16962] ? __account_obj_stock+0x2d6/0x350 [ 236.025416][T16962] ? __rcu_read_unlock+0x4e/0x70 [ 236.025457][T16962] copy_page_from_iter+0x178/0x2a0 [ 236.025501][T16962] ? anon_pipe_write+0x71/0xb30 [ 236.025533][T16962] anon_pipe_write+0x53f/0xb30 [ 236.025624][T16962] ? anon_pipe_write+0x71/0xb30 [ 236.025714][T16962] ? __pfx_anon_pipe_write+0x10/0x10 [ 236.025741][T16962] vfs_write+0x5a6/0x9f0 [ 236.025773][T16962] ksys_write+0xdc/0x1a0 [ 236.025800][T16962] __x64_sys_write+0x40/0x50 [ 236.025885][T16962] x64_sys_call+0x2847/0x3000 [ 236.025951][T16962] do_syscall_64+0xc0/0x2a0 [ 236.025983][T16962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.026013][T16962] RIP: 0033:0x7f7e45dcb78e [ 236.026035][T16962] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 236.026079][T16962] RSP: 002b:00007f7e44866ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.026099][T16962] RAX: ffffffffffffffda RBX: 00007f7e448676c0 RCX: 00007f7e45dcb78e [ 236.026146][T16962] RDX: 0000000000000029 RSI: 00007f7e44866e90 RDI: 0000000000000002 [ 236.026165][T16962] RBP: 00007f7e44866e90 R08: 0000000000000000 R09: 0000000000000000 [ 236.026183][T16962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 236.026207][T16962] R13: 00007f7e46054640 R14: 00007f7e4604b4a0 R15: 0000000000000001 [ 236.026277][T16962] [ 236.255013][T16968] netlink: 'syz.9.3090': attribute type 10 has an invalid length. [ 236.458057][T16983] ================================================================== [ 236.466404][T16983] BUG: KCSAN: data-race in init_file / prepare_creds [ 236.473247][T16983] [ 236.475616][T16983] write to 0xffff8881019e68e8 of 4 bytes by task 16990 on cpu 0: [ 236.483355][T16983] init_file+0x2e/0x1c0 [ 236.487586][T16983] alloc_empty_file+0x8b/0x200 [ 236.492572][T16983] alloc_file_pseudo+0xf6/0x190 [ 236.497467][T16983] sock_alloc_file+0x9c/0x1e0 [ 236.502203][T16983] __sys_socket+0x115/0x180 [ 236.506815][T16983] __x64_sys_socket+0x3f/0x50 [ 236.512063][T16983] x64_sys_call+0x127b/0x3000 [ 236.516957][T16983] do_syscall_64+0xc0/0x2a0 [ 236.521593][T16983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.527533][T16983] [ 236.529890][T16983] read to 0xffff8881019e6840 of 184 bytes by task 16983 on cpu 1: [ 236.537727][T16983] prepare_creds+0x6d/0x550 [ 236.542318][T16983] prepare_exec_creds+0x14/0xe0 [ 236.547210][T16983] bprm_execve+0x6f/0x9b0 [ 236.551953][T16983] do_execveat_common+0x6cf/0x740 [ 236.557008][T16983] __x64_sys_execveat+0x73/0x90 [ 236.561913][T16983] x64_sys_call+0x1c0e/0x3000 [ 236.566637][T16983] do_syscall_64+0xc0/0x2a0 [ 236.571185][T16983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.577109][T16983] [ 236.579455][T16983] Reported by Kernel Concurrency Sanitizer on: [ 236.585636][T16983] CPU: 1 UID: 0 PID: 16983 Comm: syz.5.3097 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 236.597033][T16983] Tainted: [W]=WARN [ 236.600854][T16983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.611017][T16983] ================================================================== [ 237.185860][T16973] syz.2.3093 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 237.200109][T16973] CPU: 1 UID: 0 PID: 16973 Comm: syz.2.3093 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 237.200154][T16973] Tainted: [W]=WARN [ 237.200213][T16973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.200232][T16973] Call Trace: [ 237.200242][T16973] [ 237.200253][T16973] __dump_stack+0x1d/0x30 [ 237.200287][T16973] dump_stack_lvl+0x95/0xd0 [ 237.200319][T16973] dump_stack+0x15/0x1b [ 237.200360][T16973] dump_header+0x80/0x240 [ 237.200394][T16973] oom_kill_process+0x295/0x350 [ 237.200421][T16973] out_of_memory+0x97d/0xb80 [ 237.200457][T16973] try_charge_memcg+0x62e/0xa10 [ 237.200488][T16973] obj_cgroup_charge_pages+0x23/0xc0 [ 237.200626][T16973] __memcg_kmem_charge_page+0x9e/0x170 [ 237.200666][T16973] __alloc_frozen_pages_noprof+0x18a/0x350 [ 237.200730][T16973] alloc_pages_mpol+0xb3/0x260 [ 237.200822][T16973] alloc_pages_noprof+0x8f/0x130 [ 237.200861][T16973] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 237.200914][T16973] __kvmalloc_node_noprof+0x471/0x680 [ 237.200949][T16973] ? ip_set_alloc+0x24/0x30 [ 237.200979][T16973] ? ip_set_alloc+0x24/0x30 [ 237.201017][T16973] ? __slab_alloc+0x25/0x50 [ 237.201074][T16973] ip_set_alloc+0x24/0x30 [ 237.201161][T16973] hash_netiface_create+0x282/0x740 [ 237.201277][T16973] ? __pfx_hash_netiface_create+0x10/0x10 [ 237.201312][T16973] ip_set_create+0x3cf/0x970 [ 237.201397][T16973] ? __nla_parse+0x40/0x60 [ 237.201437][T16973] nfnetlink_rcv_msg+0x509/0x5d0 [ 237.201486][T16973] netlink_rcv_skb+0x123/0x220 [ 237.201597][T16973] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 237.201658][T16973] nfnetlink_rcv+0x167/0x1720 [ 237.201730][T16973] ? __kfree_skb+0x109/0x150 [ 237.201764][T16973] ? nlmon_xmit+0x4f/0x60 [ 237.201799][T16973] ? consume_skb+0x49/0x140 [ 237.201934][T16973] ? nlmon_xmit+0x4f/0x60 [ 237.202049][T16973] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 237.202113][T16973] ? __dev_queue_xmit+0x139a/0x1f20 [ 237.202150][T16973] ? __dev_queue_xmit+0x148/0x1f20 [ 237.202201][T16973] ? ref_tracker_free+0x37d/0x3e0 [ 237.202240][T16973] ? __netlink_deliver_tap+0x4dc/0x500 [ 237.202280][T16973] netlink_unicast+0x5c0/0x690 [ 237.202344][T16973] netlink_sendmsg+0x5c8/0x6f0 [ 237.202368][T16973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.202398][T16973] ____sys_sendmsg+0x5af/0x600 [ 237.202422][T16973] ___sys_sendmsg+0x195/0x1e0 [ 237.202527][T16973] __x64_sys_sendmsg+0xd4/0x160 [ 237.202552][T16973] x64_sys_call+0x17ba/0x3000 [ 237.202650][T16973] do_syscall_64+0xc0/0x2a0 [ 237.202689][T16973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.202713][T16973] RIP: 0033:0x7f5c92adaeb9 [ 237.202733][T16973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.202753][T16973] RSP: 002b:00007f5c91537028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.202775][T16973] RAX: ffffffffffffffda RBX: 00007f5c92d55fa0 RCX: 00007f5c92adaeb9 [ 237.202871][T16973] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 237.202900][T16973] RBP: 00007f5c92b48c1f R08: 0000000000000000 R09: 0000000000000000 [ 237.202914][T16973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.202928][T16973] R13: 00007f5c92d56038 R14: 00007f5c92d55fa0 R15: 00007ffd4684c048 [ 237.202949][T16973] [ 237.202959][T16973] memory: usage 307200kB, limit 307200kB, failcnt 156 [ 237.533229][T16973] memory+swap: usage 315580kB, limit 9007199254740988kB, failcnt 0 [ 237.541263][T16973] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 237.548682][T16973] Memory cgroup stats for /syz2: [ 237.549069][T16973] cache 0 [ 237.557174][T16973] rss 0 [ 237.560020][T16973] shmem 0 [ 237.562984][T16973] mapped_file 0 [ 237.566469][T16973] dirty 0 [ 237.569556][T16973] writeback 0 [ 237.572958][T16973] workingset_refault_anon 47 [ 237.577685][T16973] workingset_refault_file 0 [ 237.582208][T16973] swap 8581120 [ 237.585695][T16973] swapcached 12288 [ 237.589505][T16973] pgpgin 75623 [ 237.592890][T16973] pgpgout 75620 [ 237.596392][T16973] pgfault 84887 [ 237.599917][T16973] pgmajfault 14 [ 237.603445][T16973] inactive_anon 12288 [ 237.607484][T16973] active_anon 0 [ 237.610961][T16973] inactive_file 0 [ 237.614593][T16973] active_file 0 [ 237.618189][T16973] unevictable 0 [ 237.621668][T16973] hierarchical_memory_limit 314572800 [ 237.627125][T16973] hierarchical_memsw_limit 9223372036854771712 [ 237.633436][T16973] total_cache 0 [ 237.636912][T16973] total_rss 0 [ 237.640297][T16973] total_shmem 0 [ 237.643786][T16973] total_mapped_file 0 [ 237.647896][T16973] total_dirty 0 [ 237.651431][T16973] total_writeback 0 [ 237.655247][T16973] total_workingset_refault_anon 47 [ 237.660448][T16973] total_workingset_refault_file 0 [ 237.665495][T16973] total_swap 8581120 [ 237.669440][T16973] total_swapcached 12288 [ 237.673725][T16973] total_pgpgin 75623 [ 237.677677][T16973] total_pgpgout 75620 [ 237.681730][T16973] total_pgfault 84887 [ 237.685724][T16973] total_pgmajfault 14 [ 237.689763][T16973] total_inactive_anon 12288 [ 237.694275][T16973] total_active_anon 0 [ 237.698293][T16973] total_inactive_file 0 [ 237.702466][T16973] total_active_file 0 [ 237.706580][T16973] total_unevictable 0 [ 237.710687][T16973] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3093,pid=16972,uid=0 [ 237.725470][T16973] Memory cgroup out of memory: Killed process 16972 (syz.2.3093) total-vm:94132kB, anon-rss:1332kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 237.897849][T16973] syz.2.3093 (16973) used greatest stack depth: 7352 bytes left