last executing test programs: 1m22.673153933s ago: executing program 1 (id=245): socket$kcm(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1m22.672781304s ago: executing program 1 (id=246): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000001080)="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", 0x5c1}], 0x1, &(0x7f0000000ac0)}}], 0x1, 0xc044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) write$binfmt_misc(r0, 0x0, 0x0) 1m22.638257635s ago: executing program 1 (id=247): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYBLOB="48c6372d14080f3fd25ede06e64f5d7cf6c9c83f6a85f145c31618c7906cad50853a6065ab55b8db273a7bd6739840e63768f6565a5c8a5883226e5a6b9f21cea762b72a0e45", @ANYRESOCT=r2, @ANYRESOCT, @ANYRES8=r3, @ANYRESOCT=r0, @ANYRES64=r2, @ANYRES16=r0, @ANYBLOB="3613dc2c55f2", @ANYRESOCT=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) (async) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) (async) write(r1, &(0x7f00000000c0)="371b7e6742ab65bc60e5fa903a30068a34e00f37f34bd11479ac46cdc496ecdacc3e5bcd52e850ea7c90d8a192b5b58afd8b5af1cabfa8dd5bb5e93e0daef279964b0c286f06d5a8e9ff366bc2b4b0f0effc7b1d01c78049711e356d547ec753f7b7665ed4d4fee47f3a8fc9a6bfd4d7", 0x70) (async, rerun: 32) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x82) (rerun: 32) 1m22.595778378s ago: executing program 1 (id=248): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000a00)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000540)=[{&(0x7f0000000280)="1c2d0e022785", 0x6}], 0x1, 0x7fffffff, 0xfffffffd, 0x22) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@nomblk_io_submit}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") fadvise64(0xffffffffffffffff, 0xb29, 0x2, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x7, r3, 0x5, 0xffb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ptrace$pokeuser(0x6, r5, 0xeae9, 0x80000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x2d, 0x12000, &(0x7f0000000100), 0x12) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}]}, 0x58}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@journal_async_commit}, {@data_err_ignore}, {@grpquota}, {@grpid}, {@nobarrier}, {@grpjquota}, {@quota}]}, 0x1, 0x553, &(0x7f00000003c0)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") socket$nl_route(0x10, 0x3, 0x0) 1m21.760848229s ago: executing program 1 (id=263): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110be000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x80, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r3, r0, 0x7}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000000600)={[{@resuid={'resuid', 0x3d, 0xee00}}, {@max_batch_time={'max_batch_time', 0x3d, 0x80}}, {@mblk_io_submit}, {@auto_da_alloc}]}, 0x3, 0x580, &(0x7f00000007c0)="$eJzs3c9rHFUcAPDvbDb9kVaTQinqQQI9WKndNIk/KgitR9FiQe91SbahZNMt2U1pYqHtwV48KEUQsSD+AXr2WPwH/CsKWihSgh68RGYz22yT3fxcu1v384FJ3puZ5L23b96b7+zMsgH0rdH0Ry7i5Yj4OokYbtqWj2zj6Op+y49vTKVLEisrn/yZRJKta+yfZL8PRcRXEfFSRPz6RcTJ3MZyq4tLs8VyuTSf5cdqc1fHqotLpy7PFWdKM6UrE5OTZ96anHj3nbc71tbXL/z93cf3Pzjz5fHlb396eORuEuficLatuR17cKs5Mxqj2WsyGOfW7TjegcJ6SdLtCrArA9k4H4x0DhiOgWzUA/9/NyNiBehTifEPfaoRBzSu7Tt0HfzcePT+6gXQxvbnV98biQP1a6Oh5eSpK6P0enekA+WnZfzyx7276RJbvA9xswPlATTcuh0Rp/P5jfNfks1/u3e6/ubx5taX0W/nH+im+2n880ar+Cf3JP6JFvHPoRZjdze2Hv+5hxGxvwNFtZTGf++1jH+fTF0jA1nuhXrMN5hculwunY6IFyPiRAzuT/Ob3c85s/xgpd225vgvXdLyG7FgVo+H+XWtny7Wintpc7NHtyNeWYt/k9gw/x+ox7rr+z99PS5ss4xjpXuvttu2dfubdT4CXvkx4rWW/b92RyvZ/P7kWP14GGscFRv9defYb+3K31n7Oy/t/6HN2z+SNN+vre68jB8O/FNqt223x/++5NN6el+27nqxVpsfj9iXfLRx/cTa3zbyjf3T9p84vvn81+r4PxgRn22z/XeO3mm7ay/0//SO+n/niQcffv59u/K31/9v1lMnsjXbmf+2W8G9vHYAAAAAAADQa3IRcTiSXOFJOpcrFFaf7zgaQ7lypVo7eamycGU66p+VHYnBXONO93DT8xDj2fOwjfzEuvxkRByJiG8GDtbzhalKebrbjQcAAAAAAAAAAAAAAAAAAIAecajN5/9Tvw90u3bAf85XfkP/2nL8d+KbnoCe5PwP/cv4h/6Vb5kE+oFBD/2rafwnSTcrAjxzzv/Qv9bG/1BX6wE8e87/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FEXzp9Pl5Xlxzem0vz0tcWF2cq1U9Ol6mxhbmGqMFWZv1qYqVRmyqXCVGVuq/9XrlSujk/EwvWxWilXG6suLl2cqyxcqV28PFecKV0sDT6TVgEAAAAAAAAAAAAAAAAAAMDzpbq4NFssl0vzEm0TZ6MnqrHrRLJVL5/NDoZdFZHvfgMl1iV+Ht776O7mrAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT/s3AAD//4RdMUo=") 1m17.358737756s ago: executing program 1 (id=303): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x28480) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000100)=""/173) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0)={0x8, 0x3}, 0x2) 1m17.327581178s ago: executing program 32 (id=303): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x28480) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000100)=""/173) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0)={0x8, 0x3}, 0x2) 1m5.790113388s ago: executing program 3 (id=402): sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, 0x0) connect$can_bcm(r0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r1, 0x0, 0x0, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = io_uring_setup(0x7268, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) writev(r1, &(0x7f0000000180)=[{0x0}], 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1001, 0x2}) 1m5.505283092s ago: executing program 3 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x0) 1m5.370010739s ago: executing program 3 (id=404): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x3f, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000340)={0x2, {0x2, 0x2, 0x3, 0x6, 0x9, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r5) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r8 = socket$nl_rdma(0x10, 0x3, 0x14) gettid() fstat(r7, 0x0) fstat(r6, &(0x7f0000000800)) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x60, 0x1403, 0x1, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x6004895}, 0x4000) unshare(0x6a040000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100"], 0xb8}}, 0x20040000) inotify_init1(0x80000) 1m3.840953215s ago: executing program 3 (id=423): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x138) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x108801) r2 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r2, 0x5976, 0x9765, 0x2, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x2f, &(0x7f0000000100)=0x20000009, 0x4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2100ffff", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780004"], 0x0) r6 = mq_open(&(0x7f0000000940)='\\*\x001\xa4\xea\x84\x99c\xa4\x02\xfa}%R\x92}\x7fF1\x00k?\x8e\xb7\x8d\t\t\xe5\xb2\b\x92>\xfc\x9a??\xbe6\xa2\x7f\xdb\x05\x92\xc6(\x9dt\xc9\xd3\x01C\xaf\xd6\xcc\xda\xb3\xd3\xb9RA\x9e\xb0[n\xe3\x90\xddF\xf7\x10\x8e9\xd5>p`\x8b\xf7\x1a\x15\xad\xa3\xeaG\x06\x80\xc0Ig\xc8\xc1j\x9d\xda4V\x1f8>\xcf\x87\x13\xcf\x8e\xd8p\xa8\xabKX?\xd0\xf9\xe9Iv\x91\x8e\xfd\x94\xed&@v\xc8U\xc0\xfd\xcb\xe6\xb7\xa3\xaak\xb6=U\x14\xfbM\x86\xe3\xb4\xaf\xcdq4\xaf\xfa)\xab|\xd7G\xb1\xcf\x9b2\xc3\xcf\xac\xe4\xceG\v\x84K(~\b\xf1\xce\xaa6e\x068T!<\x03)\xd5u\xb2\x1b\xe9\x8a7\x9c?\xb1\x00:\x99$\x94\xfe\xbb\xe7\x1d\xd2\xee\xcc~\xa0UY\x19\xf8z\x88\xcf>\x10\xd7C)d\xa1\xce:\x05\x7f\x89*\x87\xba\xe0+YO\xa5:\xb8\xc6mLf%\xbc\xac\x90\n\xab\xdf\xf7\xb2\xe4\xe6\x96\xff/GO\xc5Q\xf1?\x8f\xaco\xba\xcf\x8aW\x9d\xc0\x1e$\xdc\xdcY\xc1\x15\xb4K\xe9\xed\x88\x18U^nP\x8fb\xc2\xba\xc5M\xb0^4\v\x19y\xf81\xf9/\x0fXl\x9e[J\x97\x0e}\xd9\xf8.\xf0\xef\x1f\xb9VE\xe6M\x16\x99RoD\x8fY7p\x1a\xca\x9c\xbd\xfb\xca?2\x984jIb\xcbSsU\xec\xf2\xc0$8\xe8\xb6\xc2\xc9\xef\x00\x05\xb0\x89[99\x80\x8a\xc1}\x05\x85xZ\f2\xd4\xc8\x97|\xf7o\xb8\xb3\xabp\xedJ\x1fJg\n\nUg\x06\r\xd8>\xab\xba\x85\xc4\x1et\x91\x10\x95q\xa2[\xf4]\x98j!\x90r\x9b\xb0\x9cw\xa0\xa3\x8e\x93\xf2\f6\xeb\vzL\x96*\x965V\x1d{\xbb\x8e{\xa3\xae+\x10\xf4\xea\x89\x8bm\x85\xe1?\x90\f\x13\xed:', 0x42, 0x146, 0x0) r7 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x5b8a, 0x3180, 0x8000, 0x240024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xb}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x8, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan4\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r7, 0xd44, 0x44c1, 0x7, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001780), 0xffffffffffffffff) 1m3.001219886s ago: executing program 3 (id=429): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)}, {0x0}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x38}, 0x0) 1m2.658833103s ago: executing program 3 (id=434): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffff8001, 0x101600) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/16) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000840)={[], [{@audit}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, 'keyring\x00'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00\xb0\x90Ic\xad\x82\r$\x8e\xd9\x99\x9ef\x19\xa0\xf7z\x91\x8d\xe5\x0f\xe2\xf86*R\x04&\x94s\x1f\xaf/&\x95K'}}, {@euid_gt}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}, 0x1, 0x51e, &(0x7f0000001340)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x2c, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x54) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) 1m2.619254125s ago: executing program 33 (id=434): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffff8001, 0x101600) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/16) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000840)={[], [{@audit}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, 'keyring\x00'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00\xb0\x90Ic\xad\x82\r$\x8e\xd9\x99\x9ef\x19\xa0\xf7z\x91\x8d\xe5\x0f\xe2\xf86*R\x04&\x94s\x1f\xaf/&\x95K'}}, {@euid_gt}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}, 0x1, 0x51e, &(0x7f0000001340)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x2c, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x54) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) 6.67707157s ago: executing program 2 (id=1073): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{r0, r1+60000000}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000850000b1e09e6611cd97a478a000000095000000000000010000a505000066bd5fa2575c2ea51f00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) timer_create(0x2, &(0x7f0000000180)={0x0, 0x1b, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) timer_gettime(r2, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r3) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20040800}, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005f"], 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x8, 0xffffffffffffffc7, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800800101"], 0x48) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0xc0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 6.445600662s ago: executing program 5 (id=1075): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40814, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1}, 0x2340, 0x10000, 0x0, 0x2, 0x3, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffbffffbff, 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x470c4a7a4788b09b, 0x4, 0x8000007, 0x3, 0x4, 0x1, 0xfc, 0x3}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) pread64(r1, &(0x7f0000000080)=""/167, 0xa7, 0x8) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 6.339964567s ago: executing program 2 (id=1076): r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) socket$xdp(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x404110, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x5, 0x4152}, 0x10014c, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f95000000000050000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 5.762666265s ago: executing program 5 (id=1077): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) bpf$PROG_LOAD(0xffad, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000002}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.366642655s ago: executing program 2 (id=1079): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) syz_pidfd_open(0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@usrjquota}, {@block_validity}, {@errors_remount}, {@debug}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000680)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) request_key(0x0, &(0x7f0000000900)={'syz', 0x0}, &(0x7f00000004c0)='\xfep\xb1\xabK-\x03\x00\xe5\x81\xb8}\xe6^\xab:B3\x00\x00\x00\x1e\x9a&rs\xcf\xd9\xde(\xdet|\xd7\x14\xe7\xe7%6\xc5\xf9\xe5\x1cx\xdf\x85\xbe7\x9e*U\x8d \xa8\'\xff\x0fl7-8Jn\x0e\x86:v\xcc9K\xc18\xd7\xc9\xc3F\xef\xd5F\xd6~k:\xf8\xc6E$\x0f\xb3Q\rI\xeb(\r$\x1aP\xaf\x8a\xdcx%j_\xe5\xa1\xb1\xf6Q\xb8\x88\x93c\a\\\xd3\x03\xfc\xba[b~f\xf3\x88', 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4, 0x5}]}, 0x10) sendmmsg(r9, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x7c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34}}, @IPVS_SVC_ATTR_PORT={0x4, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x600004}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r11, &(0x7f0000004200)='t', 0x1) sendfile(r11, r7, 0x0, 0x7fffffff) ftruncate(r6, 0x2007ffb) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x0, 0x4, 0x386561e9, 0x4}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}, @TCA_NETEM_DELAY_DIST={0x7, 0x2, "af07bc"}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x8080) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%+9llu \x00'}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r15, 0xc020f509, &(0x7f0000000180)={r8, 0x7, 0x8, 0x3}) 4.468270949s ago: executing program 2 (id=1084): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") r0 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) ftruncate(r0, 0x2007ffc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x802) sendfile(r0, r0, 0x0, 0x800000009) socket$rxrpc(0x21, 0x2, 0xa) 3.699249127s ago: executing program 5 (id=1089): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = fsopen(&(0x7f00000002c0)='ext4\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x0, 0x2, 0x2}, {0x7c, 0x40}, {0x3, 0x0, 0x3}, {0x6, 0x4, 0xff, 0x3}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xa880, 0x97) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0x800000c1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x400}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$P9_RWSTAT(r5, &(0x7f0000000000)={0x30, 0x7f, 0x2}, 0x7) syz_io_uring_setup(0x23cb, &(0x7f0000000480)={0x0, 0xfb37, 0x2000, 0xffffffff, 0x6c}, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000380)={0x9}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r4, 0x25, 0x1, @val=@netkit={@void, @value=r3}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRES8=r6], 0xe4}}, 0x2404c800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x3, 0x248, &(0x7f0000000880)="$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") setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f0000000040)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3.535772415s ago: executing program 0 (id=1091): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{r0, r1+60000000}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000850000b1e09e6611cd97a478a000000095000000000000010000a505000066bd5fa2575c2ea51f00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) timer_create(0x2, &(0x7f0000000180)={0x0, 0x1b, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) timer_gettime(r2, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r3) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20040800}, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005f"], 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x8, 0xffffffffffffffc7, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800800101"], 0x48) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) r6 = open(&(0x7f0000000140)='./file0/file0\x00', 0xecb42, 0x86) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 3.323974096s ago: executing program 0 (id=1094): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) waitid(0x0, r1, 0x0, 0x2100000a, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r3 = eventfd(0x9) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f00000003c0)="a56a486a33b94782c6c6b024263d0480719a0e636f26f7dea4b9758ba02a5294ae69c86a8eb24d4ed6d5bb3a65dfc3cf0473152f101ab8c11c943be08a70f70f13d91123a2058d1b6373d62765e7ed9cfac6cd174749405408c5e28351019d4623c0b2f10150dae0f8f3414c20a073c864ba6af9dfe14a51529d656c34475d1ea49bb0feba9b8a7ee95c5214bf59f9d7cf12d2858b4d02046d1b41148fe6100e41691d33527f05c977a34de2", 0xac, 0x7f, 0x0, 0x6, r3}, &(0x7f0000000300)) io_getevents(r2, 0x2, 0x2, &(0x7f0000000340)=[{}, {}], 0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000240)=[{}, {}], 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x101, r4, 0x0, 0x0, 0x4}]) io_submit(r2, 0x2, &(0x7f0000000180)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xfff, r4, 0x0, 0x0, 0x5}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9, r4, 0x0, 0x0, 0x6}]) syz_emit_ethernet(0x67, &(0x7f0000000180)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @dccp={{0x11, 0x4, 0x0, 0x4, 0x59, 0x67, 0x0, 0x2, 0x21, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @generic={0x44, 0x11, "874e8dc2c287c4593d13f669fea4ec"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x7b, 0x3, 0x7, [{@multicast2, 0x88d}, {@rand_addr=0x64010102}]}]}}, {{0x0, 0x4e22, 0x4, 0x1, 0x9, 0x0, 0x0, 0x6, 0x5, "80e335", 0x81, "042a92"}, "e9012f71bf"}}}}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x4, 0x0, 0x0, 0x504}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r6}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.937260825s ago: executing program 6 (id=1096): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xeffffffe) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x70000) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000009) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0xfffffffe) 2.817076421s ago: executing program 5 (id=1097): r0 = socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb1, 0x6a758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000080), 0x3}, 0xcd40, 0x6, 0x0, 0x7, 0x7, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x4000)=nil) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2046) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x40, 0x1405, 0x621, 0x70bd28, 0x0, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x40}}, 0x4004000) 2.726659245s ago: executing program 6 (id=1098): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) close(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x7, 0x1, "9f"}, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d0, 0x1d0, 0x408, 0x1d0, 0x0, 0x1d0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, &(0x7f0000000200), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', [0x0, 0xffffffff, 0xff000000, 0xffff00], [0xfffefe, 0xff000000, 0xff, 0xff], 'pimreg0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x1d, 0x6, 0x4, 0x14}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xfffffff8, 0x1, @ipv6=@remote, 0x4e21}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x7ff}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0xc1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x14, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x164, r4, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x70}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x142, 0x80, [@perr={0x84, 0x2, {0xa}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0x1a, @device_b, 0x5, @value=@broadcast, 0x6, 0x5, @device_a, 0xa99}}, @random_vendor={0xdd, 0x4d, "4e5095fdcc7852c47a64d498c14a3fe72fd34d7015aa233fa53baa7149e1e2ac4beffd26b1a9ad1f34642c3e54ea6eae8ddfd9a012bacd45b97b3c076d2f34e58ea842e3bfdaee78b4597d0f79"}, @ibss={0x6, 0x2, 0xd}, @peer_mgmt={0x75, 0x4, {0x0, 0xfffd, @void, @void, @void}}, @tim={0x5, 0xb8, {0x2, 0xd9, 0x3, "8d020f1569155e9c443e791d5c53184d8a6f8512398ec58c0d98e06266da894b3ff88e4bdeffd2b291b1aa51cff3d57ec5cd90bb4976b5eb1c71cc90dc691e013e40d1b0323768a581e84ed6fb5ae94c89dbde69371e6a53f31e2f26cb8aeb41bda56d9bc5480368c1faffecca2a555316bdb871d3ae362da098c0ffe4a5aa8dc4bb7f9477aec731679f528bde7611ca749b56dddfb67ca23864dfbaa5c33bb2b13b1bcd24871fe08fc442dedea1dc8e388abf6005"}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20008000}, 0x2004c990) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x7, 0x1, 'r'}, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r3], 0x14}}, 0x4014) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r5) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r7, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffc88, 0x140, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) 2.317864405s ago: executing program 5 (id=1100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200000d24d9fbba53f3de7349e1df00048020000180070001006374000014000280090004400000000008000240000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x421841, 0x0) 2.269897238s ago: executing program 0 (id=1101): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f00000001c0), 0x9, 0xa4000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$packet_int(r0, 0x107, 0x19, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu>>0&&\t') sendmmsg$inet(r2, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acb", 0xd3}], 0x1}}], 0x2, 0x2090) sendto$inet(r2, &(0x7f0000000580)="17", 0xffffffffffffff68, 0x10008095, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)={0x24, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x4, 0x7c}, [@nested={0x4, 0x8c}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001a00010000000000006d05f74b0f7d37fce70f90785f5915d50000001c140000ff00fe0b0000000092090fef00000000000000009494e674ab35480bea61cf1c76e7717a3294adf5ada000f9c1b7e624c23d98d0fd3f8d7dba05ca82aa515b75b0cae9746ce51326a045a746896db46a070b4579e4fc3b1ef0a5728fda6154497fe88ee7cb98720adc54e940c50ff59dabb980704a61bc4ccfc2c024dbac60505a5bd58b2e5bd67c8c87ad0179500000"], 0x1c}}, 0x0) 1.965142083s ago: executing program 4 (id=1102): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xd) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44030) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r3, 0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084) 1.946310864s ago: executing program 4 (id=1103): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{r0, r1+60000000}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000850000b1e09e6611cd97a478a000000095000000000000010000a505000066bd5fa2575c2ea51f00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) timer_create(0x2, &(0x7f0000000180)={0x0, 0x1b, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) timer_gettime(r2, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r3) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20040800}, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005f"], 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x8, 0xffffffffffffffc7, 0x0}}, 0x10) r6 = open(&(0x7f0000000140)='./file0/file0\x00', 0xecb42, 0x86) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 1.794632501s ago: executing program 6 (id=1104): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f00000040"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x9, 0x7fff, 0x7fffffff, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x88) socket$kcm(0x11, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0xfdef) 1.730972764s ago: executing program 4 (id=1105): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f00000001c0), 0x9, 0xa4000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$packet_int(r0, 0x107, 0x19, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu>>0&&\t') sendmmsg$inet(r2, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acb", 0xd3}], 0x1}}], 0x2, 0x2090) sendto$inet(r2, &(0x7f0000000580)="17", 0xffffffffffffff68, 0x10008095, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)={0x24, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x4, 0x7c}, [@nested={0x4, 0x8c}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) 1.644173669s ago: executing program 6 (id=1106): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f00000001c0), 0x9, 0xa4000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$packet_int(r0, 0x107, 0x19, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu>>0&&\t') sendmmsg$inet(r2, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acb", 0xd3}], 0x1}}], 0x2, 0x2090) sendto$inet(r2, &(0x7f0000000580)="17", 0xffffffffffffff68, 0x10008095, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)={0x24, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x4, 0x7c}, [@nested={0x4, 0x8c}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) 1.503692745s ago: executing program 4 (id=1107): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.383280141s ago: executing program 0 (id=1108): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}, 0x8040) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 1.287656246s ago: executing program 0 (id=1109): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x3f, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000340)={0x2, {0x2, 0x2, 0x3, 0x6, 0x9, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x6, 0x3, 0x5}, 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r7 = socket$nl_rdma(0x10, 0x3, 0x14) gettid() fstat(r6, 0x0) fstat(r5, &(0x7f0000000800)) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x60, 0x1403, 0x1, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x6004895}, 0x4000) unshare(0x6a040000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100"], 0xb8}}, 0x20040000) inotify_init1(0x80000) 703.809315ms ago: executing program 6 (id=1110): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680", @ANYRES64=r0], 0x38}}, 0x10) 678.595246ms ago: executing program 6 (id=1111): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 618.421059ms ago: executing program 2 (id=1112): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000340)={0x6, 'veth0_to_batadv\x00', {0x2}, 0x800}) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/232, 0xe8}], 0x1, &(0x7f0000000080)=""/11, 0xb}, 0x14023) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xa, 0x6, 0x2, 0x12, 0x0, 0xffffffffffffffff, 0x3}, 0x50) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x5}, 0x2002, 0x32, 0x5, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r8, &(0x7f0000000240)=[{0x0}], 0x1, 0x40002000, 0xfffffffb, 0x3) 615.74949ms ago: executing program 4 (id=1113): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xd) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44030) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r3, 0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084) 533.840274ms ago: executing program 4 (id=1114): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0xff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @generic={0x25}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="68f28793"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) semget$private(0x0, 0x4, 0x225) recvmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000940)=""/122, 0x7a}, {0x0}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/109, 0x6d}], 0x5}, 0x201}], 0x1, 0x20, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000140), 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0xfffffffd, 0x353}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 85.045636ms ago: executing program 2 (id=1115): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x12000000, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) 0s ago: executing program 0 (id=1116): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{r0, r1+60000000}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000850000b1e09e6611cd97a478a000000095000000000000010000a505000066bd5fa2575c2ea51f00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) timer_create(0x2, &(0x7f0000000180)={0x0, 0x1b, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) timer_gettime(r2, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r3) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20040800}, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005f"], 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = open(&(0x7f0000000140)='./file0/file0\x00', 0xecb42, 0x86) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) kernel console output (not intermixed with test programs): or inconsistent: 96 vs 65376 free clusters [ 55.592798][ T4224] loop2: detected capacity change from 0 to 512 [ 55.631546][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.854880][ T4224] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 56.435984][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 56.435999][ T28] audit: type=1400 audit(1774179001.701:670): avc: denied { execute } for pid=4250 comm="syz.4.269" path="/52/cpu.stat" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.528835][ T28] audit: type=1326 audit(1774179001.801:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4250 comm="syz.4.269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49b9e3c799 code=0x0 [ 57.376986][ T4256] syzkaller0: entered promiscuous mode [ 57.390175][ T4256] syzkaller0: entered allmulticast mode [ 57.644092][ T28] audit: type=1400 audit(1774179002.911:672): avc: denied { write } for pid=4273 comm="syz.2.280" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.668179][ T28] audit: type=1400 audit(1774179002.911:673): avc: denied { open } for pid=4273 comm="syz.2.280" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.692721][ T28] audit: type=1400 audit(1774179002.911:674): avc: denied { ioctl } for pid=4273 comm="syz.2.280" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.770462][ T28] audit: type=1400 audit(1774179003.031:675): avc: denied { write } for pid=4278 comm="syz.3.283" path="socket:[7393]" dev="sockfs" ino=7393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.808954][ T4281] can: request_module (can-proto-0) failed. [ 57.839205][ T4288] syzkaller0: entered promiscuous mode [ 57.844692][ T4288] syzkaller0: entered allmulticast mode [ 57.866908][ T4289] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.285'. [ 57.876047][ T4289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.285'. [ 57.953310][ T4299] loop4: detected capacity change from 0 to 128 [ 57.979950][ T4300] loop2: detected capacity change from 0 to 256 [ 57.989466][ T4300] FAT-fs (loop2): Directory bread(block 1285) failed [ 57.996376][ T4300] FAT-fs (loop2): Directory bread(block 1286) failed [ 58.003233][ T4300] FAT-fs (loop2): Directory bread(block 1287) failed [ 58.010146][ T4300] FAT-fs (loop2): Directory bread(block 1288) failed [ 58.024148][ T4300] FAT-fs (loop2): Directory bread(block 1285) failed [ 58.030980][ T4300] FAT-fs (loop2): Directory bread(block 1286) failed [ 58.037990][ T4300] FAT-fs (loop2): Directory bread(block 1287) failed [ 58.044843][ T4300] FAT-fs (loop2): Directory bread(block 1288) failed [ 58.672349][ T4304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.291'. [ 58.757628][ T4310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.294'. [ 58.926278][ T4316] syzkaller0: entered promiscuous mode [ 58.938392][ T4316] syzkaller0: entered allmulticast mode [ 59.048264][ T4331] netlink: 'syz.3.299': attribute type 13 has an invalid length. [ 59.076010][ T4331] gretap0: refused to change device tx_queue_len [ 59.084400][ T4331] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 59.098493][ T28] audit: type=1326 audit(1774179004.351:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.2.300" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c672ac799 code=0x0 [ 59.418792][ T4341] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.302'. [ 59.428055][ T4341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.302'. [ 59.699277][ T4201] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.739915][ T3456] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.781852][ T4345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 59.782081][ T4346] netlink: 48 bytes leftover after parsing attributes in process `syz.4.305'. [ 59.810373][ T3456] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.820674][ T4345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 59.832710][ T4345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 59.841788][ T4345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 59.853679][ T4345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 59.871497][ T4352] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4352 comm=syz.2.306 [ 59.885239][ T3456] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.935737][ T3456] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.936130][ T4359] program syz.3.308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.068283][ T4347] chnl_net:caif_netlink_parms(): no params data found [ 60.107782][ T4375] loop4: detected capacity change from 0 to 1024 [ 60.114397][ T4375] EXT4-fs: test_dummy_encryption option not supported [ 60.245436][ T4382] loop3: detected capacity change from 0 to 1024 [ 60.256538][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.264346][ T4382] EXT4-fs: Ignoring removed bh option [ 60.270138][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.278557][ T4347] bridge_slave_0: entered allmulticast mode [ 60.285391][ T4347] bridge_slave_0: entered promiscuous mode [ 60.291045][ T4382] EXT4-fs: Ignoring removed nobh option [ 60.492626][ T4388] loop4: detected capacity change from 0 to 512 [ 60.508822][ T4388] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 60.595806][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.673034][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.729267][ T4347] bridge_slave_1: entered allmulticast mode [ 60.757594][ T4347] bridge_slave_1: entered promiscuous mode [ 60.830136][ T28] audit: type=1400 audit(1774179006.101:677): avc: denied { read } for pid=4394 comm="syz.0.321" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.886861][ T3456] bridge_slave_1: left allmulticast mode [ 60.915027][ T3456] bridge_slave_1: left promiscuous mode [ 61.130269][ T4388] syz.4.314 (4388) used greatest stack depth: 9288 bytes left [ 61.145011][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.168286][ T3456] bridge_slave_0: left allmulticast mode [ 61.183900][ T3456] bridge_slave_0: left promiscuous mode [ 61.210286][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.255407][ T4382] EXT4-fs: Mount option(s) incompatible with ext2 [ 61.292631][ T28] audit: type=1400 audit(1774179006.561:678): avc: denied { ioctl } for pid=4380 comm="syz.3.316" path="socket:[7633]" dev="sockfs" ino=7633 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.573026][ T3456] bond0 (unregistering): left promiscuous mode [ 61.583500][ T3456] bond_slave_0: left promiscuous mode [ 61.601238][ T3456] bond_slave_1: left promiscuous mode [ 61.619502][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.629531][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.660040][ T3456] bond0 (unregistering): Released all slaves [ 61.679415][ T4347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.707032][ T4347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.737778][ T4409] tap0: tun_chr_ioctl cmd 1074025676 [ 61.759611][ T3456] hsr_slave_0: left promiscuous mode [ 61.769755][ T4432] loop2: detected capacity change from 0 to 1024 [ 61.776691][ T3456] hsr_slave_1: left promiscuous mode [ 61.783215][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.826689][ T4432] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.838620][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.860481][ T4432] EXT4-fs (loop2): unsupported inode size: 143 [ 61.870629][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.883088][ T4432] EXT4-fs (loop2): blocksize: 1024 [ 61.898469][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.913075][ T3456] veth1_macvtap: left promiscuous mode [ 61.920297][ T3456] veth0_macvtap: left promiscuous mode [ 61.925909][ T3456] veth1_vlan: left promiscuous mode [ 61.931744][ T3456] veth0_vlan: left promiscuous mode [ 61.976110][ T3456] team0 (unregistering): Port device vlan0 removed [ 62.035480][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 62.048477][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 62.106936][ T4347] team0: Port device team_slave_0 added [ 62.115715][ T4347] team0: Port device team_slave_1 added [ 62.132286][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.139495][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.166487][ T4347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.177859][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.184873][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.227950][ T4347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.273574][ T4442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 62.314843][ T4347] hsr_slave_0: entered promiscuous mode [ 62.329710][ T4347] hsr_slave_1: entered promiscuous mode [ 62.345827][ T4347] debugfs: 'hsr0' already exists in 'hsr' [ 62.351853][ T4347] Cannot create hsr debugfs directory [ 62.446036][ T4470] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 62.452582][ T4470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 62.462734][ T4470] vhci_hcd vhci_hcd.0: Device attached [ 62.483521][ T4470] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 62.490087][ T4470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 62.507101][ T4470] vhci_hcd vhci_hcd.0: Device attached [ 62.527712][ T4347] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 62.547597][ T4478] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 62.554232][ T4478] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 62.574852][ T4347] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 62.576078][ T4485] loop4: detected capacity change from 0 to 1024 [ 62.596557][ T4485] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.614264][ T4347] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 62.632189][ T4347] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 62.641795][ T4478] vhci_hcd vhci_hcd.0: Device attached [ 62.647110][ T4470] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(10) [ 62.653883][ T4470] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 62.666667][ T4485] EXT4-fs (loop4): unsupported inode size: 143 [ 62.677572][ T4470] vhci_hcd vhci_hcd.0: Device attached [ 62.683256][ T4496] loop3: detected capacity change from 0 to 1024 [ 62.691431][ T4485] EXT4-fs (loop4): blocksize: 1024 [ 62.697604][ T1032] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 62.697839][ T4496] EXT4-fs: test_dummy_encryption option not supported [ 62.715868][ T4470] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(13) [ 62.722592][ T4470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 62.768107][ T4478] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(20) [ 62.774798][ T4478] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 62.811491][ T4478] vhci_hcd vhci_hcd.0: Device attached [ 62.817348][ T4478] capability: warning: `syz.2.340' uses deprecated v2 capabilities in a way that may be insecure [ 62.854389][ T4470] vhci_hcd vhci_hcd.0: Device attached [ 62.862698][ T4347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.881950][ T4347] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.891958][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.899084][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.084553][ T4521] loop3: detected capacity change from 0 to 512 [ 63.098259][ T4521] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 63.314984][ T4525] loop4: detected capacity change from 0 to 1024 [ 63.366587][ T4525] EXT4-fs: test_dummy_encryption option not supported [ 63.649683][ T4347] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.660117][ T4347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.680930][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.688073][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.571559][ T4536] loop4: detected capacity change from 0 to 512 [ 64.578068][ T4536] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 64.648895][ T4479] vhci_hcd: connection closed [ 64.649342][ T64] vhci_hcd vhci_hcd.2: stop threads [ 64.659569][ T4471] vhci_hcd: connection reset by peer [ 64.664991][ T4474] vhci_hcd: connection closed [ 64.671203][ T4512] vhci_hcd: connection closed [ 64.696386][ T4504] vhci_hcd: connection closed [ 64.710579][ T4493] vhci_hcd: connection closed [ 64.936722][ T64] vhci_hcd vhci_hcd.2: release socket [ 64.990216][ T64] vhci_hcd vhci_hcd.2: disconnect device [ 65.005970][ T4550] __nla_validate_parse: 32 callbacks suppressed [ 65.006017][ T4550] netlink: 113 bytes leftover after parsing attributes in process `syz.2.354'. [ 65.040992][ T64] vhci_hcd vhci_hcd.2: stop threads [ 65.075534][ T4347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.086048][ T64] vhci_hcd vhci_hcd.2: release socket [ 65.109160][ T64] vhci_hcd vhci_hcd.2: disconnect device [ 65.135343][ T64] vhci_hcd vhci_hcd.2: stop threads [ 65.151502][ T64] vhci_hcd vhci_hcd.2: release socket [ 65.178559][ T64] vhci_hcd vhci_hcd.2: disconnect device [ 65.204966][ T64] vhci_hcd vhci_hcd.2: stop threads [ 65.228306][ T64] vhci_hcd vhci_hcd.2: release socket [ 65.277636][ T64] vhci_hcd vhci_hcd.2: disconnect device [ 65.326479][ T64] vhci_hcd vhci_hcd.2: stop threads [ 65.357172][ T4569] loop2: detected capacity change from 0 to 1024 [ 65.363671][ T64] vhci_hcd vhci_hcd.2: release socket [ 65.392225][ T64] vhci_hcd vhci_hcd.2: disconnect device [ 65.412541][ T64] vhci_hcd vhci_hcd.2: stop threads [ 65.422873][ T4569] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.442756][ T64] vhci_hcd vhci_hcd.2: release socket [ 65.453115][ T4569] EXT4-fs (loop2): unsupported inode size: 143 [ 65.474760][ T64] vhci_hcd vhci_hcd.2: disconnect device [ 65.493084][ T4569] EXT4-fs (loop2): blocksize: 1024 [ 65.622201][ T4347] veth0_vlan: entered promiscuous mode [ 65.634203][ T4347] veth1_vlan: entered promiscuous mode [ 65.662046][ T4347] veth0_macvtap: entered promiscuous mode [ 65.679220][ T4347] veth1_macvtap: entered promiscuous mode [ 65.694231][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.702686][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.711915][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.711982][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.712050][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.712159][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.758389][ T28] audit: type=1400 audit(1774179011.031:679): avc: denied { mounton } for pid=4347 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.853662][ T4587] team0: Port device vlan2 added [ 65.864426][ T4588] openvswitch: netlink: Key type 294 is out of range max 32 [ 66.290897][ T4599] loop4: detected capacity change from 0 to 512 [ 66.306645][ T4599] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 67.238547][ T28] audit: type=1400 audit(1774179012.511:680): avc: denied { setopt } for pid=4624 comm="syz.5.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.261658][ T4625] sctp: [Deprecated]: syz.5.371 (pid 4625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 67.261658][ T4625] Use struct sctp_sack_info instead [ 67.296553][ T4623] loop0: detected capacity change from 0 to 4096 [ 67.316918][ T28] audit: type=1400 audit(1774179012.531:681): avc: denied { map } for pid=4624 comm="syz.5.371" path="/dev/vcsu" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 67.353363][ T4627] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 67.378162][ T4623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.437484][ T4627] SELinux: failed to load policy [ 67.550313][ T4633] loop3: detected capacity change from 0 to 1024 [ 67.618815][ T4633] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.668283][ T4633] EXT4-fs (loop3): unsupported inode size: 143 [ 67.682611][ T4633] EXT4-fs (loop3): blocksize: 1024 [ 67.714101][ T4644] loop4: detected capacity change from 0 to 128 [ 67.747527][ T1032] usb 5-1: enqueue for inactive port 0 [ 67.764433][ T1032] usb 5-1: enqueue for inactive port 0 [ 67.857764][ T1032] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 67.905704][ T28] audit: type=1400 audit(1774179013.171:682): avc: denied { rename } for pid=4622 comm="syz.0.370" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.030781][ T28] audit: type=1400 audit(1774179013.301:683): avc: denied { create } for pid=4650 comm="syz.5.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.176707][ T28] audit: type=1400 audit(1774179013.411:684): avc: denied { setopt } for pid=4650 comm="syz.5.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.221030][ T4652] dummy0 speed is unknown, defaulting to 1000 [ 68.254327][ T4652] dummy0 speed is unknown, defaulting to 1000 [ 68.265106][ T28] audit: type=1400 audit(1774179013.431:685): avc: denied { create } for pid=4650 comm="syz.5.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 68.364035][ T28] audit: type=1400 audit(1774179013.471:686): avc: denied { write } for pid=4650 comm="syz.5.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 68.392558][ T4660] netlink: 104 bytes leftover after parsing attributes in process `syz.5.381'. [ 68.413172][ T4662] netlink: 101 bytes leftover after parsing attributes in process `syz.2.383'. [ 68.497223][ T4652] dummy0 speed is unknown, defaulting to 1000 [ 68.511765][ T4665] loop2: detected capacity change from 0 to 128 [ 68.675153][ T4652] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 68.729996][ T4652] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 68.761891][ T4652] dummy0 speed is unknown, defaulting to 1000 [ 68.819927][ T4652] dummy0 speed is unknown, defaulting to 1000 [ 68.826369][ T4652] dummy0 speed is unknown, defaulting to 1000 [ 68.845151][ T4667] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 68.877728][ T4652] dummy0 speed is unknown, defaulting to 1000 [ 68.886428][ T4667] SELinux: failed to load policy [ 68.898658][ T4652] dummy0 speed is unknown, defaulting to 1000 [ 68.927179][ T4652] dummy0 speed is unknown, defaulting to 1000 [ 68.969395][ T4652] dummy0 speed is unknown, defaulting to 1000 [ 69.006259][ T4652] dummy0 speed is unknown, defaulting to 1000 [ 69.147577][ T28] audit: type=1400 audit(1774179014.411:687): avc: denied { create } for pid=4673 comm="syz.5.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 69.548122][ T4680] loop3: detected capacity change from 0 to 512 [ 69.564927][ T4680] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 69.647031][ T28] audit: type=1326 audit(1774179014.441:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.5.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c0ec799 code=0x7ffc0000 [ 69.757795][ T4678] loop5: detected capacity change from 0 to 1024 [ 69.881297][ T4678] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.034552][ T4678] EXT4-fs (loop5): unsupported inode size: 143 [ 70.117536][ T4678] EXT4-fs (loop5): blocksize: 1024 [ 70.358837][ T4691] loop5: detected capacity change from 0 to 256 [ 70.411466][ T4691] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 70.982080][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.027756][ T4697] netlink: 101 bytes leftover after parsing attributes in process `syz.3.395'. [ 71.044337][ T4691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.393'. [ 71.047522][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 71.047536][ T28] audit: type=1400 audit(1774179016.311:715): avc: denied { mount } for pid=4690 comm="syz.5.393" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 71.421512][ T4718] loop0: detected capacity change from 0 to 512 [ 71.435183][ T4713] syzkaller0: entered promiscuous mode [ 71.461910][ T4713] syzkaller0: entered allmulticast mode [ 71.834273][ T4718] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.845516][ T4718] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 71.853535][ T4718] System zones: 1-12 [ 71.857749][ T4718] EXT4-fs (loop0): 1 truncate cleaned up [ 71.863734][ T4718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.892586][ T4717] loop7: detected capacity change from 0 to 16384 [ 71.988920][ T4729] siw: device registration error -23 [ 72.078510][ T4737] netlink: 104 bytes leftover after parsing attributes in process `syz.3.404'. [ 72.121657][ T4718] loop7: detected capacity change from 16384 to 0 [ 72.124333][ C0] I/O error, dev loop7, sector 12800 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 1 [ 72.246856][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.416574][ T28] audit: type=1400 audit(1774179017.681:716): avc: denied { name_bind } for pid=4749 comm="syz.5.410" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 72.522192][ T4756] netlink: 101 bytes leftover after parsing attributes in process `syz.5.414'. [ 72.619524][ T4729] dummy0 speed is unknown, defaulting to 1000 [ 72.645617][ T4767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 72.681821][ T4763] syzkaller0: entered promiscuous mode [ 72.687404][ T4763] syzkaller0: entered allmulticast mode [ 72.841059][ T4772] loop0: detected capacity change from 0 to 512 [ 72.863119][ T4772] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 72.874976][ T4772] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 72.882989][ T4772] System zones: 1-12 [ 72.888363][ T4772] EXT4-fs (loop0): 1 truncate cleaned up [ 72.894875][ T4772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.388502][ T4785] loop3: detected capacity change from 0 to 512 [ 73.398129][ T4785] EXT4-fs: Ignoring removed orlov option [ 73.411689][ T28] audit: type=1400 audit(1774179018.681:717): avc: denied { setopt } for pid=4788 comm="syz.4.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.437559][ T4785] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.475837][ T4785] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.423: corrupted in-inode xattr: e_value size too large [ 73.492232][ T28] audit: type=1400 audit(1774179018.721:718): avc: denied { bind } for pid=4788 comm="syz.4.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.497534][ T4785] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.511997][ T28] audit: type=1400 audit(1774179018.721:719): avc: denied { mount } for pid=4788 comm="syz.4.425" name="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 73.528518][ T4792] loop5: detected capacity change from 0 to 128 [ 73.543862][ T28] audit: type=1400 audit(1774179018.721:720): avc: denied { search } for pid=4788 comm="syz.4.425" name="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.577643][ T4785] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.423: couldn't read orphan inode 15 (err -117) [ 73.589479][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 73.589500][ C1] EXT4-fs (loop3): initial error at time 1774179018: ext4_iget_extra_inode:5025: inode 15 [ 73.589539][ C1] EXT4-fs (loop3): last error at time 1774179018: ext4_iget_extra_inode:5025: inode 15 [ 73.595486][ T28] audit: type=1400 audit(1774179018.721:721): avc: denied { search } for pid=4788 comm="syz.4.425" name="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.639467][ T28] audit: type=1400 audit(1774179018.721:722): avc: denied { read open } for pid=4788 comm="syz.4.425" path="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.661819][ T28] audit: type=1400 audit(1774179018.731:723): avc: denied { search } for pid=4788 comm="syz.4.425" name="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.683919][ T4785] loop3: lost filesystem error report for type 5 error -117 [ 73.684975][ T28] audit: type=1400 audit(1774179018.731:724): avc: denied { search } for pid=4788 comm="syz.4.425" name="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.738414][ T4785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.751136][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.040915][ T3309] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 74.093888][ T3309] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 74.373062][ T4808] syzkaller0: entered promiscuous mode [ 74.378662][ T4808] syzkaller0: entered allmulticast mode [ 74.401083][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.487778][ T4817] loop0: detected capacity change from 0 to 1024 [ 74.494567][ T4817] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.502526][ T4817] EXT4-fs (loop0): unsupported inode size: 143 [ 74.521017][ T4817] EXT4-fs (loop0): blocksize: 1024 [ 74.570389][ T117] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.644755][ T117] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.707823][ T4831] loop0: detected capacity change from 0 to 512 [ 74.715407][ T4831] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.727566][ T4831] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 74.735549][ T4831] System zones: 1-12 [ 74.740210][ T4831] EXT4-fs (loop0): 1 truncate cleaned up [ 74.746701][ T4831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.881906][ T117] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.910078][ T4836] netlink: 'syz.5.440': attribute type 10 has an invalid length. [ 75.022394][ T117] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.055693][ T4836] netlink: 55 bytes leftover after parsing attributes in process `syz.5.440'. [ 75.311368][ T117] bridge_slave_1: left allmulticast mode [ 75.329269][ T117] bridge_slave_1: left promiscuous mode [ 75.335244][ T117] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.346203][ T117] bridge_slave_0: left allmulticast mode [ 75.352698][ T117] bridge_slave_0: left promiscuous mode [ 75.358682][ T117] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.402028][ T4848] openvswitch: netlink: Key type 294 is out of range max 32 [ 75.433190][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.452936][ T4859] netlink: 596 bytes leftover after parsing attributes in process `syz.5.443'. [ 75.562513][ T117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.576160][ T117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.596573][ T117] bond0 (unregistering): Released all slaves [ 75.596768][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'. [ 75.619301][ T4852] netlink: 'syz.5.443': attribute type 29 has an invalid length. [ 75.627681][ T4856] netlink: 'syz.5.443': attribute type 29 has an invalid length. [ 75.643504][ T4818] dummy0 speed is unknown, defaulting to 1000 [ 75.712826][ T4873] loop4: detected capacity change from 0 to 1024 [ 75.739538][ T4873] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.756165][ T4873] EXT4-fs (loop4): unsupported inode size: 143 [ 75.770017][ T117] hsr_slave_0: left promiscuous mode [ 75.778698][ T4873] EXT4-fs (loop4): blocksize: 1024 [ 75.789052][ T117] hsr_slave_1: left promiscuous mode [ 75.795020][ T117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.823342][ T4886] loop2: detected capacity change from 0 to 128 [ 75.835198][ T4889] netlink: 'syz.4.453': attribute type 10 has an invalid length. [ 75.836553][ T117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.850995][ T4889] netlink: 55 bytes leftover after parsing attributes in process `syz.4.453'. [ 75.888462][ T117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.906285][ T117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.920015][ T117] veth1_macvtap: left promiscuous mode [ 75.925551][ T117] veth0_macvtap: left promiscuous mode [ 75.931880][ T117] veth1_vlan: left promiscuous mode [ 75.937116][ T117] veth0_vlan: left promiscuous mode [ 75.991393][ T117] team0 (unregistering): Port device vlan2 removed [ 76.026254][ T117] team0 (unregistering): Port device team_slave_1 removed [ 76.036378][ T117] team0 (unregistering): Port device team_slave_0 removed [ 76.102391][ T4893] syzkaller0: entered promiscuous mode [ 76.108376][ T4893] syzkaller0: entered allmulticast mode [ 76.278123][ T4905] openvswitch: netlink: Key type 294 is out of range max 32 [ 76.391046][ T4818] chnl_net:caif_netlink_parms(): no params data found [ 76.576533][ T4921] syzkaller0: entered promiscuous mode [ 76.603044][ T4921] syzkaller0: entered allmulticast mode [ 76.735657][ T4939] openvswitch: netlink: Key type 294 is out of range max 32 [ 76.764060][ T4818] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.822678][ T4818] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.834165][ T4818] bridge_slave_0: entered allmulticast mode [ 76.854019][ T4818] bridge_slave_0: entered promiscuous mode [ 76.882650][ T4818] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.903310][ T4818] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.945675][ T4818] bridge_slave_1: entered allmulticast mode [ 76.970146][ T4818] bridge_slave_1: entered promiscuous mode [ 77.054690][ T4818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.098410][ T4818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.112404][ T4953] loop4: detected capacity change from 0 to 1024 [ 77.171473][ T4953] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.205052][ T4953] EXT4-fs (loop4): unsupported inode size: 143 [ 77.214429][ T4818] team0: Port device team_slave_0 added [ 77.242182][ T4953] EXT4-fs (loop4): blocksize: 1024 [ 77.253614][ T4818] team0: Port device team_slave_1 added [ 77.272880][ T4963] netlink: 'syz.5.463': attribute type 10 has an invalid length. [ 77.325795][ T4963] netlink: 55 bytes leftover after parsing attributes in process `syz.5.463'. [ 77.342537][ T4818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.354617][ T4818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.404305][ T4818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.451280][ T4818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.482766][ T4818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.571423][ T4818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.665763][ T4818] hsr_slave_0: entered promiscuous mode [ 77.678025][ T4818] hsr_slave_1: entered promiscuous mode [ 77.683945][ T4818] debugfs: 'hsr0' already exists in 'hsr' [ 77.692785][ T4818] Cannot create hsr debugfs directory [ 77.734735][ T4987] syzkaller0: entered promiscuous mode [ 77.742480][ T4987] syzkaller0: entered allmulticast mode [ 77.855113][ T5000] openvswitch: netlink: Key type 294 is out of range max 32 [ 77.996042][ T5001] siw: device registration error -23 [ 78.089019][ T5001] dummy0 speed is unknown, defaulting to 1000 [ 78.096103][ T4818] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 78.109084][ T4818] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 78.303468][ T5014] loop5: detected capacity change from 0 to 512 [ 78.319691][ T5014] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 78.392269][ T5015] netlink: 104 bytes leftover after parsing attributes in process `syz.2.473'. [ 78.443126][ T5017] netlink: 'syz.4.475': attribute type 10 has an invalid length. [ 78.540877][ T5017] netlink: 55 bytes leftover after parsing attributes in process `syz.4.475'. [ 78.555555][ T4818] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 78.597996][ T4818] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 79.130952][ T5040] loop0: detected capacity change from 0 to 128 [ 79.141829][ T4818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.193113][ T4818] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.324731][ T5039] siw: device registration error -23 [ 79.332794][ T5044] loop2: detected capacity change from 0 to 1024 [ 79.360612][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.367713][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.381526][ T5044] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.422347][ T5044] EXT4-fs (loop2): unsupported inode size: 143 [ 79.436903][ T5039] netlink: 104 bytes leftover after parsing attributes in process `syz.4.476'. [ 79.466691][ T5044] EXT4-fs (loop2): blocksize: 1024 [ 79.524243][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.531472][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.620272][ T4818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.859072][ T5030] dummy0 speed is unknown, defaulting to 1000 [ 79.927894][ T4818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.936169][ T5080] netlink: 89 bytes leftover after parsing attributes in process `syz.5.482'. [ 80.105296][ T5097] netlink: 'syz.5.486': attribute type 10 has an invalid length. [ 80.113157][ T5097] netlink: 55 bytes leftover after parsing attributes in process `syz.5.486'. [ 80.334019][ T5103] openvswitch: netlink: Key type 294 is out of range max 32 [ 80.344549][ T4818] veth0_vlan: entered promiscuous mode [ 80.369203][ T4818] veth1_vlan: entered promiscuous mode [ 80.413127][ T4818] veth0_macvtap: entered promiscuous mode [ 80.434084][ T4818] veth1_macvtap: entered promiscuous mode [ 80.463982][ T4818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.481773][ T5126] loop4: detected capacity change from 0 to 1024 [ 80.497747][ T4818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.507651][ T5126] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.519409][ T5126] EXT4-fs (loop4): unsupported inode size: 143 [ 80.525821][ T5126] EXT4-fs (loop4): blocksize: 1024 [ 80.556439][ T64] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.576483][ T5130] netlink: 104 bytes leftover after parsing attributes in process `syz.5.492'. [ 80.587730][ T64] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.597746][ T5134] netlink: 'syz.2.498': attribute type 10 has an invalid length. [ 80.605519][ T5134] netlink: 55 bytes leftover after parsing attributes in process `syz.2.498'. [ 80.625252][ T64] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.647457][ T4535] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.723458][ T5124] dummy0 speed is unknown, defaulting to 1000 [ 80.750333][ T5141] netlink: 'syz.2.500': attribute type 29 has an invalid length. [ 80.767839][ T5141] netlink: 596 bytes leftover after parsing attributes in process `syz.2.500'. [ 80.776296][ T5142] netlink: 'syz.4.501': attribute type 29 has an invalid length. [ 80.827823][ T5142] netlink: 596 bytes leftover after parsing attributes in process `syz.4.501'. [ 80.942046][ T5156] loop4: detected capacity change from 0 to 1024 [ 80.960700][ T5156] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.990583][ T5156] EXT4-fs (loop4): unsupported inode size: 143 [ 81.007880][ T5156] EXT4-fs (loop4): blocksize: 1024 [ 81.118405][ T5169] openvswitch: netlink: Key type 294 is out of range max 32 [ 81.127739][ T5168] netlink: 'syz.6.511': attribute type 10 has an invalid length. [ 81.171118][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 81.171135][ T28] audit: type=1400 audit(1774179026.441:733): avc: denied { read } for pid=5164 comm="syz.4.512" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.201291][ T28] audit: type=1400 audit(1774179026.441:734): avc: denied { open } for pid=5164 comm="syz.4.512" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.238617][ T5165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=5165 comm=syz.4.512 [ 81.251939][ T5165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=5165 comm=syz.4.512 [ 81.268806][ T5165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=5165 comm=syz.4.512 [ 81.283228][ T5165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=5165 comm=syz.4.512 [ 81.296480][ T5165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=5165 comm=syz.4.512 [ 81.561161][ T28] audit: type=1326 audit(1774179026.831:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c0ec799 code=0x7ffc0000 [ 81.591828][ T5185] loop5: detected capacity change from 0 to 1024 [ 81.604339][ T28] audit: type=1326 audit(1774179026.861:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0c1c0ec799 code=0x7ffc0000 [ 81.627916][ T28] audit: type=1326 audit(1774179026.861:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c0ec799 code=0x7ffc0000 [ 81.651591][ T28] audit: type=1326 audit(1774179026.861:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0c1c0ec799 code=0x7ffc0000 [ 81.676149][ T28] audit: type=1326 audit(1774179026.861:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c0ec799 code=0x7ffc0000 [ 81.700036][ T28] audit: type=1326 audit(1774179026.861:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0c1c0ec799 code=0x7ffc0000 [ 81.723613][ T28] audit: type=1326 audit(1774179026.861:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c0ec799 code=0x7ffc0000 [ 81.747649][ T5185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.764154][ T28] audit: type=1326 audit(1774179026.861:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c1c0ec799 code=0x7ffc0000 [ 81.800629][ T4347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.040873][ T5205] loop5: detected capacity change from 0 to 512 [ 82.088707][ T5205] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.179594][ T5205] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 82.197776][ T5205] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e119, mo2=0002] [ 82.206082][ T5205] EXT4-fs (loop5): orphan cleanup on readonly fs [ 82.297526][ T5205] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 82.333736][ T5210] openvswitch: netlink: Key type 294 is out of range max 32 [ 82.424339][ T5205] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 82.443336][ T5205] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.524: bg 0: block 40: padding at end of block bitmap is not set [ 82.496415][ T5216] loop4: detected capacity change from 0 to 1024 [ 82.513360][ T5216] EXT4-fs: test_dummy_encryption option not supported [ 82.547425][ T5205] loop5: lost filesystem error report for type 5 error -117 [ 82.547588][ T5205] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 82.563935][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 82.563974][ C1] EXT4-fs (loop5): initial error at time 1774179027: ext4_validate_block_bitmap:441 [ 82.564012][ C1] EXT4-fs (loop5): last error at time 1774179027: ext4_validate_block_bitmap:441 [ 82.728605][ T5217] loop6: detected capacity change from 0 to 512 [ 82.735387][ T5217] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.968535][ T5219] loop4: detected capacity change from 0 to 512 [ 82.982638][ T5219] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 83.070453][ T5217] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 83.234314][ T5217] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e119, mo2=0002] [ 83.308743][ T5205] loop5: lost filesystem error report for type 5 error -117 [ 83.308996][ T5205] EXT4-fs (loop5): 1 truncate cleaned up [ 83.529040][ T5223] loop2: detected capacity change from 0 to 128 [ 83.547678][ T5217] EXT4-fs (loop6): orphan cleanup on readonly fs [ 83.554067][ T5217] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 83.619494][ T5205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.797506][ T5217] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 83.819073][ T5217] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.527: bg 0: block 40: padding at end of block bitmap is not set [ 84.772669][ T5228] __nla_validate_parse: 2 callbacks suppressed [ 84.772690][ T5228] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.530'. [ 84.807450][ T5217] loop6: lost filesystem error report for type 5 error -117 [ 84.817396][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 84.831876][ C0] EXT4-fs (loop6): initial error at time 1774179030: ext4_validate_block_bitmap:441 [ 84.841727][ C0] EXT4-fs (loop6): last error at time 1774179030: ext4_validate_block_bitmap:441 [ 84.860121][ T5228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.530'. [ 84.949972][ T5217] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 84.980412][ T5217] loop6: lost filesystem error report for type 5 error -117 [ 84.980616][ T5217] EXT4-fs (loop6): 1 truncate cleaned up [ 85.042056][ T5217] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.117779][ T4347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.573801][ T4818] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.712594][ T5250] syzkaller0: entered promiscuous mode [ 85.720996][ T5250] syzkaller0: entered allmulticast mode [ 85.810225][ T5256] netlink: 'syz.6.537': attribute type 29 has an invalid length. [ 85.842607][ T5256] netlink: 'syz.6.537': attribute type 29 has an invalid length. [ 85.858534][ T5261] netlink: 'syz.4.541': attribute type 10 has an invalid length. [ 85.866398][ T5261] netlink: 55 bytes leftover after parsing attributes in process `syz.4.541'. [ 85.904412][ T5266] loop6: detected capacity change from 0 to 128 [ 85.956342][ T5267] dummy0 speed is unknown, defaulting to 1000 [ 85.971002][ T5269] loop2: detected capacity change from 0 to 512 [ 86.002125][ T5270] netlink: 104 bytes leftover after parsing attributes in process `syz.5.539'. [ 86.047650][ T5269] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.109692][ T5269] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 86.117857][ T5269] System zones: 1-12 [ 86.123003][ T5269] EXT4-fs (loop2): 1 truncate cleaned up [ 86.253639][ T5269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.448554][ T5277] loop5: detected capacity change from 0 to 1024 [ 86.563954][ T5277] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.585309][ T5277] EXT4-fs (loop5): unsupported inode size: 143 [ 86.600679][ T5277] EXT4-fs (loop5): blocksize: 1024 [ 86.630792][ T5282] loop0: detected capacity change from 0 to 128 [ 86.714825][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.767073][ T5289] netlink: 89 bytes leftover after parsing attributes in process `syz.2.548'. [ 86.870440][ T5296] netlink: 'syz.2.553': attribute type 29 has an invalid length. [ 86.880412][ T5296] netlink: 'syz.2.553': attribute type 29 has an invalid length. [ 86.979910][ T5304] netlink: 'syz.5.556': attribute type 10 has an invalid length. [ 87.003915][ T5304] netlink: 55 bytes leftover after parsing attributes in process `syz.5.556'. [ 87.063755][ T5310] loop5: detected capacity change from 0 to 1024 [ 87.074095][ T5310] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.197334][ T5316] loop2: detected capacity change from 0 to 512 [ 87.667768][ T5316] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.668442][ T5310] EXT4-fs (loop5): unsupported inode size: 143 [ 87.686798][ T5316] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 87.694828][ T5316] System zones: 1-12 [ 87.703986][ T5316] EXT4-fs (loop2): 1 truncate cleaned up [ 87.705317][ T5310] EXT4-fs (loop5): blocksize: 1024 [ 87.710097][ T5316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.931732][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.953858][ T5322] loop5: detected capacity change from 0 to 1024 [ 87.974030][ T5322] EXT4-fs: test_dummy_encryption option not supported [ 88.279186][ T5330] loop5: detected capacity change from 0 to 512 [ 88.290399][ T5330] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 89.007969][ T5338] loop2: detected capacity change from 0 to 512 [ 89.028835][ T5338] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.104991][ T5342] syzkaller0: entered promiscuous mode [ 89.127884][ T5342] syzkaller0: entered allmulticast mode [ 89.139441][ T5338] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 89.163098][ T5338] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e119, mo2=0002] [ 89.208046][ T5338] EXT4-fs (loop2): orphan cleanup on readonly fs [ 89.214451][ T5338] __quota_error: 35 callbacks suppressed [ 89.214464][ T5338] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 89.345551][ T5338] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 89.417456][ T5338] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 89.430127][ T5351] loop5: detected capacity change from 0 to 128 [ 89.451539][ T5338] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.567: bg 0: block 40: padding at end of block bitmap is not set [ 89.524529][ T5353] loop4: detected capacity change from 0 to 512 [ 89.535747][ T5353] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.580489][ T5338] loop2: lost filesystem error report for type 5 error -117 [ 89.583961][ T5338] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 89.592013][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 89.592034][ C1] EXT4-fs (loop2): initial error at time 1774179034: ext4_validate_block_bitmap:441 [ 89.592093][ C1] EXT4-fs (loop2): last error at time 1774179034: ext4_validate_block_bitmap:441 [ 89.799731][ T5353] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 89.807776][ T5353] System zones: 1-12 [ 89.910251][ T5353] EXT4-fs (loop4): 1 truncate cleaned up [ 89.916988][ T5353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.002849][ T5338] loop2: lost filesystem error report for type 5 error -117 [ 90.008090][ T5338] EXT4-fs (loop2): 1 truncate cleaned up [ 90.045526][ T5338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.307015][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.529836][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.634901][ T5363] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.661671][ T5363] EXT4-fs (loop2): unsupported inode size: 143 [ 90.677604][ T5363] EXT4-fs (loop2): blocksize: 1024 [ 90.943817][ T5375] siw: device registration error -23 [ 90.967518][ T5375] dummy0 speed is unknown, defaulting to 1000 [ 91.111972][ T5367] netlink: 104 bytes leftover after parsing attributes in process `syz.6.577'. [ 91.221206][ T5379] netlink: 'syz.4.579': attribute type 10 has an invalid length. [ 91.249285][ T5379] netlink: 55 bytes leftover after parsing attributes in process `syz.4.579'. [ 92.019426][ T5407] siw: device registration error -23 [ 92.092420][ T5414] netlink: 104 bytes leftover after parsing attributes in process `syz.6.584'. [ 92.130816][ T5407] dummy0 speed is unknown, defaulting to 1000 [ 92.183682][ T5424] set_capacity_and_notify: 1 callbacks suppressed [ 92.183699][ T5424] loop2: detected capacity change from 0 to 1024 [ 92.202886][ T5424] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.222980][ T5427] loop0: detected capacity change from 0 to 128 [ 92.238664][ T5424] EXT4-fs (loop2): unsupported inode size: 143 [ 92.251774][ T5424] EXT4-fs (loop2): blocksize: 1024 [ 92.338683][ T5421] openvswitch: netlink: Key type 294 is out of range max 32 [ 92.384414][ T5439] netlink: 2052 bytes leftover after parsing attributes in process `syz.2.589'. [ 92.423323][ T5439] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 92.434601][ T5439] bond1 (unregistering): Released all slaves [ 92.593541][ T5451] siw: device registration error -23 [ 92.608445][ T5451] dummy0 speed is unknown, defaulting to 1000 [ 92.743200][ T5448] netlink: 104 bytes leftover after parsing attributes in process `syz.6.590'. [ 92.832296][ T5459] openvswitch: netlink: Key type 294 is out of range max 32 [ 92.955534][ T5471] netlink: 'syz.4.593': attribute type 10 has an invalid length. [ 93.011360][ T5471] netlink: 55 bytes leftover after parsing attributes in process `syz.4.593'. [ 93.134918][ T5474] SELinux: failed to load policy [ 93.234382][ T5479] team0: Port device vlan0 added [ 93.453959][ T5492] loop2: detected capacity change from 0 to 128 [ 93.468476][ T5488] openvswitch: netlink: Key type 294 is out of range max 32 [ 93.484648][ T5494] loop6: detected capacity change from 0 to 256 [ 93.491100][ T28] audit: type=1400 audit(1774179038.751:776): avc: denied { ioctl } for pid=5493 comm="syz.6.604" path="socket:[13422]" dev="sockfs" ino=13422 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.637508][ T28] audit: type=1400 audit(1774179038.901:777): avc: denied { read } for pid=5493 comm="syz.6.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.848833][ T5499] SELinux: failed to load policy [ 93.890846][ T5503] netlink: 2052 bytes leftover after parsing attributes in process `syz.5.606'. [ 93.914837][ T5506] netlink: 'syz.2.608': attribute type 10 has an invalid length. [ 93.915015][ T5503] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 93.934029][ T5506] netlink: 55 bytes leftover after parsing attributes in process `syz.2.608'. [ 93.944671][ T5503] bond1 (unregistering): Released all slaves [ 94.052672][ T5504] siw: device registration error -23 [ 94.119820][ T5508] netlink: 104 bytes leftover after parsing attributes in process `syz.4.609'. [ 94.248460][ T5515] openvswitch: netlink: Key type 294 is out of range max 32 [ 94.570149][ T5504] dummy0 speed is unknown, defaulting to 1000 [ 94.859725][ T5526] openvswitch: netlink: Key type 294 is out of range max 32 [ 95.034205][ T5530] SELinux: failed to load policy [ 95.092064][ T5535] loop4: detected capacity change from 0 to 128 [ 95.138225][ T5539] netlink: 'syz.2.621': attribute type 10 has an invalid length. [ 95.146207][ T5539] netlink: 55 bytes leftover after parsing attributes in process `syz.2.621'. [ 95.630995][ T5555] loop2: detected capacity change from 0 to 512 [ 95.639522][ T5555] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.688343][ T5555] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 95.696442][ T5555] System zones: 1-12 [ 95.810490][ T5555] EXT4-fs (loop2): 1 truncate cleaned up [ 95.817173][ T5555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.197632][ T5560] openvswitch: netlink: Key type 294 is out of range max 32 [ 96.296104][ T5569] SELinux: failed to load policy [ 96.370660][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.935424][ T5602] loop6: detected capacity change from 0 to 512 [ 96.942427][ T5594] siw: device registration error -23 [ 96.950587][ T5602] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 96.977703][ T5602] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 96.985948][ T5602] System zones: 1-12 [ 96.990988][ T5602] EXT4-fs (loop6): 1 truncate cleaned up [ 96.997295][ T5602] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.010794][ T5599] netlink: 104 bytes leftover after parsing attributes in process `syz.0.641'. [ 97.278584][ T5612] siw: device registration error -23 [ 97.311358][ T5614] netlink: 'syz.5.648': attribute type 10 has an invalid length. [ 97.339623][ T5614] netlink: 55 bytes leftover after parsing attributes in process `syz.5.648'. [ 97.408874][ T5594] dummy0 speed is unknown, defaulting to 1000 [ 97.412930][ T5612] netlink: 104 bytes leftover after parsing attributes in process `syz.2.647'. [ 97.816198][ T4818] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.855380][ T5620] loop0: detected capacity change from 0 to 1024 [ 97.891250][ T5620] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.945140][ T5620] EXT4-fs (loop0): unsupported inode size: 143 [ 97.952864][ T5617] openvswitch: netlink: Key type 294 is out of range max 32 [ 97.979053][ T5620] EXT4-fs (loop0): blocksize: 1024 [ 98.009698][ T5611] dummy0 speed is unknown, defaulting to 1000 [ 98.060730][ T5627] netlink: 'syz.0.653': attribute type 10 has an invalid length. [ 98.078502][ T5627] netlink: 55 bytes leftover after parsing attributes in process `syz.0.653'. [ 98.251778][ T5637] openvswitch: netlink: Key type 294 is out of range max 32 [ 98.424102][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.661'. [ 98.492008][ T5655] loop0: detected capacity change from 0 to 512 [ 98.499220][ T5655] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.519969][ T5653] loop2: detected capacity change from 0 to 1024 [ 98.526418][ T5655] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 98.534659][ T5655] System zones: 1-12 [ 98.542270][ T5653] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.549829][ T5653] EXT4-fs (loop2): unsupported inode size: 143 [ 98.560394][ T5653] EXT4-fs (loop2): blocksize: 1024 [ 98.565815][ T5655] EXT4-fs (loop0): 1 truncate cleaned up [ 98.572074][ T5655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.645834][ T5664] netlink: 'syz.2.666': attribute type 10 has an invalid length. [ 98.653972][ T5664] netlink: 55 bytes leftover after parsing attributes in process `syz.2.666'. [ 98.692513][ T5666] netlink: 'syz.2.667': attribute type 29 has an invalid length. [ 98.721530][ T5666] netlink: 'syz.2.667': attribute type 29 has an invalid length. [ 98.752090][ T5666] netlink: 500 bytes leftover after parsing attributes in process `syz.2.667'. [ 98.953331][ T5670] netlink: 'syz.5.669': attribute type 49 has an invalid length. [ 99.015483][ T5683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.675'. [ 99.045813][ T5686] netlink: 2052 bytes leftover after parsing attributes in process `syz.4.674'. [ 99.055135][ T5685] loop6: detected capacity change from 0 to 1024 [ 99.060610][ T5686] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 99.063046][ T5685] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.079456][ T5686] bond1 (unregistering): Released all slaves [ 99.086509][ T5685] EXT4-fs (loop6): unsupported inode size: 143 [ 99.092950][ T5685] EXT4-fs (loop6): blocksize: 1024 [ 99.129649][ T5689] netlink: 'syz.6.677': attribute type 10 has an invalid length. [ 99.137990][ T5689] netlink: 55 bytes leftover after parsing attributes in process `syz.6.677'. [ 99.206626][ T5693] loop2: detected capacity change from 0 to 4096 [ 99.227516][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.252162][ T5695] netlink: 'syz.6.681': attribute type 29 has an invalid length. [ 99.261246][ T5695] netlink: 'syz.6.681': attribute type 29 has an invalid length. [ 99.270194][ T5693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.330885][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.340039][ T5704] loop0: detected capacity change from 0 to 4096 [ 99.364684][ T5704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.366934][ T5707] loop6: detected capacity change from 0 to 128 [ 99.439514][ T5704] FAULT_INJECTION: forcing a failure. [ 99.439514][ T5704] name failslab, interval 1, probability 0, space 0, times 1 [ 99.453855][ T5704] CPU: 1 UID: 0 PID: 5704 Comm: syz.0.683 Not tainted syzkaller #0 PREEMPT(full) [ 99.453947][ T5704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 99.453961][ T5704] Call Trace: [ 99.453970][ T5704] [ 99.453979][ T5704] __dump_stack+0x1d/0x30 [ 99.454077][ T5704] dump_stack_lvl+0x95/0xd0 [ 99.454105][ T5704] dump_stack+0x15/0x1b [ 99.454131][ T5704] should_fail_ex+0x263/0x280 [ 99.454183][ T5704] should_failslab+0x8c/0xb0 [ 99.454208][ T5704] __kmalloc_noprof+0xb8/0x4e0 [ 99.454241][ T5704] ? iovec_from_user+0x84/0x200 [ 99.454321][ T5704] iovec_from_user+0x84/0x200 [ 99.454360][ T5704] __import_iovec+0xf3/0x530 [ 99.454391][ T5704] import_iovec+0x60/0x80 [ 99.454487][ T5704] vfs_writev+0xfb/0x900 [ 99.454520][ T5704] __se_sys_pwritev2+0xfc/0x1c0 [ 99.454541][ T5704] __x64_sys_pwritev2+0x67/0x80 [ 99.454563][ T5704] x64_sys_call+0xe07/0x3020 [ 99.454633][ T5704] do_syscall_64+0x12c/0x370 [ 99.454673][ T5704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.454698][ T5704] RIP: 0033:0x7f5effbec799 [ 99.454718][ T5704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.454738][ T5704] RSP: 002b:00007f5efe647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 99.454762][ T5704] RAX: ffffffffffffffda RBX: 00007f5effe65fa0 RCX: 00007f5effbec799 [ 99.454846][ T5704] RDX: 0000000000000014 RSI: 0000200000000240 RDI: 0000000000000004 [ 99.454859][ T5704] RBP: 00007f5efe647090 R08: 0000000000000000 R09: 0000000000000003 [ 99.454871][ T5704] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000001 [ 99.454882][ T5704] R13: 00007f5effe66038 R14: 00007f5effe65fa0 R15: 00007fffd350e548 [ 99.454913][ T5704] [ 99.715086][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.761995][ T5716] loop2: detected capacity change from 0 to 1024 [ 99.768744][ T5716] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.769365][ T5718] netlink: 'syz.5.689': attribute type 10 has an invalid length. [ 99.775573][ T5716] EXT4-fs (loop2): unsupported inode size: 143 [ 99.806068][ T5716] EXT4-fs (loop2): blocksize: 1024 [ 99.908525][ T5729] loop4: detected capacity change from 0 to 512 [ 99.915622][ T5729] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.926986][ T5729] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 99.935001][ T5729] System zones: 1-12 [ 99.939396][ T5729] EXT4-fs (loop4): 1 truncate cleaned up [ 99.945476][ T5729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.056166][ T5724] openvswitch: netlink: Key type 294 is out of range max 32 [ 100.138758][ T5737] openvswitch: netlink: Key type 294 is out of range max 32 [ 100.330657][ T5740] siw: device registration error -23 [ 100.346070][ T5740] dummy0 speed is unknown, defaulting to 1000 [ 100.731040][ T5748] loop5: detected capacity change from 0 to 512 [ 100.750771][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.836747][ T5757] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.843631][ T5757] EXT4-fs (loop4): unsupported inode size: 143 [ 100.850216][ T5757] EXT4-fs (loop4): blocksize: 1024 [ 100.918660][ T5762] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 100.930782][ T5762] bond1 (unregistering): Released all slaves [ 100.953017][ T5761] SELinux: failed to load policy [ 101.131120][ T5782] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.141916][ T5782] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 101.149988][ T5782] System zones: 1-12 [ 101.154303][ T5782] EXT4-fs (loop2): 1 truncate cleaned up [ 101.160498][ T5782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.237280][ T5789] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.259152][ T5789] EXT4-fs (loop4): unsupported inode size: 143 [ 101.277932][ T5789] EXT4-fs (loop4): blocksize: 1024 [ 101.500107][ T5797] openvswitch: netlink: Key type 294 is out of range max 32 [ 101.718234][ T5813] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5813 comm=syz.0.727 [ 101.758069][ T5809] siw: device registration error -23 [ 101.811747][ T5816] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.845449][ T5816] EXT4-fs (loop0): unsupported inode size: 143 [ 101.851694][ T5817] dummy0 speed is unknown, defaulting to 1000 [ 101.858016][ T5816] EXT4-fs (loop0): blocksize: 1024 [ 101.909752][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.223993][ T5832] SELinux: failed to load policy [ 102.244920][ T5838] __nla_validate_parse: 13 callbacks suppressed [ 102.244938][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 102.273410][ T5841] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 102.284584][ T5841] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 102.292656][ T5841] System zones: 1-12 [ 102.296935][ T5841] EXT4-fs (loop5): 1 truncate cleaned up [ 102.303182][ T5841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.320344][ T5847] openvswitch: netlink: Key type 294 is out of range max 32 [ 102.388156][ T5849] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.431029][ T5849] EXT4-fs (loop2): unsupported inode size: 143 [ 102.450140][ T5849] EXT4-fs (loop2): blocksize: 1024 [ 102.495431][ T5809] dummy0 speed is unknown, defaulting to 1000 [ 102.614620][ T5855] validate_nla: 7 callbacks suppressed [ 102.614638][ T5855] netlink: 'syz.4.744': attribute type 29 has an invalid length. [ 102.637139][ T5860] siw: device registration error -23 [ 102.686975][ T5861] netlink: 'syz.4.744': attribute type 29 has an invalid length. [ 102.696449][ T5855] netlink: 500 bytes leftover after parsing attributes in process `syz.4.744'. [ 102.736717][ T5860] dummy0 speed is unknown, defaulting to 1000 [ 102.749248][ T5853] netlink: 104 bytes leftover after parsing attributes in process `syz.0.743'. [ 102.926771][ T5867] openvswitch: netlink: Key type 294 is out of range max 32 [ 102.996662][ T28] audit: type=1400 audit(1774179048.261:778): avc: denied { create } for pid=5862 comm="syz.2.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 103.019377][ T28] audit: type=1400 audit(1774179048.281:779): avc: denied { ioctl } for pid=5862 comm="syz.2.747" path="socket:[14413]" dev="sockfs" ino=14413 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 103.072314][ T4347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.169355][ T28] audit: type=1400 audit(1774179048.431:780): avc: denied { create } for pid=5875 comm="syz.6.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 103.292877][ T5888] netlink: 'syz.2.756': attribute type 10 has an invalid length. [ 103.316597][ T5875] delete_channel: no stack [ 103.316870][ T5888] netlink: 55 bytes leftover after parsing attributes in process `syz.2.756'. [ 103.340397][ T5880] openvswitch: netlink: Key type 294 is out of range max 32 [ 103.363718][ T5893] netlink: 'syz.2.759': attribute type 29 has an invalid length. [ 103.377606][ T5893] netlink: 'syz.2.759': attribute type 29 has an invalid length. [ 103.386184][ T5893] netlink: 828 bytes leftover after parsing attributes in process `syz.2.759'. [ 103.499059][ T28] audit: type=1400 audit(1774179048.761:781): avc: denied { write } for pid=5903 comm="syz.0.764" name="mcfilter" dev="proc" ino=4026532784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 103.506838][ T5904] netlink: 27 bytes leftover after parsing attributes in process `syz.0.764'. [ 103.534512][ T5905] set_capacity_and_notify: 6 callbacks suppressed [ 103.534530][ T5905] loop4: detected capacity change from 0 to 512 [ 103.548307][ T5905] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.562034][ T5905] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 103.570122][ T5905] System zones: 1-12 [ 103.589690][ T5905] EXT4-fs (loop4): 1 truncate cleaned up [ 103.595831][ T5905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.619980][ T5909] siw: device registration error -23 [ 103.651235][ T5909] dummy0 speed is unknown, defaulting to 1000 [ 103.738455][ T28] audit: type=1400 audit(1774179049.001:782): avc: denied { append } for pid=5914 comm="syz.0.767" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.772487][ T5902] netlink: 104 bytes leftover after parsing attributes in process `syz.2.763'. [ 103.804785][ T5915] loop0: detected capacity change from 0 to 8192 [ 103.900733][ T5919] netlink: 'syz.6.770': attribute type 10 has an invalid length. [ 103.909094][ T5919] netlink: 55 bytes leftover after parsing attributes in process `syz.6.770'. [ 104.059713][ T5927] netlink: 'syz.2.772': attribute type 29 has an invalid length. [ 104.077790][ T5927] netlink: 'syz.2.772': attribute type 29 has an invalid length. [ 104.086767][ T5927] netlink: 828 bytes leftover after parsing attributes in process `syz.2.772'. [ 104.161098][ T5922] delete_channel: no stack [ 104.207190][ T5935] loop0: detected capacity change from 0 to 1024 [ 104.232695][ T5935] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.248977][ T5935] EXT4-fs (loop0): unsupported inode size: 143 [ 104.255254][ T5935] EXT4-fs (loop0): blocksize: 1024 [ 104.316494][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.371813][ T5953] netlink: 'syz.6.783': attribute type 10 has an invalid length. [ 104.381089][ T5953] netlink: 55 bytes leftover after parsing attributes in process `syz.6.783'. [ 104.478194][ T28] audit: type=1400 audit(1774179049.741:783): avc: denied { create } for pid=5956 comm="syz.6.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 104.505594][ T5964] netlink: 'syz.0.786': attribute type 29 has an invalid length. [ 104.577163][ T28] audit: type=1400 audit(1774179049.841:784): avc: denied { map } for pid=5967 comm="syz.4.788" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 104.641010][ T28] audit: type=1400 audit(1774179049.881:785): avc: denied { create } for pid=5970 comm="syz.6.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.748647][ T5978] loop0: detected capacity change from 0 to 2048 [ 104.768150][ T5987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.775489][ T5987] IPv6: NLM_F_CREATE should be set when creating new route [ 104.802681][ T5978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.822373][ T5990] loop5: detected capacity change from 0 to 512 [ 104.829224][ T5990] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 104.839953][ T5990] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 104.848000][ T5990] System zones: 1-12 [ 104.852624][ T5990] EXT4-fs (loop5): 1 truncate cleaned up [ 104.858656][ T5990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.922729][ T5987] loop6: detected capacity change from 0 to 1024 [ 105.002507][ T5987] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.046849][ T5987] EXT4-fs (loop6): unsupported inode size: 143 [ 105.068711][ T5987] EXT4-fs (loop6): blocksize: 1024 [ 105.284858][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.344303][ T28] audit: type=1400 audit(1774179050.611:786): avc: denied { write } for pid=6008 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 105.374312][ T28] audit: type=1400 audit(1774179050.611:787): avc: denied { read } for pid=6008 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 105.593820][ T4347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.723663][ T6021] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 105.767979][ T6021] bond1 (unregistering): Released all slaves [ 106.006185][ T6045] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 106.046938][ T6045] SELinux: failed to load policy [ 106.238863][ T6056] loop0: detected capacity change from 0 to 512 [ 106.245802][ T6056] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 106.549602][ T6056] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 106.557722][ T6056] System zones: 1-12 [ 106.562175][ T6056] EXT4-fs (loop0): 1 truncate cleaned up [ 106.568436][ T6056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.606759][ T6068] loop6: detected capacity change from 0 to 512 [ 106.631594][ T6068] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 106.661279][ T6068] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.824: bg 0: block 104: invalid block bitmap [ 106.674473][ T6068] loop6: lost filesystem error report for type 5 error -117 [ 106.674674][ T6068] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 106.682107][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 106.682129][ C0] EXT4-fs (loop6): initial error at time 1774179051: ext4_validate_block_bitmap:432 [ 106.682152][ C0] EXT4-fs (loop6): last error at time 1774179051: ext4_validate_block_bitmap:432 [ 106.722984][ T6068] loop6: lost filesystem error report for type 5 error -117 [ 106.723218][ T6068] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.824: invalid indirect mapped block 1 (level 1) [ 106.752272][ T6079] SELinux: failed to load policy [ 106.810931][ T6068] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 106.811169][ T6068] EXT4-fs (loop6): 1 truncate cleaned up [ 106.865204][ T6088] openvswitch: netlink: Key type 294 is out of range max 32 [ 106.869530][ T6068] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.917865][ T6092] dummy0 speed is unknown, defaulting to 1000 [ 106.935251][ T6085] openvswitch: netlink: Key type 294 is out of range max 32 [ 106.948015][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.990060][ T4818] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.029024][ T6098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.054275][ T6098] loop6: detected capacity change from 0 to 1024 [ 107.080613][ T6098] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.099284][ T6098] EXT4-fs (loop6): unsupported inode size: 143 [ 107.105631][ T6098] EXT4-fs (loop6): blocksize: 1024 [ 107.264381][ T6108] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 107.285688][ T6115] __nla_validate_parse: 14 callbacks suppressed [ 107.285708][ T6115] netlink: 55 bytes leftover after parsing attributes in process `syz.4.844'. [ 107.297437][ T6108] SELinux: failed to load policy [ 107.466345][ T6127] loop6: detected capacity change from 0 to 512 [ 107.474435][ T6127] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 107.485766][ T6127] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 107.493736][ T6127] System zones: 1-12 [ 107.498320][ T6127] EXT4-fs (loop6): 1 truncate cleaned up [ 107.504651][ T6127] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.603432][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'. [ 107.758347][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.852'. [ 107.767960][ T6142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.775210][ T6142] IPv6: NLM_F_CREATE should be set when creating new route [ 107.789702][ T6142] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.806870][ T6142] EXT4-fs (loop2): unsupported inode size: 143 [ 107.821186][ T6142] EXT4-fs (loop2): blocksize: 1024 [ 107.913419][ T6157] validate_nla: 8 callbacks suppressed [ 107.913434][ T6157] netlink: 'syz.4.857': attribute type 10 has an invalid length. [ 107.929654][ T6157] netlink: 55 bytes leftover after parsing attributes in process `syz.4.857'. [ 107.942463][ T6155] SELinux: unknown common r [ 107.947313][ T6155] SELinux: failed to load policy [ 107.985406][ T6162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.060586][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.120303][ T6169] siw: device registration error -23 [ 108.166455][ T6173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.864'. [ 108.181834][ T6174] netlink: 104 bytes leftover after parsing attributes in process `syz.4.863'. [ 108.225826][ T4818] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.263112][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.865'. [ 108.273038][ T6176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.293216][ T6178] EXT4-fs: test_dummy_encryption option not supported [ 108.307122][ T6176] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.317575][ T6176] EXT4-fs (loop2): unsupported inode size: 143 [ 108.323771][ T6176] EXT4-fs (loop2): blocksize: 1024 [ 108.506197][ T6185] netlink: 'syz.2.869': attribute type 10 has an invalid length. [ 108.692685][ T6186] set_capacity_and_notify: 4 callbacks suppressed [ 108.692794][ T6186] loop6: detected capacity change from 0 to 512 [ 108.713429][ T6186] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 108.759905][ T6187] openvswitch: netlink: Key type 294 is out of range max 32 [ 108.836947][ T6185] netlink: 55 bytes leftover after parsing attributes in process `syz.2.869'. [ 109.316738][ T6169] dummy0 speed is unknown, defaulting to 1000 [ 109.556998][ T6193] loop2: detected capacity change from 0 to 4096 [ 109.616527][ T6193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.618199][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 109.618213][ T28] audit: type=1400 audit(1774179054.891:799): avc: denied { getopt } for pid=6196 comm="syz.5.873" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.687926][ T6197] netlink: 'syz.5.873': attribute type 2 has an invalid length. [ 109.707598][ T6197] netlink: 36 bytes leftover after parsing attributes in process `syz.5.873'. [ 109.729289][ T28] audit: type=1400 audit(1774179055.001:800): avc: denied { setopt } for pid=6196 comm="syz.5.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.816933][ T28] audit: type=1400 audit(1774179055.021:801): avc: denied { connect } for pid=6196 comm="syz.5.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.863380][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.916577][ T6206] sctp: [Deprecated]: syz.0.877 (pid 6206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.916577][ T6206] Use struct sctp_sack_info instead [ 110.100748][ T6212] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 110.115131][ T6213] openvswitch: netlink: Key type 294 is out of range max 32 [ 110.128894][ T6212] SELinux: failed to load policy [ 110.186075][ T6219] loop2: detected capacity change from 0 to 512 [ 110.196751][ T6219] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.212650][ T6219] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 110.220750][ T6219] System zones: 1-12 [ 110.225280][ T6219] EXT4-fs (loop2): 1 truncate cleaned up [ 110.231605][ T6219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.382533][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.478687][ T6233] netlink: 'syz.4.888': attribute type 10 has an invalid length. [ 110.518169][ T6233] netlink: 55 bytes leftover after parsing attributes in process `syz.4.888'. [ 110.635883][ T6240] siw: device registration error -23 [ 110.652067][ T6240] dummy0 speed is unknown, defaulting to 1000 [ 110.696419][ T6242] openvswitch: netlink: Key type 294 is out of range max 32 [ 110.714362][ T6239] loop6: detected capacity change from 0 to 4096 [ 110.802808][ T6239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.858200][ T6239] dummy0 speed is unknown, defaulting to 1000 [ 110.930873][ T6253] dummy0 speed is unknown, defaulting to 1000 [ 110.945431][ T6254] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 110.961850][ T6254] SELinux: failed to load policy [ 111.417569][ T6259] loop0: detected capacity change from 0 to 512 [ 111.432814][ T6259] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 111.617091][ T6261] loop5: detected capacity change from 0 to 512 [ 111.624170][ T6261] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 111.733637][ T6261] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 111.741657][ T6261] System zones: 1-12 [ 111.746081][ T6261] EXT4-fs (loop5): 1 truncate cleaned up [ 111.752511][ T6261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.105715][ T4347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.794643][ T6278] loop4: detected capacity change from 0 to 128 [ 112.983628][ T6286] SELinux: unknown common r [ 112.988936][ T6286] SELinux: failed to load policy [ 113.019138][ T6289] __nla_validate_parse: 1 callbacks suppressed [ 113.019154][ T6289] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.903'. [ 113.051766][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.903'. [ 113.097577][ T6294] netlink: 28 bytes leftover after parsing attributes in process `syz.5.907'. [ 113.118937][ T6289] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 113.162218][ T4818] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 113.184477][ T6289] bond1 (unregistering): Released all slaves [ 113.201052][ T4818] CPU: 1 UID: 0 PID: 4818 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 113.201122][ T4818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.201135][ T4818] Call Trace: [ 113.201141][ T4818] [ 113.201149][ T4818] __dump_stack+0x1d/0x30 [ 113.201180][ T4818] dump_stack_lvl+0x95/0xd0 [ 113.201250][ T4818] dump_stack+0x15/0x1b [ 113.201273][ T4818] dump_header+0x80/0x240 [ 113.201297][ T4818] oom_kill_process+0x295/0x350 [ 113.201321][ T4818] out_of_memory+0x97d/0xb80 [ 113.201345][ T4818] try_charge_memcg+0x62e/0xa10 [ 113.201401][ T4818] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 113.201433][ T4818] __swap_cache_prepare_and_add+0x386/0x530 [ 113.201462][ T4818] swap_cache_alloc_folio+0xa2/0x120 [ 113.201539][ T4818] swap_cluster_readahead+0x26e/0x3d0 [ 113.201572][ T4818] swapin_readahead+0xde/0x840 [ 113.201601][ T4818] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 113.201736][ T4818] ? __pfx_perf_pmu_nop_void+0x10/0x10 [ 113.201769][ T4818] ? __rcu_read_unlock+0x4e/0x70 [ 113.201792][ T4818] ? swap_cache_get_folio+0x26f/0x280 [ 113.201888][ T4818] do_swap_page+0x30d/0x2220 [ 113.201920][ T4818] ? __schedule+0x93c/0xd40 [ 113.201948][ T4818] ? __rcu_read_lock+0x36/0x50 [ 113.201991][ T4818] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 113.202037][ T4818] handle_mm_fault+0xb46/0x3020 [ 113.202066][ T4818] ? vma_start_read+0x1c7/0x2c0 [ 113.202090][ T4818] do_user_addr_fault+0x62f/0x1050 [ 113.202159][ T4818] ? trace_page_fault_user+0x1f/0xe0 [ 113.202188][ T4818] exc_page_fault+0x62/0xa0 [ 113.202235][ T4818] asm_exc_page_fault+0x26/0x30 [ 113.202258][ T4818] RIP: 0033:0x7f52aaa47917 [ 113.202273][ T4818] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 113.202291][ T4818] RSP: 002b:00007ffe41e92780 EFLAGS: 00010202 [ 113.202384][ T4818] RAX: 0000000000000000 RBX: 000055558e48c500 RCX: 00007f52aaa47917 [ 113.202399][ T4818] RDX: 00007ffe41e927c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.202467][ T4818] RBP: 00007ffe41e9282c R08: 0000000000000000 R09: 0000000000000000 [ 113.202479][ T4818] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 113.202493][ T4818] R13: 00000000000927c0 R14: 000000000001b986 R15: 00007ffe41e92880 [ 113.202511][ T4818] [ 113.202518][ T4818] memory: usage 307200kB, limit 307200kB, failcnt 512 [ 113.440717][ T4818] memory+swap: usage 310548kB, limit 9007199254740988kB, failcnt 0 [ 113.448727][ T4818] kmem: usage 269712kB, limit 9007199254740988kB, failcnt 0 [ 113.456273][ T4818] Memory cgroup stats for /syz6: [ 113.456578][ T4818] cache 8654848 [ 113.497258][ T4818] rss 29732864 [ 113.506730][ T4818] shmem 0 [ 113.518022][ T4818] mapped_file 10813440 [ 113.538082][ T4818] dirty 0 [ 113.541118][ T4818] writeback 0 [ 113.555126][ T4818] workingset_refault_anon 0 [ 113.572777][ T4818] workingset_refault_file 30 [ 113.592637][ T4818] swap 3428352 [ 113.596133][ T4818] swapcached 3428352 [ 113.600270][ T4818] pgpgin 27552 [ 113.603941][ T4818] pgpgout 18180 [ 113.607558][ T4818] pgfault 35752 [ 113.611306][ T4818] pgmajfault 2 [ 113.615006][ T4818] inactive_anon 0 [ 113.619320][ T4818] active_anon 0 [ 113.652134][ T4818] inactive_file 0 [ 113.663949][ T4818] active_file 8192 [ 113.678000][ T4818] unevictable 38379520 [ 113.691156][ T4818] hierarchical_memory_limit 314572800 [ 113.733799][ T4818] hierarchical_memsw_limit 9223372036854771712 [ 113.780583][ T4818] total_cache 8654848 [ 113.806438][ T4818] total_rss 29732864 [ 113.899754][ T4818] total_shmem 0 [ 113.903288][ T4818] total_mapped_file 10813440 [ 114.153274][ T6310] loop4: detected capacity change from 0 to 512 [ 114.179164][ T6310] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 114.803511][ T4818] total_dirty 0 [ 114.810126][ T4818] total_writeback 0 [ 115.069152][ T4818] total_workingset_refault_anon 0 [ 115.079191][ T4818] total_workingset_refault_file 30 [ 115.796652][ T4818] total_swap 3428352 [ 115.800761][ T4818] total_swapcached 3428352 [ 115.805310][ T4818] total_pgpgin 27552 [ 115.809445][ T4818] total_pgpgout 18180 [ 115.813477][ T4818] total_pgfault 35752 [ 116.092959][ T4818] total_pgmajfault 2 [ 116.096903][ T4818] total_inactive_anon 0 [ 116.127605][ T4818] total_active_anon 0 [ 116.131634][ T4818] total_inactive_file 0 [ 116.135806][ T4818] total_active_file 8192 [ 116.636401][ T4818] total_unevictable 38379520 [ 116.641342][ T4818] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.890,pid=6238,uid=0 [ 116.669347][ T4818] Memory cgroup out of memory: OOM victim 6238 (syz.6.890) is already exiting. Skip killing the task [ 116.721632][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.913'. [ 116.740704][ T6320] openvswitch: netlink: Key type 294 is out of range max 32 [ 116.796838][ T6319] bond_slave_0: entered promiscuous mode [ 116.802625][ T6319] bond_slave_1: entered promiscuous mode [ 116.837747][ T6319] macvlan2: entered promiscuous mode [ 116.848649][ T6319] bond0: entered promiscuous mode [ 116.870231][ T6255] syz.6.890 (6255) used greatest stack depth: 8584 bytes left [ 116.899018][ T6319] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 116.927962][ T4818] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.124451][ T6338] netlink: 28 bytes leftover after parsing attributes in process `syz.5.919'. [ 117.237602][ T6343] netlink: 'syz.4.921': attribute type 10 has an invalid length. [ 117.265777][ T6343] netlink: 55 bytes leftover after parsing attributes in process `syz.4.921'. [ 117.799097][ T6372] siw: device registration error -23 [ 117.850810][ T6374] loop5: detected capacity change from 0 to 512 [ 117.858831][ T6374] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 117.873096][ T6374] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 117.881097][ T6374] System zones: 1-12 [ 117.938006][ T6381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.930'. [ 117.947026][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.930'. [ 117.957806][ T6372] netlink: 104 bytes leftover after parsing attributes in process `syz.4.927'. [ 118.179971][ T6379] dummy0 speed is unknown, defaulting to 1000 [ 118.188277][ T6384] openvswitch: netlink: Key type 294 is out of range max 32 [ 118.256403][ T6374] EXT4-fs (loop5): 1 truncate cleaned up [ 118.268696][ T6374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.358794][ T6389] netlink: 'syz.0.933': attribute type 10 has an invalid length. [ 118.366753][ T6389] netlink: 55 bytes leftover after parsing attributes in process `syz.0.933'. [ 118.522324][ T6395] siw: device registration error -23 [ 118.581211][ T6401] netlink: 104 bytes leftover after parsing attributes in process `syz.4.935'. [ 118.643312][ T4347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.659119][ T6397] siw: device registration error -23 [ 118.739255][ T6400] netlink: 104 bytes leftover after parsing attributes in process `syz.0.936'. [ 118.887002][ T6395] dummy0 speed is unknown, defaulting to 1000 [ 118.898809][ T6407] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 118.909058][ T6407] SELinux: failed to load policy [ 119.052509][ T6412] loop2: detected capacity change from 0 to 1024 [ 119.059425][ T6412] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.095799][ T6412] EXT4-fs (loop2): unsupported inode size: 143 [ 119.102220][ T6412] EXT4-fs (loop2): blocksize: 1024 [ 119.285294][ T6418] loop5: detected capacity change from 0 to 128 [ 119.333316][ T6397] dummy0 speed is unknown, defaulting to 1000 [ 119.429324][ T6420] siw: device registration error -23 [ 119.482923][ T6416] siw: device registration error -23 [ 119.505641][ T6421] netlink: 104 bytes leftover after parsing attributes in process `syz.4.944'. [ 119.535041][ T6424] loop6: detected capacity change from 0 to 1024 [ 119.542174][ T6424] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.553003][ T6424] EXT4-fs (loop6): unsupported inode size: 143 [ 119.559279][ T6424] EXT4-fs (loop6): blocksize: 1024 [ 119.566805][ T6420] dummy0 speed is unknown, defaulting to 1000 [ 119.646765][ T6426] siw: device registration error -23 [ 119.667984][ T6422] dummy0 speed is unknown, defaulting to 1000 [ 119.694458][ T6416] netlink: 104 bytes leftover after parsing attributes in process `syz.2.942'. [ 119.729453][ T6431] netlink: 104 bytes leftover after parsing attributes in process `syz.0.946'. [ 120.129709][ T6440] openvswitch: netlink: Key type 294 is out of range max 32 [ 120.247021][ T6426] dummy0 speed is unknown, defaulting to 1000 [ 120.315568][ T6450] netlink: 16 bytes leftover after parsing attributes in process `syz.5.957'. [ 120.344206][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.957'. [ 120.354662][ T6452] loop2: detected capacity change from 0 to 128 [ 120.903935][ T6467] loop5: detected capacity change from 0 to 8192 [ 120.978320][ T3880] loop5: p1 < > p2 p4 < p5 > [ 121.074903][ T3880] loop5: partition table partially beyond EOD, truncated [ 121.108742][ T3880] loop5: p1 start 134217728 is beyond EOD, truncated [ 121.140053][ T3880] loop5: p2 size 591360 extends beyond EOD, truncated [ 121.239405][ T3880] loop5: p5 size 591360 extends beyond EOD, truncated [ 121.366056][ T6475] loop6: detected capacity change from 0 to 128 [ 121.374418][ T6467] loop5: p1 < > p2 p4 < p5 > [ 121.379271][ T6467] loop5: partition table partially beyond EOD, truncated [ 121.386376][ T6467] loop5: p1 start 134217728 is beyond EOD, truncated [ 121.393128][ T6467] loop5: p2 size 591360 extends beyond EOD, truncated [ 121.405826][ T6467] loop5: p5 size 591360 extends beyond EOD, truncated [ 121.570143][ T6483] siw: device registration error -23 [ 121.587581][ T6485] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.965'. [ 121.600596][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'. [ 121.685599][ T6489] netlink: 'syz.0.970': attribute type 16 has an invalid length. [ 121.798885][ T6483] dummy0 speed is unknown, defaulting to 1000 [ 122.077072][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 122.082014][ T6500] loop0: detected capacity change from 0 to 512 [ 122.092965][ T6500] EXT4-fs: Ignoring removed bh option [ 122.105115][ T6500] journal_path: Non-blockdev passed as './file0' [ 122.111787][ T6500] EXT4-fs: error: could not find journal device path [ 122.140322][ T28] audit: type=1400 audit(1774179067.411:802): avc: denied { create } for pid=6499 comm="syz.0.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.141554][ T6500] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 122.141554][ T6500] program syz.0.974 not setting count and/or reply_len properly [ 122.215156][ T6502] loop4: detected capacity change from 0 to 1024 [ 122.222114][ T6502] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.241111][ T6502] EXT4-fs (loop4): unsupported inode size: 143 [ 122.247322][ T6502] EXT4-fs (loop4): blocksize: 1024 [ 122.348992][ T6510] netlink: 'syz.6.978': attribute type 10 has an invalid length. [ 122.404049][ T6513] loop6: detected capacity change from 0 to 1024 [ 122.420829][ T6513] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.437609][ T6504] siw: device registration error -23 [ 122.456360][ T6513] EXT4-fs (loop6): unsupported inode size: 143 [ 122.473218][ T6513] EXT4-fs (loop6): blocksize: 1024 [ 122.486660][ T6495] loop5: detected capacity change from 0 to 1024 [ 122.549644][ T6517] netlink: 'syz.6.982': attribute type 16 has an invalid length. [ 122.579746][ T6495] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 122.609070][ T6495] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 122.621314][ T6495] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 122.648620][ T6495] EXT4-fs error (device loop5): ext4_get_journal_inode:5863: inode #5: comm syz.5.968: unexpected bad inode w/o EXT4_IGET_BAD [ 122.663166][ T6495] loop5: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 122.664859][ T6495] EXT4-fs (loop5): no journal found [ 122.674629][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 122.674857][ C0] EXT4-fs (loop5): initial error at time 1774179067: ext4_get_journal_inode:5863: inode 5 [ 122.675385][ C0] EXT4-fs (loop5): last error at time 1774179067: ext4_get_journal_inode:5863: inode 5 [ 122.714401][ T6495] EXT4-fs (loop5): can't get journal size [ 122.756799][ T6495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.890645][ T4347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.896184][ T6504] dummy0 speed is unknown, defaulting to 1000 [ 122.923778][ T6525] siw: device registration error -23 [ 122.997054][ T6525] dummy0 speed is unknown, defaulting to 1000 [ 123.029191][ T6531] siw: device registration error -23 [ 123.150451][ T6531] dummy0 speed is unknown, defaulting to 1000 [ 123.213047][ T6539] siw: device registration error -23 [ 123.306461][ T6547] loop4: detected capacity change from 0 to 1024 [ 123.314677][ T6539] dummy0 speed is unknown, defaulting to 1000 [ 123.317151][ T6547] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.329693][ T6547] EXT4-fs (loop4): unsupported inode size: 143 [ 123.336045][ T6547] EXT4-fs (loop4): blocksize: 1024 [ 123.448997][ T6552] netlink: 'syz.2.995': attribute type 16 has an invalid length. [ 123.456854][ T6552] __nla_validate_parse: 10 callbacks suppressed [ 123.456869][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.995'. [ 123.648837][ T6560] siw: device registration error -23 [ 123.689585][ T6560] dummy0 speed is unknown, defaulting to 1000 [ 123.723410][ T6567] netlink: 104 bytes leftover after parsing attributes in process `syz.2.999'. [ 123.796032][ T6573] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.1011'. [ 123.813478][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 123.853148][ T6576] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.865093][ T6576] EXT4-fs (loop5): unsupported inode size: 143 [ 123.878938][ T6573] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 123.927599][ T6576] EXT4-fs (loop5): blocksize: 1024 [ 123.971064][ T6573] bond1 (unregistering): Released all slaves [ 124.043578][ T6569] siw: device registration error -23 [ 124.112147][ T6577] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1002'. [ 124.147491][ T4098] Bluetooth: hci0: command 0x1003 tx timeout [ 124.149242][ T3579] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 124.155800][ T6583] dummy0 speed is unknown, defaulting to 1000 [ 124.282838][ T6581] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1006'. [ 124.565587][ T6593] set_capacity_and_notify: 2 callbacks suppressed [ 124.565629][ T6593] loop5: detected capacity change from 0 to 8192 [ 124.618392][ T3880] loop5: p1 < > p2 p4 < p5 > [ 124.623523][ T3880] loop5: partition table partially beyond EOD, truncated [ 124.641455][ T3880] loop5: p1 start 134217728 is beyond EOD, truncated [ 124.762941][ T3880] loop5: p2 size 591360 extends beyond EOD, truncated [ 124.851334][ T3880] loop5: p5 size 591360 extends beyond EOD, truncated [ 125.086308][ T6569] dummy0 speed is unknown, defaulting to 1000 [ 125.162221][ T6593] loop5: p1 < > p2 p4 < p5 > [ 125.166946][ T6593] loop5: partition table partially beyond EOD, truncated [ 125.174149][ T6593] loop5: p1 start 134217728 is beyond EOD, truncated [ 125.180907][ T6593] loop5: p2 size 591360 extends beyond EOD, truncated [ 125.192125][ T6593] loop5: p5 size 591360 extends beyond EOD, truncated [ 125.266252][ T6596] openvswitch: netlink: Key type 294 is out of range max 32 [ 125.464027][ T6608] siw: device registration error -23 [ 125.475283][ T6612] loop4: detected capacity change from 0 to 128 [ 125.480026][ T6608] dummy0 speed is unknown, defaulting to 1000 [ 125.523480][ T6613] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1016'. [ 125.608419][ T6617] loop6: detected capacity change from 0 to 512 [ 125.616411][ T64] Bluetooth: hci0: Frame reassembly failed (-84) [ 125.623935][ T6617] EXT4-fs: Ignoring removed bh option [ 125.669863][ T6617] journal_path: Non-blockdev passed as './file0' [ 125.676447][ T6617] EXT4-fs: error: could not find journal device path [ 125.717841][ T6623] netlink: zone id is out of range [ 125.743830][ T6617] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 125.743830][ T6617] program syz.6.1019 not setting count and/or reply_len properly [ 125.860972][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1026'. [ 125.889570][ T6636] loop2: detected capacity change from 0 to 512 [ 125.897049][ T6636] EXT4-fs (loop2): inodes count not valid: 41 vs 32 [ 126.002796][ T6641] loop0: detected capacity change from 0 to 512 [ 126.038243][ T6641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.051535][ T6641] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.065237][ T6641] EXT4-fs error (device loop0): ext4_validate_inode_bitmap:105: comm syz.0.1029: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 126.089460][ T28] audit: type=1400 audit(1774179071.361:803): avc: denied { create } for pid=6640 comm="syz.0.1029" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 126.150435][ T6648] syzkaller1: entered promiscuous mode [ 126.156096][ T6648] syzkaller1: entered allmulticast mode [ 126.168564][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.244925][ T6650] siw: device registration error -23 [ 126.319792][ T6653] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1031'. [ 126.391890][ T6650] dummy0 speed is unknown, defaulting to 1000 [ 126.597402][ T6657] loop0: detected capacity change from 0 to 128 [ 126.771028][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 126.784962][ T6662] loop2: detected capacity change from 0 to 1024 [ 126.791748][ T6662] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.798695][ T6662] EXT4-fs (loop2): unsupported inode size: 143 [ 126.804926][ T6662] EXT4-fs (loop2): blocksize: 1024 [ 126.981789][ T6677] xt_CONNSECMARK: invalid mode: 0 [ 126.995913][ T28] audit: type=1400 audit(1774179072.261:804): avc: denied { block_suspend } for pid=6676 comm="syz.2.1040" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 127.021762][ T6677] loop2: detected capacity change from 0 to 128 [ 127.284771][ T6677] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.317687][ T6677] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.447822][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.508677][ T28] audit: type=1400 audit(1774179072.781:805): avc: denied { write } for pid=6683 comm="syz.2.1041" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 127.582785][ T28] audit: type=1326 audit(1774179072.851:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c672ac799 code=0x7ffc0000 [ 127.646704][ T28] audit: type=1326 audit(1774179072.851:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c672ac799 code=0x7ffc0000 [ 127.677415][ T4098] Bluetooth: hci0: command 0x1003 tx timeout [ 127.683462][ T3579] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 127.695756][ T6688] loop2: detected capacity change from 0 to 764 [ 127.706308][ T28] audit: type=1326 audit(1774179072.851:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c672ac799 code=0x7ffc0000 [ 127.729964][ T28] audit: type=1326 audit(1774179072.851:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c672ac799 code=0x7ffc0000 [ 127.762085][ T28] audit: type=1326 audit(1774179072.851:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5c672ac799 code=0x7ffc0000 [ 127.785890][ T28] audit: type=1326 audit(1774179072.881:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c672ac799 code=0x7ffc0000 [ 127.809762][ T28] audit: type=1326 audit(1774179072.881:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c672ac799 code=0x7ffc0000 [ 127.833561][ T28] audit: type=1326 audit(1774179072.891:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c672ac799 code=0x7ffc0000 [ 127.857574][ T28] audit: type=1326 audit(1774179072.901:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c672ac799 code=0x7ffc0000 [ 127.917930][ T6688] Symlink component flag not implemented [ 127.937941][ T6688] Symlink component flag not implemented (116) [ 127.964480][ T6691] openvswitch: netlink: Key type 294 is out of range max 32 [ 128.526375][ T6699] __nla_validate_parse: 2 callbacks suppressed [ 128.526392][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 128.574963][ T6699] loop2: detected capacity change from 0 to 1024 [ 128.602750][ T6699] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.634989][ T6699] EXT4-fs (loop2): unsupported inode size: 143 [ 128.657408][ T6699] EXT4-fs (loop2): blocksize: 1024 [ 128.688036][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1050'. [ 128.918576][ T6710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.103777][ T4818] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.145035][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1059'. [ 129.154112][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1059'. [ 129.204129][ T6723] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 129.398518][ T3880] loop6: p1 < > p2 p4 < p5 > [ 129.411437][ T3880] loop6: partition table partially beyond EOD, truncated [ 129.470125][ T3880] loop6: p1 start 134217728 is beyond EOD, truncated [ 129.589818][ T6734] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.626379][ T3880] loop6: p2 size 591360 extends beyond EOD, truncated [ 129.707917][ T6734] EXT4-fs (loop2): unsupported inode size: 143 [ 129.750809][ T3880] loop6: p5 size 591360 extends beyond EOD, truncated [ 129.813882][ T6734] EXT4-fs (loop2): blocksize: 1024 [ 129.953475][ T6735] loop6: p1 < > p2 p4 < p5 > [ 129.958238][ T6735] loop6: partition table partially beyond EOD, truncated [ 129.965358][ T6735] loop6: p1 start 134217728 is beyond EOD, truncated [ 129.972158][ T6735] loop6: p2 size 591360 extends beyond EOD, truncated [ 129.980134][ T6735] loop6: p5 size 591360 extends beyond EOD, truncated [ 130.181677][ T6750] set_capacity_and_notify: 3 callbacks suppressed [ 130.181697][ T6750] loop2: detected capacity change from 0 to 2048 [ 130.246214][ T6750] dummy0 speed is unknown, defaulting to 1000 [ 130.438253][ T6763] dummy0 speed is unknown, defaulting to 1000 [ 130.462227][ T6764] loop2: detected capacity change from 0 to 4096 [ 130.478990][ T6760] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1072'. [ 130.540236][ T3880] udevd[3880]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 130.541400][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 130.560535][ T3875] udevd[3875]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 130.580485][ T6764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.655552][ T6771] loop5: detected capacity change from 0 to 512 [ 130.675246][ T6771] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 130.710410][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.725361][ T6771] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 130.747118][ T6771] EXT4-fs (loop5): 1 truncate cleaned up [ 130.763292][ T6774] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 130.778310][ T6771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.795847][ T6775] netlink: 'syz.4.1071': attribute type 1 has an invalid length. [ 131.034670][ T6781] loop2: detected capacity change from 0 to 8192 [ 131.109314][ T3880] loop2: p1 < > p2 p4 < p5 > [ 131.123921][ T3880] loop2: partition table partially beyond EOD, truncated [ 131.251210][ T3880] loop2: p1 start 134217728 is beyond EOD, truncated [ 131.292353][ T6784] gretap1: entered allmulticast mode [ 131.339342][ T4347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.348950][ T3880] loop2: p2 size 591360 extends beyond EOD, truncated [ 131.407204][ T3880] loop2: p5 size 591360 extends beyond EOD, truncated [ 131.551273][ T6784] bond1: (slave gretap1): making interface the new active one [ 131.665342][ T6781] loop2: p1 < > p2 p4 < p5 > [ 131.670301][ T6781] loop2: partition table partially beyond EOD, truncated [ 131.677444][ T6781] loop2: p1 start 134217728 is beyond EOD, truncated [ 131.684216][ T6781] loop2: p2 size 591360 extends beyond EOD, truncated [ 131.692145][ T6781] loop2: p5 size 591360 extends beyond EOD, truncated [ 131.698016][ T6784] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 131.767890][ T3875] udevd[3875]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 131.770410][ T3880] udevd[3880]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 131.779480][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 131.995333][ T6795] loop2: detected capacity change from 0 to 512 [ 132.103693][ T6795] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.159632][ T6784] loop4: detected capacity change from 0 to 512 [ 132.175221][ T6795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 132.183375][ T6795] System zones: 1-12 [ 132.292334][ T6795] EXT4-fs (loop2): 1 truncate cleaned up [ 132.299162][ T6795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.317055][ T3875] udevd[3875]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 132.346095][ T3880] udevd[3880]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 132.358592][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 132.401532][ T6784] EXT4-fs (loop4): 1 orphan inode deleted [ 132.488559][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 132.498167][ T6784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.521130][ T12] loop4: lost filesystem error report for type 5 error -117 [ 132.529924][ T28] kauditd_printk_skb: 239 callbacks suppressed [ 132.529941][ T28] audit: type=1400 audit(1774179077.731:1053): avc: denied { open } for pid=6798 comm="syz.5.1081" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 132.550377][ T6815] loop0: detected capacity change from 0 to 1024 [ 132.579467][ T6784] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.625593][ T6800] netem: change failed [ 132.628598][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.650506][ T6819] loop2: detected capacity change from 0 to 128 [ 132.658307][ T6815] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.698989][ T6815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.828685][ T28] audit: type=1400 audit(1774179078.081:1054): avc: denied { allowed } for pid=6814 comm="syz.0.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 132.868798][ T28] audit: type=1400 audit(1774179078.131:1055): avc: denied { ioctl } for pid=6814 comm="syz.0.1083" path="socket:[18379]" dev="sockfs" ino=18379 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.899102][ T28] audit: type=1400 audit(1774179078.131:1056): avc: denied { shutdown } for pid=6814 comm="syz.0.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.932089][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.981546][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.168585][ T6870] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1087'. [ 133.178467][ T6888] siw: device registration error -23 [ 133.274349][ T6837] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1085'. [ 133.307041][ T6888] dummy0 speed is unknown, defaulting to 1000 [ 133.369852][ T3105] kernel read not supported for file [fscontext] (pid: 3105 comm: kworker/1:2) [ 133.381615][ T28] audit: type=1400 audit(1774179078.641:1057): avc: denied { mounton } for pid=6903 comm="syz.5.1089" path="/156/file1" dev="tmpfs" ino=847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.484310][ T28] audit: type=1326 audit(1774179078.711:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.5.1089" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c0ec799 code=0x0 [ 133.571257][ T6908] loop0: detected capacity change from 0 to 4096 [ 133.585719][ T6908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.621238][ T6910] loop5: detected capacity change from 0 to 128 [ 133.652641][ T6910] vfat: Unknown parameter './cgroup/pids.max' [ 133.663071][ T28] audit: type=1400 audit(1774179078.911:1059): avc: denied { create } for pid=6913 comm="syz.4.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.743932][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 133.759916][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.941244][ T6923] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.963925][ T6923] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 133.971986][ T6923] System zones: 1-12 [ 134.097649][ T6923] EXT4-fs (loop4): 1 truncate cleaned up [ 134.104358][ T6923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.268707][ T4347] cgroup: fork rejected by pids controller in /syz5 [ 134.467056][ T6935] x_tables: duplicate underflow at hook 1 [ 134.686044][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.747391][ T6941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.767981][ T6891] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.772889][ T6941] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.812678][ T28] audit: type=1400 audit(1774179080.081:1060): avc: denied { write } for pid=6940 comm="syz.4.1099" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.851968][ T6891] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.909980][ T28] audit: type=1400 audit(1774179080.131:1061): avc: denied { ioctl } for pid=6940 comm="syz.4.1099" path="/239/bus/file2" dev="loop4" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.970101][ T6955] openvswitch: netlink: Key type 294 is out of range max 32 [ 135.013047][ T6891] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.083551][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.099465][ T6947] dummy0 speed is unknown, defaulting to 1000 [ 135.155537][ T6891] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.201157][ T6966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.348741][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.370472][ T6891] bridge_slave_1: left allmulticast mode [ 135.376264][ T6891] bridge_slave_1: left promiscuous mode [ 135.397672][ T6891] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.408277][ T6891] bridge_slave_0: left allmulticast mode [ 135.426012][ T6891] bridge_slave_0: left promiscuous mode [ 135.440506][ T6891] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.521526][ T6973] openvswitch: netlink: Key type 294 is out of range max 32 [ 135.648982][ T6979] openvswitch: netlink: Key type 294 is out of range max 32 [ 135.699229][ T6891] bond0 (unregistering): left promiscuous mode [ 135.705469][ T6891] bond_slave_0: left promiscuous mode [ 135.725971][ T6891] bond_slave_1: left promiscuous mode [ 135.769380][ T6891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.799183][ T6891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.839236][ T6891] bond0 (unregistering): Released all slaves [ 135.861399][ T6947] chnl_net:caif_netlink_parms(): no params data found [ 135.906523][ T6983] siw: device registration error -23 [ 135.942068][ T6891] hsr_slave_0: left promiscuous mode [ 135.976364][ T6891] hsr_slave_1: left promiscuous mode [ 135.988775][ T6990] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1109'. [ 136.007835][ T6891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.025411][ T6891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.055397][ T6891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.075349][ T6891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.102822][ T6891] veth1_macvtap: left promiscuous mode [ 136.128808][ T6891] veth0_macvtap: left promiscuous mode [ 136.141182][ T6891] veth1_vlan: left promiscuous mode [ 136.155097][ T6891] veth0_vlan: left promiscuous mode [ 136.236524][ T6891] team0 (unregistering): Port device vlan2 removed [ 136.322086][ T6891] team0 (unregistering): Port device team_slave_1 removed [ 136.332974][ T6891] team0 (unregistering): Port device team_slave_0 removed [ 136.444066][ T6947] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.451583][ T6947] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.463727][ T6947] bridge_slave_0: entered allmulticast mode [ 136.470468][ T6947] bridge_slave_0: entered promiscuous mode [ 136.477126][ T1032] dummy0 speed is unknown, defaulting to 1000 [ 136.487043][ T1032] infiniband syz1: ib_query_port failed (-19) [ 136.510241][ T7015] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1114'. [ 136.527617][ T6947] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.537091][ T6947] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.538343][ T7015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.546236][ T6947] bridge_slave_1: entered allmulticast mode [ 136.553307][ T7015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.560223][ T6947] bridge_slave_1: entered promiscuous mode [ 136.569409][ T7016] set_capacity_and_notify: 3 callbacks suppressed [ 136.569423][ T7016] loop2: detected capacity change from 0 to 512 [ 136.572136][ T28] audit: type=1400 audit(1774179081.841:1062): avc: denied { read } for pid=7012 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.595070][ T6947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.614085][ T7016] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 136.624372][ T7016] EXT4-fs (loop2): 1 truncate cleaned up [ 136.636320][ T7016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.658085][ T6947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.678523][ T6947] team0: Port device team_slave_0 added [ 136.685166][ T6947] team0: Port device team_slave_1 added [ 136.727775][ T6947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.765483][ T6947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.911959][ T6947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.937848][ T6947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.944853][ T6947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.970896][ T6947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.001322][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.016080][ T6947] hsr_slave_0: entered promiscuous mode [ 137.022817][ T6947] hsr_slave_1: entered promiscuous mode [ 137.030117][ T6947] debugfs: 'hsr0' already exists in 'hsr' [ 137.036022][ T6947] Cannot create hsr debugfs directory [ 137.069695][ T7028] loop2: detected capacity change from 0 to 2048 [ 137.107373][ T7028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.146797][ T7030] loop0: detected capacity change from 0 to 4096 [ 137.162755][ T2999] ================================================================== [ 137.170907][ T2999] BUG: KCSAN: data-race in set_nlink / set_nlink [ 137.177256][ T2999] [ 137.179579][ T2999] read to 0xffff8881085075f0 of 4 bytes by task 3302 on cpu 0: [ 137.187120][ T2999] set_nlink+0x29/0xb0 [ 137.191195][ T2999] kernfs_iop_permission+0x1e2/0x220 [ 137.196487][ T2999] inode_permission+0x31f/0x3b0 [ 137.201342][ T2999] link_path_walk+0x779/0xe30 [ 137.206123][ T2999] path_openat+0x1c6/0x2050 [ 137.210642][ T2999] do_file_open+0x16c/0x290 [ 137.215160][ T2999] do_sys_openat2+0x94/0x130 [ 137.219759][ T2999] __x64_sys_openat+0xf2/0x120 [ 137.224536][ T2999] x64_sys_call+0x1e39/0x3020 [ 137.229219][ T2999] do_syscall_64+0x12c/0x370 [ 137.233903][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.239805][ T2999] [ 137.242147][ T2999] write to 0xffff8881085075f0 of 4 bytes by task 2999 on cpu 1: [ 137.249788][ T2999] set_nlink+0x99/0xb0 [ 137.253963][ T2999] kernfs_iop_permission+0x1e2/0x220 [ 137.259260][ T2999] inode_permission+0x31f/0x3b0 [ 137.264115][ T2999] link_path_walk+0x779/0xe30 [ 137.268979][ T2999] path_lookupat+0x8c/0x500 [ 137.273667][ T2999] filename_lookup+0x190/0x390 [ 137.278436][ T2999] vfs_statx+0x96/0x170 [ 137.282601][ T2999] vfs_fstatat+0x118/0x170 [ 137.287028][ T2999] __se_sys_newfstatat+0x55/0x3e0 [ 137.292103][ T2999] __x64_sys_newfstatat+0x55/0x70 [ 137.297138][ T2999] x64_sys_call+0x2c64/0x3020 [ 137.301825][ T2999] do_syscall_64+0x12c/0x370 [ 137.306510][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.312414][ T2999] [ 137.314825][ T2999] value changed: 0x00000008 -> 0x00000009 [ 137.320540][ T2999] [ 137.322862][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 137.329011][ T2999] CPU: 1 UID: 0 PID: 2999 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 137.337862][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.347929][ T2999] ================================================================== [ 137.390258][ T7030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.397904][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.481416][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.547912][ T6947] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.556728][ T6947] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.566570][ T6947] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.576586][ T6947] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.624309][ T6947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.638466][ T6947] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.648200][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.655348][ T6884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.678530][ T6891] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.685621][ T6891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.768462][ T6947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.867476][ T6947] veth0_vlan: entered promiscuous mode [ 137.875664][ T6947] veth1_vlan: entered promiscuous mode [ 137.890396][ T6947] veth0_macvtap: entered promiscuous mode [ 137.898011][ T6947] veth1_macvtap: entered promiscuous mode [ 137.909272][ T6947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.919792][ T6947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.930885][ T6884] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.939824][ T6884] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.949771][ T6884] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.958698][ T6884] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.979126][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 137.979142][ T28] audit: type=1400 audit(1774179083.251:1071): avc: denied { mounton } for pid=6947 comm="syz-executor" path="/root/syzkaller.iRJhqL/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1