last executing test programs: 3m2.502649993s ago: executing program 32 (id=2589): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000001", @ANYBLOB="0102"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8014) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 2m37.426808438s ago: executing program 33 (id=2907): socket(0x1e, 0x4, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) close(0x4) 2m22.081258964s ago: executing program 2 (id=3128): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000040)="05ab", 0x2, 0x0, 0x0, 0x0) 2m21.839845612s ago: executing program 2 (id=3129): r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0x20000}, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x17}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 2m20.869145863s ago: executing program 2 (id=3138): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x1f, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000016c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002000)=ANY=[@ANYBLOB="bc030000100039042abd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="13000000c418060030001280080001007369740024000280060011004e2200000500090029000000080014"], 0x3bc}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) 2m20.747191597s ago: executing program 2 (id=3139): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101e, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_rdma(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x20000, 0x0) 2m20.693300669s ago: executing program 2 (id=3143): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r1, r1, 0x0, 0xe3aa6ea) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0x1fffffff7f8, 0x8, 0x5, 0x35b3}) 2m20.550861103s ago: executing program 2 (id=3148): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000e40)="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", 0xbba}], 0x1}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$eJzs3d9rXFUeAPDvnWSStJ1u0t3C/njZbtvdLpTOZLKk0IVlW/ZhF9aC2D+gxmQaQyaZkJnUJBRM/wUVLfggIvjki6DvRcRXfRH1QXzxSRAtFRF8GJk7kzZNMklImkzNfD5wuPfcO5nvORnu+c6cSe4JoGudioiViOiLiGcjYrB1PGmVuNwsjcfdv3drvFGSqNevfZek5xv1WPMzDcdazzkQEc/8N+K5ZGPc6tLy9Fi5XJpv1Qu1mblCdWn5wtTM2GRpsjQ7Mjx6abR4sVgsPra+vvRj7venP7j8rzeeeuvjt99bXEzW9HdtP3ZrZZNjza5nI7fmWG9E/H+vwZ4QPa3+9HW6IexKJiJ+GxGn0+t/MHrSVxMAOMzq9cGoD66tAwCHXePzfy6STL41F5CLTCafb87hnYyjmXKlWjt/o7IwOxHpHNZQZDM3psql4dbc2VBkk0a9mO4/rI+sq/8jIk5ExCv9R9J6frxSnujkGx8A6GLH1uX/H/qb+R8AOOQGOt0AAODAyf8A0H3kfwDoPvI/AHQf+R8Auo/8DwDdR/4HgK7y9NWrjVJfvf/1xM2lhenKzQsTpep0fmZhPD9emZ/LT1Yqk+k9e2a2e75ypTJ3MWYXFgu1UrVWqC4tX5+pLMzWrqf39b5eyh5IrwCArZz4890vkohY+eeRtMSatRzkajjcMp1uANAxPZ1uANAxVvuC7uUzPrDJEr1rZNv/idCd3cc09wCdde6P5v+hW8nB0L3M/0P3Mv8P3ateT6z5DwBdZjdz/Jf34X0I0Dlbf/+/xS1C9vD9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPza5dKSZPKttcBzkcnk8xHHI2IossmNqXJpOCJ+ExGf92f7G/VipxsNAOxR5puktf7XucGzufVn+5Kf+tNtRLzw+rXXFsdqtfli4/j3D47X7rSOj3Si/QDAdlbz9GoeX3X/3q3x1XKQ7fn2SnNx0Y3xe6M33Q5ENiKO3k9a9abG+5WexxB/5XZE/GGz+EnkIo4MtVY+XR+/Efv4/sePh/Ezj8TPpOea28bv4nePoS3Qbe5eaS5ovvH6y8SpdLv59T+QjlB71378yzwY/3rajH+ndtrHjwb/1zb+7Yg/9W4+/qzGT9rEP7vD+F9Xvny53bn6mxHnNs0/ySOxCrWZuUJ1afnC1MzYZGmyNDsyPHpptHixWCwW0jnqwupM9Ub/fvWzF7fq/9E28Qe26f9fd9j/rz75z4d/2SL+389s/vqf3CJ+Iyf+bYfx3znz/vPtzjXiT7Tp/3av//kdxr/76bs/7/ChAMABqC4tT4+Vy6V5O3b2c6fvyWiGnZ3udHpkAvbbw4u+0y0BAAAAAAAAAAAAAADaOYh/J+p0HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi8fgkAAP//ZCDc4A==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x5, 0xa, 0xa, 0x209, 0x40, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000a80)={0x0, 0x68, "0c259a6fc9fb72b3a80b648c3cc506a9a8eda11e92eb524ffe4a584ccf336896d31436e74702cc67c543bce05ce4047821d2e523d82be066b2c73c2ba60faf27e395e4f646c1c60ba910a66f2688bc25c9bda74d7e97a0bdf75a8564dc6c4107cb635b0a179346a8"}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000180), 0x3ff, r0}, 0x38) 2m20.502843275s ago: executing program 34 (id=3148): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000e40)="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", 0xbba}], 0x1}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x5, 0xa, 0xa, 0x209, 0x40, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000a80)={0x0, 0x68, "0c259a6fc9fb72b3a80b648c3cc506a9a8eda11e92eb524ffe4a584ccf336896d31436e74702cc67c543bce05ce4047821d2e523d82be066b2c73c2ba60faf27e395e4f646c1c60ba910a66f2688bc25c9bda74d7e97a0bdf75a8564dc6c4107cb635b0a179346a8"}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000180), 0x3ff, r0}, 0x38) 1m48.691675833s ago: executing program 6 (id=3604): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000180)='1\x00', 0x2) 1m48.436069871s ago: executing program 6 (id=3608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) 1m47.564989039s ago: executing program 6 (id=3616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1m46.327258228s ago: executing program 6 (id=3628): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1210010, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$eJzs3U1oI1UcAPB/OmnSLmh7EwUhehO0bPemF1ukC4u9qAQ/DmJwuypJFVostodN60HxKHjUkzcFPXgQjyII4s2DV1cQP/Cge1vZxSfJ5GOapN2u2ErZ3w+avL73/u//JjMk02Hy+sJSNC9Ox6WrV3+OmZlSlJceW4prpZiPLPp2Y1xlQh0AcDpcSyn+TLnRtpnJIaUTmBYAcIy6n/8vRUQt5vOaN78+rH/y6Q8Ap17v7//Zw/occB0g4rVjmRIAcMzGrv/fv6+50v0p938tF+4KAABOq6eefe7x5dWIJ2u1mYj1t7fqW/V4ZNi+fCleiVasxdmYixsR+YlC56HUfTx/YXXlbK1Wa8cv81GPiKleYD0/U1jOuvHVWIy5mO/F9842UkrZ+c9WVxZrXRGx2+7mj/XSVn06zvTy/3Am1oYnHv1Buk8RF1ZXztV6A9TX+/HtiL3hjQqd+S/EXHz34mCYlPp3MK6uXF7sT3oYv1WvxsXBqzB+BeTQCyYAAAAAAAAAAAAAAAAAAAAAAHATC7WB+cH6OanznK+Us7Awob27Pk4e31sfaC9fHyhVU6T0xxsP1d/JYt/6QKPr82xZSBAAAAAAAAAAAAAAAAAAAAAGNrcr0Wi11jY2t3eaxUJ7Y3N7KiI6Na9+88lXszHe5yaFcp6iGjFIUeul3Wk2UtbvnLKI8fCsk7xf89HngxkX+1QHWzFxGtWDm1qtO+776f1hzb1Zf+S/h32ymLyBWWEaj46MvH5nPqVbeaEGhXPFmup49isppULNW8Xwy8+PDxiliPKt77id5lQc3Cd1CtfTy3f3X/3Glyn3wINzT19578Pfmo1WJ3N092BlY/NGajZK/c5HyN4bLnV3wfDYKEVeKBWPhPJhA+7tr2lk3//+zD3vfntw9igPa1Kx6fXO8TzSOcs359PRcSp5oTPNkabZYfh0byNaa9MjB/+E/T5W+Bf79K4Pvvg4pR9/PWpU4U1iauxto/TfvPsAAAAAAAAAAAAAAAAAAABFhe+K97503c4bpg+LeviJE5oeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJyI4f//LxT2dmOk5iiF6+0JUdW1jc2IyoTMf/0PWwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO3qnwAAAP//7gFmJg==") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0xc0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m45.440161486s ago: executing program 6 (id=3635): syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f0000000240)="e46647c9d9b8e9a2f2bb70da5800", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m44.532070165s ago: executing program 6 (id=3651): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x101d0}}}, 0x80, &(0x7f0000000100)}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) 1m44.500154646s ago: executing program 35 (id=3651): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x101d0}}}, 0x80, &(0x7f0000000100)}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) 1m34.052860388s ago: executing program 8 (id=3811): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000000)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000540)=ANY=[], 0x32600) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m32.839644916s ago: executing program 8 (id=3834): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x4, 0x1}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x20}}, 0x0) 1m32.650884952s ago: executing program 8 (id=3838): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000000000)='./file1\x00', 0x3a0cc0a, &(0x7f0000003740)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYBLOB="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", @ANYRES8=0x0, @ANYRESDEC, @ANYRES8, @ANYRESDEC=0x0], 0x43, 0xa22, &(0x7f0000001840)="$eJzs3U9sXNW9B/DvHduJn4lCgDxeHgIyCS9gIM+xnRIasWlijxNT/6lsRyKqKkJJUkWxSgVFAlSpqVR1Vdouqi7oDqmbrpDYwKbKrt1200WlinV3qKus6ureGcd27PHYiWOb8PlY47l/fvec35l75x75euae8FW2sLBQPe5y/sIftzNZdp+zo198/MmH5eNnN7InXXmp+CzpTVJPupMcSjIyOjM92aGg68mlJDeTIsneNJ835FKKX2ff0vzNFL+v6i1duMuGsSELfK3t9PEHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7UTEyOjg4VGRifOrCa/X2qiHA262sLZX3eTXqd/H5nfXcuLPepCgf6e1dHOr70MGl1Y+Xv47myebck9WA5OnNBw89fuCVx7pri9uvk/Bm/Ls1GPKmN3zn/Q+uvzE/f+XtNuu7Ws255wx3qXONqfHZ6fHJM+ca9fHZ6frpU6cGT5wfm62PjU80Zi/OzjUm6yMzjTNz0zP1/pHn60OnT5+sNwYuTl+YOjc6MNFYXPjy/w8PDp6qvzrwncaZmdnpqROvDsyOnB+fmBifOlfFlKvLmJfLA/Hb43P1ucaZyXr96rX5KydXZLTGS10GDXVqSRk03CloeHB4eGhoeHjo1EunX3p5cLB7aUFXqgWDd8iqTW4ftNn34B4XX0Mf1TYQVJ4c61t8Boe7V2v1/5nIeKZyIa+lvubPSEYzk+lMtlnfstj/HzvRWLfe5f3/Yi9/aGn1E6n6/6ebc0+36//b5LJ9P+/k/XyQ63kj85nPlby9Yu3euyhxYWHtVv3hr83XYqdbvPLnXBqZynhmM53xTOZMtaTeWlLP6ZzKqQzm9ZzPWGZTz1jGM5FGZnMxs5lLozqiRjKTRs5krrvZxv6M5PnUM5TTOZ2TqaeRgVzMdC5kKucymjNVKVdzrXrdT66T4+2goY0EDa8TNFwe3Gv3/60Fm+j/eSAUrTPWxrfYytM33JOFVv+/547ltdWh/SPblRQAAACwpf73L9l/8NE//yPpyVPVNXYAAADgQVN9fOXJ8qmnnHoqxdj4RGNwdeC7258bAAAAsDWK6jt2RZK+HG5OLX4Tao2LAAAAAMBXUfX//6fLp75y6nAKf/8DAADAg6bzPfY7RhTHU2/e379+uRl5uRWR6lsFRd/Y+ERjYGR64pWhPFvdZaD6psGq0rpyIKm+fvBCjjSjjvQ1n/uWSizr7C2jhgZeGUpvjrYa0v9M+fRM/xqRw2XkC3muGfncYmRvVkWeLCMB4EF3dJ3+eKP9/ws53ow4/kR1+/buJ9bogwebPetPd6idAMCSzmPsdIwovrE4/M8af/+XEV25erj5kYKBvJm3Mp/LOV5926D6xEGr1NwsslRq37KPIRzvcDWgb9kIL8cXrwcc3rfm9YC+ZQO9HF91RaBd7Mk1X7tiy/cGAGyPo6v64XX6/4WF5tSq6//r//3f5yOFALCr3B7B/j5O3Flnz840FQBoad9Lr6PrPiYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4D7ef//WpL7O7LAPUzcSLIL0tjmiX+2dvuqVa3lN3Y8w2UTe3Pv5fRuywgX739vzy4+1O9uYgdPSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGybIulaa3kt2Zt0DyY5sf1Z3T83djqBHVbcyq28l/07nQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIOmdf//WprPDzUXpbuWHEtyKcl3dzrHrXRrpxPYWn3FJjdYdv//cp9noUh3c7en6BkZnZmerErcW67/4uNPPiwfd5NYWUBZw4rBJVo1tN/qkWqrvtEr71z/8Vs/qo+erZI8Ozc2MTp5buZbS4GPF58m9TQfixbz/UnROopXtvzTsqWd6y1rGavqHV1d7/+stfXteo/96Tft27ZkKY1r81eGy5rmGq/NvfvDa+8tC3o0R5Jn+pP+lTX9oHy0qelIetart/iy+EWxP7/LpWr/l2kUC0W5ix5O9qT2X1evzV8ZePOt+cttcjqQw0kuJ70bz+nw6j2xqDrqaj1lrYNVUPnrYIfy1vVQ1/6FhWaJQ23a8Eh1yPRtqg319m2odHjdW2082Sajx/Jsuaf3bmZPP9uhxkULTc2Z4svi78X5/C0/Xzb+R63c/8eykXdnGVNFLjtS2rf52FLLh5eveP3OyFXvyl9tpGXcnV/m+/nm7f1fW3b+b+2r7TkfLauxw/tiUzWueF8UzV6opZo+eEeP1Dr7tMuylefBZlSbPP87L67erkOeL3Y4o2zV+3+F4svio6I//8oN4/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7X5F0LU7Xli2vJceSHEjycDlfTxa2or5aX7EVxWzQnlVLbmxj7bvH0p4tbuVW3sv+HU0HAAAAAAAAgC1zdvSLjz/5sHxU/4/vyv8VnyW9zf/0dyc5UPy2Z2R0ZnqyQ0E9yaUkN8vp3s3lUG6XfUvzN8u5Q5tvCwCwMf8JAAD//4PvbMs=") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 1m32.151080258s ago: executing program 8 (id=3843): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m31.979808844s ago: executing program 8 (id=3846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffff8080003408ae5000b092cc920e153107a3f06ef3800000007400000000000010100000000000000000a0000060900020073797a32000000000900010073797a310000000014000380100000800c00018006000100d103000014000000b9e0f58e74321f6ee9e61871beeca9a6cb36d17552022fdfeec8630900000011b86024f4f62464255a70de38d01150298e12d2ba8bc7117605f1a802a485df9bcb811f375f9b6220d749e5fe64"], 0xac}, 0x1, 0x0, 0x0, 0x4044800}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8894}, 0x20040040) syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x8000}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0xfffffffffffffeff}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, 0x0, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) unshare(0x6c040000) 1m30.848038819s ago: executing program 8 (id=3860): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @private2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r3, 0x80000001}, &(0x7f0000000180)=0x8) 1m30.82046255s ago: executing program 36 (id=3860): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @private2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r3, 0x80000001}, &(0x7f0000000180)=0x8) 1m22.488105834s ago: executing program 7 (id=4001): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x94f34000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 1m22.442954606s ago: executing program 7 (id=4002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x40000000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m22.247979452s ago: executing program 7 (id=4008): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 1m22.161484005s ago: executing program 7 (id=4012): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m22.117708296s ago: executing program 7 (id=4014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001000000000006000340000100003c0002802c00018014000300fe80fb333ad5d787294b0000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0x9c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004090) 1m20.882612885s ago: executing program 7 (id=4033): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) 1m20.877181275s ago: executing program 37 (id=4033): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) 27.411579871s ago: executing program 4 (id=4779): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x38, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c095}, 0x20000080) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000000)={0x7, 'lo\x00', {0x2}, 0x8}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) r3 = syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000140)={0xb6a}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000b80)={0x5, 0x3, 0x2, 0x2, 0xffffffff}) socket$key(0xf, 0x3, 0x2) 25.523412171s ago: executing program 4 (id=4791): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x2}, 0x94) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) ppoll(&(0x7f0000000180)=[{r0, 0x2005}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x77c, &(0x7f0000001900)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = creat(&(0x7f0000000e40)='./bus\x00', 0x1a0) fallocate(r1, 0x0, 0xbf5, 0x2000402) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd2c, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}]}}}]}, 0x4c}}, 0x8000) 24.58475194s ago: executing program 4 (id=4794): socket$rxrpc(0x21, 0x2, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioperm(0x7, 0x81, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xad511, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0xa88, 0x8406, 0x6, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x0) sendfile(r2, r1, 0x0, 0x100000000) close_range(r0, 0xffffffffffffffff, 0x0) 24.159995454s ago: executing program 4 (id=4798): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x105080) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x441c, &(0x7f0000000040)={[{@nodiscard}, {@noinit_itable}, {@nodiscard}, {@nomblk_io_submit}, {@barrier_val}, {@jqfmt_vfsv1}]}, 0x1, 0x452, &(0x7f0000000940)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x7, 0x9d, 0x8, 0xffffffffffffffff, 0x8000, r4}) 23.785235155s ago: executing program 4 (id=4804): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xa, 0x75}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18, 0x20044001}, 0x24000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0xfffffffffffffdcb) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x9d5, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@RTM_GETNSID={0x14, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 22.976590571s ago: executing program 4 (id=4814): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@errors_remount}, {@mb_optimize_scan}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@rand_addr=0x64010100, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7, 0xcb7, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 22.837413066s ago: executing program 38 (id=4814): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@errors_remount}, {@mb_optimize_scan}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@rand_addr=0x64010100, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7, 0xcb7, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 12.359074408s ago: executing program 0 (id=4876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.388005979s ago: executing program 0 (id=4883): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x572, &(0x7f0000000b00)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) 8.556270099s ago: executing program 0 (id=4903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008813}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}, 0x4) 8.037319525s ago: executing program 0 (id=4905): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000200000002"], 0x0, 0x4e}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20005, 0x4, 0x0, 0x8, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) 6.235867662s ago: executing program 0 (id=4914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x9a1c}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.111961921s ago: executing program 9 (id=4934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) 2.739805163s ago: executing program 9 (id=4937): syz_open_dev$sg(0x0, 0x0, 0x802) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x1, 0x43a13d76, 0x7, 0x9, 0x6, 0x21, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x0, 0x400004, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000020000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 2.642662076s ago: executing program 5 (id=4938): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x800, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x3efd7ab4c41335d9, @perf_config_ext={0x2, 0x8}, 0x2081, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sock_ops}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, &(0x7f0000000080)) 2.620777017s ago: executing program 0 (id=4939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffff8080003408ae5000b092cc920e153107a3f06ef3800000007400000000000010100000000000000000a0000060900020073797a32000000000900010073797a310000000014000380100000800c00018006000100d103000014000000b9e0f58e74321f6ee9e61871beeca9a6cb36d17552022fdfeec8630900000011b86024f4f62464255a70de38d01150298e12d2ba8bc7117605f1a802a485df9bcb811f375f9b6220d749e5fe64"], 0xac}, 0x1, 0x0, 0x0, 0x4044800}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8894}, 0x20040040) syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x8000}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0xfffffffffffffeff}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') io_uring_register$IORING_REGISTER_MEM_REGION(r5, 0x22, 0x0, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) unshare(0x6c040000) 2.602756948s ago: executing program 1 (id=4940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0xfffffff8, 0x8001, 0x5, 0x3, 0x8, 0x6}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x0, 0x4, 0xfffffff9, 0x9}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.52013585s ago: executing program 5 (id=4941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0xfff1}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x9, 0x21, 0x5, 0x8, 0x1, 0x5, 0x1, 0x0, [{0x8, 0x1, 0x5, 0xa}, {0x8, 0x7, 0x1, 0x3}, {0x4, 0x9105, 0x1, 0x7fffffff}, {0xffff, 0x8, 0x80000001, 0x6}, {0x3, 0x2, 0x2}]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008044) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$kcm(0x10, 0x400000002, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 2.384269214s ago: executing program 9 (id=4942): pipe(0x0) fsopen(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0xfffffffffffffe24}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2.321133756s ago: executing program 1 (id=4943): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x13, &(0x7f00000002c0)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100), 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.252141289s ago: executing program 3 (id=4944): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffe, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80b, 0x9, 0x1, 0x9}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x7, 0xfd, 0xffffff5d, {0xffff1c72, 0x223, 0x3, 0x8, 0x9, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.251243269s ago: executing program 5 (id=4945): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x42a282, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0x2e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) io_setup(0x3, &(0x7f0000008240)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001800)=@bpf_ext={0x1c, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x24272, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6e7}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, 0x0, 0x2}, 0x94) sendmmsg$inet6(r2, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) 2.162460481s ago: executing program 1 (id=4946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0x48}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c0024000000000006", 0x14}, {&(0x7f00000022c0)="6037524d630f68287629547bd5c098e381953c405689f3afe4ec", 0x1a}], 0x2}, 0x4041) 2.039899995s ago: executing program 3 (id=4948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.922878839s ago: executing program 5 (id=4949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38) 1.550390391s ago: executing program 1 (id=4950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x2}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x6, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0xfffffffe, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x3ff, 0x7, 0x7, 0x6, 0x1000, 0x2007, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x8226, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x7ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x1000, 0x5, 0x7, 0x40, 0x4d27, 0x2, 0x6, 0x1, 0x10e, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x7f43, 0x9, 0x2, 0x0, 0x3, 0x8, 0x800002, 0x2, 0x2, 0xd098, 0x9, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0xb, 0x1, 0x4, 0x4c, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x4, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x2, 0x1, 0x4a0, 0x6, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x676, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) 1.283731479s ago: executing program 3 (id=4951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) close(r3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 1.271029229s ago: executing program 9 (id=4952): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x40, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x88) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x10, 0xa16ae, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x20002}, 0xc084, 0x5, 0xffffffff, 0x7, 0xfffffffffffffff9, 0x9b9e, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 1.100155125s ago: executing program 9 (id=4953): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000001c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@int={0xa, 0x0, 0x0, 0x1, 0x0, 0x77, 0x0, 0x2b, 0x3}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x1}, @struct={0xe, 0x0, 0x0, 0x4, 0x1, 0x92b5}, @struct={0x40010, 0x0, 0x0, 0x4, 0x0, 0x18}]}}, &(0x7f0000000400)=""/60, 0x4e, 0x3c, 0x0, 0x1}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008580000041000000", @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000001f40)=@ethernet={0x0, @dev}, 0x80, 0x0}, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) 972.213969ms ago: executing program 5 (id=4954): bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 928.108821ms ago: executing program 1 (id=4955): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 875.714012ms ago: executing program 3 (id=4956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x101, 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) 675.678169ms ago: executing program 5 (id=4957): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) writev(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x11, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_setup(0x471b, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xffffffde, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 375.878838ms ago: executing program 3 (id=4958): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3a8, 0xa, 0x1, 0xfffffff0, 0x200, 0xa, 0x6, 0x1, 0x40, 0x1, 0x140, 0xfff, 0x4, 0x6, 0x7000, 0x8, 0x7569, 0x9, 0x779e8886, 0xc00, 0x1, 0x2, 0xff, 0x0, 0x3, 0xffffffde, 0x3ff, 0x3, 0x4, 0x9, 0x80000001, 0x1, 0x7, 0x4, 0xbd, 0x8, 0x9cc3, 0xce4b, 0xb, 0x1, 0x5, 0xf, 0x401, 0x8, 0x401, 0x1000, 0xf391, 0xadd, 0xb7, 0x97e, 0x8001, 0x401, 0x9, 0xa6d, 0xfff, 0x3, 0xfff, 0x0, 0x9f, 0xa1, 0x7fff, 0xfffffff4, 0x603b654e, 0x101, 0x10000, 0x2, 0x8, 0x5, 0x0, 0x5, 0x9, 0x9, 0x4, 0x3, 0x2, 0x1, 0x80000001, 0xec, 0x9, 0xe76, 0x3, 0x4, 0x400000, 0x9de1, 0xfff, 0xb41, 0x1ff, 0x3, 0x1000, 0x8, 0x7, 0x0, 0x4, 0x38, 0xb, 0x101, 0xdd0, 0x4aaa, 0x6, 0x5, 0x2, 0x4, 0x3, 0x5, 0x8b3, 0x3, 0x1, 0x5, 0x80000001, 0x5, 0x7, 0xb5, 0x7, 0xff, 0x3, 0x4, 0x7, 0x9, 0x8, 0x8, 0x0, 0xcc1a, 0x4, 0x0, 0x7, 0x10001, 0x80000001, 0x9, 0x200, 0x2, 0x7, 0x3, 0xd5e, 0x3ff, 0xc87b, 0x2f, 0x1, 0x1, 0xffffff83, 0x4d0, 0x0, 0x1000, 0x3, 0x0, 0x7f, 0x7, 0x1, 0x7ff, 0x1, 0xe6, 0x2, 0x4, 0xfff, 0x3, 0xfffffffd, 0x4, 0xfffffffe, 0xfffffff8, 0x3d, 0x10000, 0x0, 0x0, 0x8, 0x5, 0x100000, 0x7, 0x6, 0x2, 0x5, 0x4, 0x200, 0xffff, 0x3, 0x5, 0x5, 0xfffffff9, 0x6, 0x4, 0x2, 0xb291, 0xc, 0x0, 0x7ff, 0x1, 0x6, 0x6, 0x0, 0x2, 0x3ff, 0x9, 0x5, 0x9, 0x8, 0x4, 0xe, 0x0, 0x7, 0x1, 0x0, 0x2e04, 0xe0bf, 0x80000001, 0xfffffff9, 0x9, 0x3, 0x4, 0x8, 0xf, 0x6, 0x5, 0x8, 0x2, 0x8000, 0x3, 0xb8000000, 0x1649445e, 0x8, 0xffffffd4, 0x7ff, 0x6, 0x65d, 0xb, 0x3, 0x80000000, 0x4242, 0x8, 0x0, 0x9, 0x6, 0x8, 0xffff, 0xffffffff, 0x894, 0xd, 0x4e3c, 0x5, 0x0, 0xfffffff9, 0x8, 0x4, 0x1, 0x3, 0x1, 0x0, 0x9, 0x0, 0x8, 0x3, 0x10001, 0x3, 0x7, 0x7f, 0xa, 0x4, 0x7, 0xafd9]}, @TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x7, 0xb, 0x7fff, 0x5, 0x4, 0x5, 0xfffffff8, 0x0, 0x36, 0x3410, 0xb, 0x6, 0x9, 0x7, 0x6, 0xfffffffb, 0x4, 0x400, 0x3b080, 0xf9bc, 0x7ff, 0xe2, 0x4, 0x10, 0x7, 0x6fb2, 0x9565, 0x4, 0x2, 0xfff, 0x9, 0x9, 0x0, 0x7, 0x7, 0x7, 0x4, 0x6, 0x6, 0x401, 0xb, 0x40, 0xffffffff, 0x8, 0xcc, 0x8, 0x853c, 0x0, 0x2, 0xd698, 0x1000, 0x304, 0x94ab, 0x7fffffff, 0x63d5, 0x9, 0x4, 0x5, 0x986, 0x7fffffff, 0x6, 0x9, 0x5, 0x10001, 0x81, 0x101, 0x9, 0x5, 0x2, 0x14, 0x4, 0x3, 0x1c000, 0x3, 0x6, 0xb2, 0x55, 0x400, 0x2, 0x401, 0x2, 0x1cb, 0x8001, 0xffff, 0x7, 0x6, 0x4, 0x8, 0x0, 0x10001, 0x40, 0x3, 0x8, 0x7ff, 0x4, 0x9, 0xfffffffc, 0xd, 0x40, 0x5, 0x3, 0x7fff, 0x4, 0x100005, 0x100, 0x8, 0x3ce, 0x2, 0x8, 0xffffffff, 0x4c, 0xffffffff, 0x0, 0xfff, 0xf, 0xd, 0x1000, 0x6, 0x3, 0xaee4, 0xffff30bd, 0x5, 0x4, 0x3, 0x3, 0x2, 0x1, 0x80000000, 0x5, 0x3ff, 0x3, 0x4, 0x6, 0xf71f, 0x4, 0x6, 0x3, 0xc, 0x62a, 0x8000, 0x2ff, 0x219, 0x43f, 0x1, 0x5, 0x3, 0x7, 0x8, 0xfffffffb, 0xa327, 0x10000, 0x7f, 0x7, 0x6, 0x6, 0x1000, 0x9, 0x9, 0x1, 0xb, 0x7, 0x6, 0x38b62e7e, 0xb3e, 0x2, 0x0, 0x120000, 0x4, 0x3ff, 0x6, 0x1000, 0x9, 0x6, 0x0, 0x7, 0x5, 0x8000, 0x100, 0x6, 0x12c3c0, 0x6, 0x7f, 0x200, 0x800, 0x5, 0xfffffff7, 0xef21, 0x4, 0x0, 0x2fb5, 0x56b0, 0x6, 0x6, 0xa175, 0x9, 0x0, 0x8, 0x2, 0x0, 0x3, 0x4, 0x1, 0xb, 0x1, 0x4, 0xb, 0x9, 0xa60, 0xa44, 0x7, 0x2, 0x7, 0x4665, 0x0, 0xbac3, 0x7, 0x0, 0x8001, 0xcd, 0x1, 0x9, 0xa, 0xad722e4, 0xa30, 0x1, 0x6, 0x8, 0x1, 0x8, 0x7, 0x3, 0x8, 0x3, 0x9e, 0x0, 0x954, 0x8001, 0xffff0001, 0x7ff, 0x8, 0xffffffc0, 0x8, 0x1000, 0x9, 0x8, 0x1, 0xb, 0x1, 0x80000001, 0x5, 0xffff7fff, 0x9, 0x6, 0xfffffff8, 0x10000]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@ll={0x11, 0x17, r7, 0x1, 0x4}, 0x80, 0x0}}], 0x1, 0x40000) 185.979364ms ago: executing program 3 (id=4959): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x3, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@bsdgroups}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$eJzs3MtvVNUfAPDvvTMtlMev/Sk+QNAqGomPlpbnwg1GExeamOgC46q2hSADVVoTIUTRBS4NiXvj0sS/wJVujLoycat7Q0IMG9DEZMy9c28ZhpnSoQODzOeTXDhn7pne873nnplzz5mZAAbWePZPErEpIn6LiNFG9voC443/rl4+O/vX5bOzSdTrb/yZ5OWuXD47WxYtn7exkanXi/y6Nsc9/3bETK02f6rITy6deG9y8fSZ54+dmDk6f3T+5PTBg3v37BjeP72vJ3FmcV3Z9tHC9q2vvHXhtdnDF9756ZusvpuK/c1x9MjIeOPstvVUjw/Wb5ub0km1jxWhK5WIyJprKO//o1GJkeV9o/Hyp32tHHBb1ev1erv358K5OnAPS6LfNQD6o3yjz+5/y+0ODT3uCpcORbx/oBH/1WJr7KlGWpQZarm/7aXxiDh87u8vsy1uzzwEAMB1vjsUEc+1G/+l8WBTuf8VayhjEfH/iLgvIu6PiC0R8UBEXvahiHi4y+O3rpDcOP5JL95SYKuUjf9eKNa2lsd//9Tz+AtjlSK3OY9/KDlyrDa/uzgnu2JoXZafWuEY37/06+ed9jWP/7ItO345FmxIL1ZbJujmZpZm1hj2skufRGyrtsSfS6JcxkkiYmtEbOvqL1+7wzj2zNfbO5W6efwr6ME6U/2riKcb7X8uWuIvJR3XJ6cO7J/eN7k+avO7J8ur4kY//3L+9U7HX1P8PZC1/4bW6z+3HP9Ysj5i8fSZ4/l67WK0rhDf1PnfP+t4T3Or1/9w8maeHi4e+3BmaenUVMRw8uqNj09fe26RrzbHv2tnu/jT/DWujPaRiMgu4h0R8WhEPFbU/fGIeCIidq4Q/48vPvlu9/GvMCvfQ1n8czdr/2hu/+4TleM/fNt9/KWs/ffmqV3FI6t5/VttBddy7gAAAOC/Is0/A5+kE8vpNJ2YaHyGf0tsSGsLi0vPHln44ORc47PyYzGUljNdo03zoVPF3HCZn27J7ynmjb+ojOT5idmF2ly/g4cBt7FD/8/8Uel37YDbzve1YHDp/zC49H8YXPo/DC79HwZXu/7/cR/qAdx53v9hcOn/MLj0fxhc+j8MpI7fjU/X9JV/iXs+EWn3z6pGX+ucrPTDECN3xVltk6iu+scsbjGxru2ufr8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Ma/AQAA//+nZunQ") r0 = open(&(0x7f0000000180)='./file1\x00', 0x64042, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, 0x0, 0x8000) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000280)={0x72, 0xfffffffffffffffa, 0x5, 0x9, 0xf4}) unshare(0x26020480) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) io_uring_setup(0x2, 0x0) 100.109597ms ago: executing program 9 (id=4960): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x2, 0x107fff, 0x10, 0x4, 0x9, 0x200000a4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x4, 0x3, 0x9, 0xff, 0x1002, 0xc, 0x3, 0x3, 0x90000000, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xfffffffc, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xc, 0x40, 0x40bed4, 0x8, 0x6, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0x10, 0x101, 0xa, 0x1fa0860a, 0x7, 0x0, 0x81, 0x2, 0x17ffff, 0x4003, 0x6f9f, 0x5, 0x9c56, 0x3, 0x403, 0x2, 0x1, 0x9, 0x80000004, 0x7, 0x4009, 0x80000000, 0x4, 0x100002, 0x8, 0xc, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffeffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0x100, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x20000008, 0x3be, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x3, 0x101, 0x1ff, 0xffffffff]}}) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x0, r0}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 0s ago: executing program 1 (id=4961): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003b8fd02000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x20004014) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$can_bcm(r1, 0x0, 0x40000) kernel console output (not intermixed with test programs): -fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.895742][T13198] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.915159][T13198] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.019899][T13359] netlink: 'syz.0.3653': attribute type 11 has an invalid length. [ 227.026639][T13198] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.070354][T13198] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.127460][T13370] xt_hashlimit: size too large, truncated to 1048576 [ 227.200799][T13198] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.236973][T13198] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.383253][T13198] bridge_slave_1: left allmulticast mode [ 227.402850][T13198] bridge_slave_1: left promiscuous mode [ 227.420219][T13198] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.438745][T13198] bridge_slave_0: left allmulticast mode [ 227.444492][T13198] bridge_slave_0: left promiscuous mode [ 227.458719][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.718016][T13387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3658'. [ 227.747147][T13198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.761416][T13198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.814441][T13198] bond0 (unregistering): Released all slaves [ 227.975938][T13198] tipc: Disabling bearer [ 228.033952][T13198] tipc: Left network mode [ 228.050796][T13399] geneve2: entered promiscuous mode [ 228.107374][T13182] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 57475 - 0 [ 228.123793][T13182] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 57475 - 0 [ 228.160068][T13198] hsr_slave_0: left promiscuous mode [ 228.165873][T13198] hsr_slave_1: left promiscuous mode [ 228.180920][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 228.180939][ T28] audit: type=1326 audit(1775220072.364:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.4.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec85ec819 code=0x7ffc0000 [ 228.222366][T13198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.237543][T13198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.270950][T13198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.290520][ T28] audit: type=1326 audit(1775220072.364:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.4.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec85ec819 code=0x7ffc0000 [ 228.302637][T13198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.333795][ T28] audit: type=1326 audit(1775220072.364:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.4.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec85ec819 code=0x7ffc0000 [ 228.358743][ T28] audit: type=1326 audit(1775220072.364:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.4.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec85ec819 code=0x7ffc0000 [ 228.384084][ T28] audit: type=1326 audit(1775220072.364:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.4.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5ec85ec819 code=0x7ffc0000 [ 228.407819][ T28] audit: type=1326 audit(1775220072.364:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.4.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec85ec819 code=0x7ffc0000 [ 228.407952][T13198] veth1_macvtap: left promiscuous mode [ 228.431626][ T28] audit: type=1326 audit(1775220072.404:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.4.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec85ec819 code=0x7ffc0000 [ 228.443015][T13198] veth0_macvtap: left promiscuous mode [ 228.460680][ T28] audit: type=1326 audit(1775220072.404:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.4.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec85ec819 code=0x7ffc0000 [ 228.491431][ T28] audit: type=1326 audit(1775220072.404:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.4.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec85ec819 code=0x7ffc0000 [ 228.494350][T13198] veth1_vlan: left promiscuous mode [ 228.515106][ T28] audit: type=1326 audit(1775220072.404:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.4.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ec85ec819 code=0x7ffc0000 [ 228.543971][T13198] veth0_vlan: left promiscuous mode [ 228.627023][T13198] team0 (unregistering): Port device team_slave_1 removed [ 228.639588][T13198] team0 (unregistering): Port device team_slave_0 removed [ 228.686719][T13182] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 57475 - 0 [ 228.724653][T13365] chnl_net:caif_netlink_parms(): no params data found [ 228.734526][T13182] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 57475 - 0 [ 228.898969][T13365] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.907010][T13365] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.915253][T13418] loop1: detected capacity change from 0 to 2048 [ 228.995879][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3674'. [ 229.008671][T13365] bridge_slave_0: entered allmulticast mode [ 229.016907][T13365] bridge_slave_0: entered promiscuous mode [ 229.036964][T13365] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.046279][T13365] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.053934][T13365] bridge_slave_1: entered allmulticast mode [ 229.060682][T13365] bridge_slave_1: entered promiscuous mode [ 229.075961][T13418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.087168][T13365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.101436][T13418] ext4 filesystem being mounted at /811/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.114374][T13365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.171100][T13365] team0: Port device team_slave_0 added [ 229.186953][T13365] team0: Port device team_slave_1 added [ 229.241138][T13365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.265336][T13365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.274387][T13470] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13470 comm=syz.7.3677 [ 229.342759][T13365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.374158][T13365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.388987][T13365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.443049][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3680'. [ 229.444168][T13365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.464147][T13189] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:20: bg 0: block 345: padding at end of block bitmap is not set [ 229.506604][T13189] EXT4-fs (loop1): Remounting filesystem read-only [ 229.533596][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.556413][T13365] hsr_slave_0: entered promiscuous mode [ 229.572396][T13365] hsr_slave_1: entered promiscuous mode [ 229.578650][T13365] debugfs: 'hsr0' already exists in 'hsr' [ 229.584532][T13365] Cannot create hsr debugfs directory [ 230.229520][T13518] xt_hashlimit: size too large, truncated to 1048576 [ 230.352656][T13365] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 230.381537][T13365] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 230.412817][T13365] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 230.448879][T13365] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 230.470865][T13537] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3692'. [ 230.753627][T13365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.770385][T13365] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.809872][T13182] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.817036][T13182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.830093][T13182] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.837237][T13182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.933800][T13580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3704'. [ 230.997167][T13365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.016570][T13584] loop4: detected capacity change from 0 to 2048 [ 231.040216][T13584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.077204][T13584] ext4 filesystem being mounted at /679/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.138274][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.278035][T13365] veth0_vlan: entered promiscuous mode [ 231.286891][T13365] veth1_vlan: entered promiscuous mode [ 231.303765][T13613] loop4: detected capacity change from 0 to 512 [ 231.320711][T13365] veth0_macvtap: entered promiscuous mode [ 231.330405][T13613] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 231.343171][T13365] veth1_macvtap: entered promiscuous mode [ 231.355971][T13365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.367854][T13613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.377300][T13365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.392381][T13177] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.395923][T13613] ext4 filesystem being mounted at /682/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.413631][T13177] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.430170][T13177] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.440108][T13177] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.499708][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.513183][T13559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.591428][T13627] loop1: detected capacity change from 0 to 512 [ 231.682904][T13627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.814308][T13627] ext4 filesystem being mounted at /818/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.230375][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.354702][T13663] loop7: detected capacity change from 0 to 512 [ 232.422965][T13663] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 232.477684][T13663] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3726: invalid indirect mapped block 1023410176 (level 0) [ 232.621445][T13663] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 232.623554][T13663] EXT4-fs error (device loop7): mb_free_blocks:2049: group 0, [ 232.632809][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 232.632843][ C0] EXT4-fs (loop7): initial error at time 1775220076: ext4_free_branches:1023: inode 11 [ 232.632931][ C0] EXT4-fs (loop7): last error at time 1775220076: ext4_free_branches:1023: inode 11 [ 232.666204][T13663] inode 11: block 237:freeing already freed block (bit 236); block bitmap corrupt. [ 232.704705][T13663] EXT4-fs (loop7): 1 truncate cleaned up [ 232.713506][T13663] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.917282][T11844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.203245][T13710] loop8: detected capacity change from 0 to 1024 [ 233.241700][T13710] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 233.258787][T13710] System zones: 0-1, 3-36 [ 233.276058][T13710] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.3745: bad orphan inode 134217728 [ 233.298960][T13710] loop8: lost filesystem error report for type 5 error -117 [ 233.299575][T13710] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.402499][T13715] loop7: detected capacity change from 0 to 4096 [ 233.426416][T13715] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.488243][T13365] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.626109][T11844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.825897][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 233.825916][ T28] audit: type=1400 audit(1775220078.014:1061): avc: denied { remount } for pid=13737 comm="syz.8.3755" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 233.972838][T13748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=13748 comm=syz.7.3759 [ 234.058550][T13748] netlink: 1195 bytes leftover after parsing attributes in process `syz.7.3759'. [ 234.762514][ T28] audit: type=1400 audit(1775220078.954:1062): avc: denied { relabelfrom } for pid=13761 comm="syz.0.3764" name="NETLINK" dev="sockfs" ino=43140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 234.809195][T13764] io-wq is not configured for unbound workers [ 234.825650][ T28] audit: type=1400 audit(1775220078.954:1063): avc: denied { relabelto } for pid=13761 comm="syz.0.3764" name="NETLINK" dev="sockfs" ino=43140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 234.918853][ T28] audit: type=1400 audit(1775220079.104:1064): avc: denied { sys_nice } for pid=13769 comm="syz.7.3767" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 235.649964][ T28] audit: type=1326 audit(1775220079.844:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.0.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa64fc819 code=0x7ffc0000 [ 235.741718][ T28] audit: type=1326 audit(1775220079.874:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.0.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa64fc819 code=0x7ffc0000 [ 235.765425][ T28] audit: type=1326 audit(1775220079.874:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.0.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa64fc819 code=0x7ffc0000 [ 235.789139][ T28] audit: type=1326 audit(1775220079.874:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.0.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa64fc819 code=0x7ffc0000 [ 235.814304][ T28] audit: type=1326 audit(1775220079.874:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.0.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fa64fc819 code=0x7ffc0000 [ 235.838604][ T28] audit: type=1326 audit(1775220079.874:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.0.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa64fc819 code=0x7ffc0000 [ 235.930006][T13798] l2tp_ppp: sess 2/0: no socket in recv [ 235.972073][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3780'. [ 236.032352][T13810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3781'. [ 236.061928][T13812] loop7: detected capacity change from 0 to 512 [ 236.080647][T13812] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.148141][T13812] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.199742][T13820] loop1: detected capacity change from 0 to 256 [ 236.209382][T13820] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.232243][T13812] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3784: corrupted xattr block 33: invalid ea_ino [ 236.278708][T13812] EXT4-fs (loop7): Remounting filesystem read-only [ 236.285523][T13812] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 236.303177][T13812] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 236.315598][T13812] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 236.388888][T11844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.392140][T13875] loop4: detected capacity change from 0 to 512 [ 237.411576][T13875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.433205][T13875] ext4 filesystem being mounted at /691/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.458813][T13881] loop8: detected capacity change from 0 to 1024 [ 237.459508][T13875] EXT4-fs warning (device loop4): ext4_group_extend:1861: can't shrink FS - resize aborted [ 237.467412][T13881] EXT4-fs: Ignoring removed bh option [ 237.502888][T13881] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.534558][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.353735][T13921] sctp: [Deprecated]: syz.1.3826 (pid 13921) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.353735][T13921] Use struct sctp_sack_info instead [ 238.513615][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3829'. [ 238.688260][T13365] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.758404][T13944] loop8: detected capacity change from 0 to 512 [ 238.797092][T13944] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 238.855957][T13949] loop8: detected capacity change from 0 to 1764 [ 238.891681][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 238.891697][ T28] audit: type=1400 audit(1775220083.084:1121): avc: denied { mount } for pid=13948 comm="syz.8.3838" name="/" dev="loop8" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 239.024379][T13954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3840'. [ 239.284901][ T28] audit: type=1400 audit(1775220083.474:1122): avc: denied { unmount } for pid=13365 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 239.435503][ T28] audit: type=1400 audit(1775220083.614:1123): avc: denied { mounton } for pid=13961 comm="syz.8.3843" path="/26/file0" dev="cgroup" ino=542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 239.468318][ T28] audit: type=1400 audit(1775220083.654:1124): avc: denied { unmount } for pid=13365 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 239.518524][ T28] audit: type=1400 audit(1775220083.654:1125): avc: denied { unmount } for pid=13365 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 239.725145][T13182] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.802218][T13182] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.981608][T13182] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.031925][T13182] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.270129][T13182] bridge_slave_1: left allmulticast mode [ 240.294884][T13182] bridge_slave_1: left promiscuous mode [ 240.322198][T13182] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.350745][T13182] bridge_slave_0: left allmulticast mode [ 240.366384][T13182] bridge_slave_0: left promiscuous mode [ 240.389884][T13182] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.670711][T13182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.689706][T13182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.701715][T13182] bond0 (unregistering): Released all slaves [ 240.828506][T13182] hsr_slave_0: left promiscuous mode [ 240.849946][T13182] hsr_slave_1: left promiscuous mode [ 240.862123][T13182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.871199][T13182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.888082][T13182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.896662][T13182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.917200][T13182] veth1_macvtap: left promiscuous mode [ 240.925270][T13182] veth0_macvtap: left promiscuous mode [ 240.931271][T13182] veth1_vlan: left promiscuous mode [ 240.936679][T13182] veth0_vlan: left promiscuous mode [ 241.046198][T13182] team0 (unregistering): Port device team_slave_1 removed [ 241.114828][T13182] team0 (unregistering): Port device team_slave_0 removed [ 241.417700][T14011] chnl_net:caif_netlink_parms(): no params data found [ 241.871637][T14011] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.911328][T14011] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.918867][T14011] bridge_slave_0: entered allmulticast mode [ 241.957635][T14011] bridge_slave_0: entered promiscuous mode [ 241.964853][T14011] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.972141][T14011] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.979358][T14011] bridge_slave_1: entered allmulticast mode [ 241.986165][T14011] bridge_slave_1: entered promiscuous mode [ 242.005385][T14011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.016341][T14011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.053009][T14086] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 242.078138][T14011] team0: Port device team_slave_0 added [ 242.095897][T14011] team0: Port device team_slave_1 added [ 242.141396][T14011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.157116][T14011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.186667][T14011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.207802][T14011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.215214][T14011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.576173][T14011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.643220][T14011] hsr_slave_0: entered promiscuous mode [ 242.657254][T14011] hsr_slave_1: entered promiscuous mode [ 242.671755][T14011] debugfs: 'hsr0' already exists in 'hsr' [ 242.684087][T14011] Cannot create hsr debugfs directory [ 242.710172][T14123] loop1: detected capacity change from 0 to 2048 [ 242.739042][T14123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.881993][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.993487][T14011] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 243.009741][T14011] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 243.025016][T14011] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 243.042705][T14011] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 243.106849][T14011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.122028][T14011] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.132906][T13182] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.140019][T13182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.181421][T13182] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.188562][T13182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.212359][T14011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.312878][T14011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.658792][T14011] veth0_vlan: entered promiscuous mode [ 243.674513][T14011] veth1_vlan: entered promiscuous mode [ 243.706867][T14011] veth0_macvtap: entered promiscuous mode [ 243.734990][T14011] veth1_macvtap: entered promiscuous mode [ 243.770111][T14011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.790135][T14011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.844212][T13180] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.872829][T13180] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.889733][T13180] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.919511][T13180] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.165692][ T28] audit: type=1326 audit(1775220088.354:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.9.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7ffc0000 [ 244.200212][ T28] audit: type=1326 audit(1775220088.384:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.9.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f746093c819 code=0x7ffc0000 [ 244.235869][ T28] audit: type=1326 audit(1775220088.384:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.9.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7ffc0000 [ 244.281212][ T28] audit: type=1326 audit(1775220088.384:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.9.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f746093c4ab code=0x7ffc0000 [ 244.316617][ T28] audit: type=1326 audit(1775220088.384:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.9.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74608fd04e code=0x7ffc0000 [ 244.344231][ T28] audit: type=1326 audit(1775220088.384:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.9.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7ffc0000 [ 244.379867][T14254] netlink: 'syz.0.3902': attribute type 3 has an invalid length. [ 244.400862][T14254] netlink: 'syz.0.3902': attribute type 7 has an invalid length. [ 244.413735][T14254] netlink: 198340 bytes leftover after parsing attributes in process `syz.0.3902'. [ 244.456055][ T28] audit: type=1326 audit(1775220088.384:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.9.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f746093c819 code=0x7ffc0000 [ 244.532653][ T28] audit: type=1326 audit(1775220088.384:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.9.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7ffc0000 [ 244.618480][ T28] audit: type=1326 audit(1775220088.384:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.9.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7ffc0000 [ 244.717010][ T28] audit: type=1326 audit(1775220088.674:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.9.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7ffc0000 [ 245.268437][T14339] tipc: Started in network mode [ 245.279649][T14339] tipc: Node identity f689880a0adc, cluster identity 4711 [ 245.298227][T14339] tipc: Enabled bearer , priority 0 [ 245.404769][T14339] syzkaller0: entered promiscuous mode [ 245.410537][T14339] syzkaller0: entered allmulticast mode [ 245.429176][T14339] tipc: Resetting bearer [ 245.441187][T14338] tipc: Resetting bearer [ 245.463354][T14338] tipc: Disabling bearer [ 246.001919][T14383] netlink: 1472 bytes leftover after parsing attributes in process `syz.4.3946'. [ 246.017866][T14383] netlink: 1472 bytes leftover after parsing attributes in process `syz.4.3946'. [ 246.028952][T14385] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3947'. [ 246.668743][T14400] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3950'. [ 246.767266][T14407] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.774674][T14407] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.025531][T14407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.050795][T14407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.159651][T13198] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.174948][T13198] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.236925][T13198] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.264152][T13198] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.451344][T14431] SELinux: failed to load policy [ 247.678096][T14470] loop9: detected capacity change from 0 to 1024 [ 247.796097][T14470] EXT4-fs: Ignoring removed bh option [ 247.840502][T14470] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.948797][T14011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.217253][T14493] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3986'. [ 248.501091][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3992'. [ 248.539283][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3992'. [ 248.710648][ T3565] kernel write not supported for file bpf-prog (pid: 3565 comm: kworker/0:5) [ 248.755227][T14509] loop7: detected capacity change from 0 to 256 [ 248.777237][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3977'. [ 248.820664][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3977'. [ 249.006895][T14517] syzkaller0: entered promiscuous mode [ 249.019209][T14517] syzkaller0: entered allmulticast mode [ 250.374045][T14581] __nla_validate_parse: 1 callbacks suppressed [ 250.374062][T14581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4025'. [ 251.321925][T14603] loop1: detected capacity change from 0 to 512 [ 251.353759][T14603] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.400602][T14604] chnl_net:caif_netlink_parms(): no params data found [ 251.457802][T14603] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #15: comm syz.1.4034: corrupted inode contents [ 251.482590][T14603] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 251.484646][T14603] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 251.494146][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 251.494368][ C0] EXT4-fs (loop1): initial error at time 1775220095: ext4_do_update_inode:5602: inode 15 [ 251.494948][ C0] EXT4-fs (loop1): last error at time 1775220095: ext4_do_update_inode:5602: inode 15 [ 251.532737][T14603] loop1: lost filesystem error report for type 5 error -117 [ 251.535580][T14603] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #15: comm syz.1.4034: corrupted inode contents [ 251.548981][T14604] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.556797][T14603] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 251.565038][T14604] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.566257][T14603] EXT4-fs error (device loop1): ext4_evict_inode:313: inode #15: comm syz.1.4034: mark_inode_dirty error [ 251.575132][T14604] bridge_slave_0: entered allmulticast mode [ 251.576748][T14604] bridge_slave_0: entered promiscuous mode [ 251.588514][T14603] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 251.607144][T14604] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.627150][T14603] EXT4-fs (loop1): 1 orphan inode deleted [ 251.633517][T14604] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.633749][T14604] bridge_slave_1: entered allmulticast mode [ 251.634400][T14604] bridge_slave_1: entered promiscuous mode [ 251.647672][T14604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.673055][T14603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.692544][T14604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.715107][T14604] team0: Port device team_slave_0 added [ 251.727852][T14604] team0: Port device team_slave_1 added [ 251.744529][T14604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.751725][T14604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.778233][T14604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.790430][T14604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.790549][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.797533][T14604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.832469][T14604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.873165][T14639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4043'. [ 251.880569][T14604] hsr_slave_0: entered promiscuous mode [ 251.882642][T14639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4043'. [ 251.888741][T14604] hsr_slave_1: entered promiscuous mode [ 251.903027][T14604] debugfs: 'hsr0' already exists in 'hsr' [ 251.909103][T14604] Cannot create hsr debugfs directory [ 252.584147][T13175] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.692080][T13175] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.831502][T13175] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.901505][T14604] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 252.934556][T13175] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.954348][T14604] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 252.965548][T14604] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 252.981086][T14604] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 253.040786][T14714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4055'. [ 253.111756][T13175] bridge_slave_1: left allmulticast mode [ 253.112812][T14721] loop4: detected capacity change from 0 to 512 [ 253.117726][T13175] bridge_slave_1: left promiscuous mode [ 253.130585][T13175] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.153813][T13175] bridge_slave_0: left allmulticast mode [ 253.162234][T13175] bridge_slave_0: left promiscuous mode [ 253.167973][T13175] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.186266][T14721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.223921][T14721] ext4 filesystem being mounted at /745/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.321328][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.426971][T13175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.441464][T13175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.453022][T13175] bond0 (unregistering): Released all slaves [ 253.458036][T14752] netlink: 'syz.4.4064': attribute type 39 has an invalid length. [ 253.486740][T14604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.499192][T14604] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.566840][T13175] hsr_slave_0: left promiscuous mode [ 253.597823][T13175] hsr_slave_1: left promiscuous mode [ 253.613911][T13175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.683867][T13175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.750808][T13175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.770469][T13175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.827322][T13175] veth1_macvtap: left promiscuous mode [ 253.838811][T13175] veth0_macvtap: left promiscuous mode [ 253.871127][T13175] veth1_vlan: left promiscuous mode [ 253.886650][T13175] veth0_vlan: left promiscuous mode [ 254.035619][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 254.035637][ T28] audit: type=1400 audit(1775220098.224:1205): avc: denied { create } for pid=14780 comm="syz.1.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 254.064358][ T28] audit: type=1400 audit(1775220098.234:1206): avc: denied { write } for pid=14780 comm="syz.1.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 254.084404][T13175] team0 (unregistering): Port device team_slave_1 removed [ 254.110818][T13175] team0 (unregistering): Port device team_slave_0 removed [ 254.158488][ T28] audit: type=1400 audit(1775220098.234:1207): avc: denied { read } for pid=14780 comm="syz.1.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 254.278544][T14819] loop4: detected capacity change from 0 to 512 [ 254.331353][T13198] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.338521][T13198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.365036][T14819] EXT4-fs (loop4): 1 orphan inode deleted [ 254.398827][T14819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.429867][T13198] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.437250][T13198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.448339][T14819] ext4 filesystem being mounted at /756/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.462652][T13190] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 254.474324][T13190] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:21: Failed to release dquot type 1 [ 254.494234][T14604] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.505088][T14604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.615386][T14604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.675383][T14819] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 254.803552][ T28] audit: type=1400 audit(1775220098.994:1208): avc: denied { ioctl } for pid=14856 comm="syz.9.4083" path="socket:[46287]" dev="sockfs" ino=46287 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 254.842046][T14604] veth0_vlan: entered promiscuous mode [ 254.860497][T14604] veth1_vlan: entered promiscuous mode [ 254.884806][T14604] veth0_macvtap: entered promiscuous mode [ 254.906798][T14604] veth1_macvtap: entered promiscuous mode [ 254.931935][T14604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.959376][T14604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.009946][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.021760][T13198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.035151][T13198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.091426][ T28] audit: type=1400 audit(1775220099.284:1209): avc: denied { setopt } for pid=14877 comm="syz.0.4087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 255.122302][T13198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.139099][T13190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.169335][T14876] tipc: Started in network mode [ 255.174691][T14876] tipc: Node identity 7654d0bd8cfa, cluster identity 4711 [ 255.188528][T14876] tipc: Enabled bearer , priority 0 [ 255.233699][T14876] syzkaller0: entered promiscuous mode [ 255.258586][T14876] syzkaller0: entered allmulticast mode [ 255.272857][T14876] tipc: Resetting bearer [ 255.357470][T14874] tipc: Resetting bearer [ 255.414554][T14874] tipc: Disabling bearer [ 255.654048][ T28] audit: type=1400 audit(1775220099.844:1210): avc: denied { getopt } for pid=14931 comm="syz.4.4096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 255.758627][T14937] netlink: 'syz.4.4098': attribute type 3 has an invalid length. [ 255.788457][T14937] netlink: 'syz.4.4098': attribute type 3 has an invalid length. [ 255.803674][T14937] netlink: 'syz.4.4098': attribute type 3 has an invalid length. [ 255.838511][T14937] netlink: 'syz.4.4098': attribute type 3 has an invalid length. [ 255.878633][T14937] netlink: 'syz.4.4098': attribute type 3 has an invalid length. [ 255.899987][T14937] netlink: 'syz.4.4098': attribute type 3 has an invalid length. [ 255.928174][T14937] netlink: 'syz.4.4098': attribute type 3 has an invalid length. [ 255.953688][T14896] loop3: detected capacity change from 0 to 512 [ 255.958616][T14937] netlink: 'syz.4.4098': attribute type 3 has an invalid length. [ 255.978769][T14937] netlink: 'syz.4.4098': attribute type 3 has an invalid length. [ 256.253792][T14896] ------------[ cut here ]------------ [ 256.262383][T14896] EA inode 11 i_nlink=2 [ 256.262604][T14896] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.3.4042/14896 [ 256.279064][T14896] Modules linked in: [ 256.284134][T14896] CPU: 1 UID: 0 PID: 14896 Comm: syz.3.4042 Not tainted syzkaller #0 PREEMPT(full) [ 256.294433][T14896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.305733][T14896] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 256.313123][T14896] Code: 14 34 99 ff 4c 8d 2d 7d a0 5d 05 49 8d 7e 40 e8 54 cd b5 ff 49 8b 6e 40 4c 89 e7 e8 88 c8 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff d2 dd 03 66 66 66 66 66 66 2e [ 256.335164][T14896] RSP: 0018:ffffc900001bb778 EFLAGS: 00010246 [ 256.342314][T14896] RAX: ffff88810169bd08 RBX: ffff88811b47f1c8 RCX: ffffffff81c02c98 [ 256.351201][T14896] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 256.359612][T14896] RBP: 000000000000000b R08: 000188811b47f17b R09: 0000000000000000 [ 256.368264][T14896] R10: ffffc900001bb6a8 R11: 0001c900001bb6a8 R12: ffff88811b47f178 [ 256.377123][T14896] R13: ffffffff871dcd00 R14: ffff88811b47f130 R15: 0000000000000001 [ 256.386154][T14896] FS: 00007f5464c8f6c0(0000) GS:ffff8882ae9d8000(0000) knlGS:0000000000000000 [ 256.396051][T14896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.403327][T14896] CR2: 0000555570bda4e8 CR3: 000000012957e000 CR4: 00000000003506f0 [ 256.416123][T14896] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 256.425613][T14896] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 256.434503][T14896] Call Trace: [ 256.438203][T14896] [ 256.441872][T14896] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 256.448618][T14896] ? errseq_check+0x2c/0x50 [ 256.454332][T14896] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 256.460873][T14896] ext4_evict_inode+0xac1/0xe40 [ 256.466133][T14896] ? __pfx_ext4_evict_inode+0x10/0x10 [ 256.472150][T14896] evict+0x2af/0x510 [ 256.477003][T14896] ? __pfx_ext4_drop_inode+0x10/0x10 [ 256.483193][T14896] iput+0x41a/0x580 [ 256.487594][T14896] ext4_process_orphan+0x1a9/0x1c0 [ 256.493704][T14896] ext4_orphan_cleanup+0x6a8/0xa00 [ 256.500243][T14896] ext4_fill_super+0x3414/0x37c0 [ 256.506324][T14896] ? __pfx_ext4_fill_super+0x10/0x10 [ 256.512799][T14896] get_tree_bdev_flags+0x291/0x300 [ 256.518623][T14896] ? __pfx_ext4_fill_super+0x10/0x10 [ 256.524472][T14896] get_tree_bdev+0x1f/0x30 [ 256.530013][T14896] ext4_get_tree+0x1c/0x30 [ 256.535213][T14896] vfs_get_tree+0x57/0x1d0 [ 256.540384][T14896] do_new_mount+0x288/0x8d0 [ 256.545863][T14896] path_mount+0x4d0/0xbc0 [ 256.550722][T14896] __se_sys_mount+0x28c/0x2e0 [ 256.555937][T14896] __x64_sys_mount+0x67/0x80 [ 256.561204][T14896] x64_sys_call+0x2d61/0x3020 [ 256.566564][T14896] do_syscall_64+0x12c/0x370 [ 256.572334][T14896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.579414][T14896] RIP: 0033:0x7f546623da8a [ 256.584832][T14896] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.605283][T14896] RSP: 002b:00007f5464c8ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 256.614921][T14896] RAX: ffffffffffffffda RBX: 00007f5464c8eee0 RCX: 00007f546623da8a [ 256.624003][T14896] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f5464c8eea0 [ 256.632831][T14896] RBP: 00002000000009c0 R08: 00007f5464c8eee0 R09: 0000000000800718 [ 256.641794][T14896] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 256.651302][T14896] R13: 00007f5464c8eea0 R14: 000000000000048d R15: 0000200000000200 [ 256.661092][T14896] [ 256.665558][T14896] ---[ end trace 0000000000000000 ]--- [ 256.687484][T14949] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.690354][T14896] EXT4-fs (loop3): 1 orphan inode deleted [ 256.736408][T14896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.883730][T14966] loop4: detected capacity change from 0 to 256 [ 256.949653][T14604] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.976307][T14966] FAT-fs (loop4): Directory bread(block 64) failed [ 256.982981][T14966] FAT-fs (loop4): Directory bread(block 65) failed [ 257.002369][T14949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.030662][T14966] FAT-fs (loop4): Directory bread(block 66) failed [ 257.052737][T14976] loop3: detected capacity change from 0 to 512 [ 257.073892][T14966] FAT-fs (loop4): Directory bread(block 67) failed [ 257.081162][T14966] FAT-fs (loop4): Directory bread(block 68) failed [ 257.088142][T14966] FAT-fs (loop4): Directory bread(block 69) failed [ 257.104136][T14976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.117266][T14966] FAT-fs (loop4): Directory bread(block 70) failed [ 257.137558][T14976] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.149389][T14966] FAT-fs (loop4): Directory bread(block 71) failed [ 257.156044][T14966] FAT-fs (loop4): Directory bread(block 72) failed [ 257.173776][T14966] FAT-fs (loop4): Directory bread(block 73) failed [ 257.204624][ T28] audit: type=1400 audit(1775220101.394:1211): avc: denied { setattr } for pid=14975 comm="syz.3.4108" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 257.320826][T14949] geneve2: left promiscuous mode [ 257.509451][T14993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4114'. [ 257.843950][T13190] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.856648][T13190] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.869169][T13190] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 57475 - 0 [ 257.888542][T13190] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.897627][T13190] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.941630][T13190] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 57475 - 0 [ 257.983626][T13190] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.010142][T14604] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.029156][T13190] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.061499][T13190] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 57475 - 0 [ 258.112329][T13190] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.127780][T13190] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.139051][T13190] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 57475 - 0 [ 258.395716][T15050] tipc: Started in network mode [ 258.414846][T15050] tipc: Node identity 9e350c5db7f4, cluster identity 4711 [ 258.455439][T15050] tipc: Enabled bearer , priority 0 [ 258.492807][T15050] syzkaller0: entered promiscuous mode [ 258.498450][T15050] syzkaller0: entered allmulticast mode [ 258.504570][T15050] tipc: Resetting bearer [ 258.659600][T15047] tipc: Resetting bearer [ 258.691378][T15047] tipc: Disabling bearer [ 259.363930][T15106] loop3: detected capacity change from 0 to 256 [ 259.446391][T15106] FAT-fs (loop3): codepage cp850 not found [ 259.515558][ T28] audit: type=1400 audit(1775220103.704:1212): avc: denied { watch watch_reads } for pid=15105 comm="syz.3.4146" path="/" dev="configfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 259.711943][ T9] IPVS: starting estimator thread 0... [ 259.904030][T15152] IPVS: using max 2400 ests per chain, 120000 per kthread [ 262.350660][T15299] loop4: detected capacity change from 0 to 512 [ 262.391510][T15299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.455226][T15299] ext4 filesystem being mounted at /785/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.576892][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.008029][T15354] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 263.038963][T15354] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 263.057571][ T28] audit: type=1400 audit(1775220107.244:1213): avc: denied { ioctl } for pid=15353 comm="syz.1.4194" path="socket:[48058]" dev="sockfs" ino=48058 ioctlcmd=0x89f7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 263.199802][T15366] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4195'. [ 263.225017][T15366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4195'. [ 263.394358][T15377] tipc: Failed to remove unknown binding: 66,0,0/0:1321103464/1321103465 [ 263.655457][T15396] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4204'. [ 263.713031][T15396] 8021q: adding VLAN 0 to HW filter on device team1 [ 264.022916][T15410] tipc: Enabled bearer , priority 0 [ 264.082567][T15410] syzkaller0: entered promiscuous mode [ 264.088096][T15410] syzkaller0: entered allmulticast mode [ 264.113159][T15410] tipc: Resetting bearer [ 264.144638][T15408] tipc: Resetting bearer [ 264.190928][T15408] tipc: Disabling bearer [ 264.553277][T15449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4225'. [ 264.790890][T15472] validate_nla: 42 callbacks suppressed [ 264.790934][T15472] netlink: 'syz.0.4236': attribute type 1 has an invalid length. [ 264.832902][T15472] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.852483][ T28] audit: type=1400 audit(1775220109.034:1214): avc: denied { create } for pid=15471 comm="syz.0.4236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 264.885050][T15472] bond2: (slave gretap2): making interface the new active one [ 264.909597][ T28] audit: type=1400 audit(1775220109.064:1215): avc: denied { write } for pid=15471 comm="syz.0.4236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 264.933152][T15472] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 265.376464][T15494] netlink: 'syz.0.4242': attribute type 4 has an invalid length. [ 265.476210][ T28] audit: type=1326 audit(1775220109.644:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7fc00000 [ 265.510168][ T28] audit: type=1326 audit(1775220109.644:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f746093c819 code=0x7fc00000 [ 265.535358][ T28] audit: type=1326 audit(1775220109.644:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7fc00000 [ 265.562649][ T28] audit: type=1326 audit(1775220109.644:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7fc00000 [ 265.637057][ T28] audit: type=1326 audit(1775220109.644:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7fc00000 [ 265.673591][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4248'. [ 265.721258][ T28] audit: type=1326 audit(1775220109.644:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7fc00000 [ 265.794057][ T28] audit: type=1326 audit(1775220109.644:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7fc00000 [ 265.826666][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4251'. [ 265.853111][ T28] audit: type=1326 audit(1775220109.644:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.9.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7fc00000 [ 266.873374][T15593] loop4: detected capacity change from 0 to 256 [ 266.919051][T15593] SELinux: policydb version 1609524499 does not match my version range 15-35 [ 266.983931][T15593] SELinux: failed to load policy [ 267.032450][T15605] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4289'. [ 267.207367][T15610] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4291'. [ 268.007844][T15655] loop9: detected capacity change from 0 to 1024 [ 268.016202][T15655] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 268.029075][T15655] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 268.037074][T15655] EXT4-fs (loop9): orphan cleanup on readonly fs [ 268.044562][T15655] EXT4-fs error (device loop9): __ext4_get_inode_loc:4797: comm syz.9.4308: Invalid inode table block 0 in block_group 0 [ 268.057613][T15655] loop9: lost filesystem error report for type 5 error -117 [ 268.057718][T15655] EXT4-fs (loop9): Remounting filesystem read-only [ 268.065147][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 268.065169][ C1] EXT4-fs (loop9): initial error at time 1775220112: __ext4_get_inode_loc:4797 [ 268.065196][ C1] EXT4-fs (loop9): last error at time 1775220112: __ext4_get_inode_loc:4797 [ 268.099941][T15655] EXT4-fs (loop9): 1 truncate cleaned up [ 268.106842][T15655] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 268.198294][T14011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.232092][T15666] tipc: Failed to remove unknown binding: 66,0,0/0:1766419734/1766419735 [ 268.275606][T15668] ip6gre1: entered promiscuous mode [ 268.283623][T15668] ip6gre1: entered allmulticast mode [ 268.603708][T15689] netlink: 'syz.3.4323': attribute type 1 has an invalid length. [ 268.624383][T15689] netlink: 'syz.3.4323': attribute type 4 has an invalid length. [ 268.652431][T15689] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4323'. [ 268.711772][T15702] tipc: Failed to remove unknown binding: 66,0,0/0:3592466945/3592466946 [ 268.722021][T15702] tipc: Failed to remove unknown binding: 66,0,0/0:3592466945/3592466946 [ 268.753228][T15704] loop4: detected capacity change from 0 to 164 [ 268.915197][T15719] loop4: detected capacity change from 0 to 164 [ 270.418996][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 270.419021][ T28] audit: type=1400 audit(1775220114.614:1303): avc: denied { listen } for pid=15783 comm="syz.0.4360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 270.432881][T15790] loop9: detected capacity change from 0 to 256 [ 270.512270][T15790] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 270.519038][T15793] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 270.923751][ T28] audit: type=1400 audit(1775220115.114:1304): avc: denied { accept } for pid=15812 comm="syz.9.4370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 272.189680][T15827] batadv_slave_1: entered promiscuous mode [ 272.210277][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4376'. [ 272.225747][T15827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.274719][T15827] batadv_slave_1 (unregistering): left promiscuous mode [ 272.290458][T15827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.487917][ T28] audit: type=1400 audit(1775220116.674:1305): avc: denied { create } for pid=15844 comm="syz.9.4384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 272.528308][ T28] audit: type=1400 audit(1775220116.714:1306): avc: denied { connect } for pid=15844 comm="syz.9.4384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 272.558709][T15850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4385'. [ 272.576969][T15845] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4384'. [ 272.923620][T15873] loop4: detected capacity change from 0 to 512 [ 272.967972][T15873] EXT4-fs: inline encryption not supported [ 273.152374][T15873] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 273.495442][ T28] audit: type=1326 audit(1775220117.684:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.4.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec85ec819 code=0x7ffc0000 [ 273.550485][ T28] audit: type=1326 audit(1775220117.684:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.4.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec85ec819 code=0x7ffc0000 [ 273.630350][ T28] audit: type=1326 audit(1775220117.684:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.4.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5ec85ec819 code=0x7ffc0000 [ 273.671135][ T28] audit: type=1326 audit(1775220117.684:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.4.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec85ec819 code=0x7ffc0000 [ 273.701167][ T28] audit: type=1326 audit(1775220117.684:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.4.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ec85ec819 code=0x7ffc0000 [ 273.708776][T14955] kernel write not supported for file bpf-map (pid: 14955 comm: kworker/0:9) [ 273.767307][ T28] audit: type=1326 audit(1775220117.684:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.4.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec85ec819 code=0x7ffc0000 [ 273.911237][T15889] loop9: detected capacity change from 0 to 8192 [ 274.219583][T15945] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.327651][T15945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.490229][T15945] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 274.501601][T15945] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 274.524282][T15961] tc_dump_action: action bad kind [ 274.539135][T13178] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.568083][T13178] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.588524][T13178] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.596928][T13178] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.609029][T13178] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.617973][T13178] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.629333][T13178] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.649241][T13178] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.737083][T15980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4419'. [ 274.783335][T15980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4419'. [ 274.865245][T15980] ip6gretap0: entered promiscuous mode [ 274.885557][T15896] syz.9.4397 (15896) used greatest stack depth: 6856 bytes left [ 274.905616][T15980] syz_tun: entered promiscuous mode [ 274.921629][T15980] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 274.937658][T15997] tipc: Failed to remove unknown binding: 66,0,0/0:3108217180/3108217181 [ 274.954026][T15980] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 274.976273][T15997] tipc: Failed to remove unknown binding: 66,0,0/0:3108217180/3108217181 [ 275.046732][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4424'. [ 275.088927][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4424'. [ 275.938855][ T9523] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 276.164963][T16066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4440'. [ 277.171189][T16131] loop4: detected capacity change from 0 to 512 [ 277.205058][T16131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.517511][T16146] loop9: detected capacity change from 0 to 164 [ 277.584862][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.592437][T16146] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 277.695668][T16152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16152 comm=syz.1.4469 [ 277.708455][T16152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16152 comm=syz.1.4469 [ 277.735089][T16152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16152 comm=syz.1.4469 [ 277.751109][T16152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16152 comm=syz.1.4469 [ 277.765047][T16152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16152 comm=syz.1.4469 [ 277.777873][T16152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16152 comm=syz.1.4469 [ 277.790954][T16152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16152 comm=syz.1.4469 [ 277.803788][T16152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16152 comm=syz.1.4469 [ 277.816475][T16152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16152 comm=syz.1.4469 [ 277.829074][T16152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16152 comm=syz.1.4469 [ 278.187622][T16175] netlink: 'syz.9.4478': attribute type 2 has an invalid length. [ 278.571885][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 278.571906][ T28] audit: type=1400 audit(1775220122.754:1317): avc: denied { bind } for pid=16194 comm="syz.1.4485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.732210][T16207] loop3: detected capacity change from 0 to 2048 [ 278.779527][ T3800] GPT:first_usable_lbas don't match. [ 278.784913][ T3800] GPT:34 != 290 [ 278.788489][ T3800] GPT: Use GNU Parted to correct GPT errors. [ 278.794560][ T3800] loop3: p1 p2 p3 [ 278.804562][T16207] GPT:first_usable_lbas don't match. [ 278.810054][T16207] GPT:34 != 290 [ 278.813522][T16207] GPT: Use GNU Parted to correct GPT errors. [ 278.819885][T16207] loop3: p1 p2 p3 [ 278.846687][ T28] audit: type=1400 audit(1775220123.034:1318): avc: denied { read write } for pid=16206 comm="syz.3.4490" name="loop3p2" dev="devtmpfs" ino=1733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 278.872468][ T28] audit: type=1400 audit(1775220123.034:1319): avc: denied { open } for pid=16206 comm="syz.3.4490" path="/dev/loop3p2" dev="devtmpfs" ino=1733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 278.915276][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 278.916756][ T3800] udevd[3800]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 278.927368][ T5482] udevd[5482]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 278.950313][ T5482] udevd[5482]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 278.951211][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 278.961892][ T3800] udevd[3800]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 279.147701][ T28] audit: type=1400 audit(1775220123.334:1320): avc: denied { write } for pid=16212 comm="syz.3.4492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 279.275678][ T28] audit: type=1400 audit(1775220123.464:1321): avc: denied { create } for pid=16223 comm="syz.9.4498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 279.312420][ T28] audit: type=1400 audit(1775220123.494:1322): avc: denied { bind } for pid=16223 comm="syz.9.4498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 279.395950][T16226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4497'. [ 279.438059][ T28] audit: type=1400 audit(1775220123.624:1323): avc: denied { bind } for pid=16220 comm="syz.3.4496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 279.573119][T16242] syzkaller0: entered promiscuous mode [ 279.593757][T16242] syzkaller0: entered allmulticast mode [ 279.659823][ T28] audit: type=1400 audit(1775220123.854:1324): avc: denied { append } for pid=16250 comm="syz.3.4505" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 279.742962][ T28] audit: type=1400 audit(1775220123.934:1325): avc: denied { nlmsg_write } for pid=16258 comm="syz.3.4507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 279.764310][T16259] loop9: detected capacity change from 0 to 512 [ 279.795523][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4506'. [ 279.804715][T16259] EXT4-fs error (device loop9): ext4_iget_extra_inode:5040: inode #15: comm syz.9.4508: corrupted in-inode xattr: invalid ea_ino [ 279.818684][T16259] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 279.819833][T16259] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.4508: couldn't read orphan inode 15 (err -117) [ 279.829088][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 279.829115][ C1] EXT4-fs (loop9): initial error at time 1775220124: ext4_iget_extra_inode:5040: inode 15 [ 279.829158][ C1] EXT4-fs (loop9): last error at time 1775220124: ext4_iget_extra_inode:5040: inode 15 [ 279.868120][T16259] loop9: lost filesystem error report for type 5 error -117 [ 279.868820][T16259] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.956375][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4512'. [ 279.997569][T14011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.057794][T16280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4516'. [ 280.354908][ T28] audit: type=1400 audit(1775220124.544:1326): avc: denied { getopt } for pid=16293 comm="syz.3.4519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 280.391085][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4520'. [ 280.400423][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4520'. [ 280.904557][T16310] loop3: detected capacity change from 0 to 2048 [ 280.933361][T16310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.793946][T16310] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 281.811910][T16315] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 281.824925][T16310] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2048 with error 28 [ 281.849057][T16315] EXT4-fs (loop3): This should not happen!! Data will be lost [ 281.849057][T16315] [ 281.859134][T16310] EXT4-fs (loop3): This should not happen!! Data will be lost [ 281.859134][T16310] [ 281.888683][T16315] EXT4-fs (loop3): Total free blocks count 0 [ 281.911887][T16310] EXT4-fs (loop3): Total free blocks count 0 [ 281.918126][T16315] EXT4-fs (loop3): Free/Dirty block details [ 281.932343][T16310] EXT4-fs (loop3): Free/Dirty block details [ 281.938306][T16310] EXT4-fs (loop3): free_blocks=66060288 [ 282.036065][T14604] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 282.282640][T16348] netlink: 'syz.1.4538': attribute type 83 has an invalid length. [ 282.408799][T16357] delete_channel: no stack [ 282.532975][T16350] loop4: detected capacity change from 0 to 1024 [ 282.638733][T16350] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 282.678907][T16350] System zones: 0-1, 3-36 [ 282.710837][T16376] syzkaller0: entered promiscuous mode [ 282.716356][T16376] syzkaller0: entered allmulticast mode [ 282.766966][T16350] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.4539: bad orphan inode 134217728 [ 282.779461][T16350] loop4: lost filesystem error report for type 5 error -117 [ 282.815041][T16350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.094915][T16386] netlink: 'syz.3.4554': attribute type 4 has an invalid length. [ 283.246267][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.471636][T16402] loop3: detected capacity change from 0 to 128 [ 283.546712][T16404] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4562'. [ 284.221530][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 284.221548][ T28] audit: type=1400 audit(1775220128.414:1332): avc: denied { create } for pid=16410 comm="syz.9.4566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 284.320128][T16420] syzkaller0: entered promiscuous mode [ 284.325787][T16420] syzkaller0: entered allmulticast mode [ 284.514381][T16429] loop3: detected capacity change from 0 to 128 [ 284.575091][ T28] audit: type=1400 audit(1775220128.764:1333): avc: denied { watch_reads } for pid=16431 comm="syz.4.4573" path="/860/file0" dev="tmpfs" ino=4470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 287.681621][T16463] syzkaller0: entered promiscuous mode [ 287.687218][T16463] syzkaller0: entered allmulticast mode [ 287.703422][T13180] kworker/u8:13: attempt to access beyond end of device [ 287.703422][T13180] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 287.732480][T13180] kworker/u8:13: attempt to access beyond end of device [ 287.732480][T13180] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 287.753747][T13180] kworker/u8:13: attempt to access beyond end of device [ 287.753747][T13180] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 287.777576][T13180] kworker/u8:13: attempt to access beyond end of device [ 287.777576][T13180] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 287.791954][T13180] kworker/u8:13: attempt to access beyond end of device [ 287.791954][T13180] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 287.806067][T13180] kworker/u8:13: attempt to access beyond end of device [ 287.806067][T13180] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 287.821614][T13180] kworker/u8:13: attempt to access beyond end of device [ 287.821614][T13180] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 287.843165][T13180] kworker/u8:13: attempt to access beyond end of device [ 287.843165][T13180] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 287.857762][T13180] kworker/u8:13: attempt to access beyond end of device [ 287.857762][T13180] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 287.871981][T13180] kworker/u8:13: attempt to access beyond end of device [ 287.871981][T13180] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 288.226857][T16486] loop3: detected capacity change from 0 to 512 [ 288.253869][T16486] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 288.283883][T16486] EXT4-fs (loop3): 1 truncate cleaned up [ 288.299037][T16486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.486832][T14604] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.638036][T16502] tipc: Failed to remove unknown binding: 66,0,0/0:3855202776/3855202778 [ 288.656838][T16502] tipc: Failed to remove unknown binding: 66,0,0/0:3855202776/3855202777 [ 288.688431][T16502] tipc: Failed to remove unknown binding: 66,0,0/0:3855202776/3855202778 [ 288.715874][T16502] tipc: Failed to remove unknown binding: 66,0,0/0:3855202776/3855202777 [ 288.811451][ T28] audit: type=1400 audit(1775220133.004:1334): avc: denied { read } for pid=16514 comm="syz.3.4607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 290.292320][T16574] loop9: detected capacity change from 0 to 512 [ 290.300022][T16574] EXT4-fs: inline encryption not supported [ 290.315425][T16574] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.335594][T16574] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.530281][T14011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.074299][T16612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.082919][T16612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.163243][ T28] audit: type=1400 audit(1775220135.354:1335): avc: denied { setopt } for pid=16617 comm="syz.3.4647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 291.174161][T16618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4647'. [ 291.419434][T16622] macvtap1: entered promiscuous mode [ 291.425896][T16622] team0: entered promiscuous mode [ 291.433430][T16622] team_slave_0: entered promiscuous mode [ 291.444673][T16622] team_slave_1: entered promiscuous mode [ 291.458883][T16622] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 291.474030][T16622] team0: Device macvtap1 is already an upper device of the team interface [ 291.492100][T16622] team0: left promiscuous mode [ 291.498639][T16622] team_slave_0: left promiscuous mode [ 291.504930][T16622] team_slave_1: left promiscuous mode [ 291.576092][T16628] loop9: detected capacity change from 0 to 128 [ 291.595483][T16628] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 291.625054][T13178] Bluetooth: hci0: Frame reassembly failed (-84) [ 291.640386][T13178] Bluetooth: hci0: Frame reassembly failed (-90) [ 291.647016][T16628] Bluetooth: hci0: Frame reassembly failed (-84) [ 291.666379][T16628] Bluetooth: hci0: Frame reassembly failed (-84) [ 291.678954][T16628] Bluetooth: hci0: Frame reassembly failed (-84) [ 291.696039][T16628] Bluetooth: hci0: Frame reassembly failed (-84) [ 291.783359][T16635] vlan2: left promiscuous mode [ 291.788256][T16635] bridge0: left promiscuous mode [ 291.795629][T16635] vxlan0: left promiscuous mode [ 291.800949][T16635] vxlan0: left allmulticast mode [ 291.909658][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4656'. [ 291.928911][T16641] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.190443][T13178] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 292.276278][T16649] cgroup: Setting release_agent not allowed [ 292.402142][T16655] netlink: 'syz.1.4662': attribute type 1 has an invalid length. [ 292.424987][T16655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.462883][T16655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4662'. [ 293.689203][ T9523] Bluetooth: hci0: command 0x1003 tx timeout [ 293.695256][ T3592] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 295.188626][T16655] bond1: entered allmulticast mode [ 295.214631][T16657] bond1: (slave ip6gretap0): making interface the new active one [ 295.222773][T16657] ip6gretap0: entered allmulticast mode [ 295.239039][T16657] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 295.437889][ T28] audit: type=1400 audit(1775220139.624:1336): avc: denied { accept } for pid=16682 comm="syz.1.4671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 295.881058][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4674'. [ 295.915949][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4674'. [ 296.314395][T16718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4686'. [ 296.336126][T16718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4686'. [ 296.362700][T16718] bridge0: entered promiscuous mode [ 296.380207][T16718] ip6gretap0: entered promiscuous mode [ 296.397691][T16718] debugfs: 'hsr1' already exists in 'hsr' [ 296.410846][T16718] Cannot create hsr debugfs directory [ 296.873748][T16729] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 296.973718][T16731] syzkaller0: entered promiscuous mode [ 296.993037][T16731] syzkaller0: entered allmulticast mode [ 297.174654][T16742] 9p: Bad value for 'rfdno' [ 297.234567][T16748] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4697'. [ 297.257542][T16748] netlink: 'syz.9.4697': attribute type 5 has an invalid length. [ 297.287593][T16748] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4697'. [ 297.372941][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4698'. [ 297.879299][T16764] loop9: detected capacity change from 0 to 512 [ 297.891929][T16764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 297.907261][T16765] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 297.946771][T16764] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.976966][T16764] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.126051][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4709'. [ 298.145386][T16781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.160280][T16781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.177304][T16781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.193703][T16781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.470017][T16783] xt_hashlimit: size too large, truncated to 1048576 [ 298.605181][T14011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.636747][T16786] loop9: detected capacity change from 0 to 128 [ 298.674756][T16786] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 298.845408][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4715'. [ 299.356206][T16830] xt_hashlimit: size too large, truncated to 1048576 [ 299.838600][T16844] loop3: detected capacity change from 0 to 256 [ 299.920794][T16844] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 300.073388][T16844] FAT-fs (loop3): Filesystem has been set read-only [ 300.163012][T16844] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 300.173296][T16845] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 300.185698][T16847] syzkaller0: entered promiscuous mode [ 300.197422][T16847] syzkaller0: entered allmulticast mode [ 300.203333][T16845] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 300.216920][T16844] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 300.236815][T16845] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 300.254204][T16845] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 300.264737][T16845] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 300.275233][T16845] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 300.292899][T16845] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 300.405626][T16852] SELinux: failed to load policy [ 300.479878][T16856] loop4: detected capacity change from 0 to 164 [ 300.509840][T16856] Unable to read rock-ridge attributes [ 300.615883][T16859] netlink: 'syz.4.4737': attribute type 1 has an invalid length. [ 300.657378][T16859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.703646][T16861] bond1: (slave geneve2): making interface the new active one [ 300.774615][T16861] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 301.082129][ T28] audit: type=1400 audit(1775220145.264:1337): avc: denied { write } for pid=16868 comm="syz.4.4741" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 302.124483][T16889] syzkaller0: entered promiscuous mode [ 302.132525][T16889] syzkaller0: entered allmulticast mode [ 302.214493][T16892] syzkaller0: entered promiscuous mode [ 302.230406][T16892] syzkaller0: entered allmulticast mode [ 302.504092][T16900] syzkaller0: entered promiscuous mode [ 302.511723][T16900] syzkaller0: entered allmulticast mode [ 302.683131][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4757'. [ 302.827685][ T28] audit: type=1400 audit(1775220147.014:1338): avc: denied { mounton } for pid=16915 comm="syz.3.4759" path=2F3131362FE91F7189591E9233614B dev="tmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 303.476740][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4765'. [ 303.692617][T16946] loop3: detected capacity change from 0 to 4096 [ 303.725655][T16948] tipc: Failed to remove unknown binding: 66,0,0/0:1145437122/1145437124 [ 303.734451][T16944] tipc: Failed to remove unknown binding: 66,0,0/0:3306043/3306044 [ 303.743480][T16944] tipc: Failed to remove unknown binding: 66,0,0/0:3306043/3306044 [ 303.749683][T16946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.775095][T16951] syzkaller0: entered promiscuous mode [ 303.780686][T16951] syzkaller0: entered allmulticast mode [ 303.868107][T14604] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.937355][ T28] audit: type=1400 audit(1775220148.124:1339): avc: denied { watch } for pid=16956 comm="syz.3.4775" path="pipe:[53719]" dev="pipefs" ino=53719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 304.020614][T16962] netlink: 'syz.3.4778': attribute type 1 has an invalid length. [ 304.141930][T16962] bond1: entered promiscuous mode [ 304.147274][T16962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.159006][T16965] vlan2: entered allmulticast mode [ 304.159026][T16965] bond1: entered allmulticast mode [ 304.185179][T16966] bond1: (slave bridge1): making interface the new active one [ 304.191804][T16966] bridge1: entered promiscuous mode [ 304.191904][T16966] bridge1: entered allmulticast mode [ 304.193518][T16966] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 306.024254][T17009] loop4: detected capacity change from 0 to 2048 [ 306.033739][ T28] audit: type=1326 audit(1775220150.224:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7ffc0000 [ 306.079756][T17009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.117557][T17009] gtp1: entered promiscuous mode [ 306.118545][ T28] audit: type=1326 audit(1775220150.224:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7ffc0000 [ 306.128241][T17009] gtp1: entered allmulticast mode [ 306.248369][ T28] audit: type=1326 audit(1775220150.224:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7ffc0000 [ 306.320753][ T28] audit: type=1326 audit(1775220150.224:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7ffc0000 [ 306.371912][ T28] audit: type=1326 audit(1775220150.254:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f746093c819 code=0x7ffc0000 [ 306.440429][ T28] audit: type=1326 audit(1775220150.284:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f74608fd04e code=0x7ffc0000 [ 306.482905][ T28] audit: type=1326 audit(1775220150.284:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7ffc0000 [ 306.520706][ T28] audit: type=1326 audit(1775220150.284:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746093c819 code=0x7ffc0000 [ 306.548270][ T28] audit: type=1326 audit(1775220150.284:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f74608fd04e code=0x7ffc0000 [ 306.574370][ T28] audit: type=1326 audit(1775220150.314:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f74608fd04e code=0x7ffc0000 [ 306.584084][T14604] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 306.598493][ T28] audit: type=1326 audit(1775220150.334:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.9.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f74608fd04e code=0x7ffc0000 [ 306.688431][T14604] CPU: 1 UID: 0 PID: 14604 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 306.688468][T14604] Tainted: [W]=WARN [ 306.688475][T14604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.688488][T14604] Call Trace: [ 306.688495][T14604] [ 306.688502][T14604] __dump_stack+0x1d/0x30 [ 306.688566][T14604] dump_stack_lvl+0x95/0xd0 [ 306.688624][T14604] dump_stack+0x15/0x1b [ 306.688645][T14604] dump_header+0x80/0x240 [ 306.688675][T14604] oom_kill_process+0x295/0x350 [ 306.688713][T14604] out_of_memory+0x97d/0xb80 [ 306.688741][T14604] try_charge_memcg+0x62e/0xa10 [ 306.688787][T14604] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 306.688956][T14604] __swap_cache_prepare_and_add+0x67/0x460 [ 306.688992][T14604] ? alloc_pages_mpol+0x217/0x260 [ 306.689075][T14604] swap_cache_alloc_folio+0xa2/0x120 [ 306.689104][T14604] swap_cluster_readahead+0x26e/0x3d0 [ 306.689139][T14604] swapin_readahead+0xde/0x840 [ 306.689175][T14604] ? __rcu_read_unlock+0x4e/0x70 [ 306.689252][T14604] ? __perf_event_task_sched_in+0xa65/0xad0 [ 306.689276][T14604] ? __list_add_valid_or_report+0x38/0xe0 [ 306.689364][T14604] ? __rcu_read_unlock+0x4e/0x70 [ 306.689388][T14604] ? swap_cache_get_folio+0x26f/0x280 [ 306.689485][T14604] do_swap_page+0x2fe/0x21e0 [ 306.689550][T14604] ? __schedule+0x93c/0xd40 [ 306.689585][T14604] ? __rcu_read_lock+0x36/0x50 [ 306.689607][T14604] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 306.689639][T14604] handle_mm_fault+0xb46/0x3020 [ 306.689807][T14604] ? vma_start_read+0x1c7/0x2c0 [ 306.689894][T14604] do_user_addr_fault+0x62f/0x1050 [ 306.689930][T14604] ? trace_page_fault_user+0x1f/0xe0 [ 306.689969][T14604] exc_page_fault+0x62/0xa0 [ 306.689992][T14604] asm_exc_page_fault+0x26/0x30 [ 306.690050][T14604] RIP: 0033:0x7f54661f7997 [ 306.690069][T14604] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 306.690090][T14604] RSP: 002b:00007ffcadde6b50 EFLAGS: 00010202 [ 306.690112][T14604] RAX: 0000000000000000 RBX: 00005555678a4500 RCX: 00007f54661f7997 [ 306.690128][T14604] RDX: 00007ffcadde6b90 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.690142][T14604] RBP: 00007ffcadde6bfc R08: 0000000000000000 R09: 0000000000000000 [ 306.690156][T14604] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 306.690171][T14604] R13: 00000000000927c0 R14: 000000000004acb6 R15: 00007ffcadde6c50 [ 306.690273][T14604] [ 306.690429][T14604] memory: usage 263560kB, limit 307200kB, failcnt 73 [ 306.697455][T17018] syzkaller0: entered promiscuous mode [ 306.744376][T14604] memory+swap: usage 220144kB, limit 9007199254740988kB, failcnt 0 [ 306.746211][T17018] syzkaller0: entered allmulticast mode [ 306.758420][T14604] kmem: usage 211092kB, limit 9007199254740988kB, failcnt 0 [ 306.974657][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.087674][T14604] Memory cgroup stats for /syz3: [ 307.087942][T14604] cache 0 [ 307.097082][T17023] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4795'. [ 307.124734][T17023] bond1: entered promiscuous mode [ 307.136759][T17023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.147265][T14604] rss 0 [ 307.160384][T14604] shmem 0 [ 307.163375][T14604] mapped_file 0 [ 307.166880][T14604] dirty 0 [ 307.186033][T17027] bridge2: entered promiscuous mode [ 307.191540][T14604] writeback 0 [ 307.194931][T14604] workingset_refault_anon 2097 [ 307.201205][T17027] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 307.221020][T14604] workingset_refault_file 0 [ 307.225572][T14604] swap 53248 [ 307.232505][T17023] macvlan2: entered promiscuous mode [ 307.238431][T17023] macvlan2: entered allmulticast mode [ 307.244102][T14604] swapcached 12124160 [ 307.246454][T17023] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 307.248619][T14604] pgpgin 172393 [ 307.258677][T14604] pgpgout 172391 [ 307.262258][T14604] pgfault 222652 [ 307.265915][T14604] pgmajfault 280 [ 307.269702][T14604] inactive_anon 0 [ 307.273362][T14604] active_anon 4096 [ 307.277209][T14604] inactive_file 0 [ 307.281348][T14604] active_file 4096 [ 307.285097][T14604] unevictable 0 [ 307.288771][T14604] hierarchical_memory_limit 314572800 [ 307.294317][T14604] hierarchical_memsw_limit 9223372036854771712 [ 307.300728][T14604] total_cache 0 [ 307.305119][T14604] total_rss 0 [ 307.308958][T14604] total_shmem 0 [ 307.312507][T14604] total_mapped_file 0 [ 307.316538][T14604] total_dirty 0 [ 307.322080][T17033] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 307.326635][T17036] loop4: detected capacity change from 0 to 512 [ 307.336376][T14604] total_writeback 0 [ 307.344147][T17036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 307.352447][T17033] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 307.363467][T17033] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 307.369116][T17036] EXT4-fs (loop4): 1 truncate cleaned up [ 307.373099][T14604] total_workingset_refault_anon 2097 [ 307.382376][T14604] total_workingset_refault_file 0 [ 307.387508][T14604] total_swap 53248 [ 307.391479][T14604] total_swapcached 12124160 [ 307.396281][T14604] total_pgpgin 172393 [ 307.398875][T17036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.400571][T14604] total_pgpgout 172391 [ 307.416673][T14604] total_pgfault 222652 [ 307.420922][T14604] total_pgmajfault 280 [ 307.425090][T14604] total_inactive_anon 0 [ 307.429433][T14604] total_active_anon 4096 [ 307.433690][T14604] total_inactive_file 0 [ 307.444946][T14604] total_active_file 4096 [ 307.450527][T14604] total_unevictable 0 [ 307.454627][T14604] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4788,pid=16995,uid=0 [ 307.469511][T14604] Memory cgroup out of memory: OOM victim 16995 (syz.3.4788) is already exiting. Skip killing the task [ 307.512551][T17047] bridge0: port 3(gretap0) entered blocking state [ 307.519435][T17047] bridge0: port 3(gretap0) entered disabled state [ 307.534278][T17047] gretap0: entered allmulticast mode [ 307.540388][T17051] loop9: detected capacity change from 0 to 512 [ 307.541592][T17051] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 307.559056][T17051] EXT4-fs (loop9): 1 truncate cleaned up [ 307.559529][T17051] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.654076][ T3318] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 307.676292][ T3318] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 307.700161][T14011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.734210][T17047] gretap0: entered promiscuous mode [ 307.866123][T17081] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4807'. [ 307.888866][T17081] vlan2: entered allmulticast mode [ 307.894259][T17081] bridge3: entered allmulticast mode [ 307.902737][T17081] bridge3: port 1(erspan0) entered blocking state [ 307.910129][T17081] bridge3: port 1(erspan0) entered disabled state [ 307.917270][T17081] erspan0: entered allmulticast mode [ 307.923769][T17081] erspan0: entered promiscuous mode [ 307.972237][T17091] loop9: detected capacity change from 0 to 512 [ 307.994758][T17091] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.445901][T17099] tipc: Failed to remove unknown binding: 66,0,0/0:1567111293/1567111295 [ 308.464931][T14011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.474841][T16831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.494716][T17096] tipc: Failed to remove unknown binding: 66,0,0/0:931167148/931167149 [ 308.505783][T13175] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.541219][T17145] loop9: detected capacity change from 0 to 512 [ 308.549972][T17096] tipc: Failed to remove unknown binding: 66,0,0/0:931167148/931167149 [ 308.610252][T17145] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.648028][T13175] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.670576][T17145] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 308.698849][T14011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.716325][T13175] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.744102][T13175] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.982544][T13175] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.012596][T13175] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.051625][T17166] syzkaller0: entered promiscuous mode [ 309.076619][T17166] syzkaller0: entered allmulticast mode [ 309.105730][T13175] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.121659][T13175] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.317316][T13175] batadv1: left allmulticast mode [ 309.323349][T13175] batadv1: left promiscuous mode [ 309.328782][T13175] bridge0: port 2(batadv1) entered disabled state [ 309.343536][T13175] bridge_slave_0: left allmulticast mode [ 309.358367][T13175] bridge_slave_0: left promiscuous mode [ 309.365562][T13175] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.495217][T13175] bond1 (unregistering): (slave geneve2): Releasing active interface [ 309.513001][T17159] netlink: 'syz.0.4819': attribute type 2 has an invalid length. [ 309.524051][T17159] netlink: 199792 bytes leftover after parsing attributes in process `syz.0.4819'. [ 309.623599][T17198] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 309.648186][T13175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.659325][T13175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.670572][T13175] bond0 (unregistering): Released all slaves [ 309.679399][T13175] bond1 (unregistering): Released all slaves [ 309.720845][T13175] tipc: Left network mode [ 309.734563][T17209] syz.9.4829 (17209) used obsolete PPPIOCDETACH ioctl [ 309.743505][T13175] hsr_slave_0: left promiscuous mode [ 309.749811][T13175] hsr_slave_1: left promiscuous mode [ 309.755696][T13175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.773178][T13175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.781428][T13175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.789197][T13175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.898551][T13175] veth1_macvtap: left promiscuous mode [ 309.904173][T13175] veth0_macvtap: left promiscuous mode [ 309.917817][T13175] veth1_vlan: left promiscuous mode [ 309.923414][T13175] veth0_vlan: left promiscuous mode [ 310.005562][T13175] team0 (unregistering): Port device team_slave_1 removed [ 310.018169][T13175] team0 (unregistering): Port device team_slave_0 removed [ 310.125290][T17157] chnl_net:caif_netlink_parms(): no params data found [ 310.185047][T17157] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.195979][T17157] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.207137][T17157] bridge_slave_0: entered allmulticast mode [ 310.219136][T17157] bridge_slave_0: entered promiscuous mode [ 310.232199][T17157] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.239653][T17157] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.247038][T17157] bridge_slave_1: entered allmulticast mode [ 310.254925][T17157] bridge_slave_1: entered promiscuous mode [ 310.281142][T17157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.293519][T17157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.303968][T13175] IPVS: stop unused estimator thread 0... [ 310.337538][T17157] team0: Port device team_slave_0 added [ 310.351763][T17157] team0: Port device team_slave_1 added [ 310.369970][T17157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.376982][T17157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.407880][T17157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.419446][T17157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.426625][T17157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.455141][T17157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.508290][T17157] hsr_slave_0: entered promiscuous mode [ 310.514987][T17157] hsr_slave_1: entered promiscuous mode [ 310.523087][T17157] debugfs: 'hsr0' already exists in 'hsr' [ 310.538407][T17157] Cannot create hsr debugfs directory [ 310.550182][T17244] syzkaller0: entered promiscuous mode [ 310.556426][T17244] syzkaller0: entered allmulticast mode [ 310.599265][T17255] lo speed is unknown, defaulting to 1000 [ 310.615440][T17255] lo speed is unknown, defaulting to 1000 [ 310.644053][T17255] lo speed is unknown, defaulting to 1000 [ 310.657536][T17255] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 310.714338][T17265] cgroup: fork rejected by pids controller in /syz3 [ 310.723018][T17266] gtp0: entered promiscuous mode [ 310.728058][T17266] gtp0: entered allmulticast mode [ 310.775712][T17255] lo speed is unknown, defaulting to 1000 [ 310.813853][T17255] lo speed is unknown, defaulting to 1000 [ 310.828194][T17255] lo speed is unknown, defaulting to 1000 [ 310.834717][T17255] lo speed is unknown, defaulting to 1000 [ 310.841345][T17255] lo speed is unknown, defaulting to 1000 [ 310.902677][T17157] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 310.916245][T17157] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 310.927700][T17157] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 310.956852][T17157] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 310.986695][T17157] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.993997][T17157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.001399][T17157] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.008726][T17157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.085019][T17157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.125737][T13175] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.138441][T13175] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.171850][T17157] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.199354][T13183] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.206578][T13183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.232935][T13183] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.240184][T13183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.393873][T17157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.306480][T17157] veth0_vlan: entered promiscuous mode [ 312.335835][T17157] veth1_vlan: entered promiscuous mode [ 312.353957][T17354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4842'. [ 312.419175][T17354] selinux_netlink_send: 71 callbacks suppressed [ 312.419196][T17354] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17354 comm=syz.3.4842 [ 312.426641][T17157] veth0_macvtap: entered promiscuous mode [ 312.464012][T17157] veth1_macvtap: entered promiscuous mode [ 312.478083][T17157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.503518][T17157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.523212][T17361] syzkaller0: entered promiscuous mode [ 312.528986][T17361] syzkaller0: entered allmulticast mode [ 312.591434][T13194] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.611580][T13194] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.620558][T13194] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.629896][T13194] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.842950][T17395] syzkaller0: entered promiscuous mode [ 313.867197][T17395] syzkaller0: entered allmulticast mode [ 314.811579][ T28] kauditd_printk_skb: 104 callbacks suppressed [ 314.811596][ T28] audit: type=1400 audit(1775220159.004:1455): avc: denied { bind } for pid=17453 comm="syz.9.4853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 314.881221][T17458] lo speed is unknown, defaulting to 1000 [ 315.132455][T17470] syzkaller0: entered promiscuous mode [ 315.138254][T17470] syzkaller0: entered allmulticast mode [ 317.133726][T17538] syzkaller0: entered promiscuous mode [ 317.150646][T17538] syzkaller0: entered allmulticast mode [ 317.307336][T17552] loop5: detected capacity change from 0 to 7 [ 317.331271][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.341106][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.357504][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.367516][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.375397][ T3800] loop5: unable to read partition table [ 317.388879][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.398548][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.407025][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.416649][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.425137][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.434799][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.443129][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.452773][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.460801][T17552] loop5: unable to read partition table [ 317.466547][T17552] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 317.477987][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.478039][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.498491][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.508176][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.516291][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.526000][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.570373][T17543] loop3: detected capacity change from 0 to 512 [ 317.587164][T17558] syzkaller0: entered promiscuous mode [ 317.593048][T17558] syzkaller0: entered allmulticast mode [ 317.669392][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4865'. [ 317.925279][T17543] EXT4-fs (loop3): 1 orphan inode deleted [ 317.946103][T17543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.278993][T17570] loop5: detected capacity change from 0 to 512 [ 318.295926][T17570] vfat: Unknown parameter '' [ 318.545938][T13175] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.626196][T17575] xt_TPROXY: Can be used only with -p tcp or -p udp [ 318.998855][T13175] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.012709][T13175] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.022958][T13175] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.037924][T14604] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.825661][T17699] loop3: detected capacity change from 0 to 512 [ 319.851983][T17699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.865285][T17699] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.045143][T17703] lo speed is unknown, defaulting to 1000 [ 320.094821][T14604] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.107064][T17707] lo speed is unknown, defaulting to 1000 [ 320.208695][T17714] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4885'. [ 320.254111][T17716] tipc: Started in network mode [ 320.259419][T17716] tipc: Node identity 6a4915994c49, cluster identity 4711 [ 320.267240][T17716] tipc: Enabled bearer , priority 0 [ 320.280517][T17716] syzkaller0: entered promiscuous mode [ 320.286199][T17716] syzkaller0: entered allmulticast mode [ 320.305201][T17716] tipc: Resetting bearer [ 320.329292][T17715] tipc: Resetting bearer [ 320.336909][T17715] tipc: Disabling bearer [ 320.992540][T17736] syzkaller0: entered promiscuous mode [ 321.194412][T17840] syzkaller0: entered promiscuous mode [ 321.201276][T17840] syzkaller0: entered allmulticast mode [ 321.674934][ T28] audit: type=1400 audit(1775220165.864:1456): avc: denied { write } for pid=17851 comm="syz.9.4895" path="socket:[56477]" dev="sockfs" ino=56477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 322.398031][T17948] Set syz1 is full, maxelem 65536 reached [ 322.621510][T17955] loop5: detected capacity change from 0 to 256 [ 322.980691][T17970] syzkaller0: entered promiscuous mode [ 322.986300][T17970] syzkaller0: entered allmulticast mode [ 323.715748][T17977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4907'. [ 323.716410][T17979] lo: entered allmulticast mode [ 323.760122][T17979] tunl0: entered allmulticast mode [ 323.765387][T17979] gre0: entered allmulticast mode [ 323.786268][T17981] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4908'. [ 323.789251][T17979] gretap0: entered allmulticast mode [ 323.824590][T17979] ip_vti0: entered allmulticast mode [ 323.842785][T17979] ip6_vti0: entered allmulticast mode [ 323.858583][T17979] sit0: entered allmulticast mode [ 323.876952][T17979] ip6tnl0: entered allmulticast mode [ 323.892314][T17979] ip6gre0: entered allmulticast mode [ 323.909948][T17979] syz_tun: entered allmulticast mode [ 323.928217][T17979] bridge0: entered allmulticast mode [ 323.934102][T17979] vcan0: entered allmulticast mode [ 323.949639][T17979] bond0: entered allmulticast mode [ 323.966933][T17979] bond_slave_0: entered allmulticast mode [ 323.985162][T17979] bond_slave_1: entered allmulticast mode [ 324.004256][T17979] team0: entered allmulticast mode [ 324.017953][T17979] team_slave_0: entered allmulticast mode [ 324.030729][T17979] team_slave_1: entered allmulticast mode [ 324.042231][T17979] dummy0: entered allmulticast mode [ 324.053318][T17979] nlmon0: entered allmulticast mode [ 324.066069][T17979] caif0: entered allmulticast mode [ 324.077325][T17979] batadv0: entered allmulticast mode [ 324.091647][T17979] vxcan0: entered allmulticast mode [ 324.102797][T17979] vxcan1: entered allmulticast mode [ 324.109395][T17979] veth0: entered allmulticast mode [ 324.114974][T17979] veth1: entered allmulticast mode [ 324.120601][T17979] wg0: entered allmulticast mode [ 324.238436][T17979] wg1: entered allmulticast mode [ 324.243840][T17979] wg2: entered allmulticast mode [ 324.258467][T17979] veth0_to_bridge: entered allmulticast mode [ 324.264719][T17979] veth1_to_bridge: entered allmulticast mode [ 324.278548][T17979] veth0_to_bond: entered allmulticast mode [ 324.284774][T17979] veth1_to_bond: entered allmulticast mode [ 324.305047][T17979] veth0_to_team: entered allmulticast mode [ 324.312096][T17979] veth1_to_team: entered allmulticast mode [ 324.318280][T17979] veth0_to_batadv: entered allmulticast mode [ 324.324870][T17979] batadv_slave_0: entered allmulticast mode [ 324.331129][T17979] veth1_to_batadv: entered allmulticast mode [ 324.337376][T17979] batadv_slave_1: entered allmulticast mode [ 324.343423][T17979] xfrm0: entered allmulticast mode [ 324.349261][T17979] veth0_to_hsr: entered allmulticast mode [ 324.355187][T17979] hsr_slave_0: entered allmulticast mode [ 324.361076][T17979] veth1_to_hsr: entered allmulticast mode [ 324.366951][T17979] hsr_slave_1: entered allmulticast mode [ 324.377093][T17979] hsr0: entered allmulticast mode [ 324.387950][T17979] veth1_virt_wifi: entered allmulticast mode [ 324.400802][T17979] veth0_virt_wifi: entered allmulticast mode [ 324.413572][T17979] veth1_vlan: entered allmulticast mode [ 324.424802][T17979] veth0_vlan: entered allmulticast mode [ 324.437042][T17979] vlan0: entered allmulticast mode [ 324.447885][T17979] vlan1: entered allmulticast mode [ 324.458511][T17979] macvlan0: entered allmulticast mode [ 324.469602][T17979] macvlan1: entered allmulticast mode [ 324.480701][T17979] ipvlan0: entered allmulticast mode [ 324.492861][T17979] ipvlan1: entered allmulticast mode [ 324.504037][T17979] veth1_macvtap: entered allmulticast mode [ 324.516794][T17979] veth0_macvtap: entered allmulticast mode [ 324.529398][T17979] macvtap0: entered allmulticast mode [ 324.541122][T17979] macsec0: entered allmulticast mode [ 324.557193][T17979] geneve0: entered allmulticast mode [ 324.571459][T17979] geneve1: entered allmulticast mode [ 324.589730][T17979] team1: entered allmulticast mode [ 324.601866][T17979] ieee802154 phy0 wpan0: entered allmulticast mode [ 324.622037][T17979] ip6gre1: left promiscuous mode [ 324.656522][T17979] bridge1: entered allmulticast mode [ 324.679702][T17979] netdevsim netdevsim9 eth0: entered allmulticast mode [ 324.704343][T17979] netdevsim netdevsim9 eth1: entered allmulticast mode [ 324.724119][T17979] netdevsim netdevsim9 eth2: entered allmulticast mode [ 324.742260][T17979] netdevsim netdevsim9 eth3: entered allmulticast mode [ 324.761573][T17979] bond1: left promiscuous mode [ 324.766387][T17979] bridge2: left promiscuous mode [ 324.785657][T17979] bond1: entered allmulticast mode [ 324.799488][T17979] bridge2: entered allmulticast mode [ 324.860971][T17977] team0: Port device team_slave_0 removed [ 324.992237][T17992] syzkaller0: entered promiscuous mode [ 324.997953][T17992] syzkaller0: entered allmulticast mode [ 325.038272][ T28] audit: type=1400 audit(1775220169.224:1457): avc: denied { recv } for pid=17966 comm="syz.5.4904" saddr=10.128.0.163 src=44768 daddr=10.128.0.92 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 325.252565][T18015] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4912'. [ 325.268658][T18018] syzkaller0: entered promiscuous mode [ 325.285573][T18018] syzkaller0: entered allmulticast mode [ 325.485832][T18044] syzkaller0: entered promiscuous mode [ 325.491747][T18044] syzkaller0: entered allmulticast mode [ 325.501459][ T28] audit: type=1400 audit(1775220169.694:1458): avc: denied { create } for pid=18041 comm="syz.5.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 325.520393][T18024] syzkaller0: entered promiscuous mode [ 325.527794][T18024] syzkaller0: entered allmulticast mode [ 325.554220][ T28] audit: type=1400 audit(1775220169.734:1459): avc: denied { prog_run } for pid=18042 comm="syz.1.4919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 325.617830][T18050] loop5: detected capacity change from 0 to 512 [ 325.627982][T18050] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 325.646641][T18050] EXT4-fs (loop5): 1 truncate cleaned up [ 325.653532][T18050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.752028][ T28] audit: type=1400 audit(1775220169.944:1460): avc: denied { prog_load } for pid=18049 comm="syz.5.4921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 325.790127][T17157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.905481][ T28] audit: type=1400 audit(1775220170.094:1461): avc: denied { map_create } for pid=18056 comm="syz.5.4923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 325.941271][ T28] audit: type=1400 audit(1775220170.094:1462): avc: denied { map_read map_write } for pid=18056 comm="syz.5.4923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 325.964985][T18057] syzkaller0: entered promiscuous mode [ 325.970558][T18057] syzkaller0: entered allmulticast mode [ 326.047865][T18060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4924'. [ 326.086140][T18062] syzkaller0: entered promiscuous mode [ 326.091989][T18062] syzkaller0: entered allmulticast mode [ 326.253361][ T28] audit: type=1400 audit(1775220170.444:1463): avc: denied { create } for pid=18064 comm="syz.3.4926" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 326.297185][ T28] audit: type=1400 audit(1775220170.464:1464): avc: denied { create } for pid=18064 comm="syz.3.4926" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 326.382341][T18067] lo speed is unknown, defaulting to 1000 [ 326.761424][T18081] loop5: detected capacity change from 0 to 512 [ 326.800090][T18081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.813694][T18081] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.188459][T18007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 328.311639][T18203] netlink: 'syz.3.4933': attribute type 1 has an invalid length. [ 328.388949][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4934'. [ 328.398944][T18208] erspan1: entered allmulticast mode [ 328.430046][T18203] bond2: entered promiscuous mode [ 328.436440][T18203] bond2: entered allmulticast mode [ 328.449401][T18203] 8021q: adding VLAN 0 to HW filter on device bond2 [ 328.539421][T18210] tipc: Enabled bearer , priority 0 [ 328.570805][ T28] audit: type=1400 audit(1775220172.764:1465): avc: denied { create } for pid=18324 comm="syz.3.4936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 328.622784][ T28] audit: type=1400 audit(1775220172.794:1466): avc: denied { bind } for pid=18324 comm="syz.3.4936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 328.644515][T18210] syzkaller0: entered promiscuous mode [ 328.650423][T18210] syzkaller0: entered allmulticast mode [ 328.661467][T18221] tipc: Resetting bearer [ 328.718205][T18209] tipc: Resetting bearer [ 328.755858][T18209] tipc: Disabling bearer [ 328.812079][T18332] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4937'. [ 328.838882][T17157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.891012][T18334] syzkaller0: entered promiscuous mode [ 328.896620][T18334] syzkaller0: entered allmulticast mode [ 328.935681][T18347] tipc: Enabled bearer , priority 0 [ 328.946573][T18347] syzkaller0: entered promiscuous mode [ 328.963886][T18347] syzkaller0: entered allmulticast mode [ 329.004332][T18347] tipc: Resetting bearer [ 329.027356][T18353] syzkaller0: entered promiscuous mode [ 329.049100][T18353] syzkaller0: entered allmulticast mode [ 329.071244][T18342] tipc: Resetting bearer [ 329.096910][T18342] tipc: Disabling bearer [ 329.169227][T18365] bridge0: entered allmulticast mode [ 329.182468][T18365] bridge0: entered promiscuous mode [ 329.244871][T18372] syzkaller0: entered promiscuous mode [ 329.268397][T18372] syzkaller0: entered allmulticast mode [ 329.350705][T18382] syzkaller0: entered promiscuous mode [ 329.368395][T18382] syzkaller0: entered allmulticast mode [ 329.457398][T18374] lo speed is unknown, defaulting to 1000 [ 330.347363][T18501] syzkaller0: entered promiscuous mode [ 330.470312][T18501] syzkaller0: entered allmulticast mode [ 331.119707][T18639] syzkaller0: entered promiscuous mode [ 331.129109][T18639] syzkaller0: entered allmulticast mode [ 331.333850][T18657] loop3: detected capacity change from 0 to 512 [ 331.360759][T18657] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 331.405154][T18657] EXT4-fs (loop3): 1 truncate cleaned up [ 331.413792][T18657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.552969][T18673] netlink: 'syz.1.4961': attribute type 1 has an invalid length. [ 331.595557][T18673] netlink: 'syz.1.4961': attribute type 2 has an invalid length. [ 331.627367][T18673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4961'. [ 331.661888][T14604] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.729050][T13186] ================================================================== [ 331.737177][T13186] BUG: KCSAN: data-race in alloc_pid / copy_process [ 331.743872][T13186] [ 331.746196][T13186] read-write to 0xffffffff86c5ffa8 of 4 bytes by task 13188 on cpu 0: [ 331.754344][T13186] alloc_pid+0x651/0x940 [ 331.758607][T13186] copy_process+0xf37/0x20b0 [ 331.763206][T13186] kernel_clone+0x16b/0x5d0 [ 331.767730][T13186] user_mode_thread+0x9c/0xd0 [ 331.772433][T13186] call_usermodehelper_exec_work+0x7a/0x160 [ 331.778614][T13186] process_scheduled_works+0x513/0xa10 [ 331.784097][T13186] worker_thread+0x58a/0x780 [ 331.788704][T13186] kthread+0x22a/0x280 [ 331.792940][T13186] ret_from_fork+0x150/0x360 [ 331.797563][T13186] ret_from_fork_asm+0x1a/0x30 [ 331.802355][T13186] [ 331.804679][T13186] read to 0xffffffff86c5ffa8 of 4 bytes by task 13186 on cpu 1: [ 331.812485][T13186] copy_process+0x187f/0x20b0 [ 331.817169][T13186] kernel_clone+0x16b/0x5d0 [ 331.821779][T13186] user_mode_thread+0x9c/0xd0 [ 331.826465][T13186] call_usermodehelper_exec_work+0x7a/0x160 [ 331.832377][T13186] process_scheduled_works+0x513/0xa10 [ 331.837965][T13186] worker_thread+0x58a/0x780 [ 331.842584][T13186] kthread+0x22a/0x280 [ 331.846665][T13186] ret_from_fork+0x150/0x360 [ 331.851270][T13186] ret_from_fork_asm+0x1a/0x30 [ 331.856041][T13186] [ 331.858364][T13186] value changed: 0x80000163 -> 0x80000164 [ 331.864176][T13186] [ 331.866511][T13186] Reported by Kernel Concurrency Sanitizer on: [ 331.872665][T13186] CPU: 1 UID: 0 PID: 13186 Comm: kworker/u8:17 Tainted: G W syzkaller #0 PREEMPT(full) [ 331.883959][T13186] Tainted: [W]=WARN [ 331.887769][T13186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.897832][T13186] Workqueue: events_unbound call_usermodehelper_exec_work [ 331.905569][T13186] ==================================================================