last executing test programs: 2.487758001s ago: executing program 3 (id=39): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@errors_remount}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") (fail_nth: 4) 1.967643478s ago: executing program 3 (id=40): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea) 1.765795994s ago: executing program 3 (id=44): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}], 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000200)={0xa, 0x4e20, 0x800, @remote, 0x7}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000002c0)="2b790a749c5b68fea3bdd63fe4b88c35c45bb67eefcf5c885c7bfec29b0ad892470b6d5ff2195a77501816d914a2108771885c87cac0067f6273e1c84f3b7c3a802aa63c93f99d8caaa522c4f90bf39f07b5ff7d9dd373f1537a0d1e73dc0f2b5290c005fc381027b2d856", 0x6b}], 0x1}, 0x20000000) 1.442505125s ago: executing program 1 (id=52): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) timer_delete(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd26, 0x25dfdbfd, {0x2, 0x14, 0x75c2fbd8a395a596, 0x81, 0x9, 0x0, 0x0, 0x1, 0x8}, [""]}, 0x1c}}, 0x4000) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wakeup_count', 0x400, 0xe) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r4, r5, 0x24, 0x0, @void}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000001c0)={@mcast1, 0x1, 0x2, 0x3, 0xe, 0xd}, &(0x7f0000000480)=0x20) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r8 = dup(r7) ioctl$GIO_UNISCRNMAP(r8, 0x40043d14, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xd, "f42a97b96d025891dd3f75fdda"}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400000001000000000000ffff", @ANYRES32=0x0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES64=r0], 0x3c}}, 0x24004000) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r10, &(0x7f00000000c0), 0x12) io_uring_enter(r10, 0x4eb6, 0x43, 0x50, &(0x7f0000000180)={[0x9]}, 0x8) 1.335637699s ago: executing program 1 (id=55): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f00000001c0)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 1.286247886s ago: executing program 1 (id=57): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x7fffffffffffffff}, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x5, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000003c61cb4d67711b609d0a00000004000000010000060400000008000000f8ffffff009180a6b5f25bcc9e4da15f66810e4ff375efa307cf320810612196d01155e0cef964e505cef2ece711816a82b839a6571209473fca36ee23c62392c4f4c5ae1123e9cfb2ca6414e57d7ac24a6353fea9a46afc05ac26a51fba93001e23ccd79ec608243cd8d86e4ae15040af31e560b2203ddea29f6cc2c8402a4de904bc175d"], 0x0, 0x36, 0x0, 0x1, 0x1}, 0x28) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) ioperm(0x9, 0x40, 0x8001) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10038, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.180781739s ago: executing program 0 (id=59): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000000d00)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_clone(0x6002500, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000030601020000000000000000010000050500010007"], 0x28}, 0x1, 0x0, 0x0, 0xc011}, 0x20004000) (async) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa058, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) (async) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000880)={{'\x00', 0x3}, {0x1}, 0x11, 0x0, 0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000840)='./file0\x00', &(0x7f0000000940)="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", 0x1a4, 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x1ca}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r2, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r7 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee1, 0x0, 0x0}, 0x94) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) (async) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) readv(r6, &(0x7f00000002c0)=[{&(0x7f0000002040)=""/4090, 0xffa}], 0x1) 1.032900958s ago: executing program 1 (id=65): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = socket(0x10, 0x803, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x8) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f00000009c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf257c0000000c009900500000005f0000000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff0000"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001300), 0x10000, 0x0) pidfd_send_signal(r4, 0x28, &(0x7f0000001340)={0xf, 0x3, 0x6}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x158, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x10, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), &(0x7f0000000380)=ANY=[@ANYBLOB="00fba0040151cdd6bbcf4147ce45f018dd49e354d856ba17e119b1c2ff504c0f3730ddb998e8447f8aed68795734457a83a6661f48aa1686e7116cc0c9e5812b469b82375852e13c994a3e3fe8f22b2aa4ee850e2c84f330dd908f664d32d4815850204e4b36e94b997b715b6b4fcce1354c4707f07b8d14826c98cb00d7ba1687b721cb7f5eaf59922bd1aa126dac7fc7e3952e9d175d000000000000000000"], 0xa0, 0x0) listen(r2, 0x1) stat(&(0x7f0000000780)='./cgroup.net/devices.allow\x00', &(0x7f00000007c0)) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x23, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) prctl$PR_SCHED_CORE(0x26, 0x4000004, 0x0, 0x2, 0x0) r5 = getpid() syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xee, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0x18, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x3, r7, 0x1, 0x1, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=r7, @ANYRES8=r6], 0xdd12}], 0x1, 0x0, 0x0, 0x20040800}, 0x20040051) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x4000000) r8 = syz_pidfd_open(r5, 0x0) setns(r8, 0x24020000) syz_clone(0x1b201100, 0x0, 0x0, 0x0, 0x0, 0x0) 922.195292ms ago: executing program 2 (id=67): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f00000001c0)=0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x0, 0x0) 920.118952ms ago: executing program 4 (id=68): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@errors_remount}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") 858.3484ms ago: executing program 2 (id=69): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x5, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$VT_ACTIVATE(r0, 0x80045440, 0x1000000000000) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x5, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) ioctl$VT_ACTIVATE(r0, 0x80045440, 0x1000000000000) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000080)) (async) 851.746361ms ago: executing program 3 (id=70): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r0, 0x4) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES64], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x8, 0xc0, 0x3, 0x40, {{0x2f, 0x4, 0x2, 0x28, 0xbc, 0x65, 0x6, 0x5, 0x4, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@ra={0x94, 0x4}, @cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x34, 0xa2, 0x1, 0xd, [{@empty, 0x7}, {@rand_addr=0x64010101, 0x1ff}, {@loopback, 0x5}, {@remote, 0x7}, {@empty, 0x47}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @cipso={0x86, 0x2e, 0x3, [{0x5, 0x4, '0R'}, {0x6, 0xb, "3bc605fa10dd34e1c3"}, {0x1, 0x5, "94feeb"}, {0x86e9ef9ed30d4f20, 0x5, "9a58db"}, {0x5, 0xf, "e7018ce5a2ed9207948926bfe8"}]}, @lsrr={0x83, 0xf, 0x4e, [@remote, @loopback, @multicast2]}, @ssrr={0x89, 0xf, 0x80, [@broadcast, @remote, @loopback]}, @rr={0x7, 0x1b, 0xb5, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1, @private=0xa010100]}]}}}}}) r3 = inotify_init1(0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) inotify_add_watch(r3, &(0x7f0000000600)='./file0\x00', 0x110000ac) r4 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r4, &(0x7f0000032280)=""/102369, 0x18fe1, 0x200) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@newqdisc={0x12, 0x24, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x10, 0x3}, {0xd, 0x3}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) io_setup(0x6, &(0x7f0000001380)=0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) io_submit(r5, 0x1, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c859f32000000", @ANYRES16, @ANYBLOB="01002abd7000fddbdf2503000000080002000000000008000400ffffffff08000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4008041) setresuid(r7, r7, 0x0) fchown(0xffffffffffffffff, r7, 0xee01) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r9, 0x0, 0xe, 0x0, &(0x7f0000000180)="e4e647c9d9b8e9a2f2ab30da5800", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 769.518212ms ago: executing program 2 (id=71): r0 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000c8e000/0x3000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xcb01, 0x0, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x800, '\x00', r5, r0, 0x0, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x100, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x2e0d}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f12e68607000000000000009800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) socket$inet6_sctp(0xa, 0x5, 0x84) ftruncate(r6, 0x4) read(r2, &(0x7f0000001400)=""/4076, 0xfffffeea) 716.104289ms ago: executing program 4 (id=72): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@deltaction={0x24, 0x31, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[], 0xa8}}, 0x20000841) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x12024, 0x0, 0x9, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, 0xffffffffffffffff, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, r2, 0x0, 0x0, 0x5, 0x0, 0x6}]) sendmsg$inet6(r1, &(0x7f0000000380)={&(0x7f0000000200)={0xa, 0x4e20, 0x800, @remote, 0x7}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000002c0)="2b790a749c5b68fea3bdd63fe4b88c35c45bb67eefcf5c885c7bfec29b0ad892470b6d5ff2195a77501816d914a2108771885c87cac0067f6273e1c84f3b7c3a802aa63c93f99d8caaa522c4f90bf39f07b5ff7d9dd373f1537a0d1e73dc0f2b5290c005fc381027b2d856", 0x6b}], 0x1}, 0x20000000) 679.711084ms ago: executing program 3 (id=73): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0xf23a, &(0x7f0000ffe000/0x1000)=nil, 0x3) shutdown(0xffffffffffffffff, 0x1) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x4) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000700)={0x1, 0x2, 0x1000, 0x80, &(0x7f0000000040)="77986e0215fe05d99f4f8ad799a719b6eb630d2dcc159b6391c079438a730ff61d603482fa42410fcebe05b46884fe53e062b4f00e46f1ffc6b1e3db360c323f9da59fe77513c2470a86fd21039c491d27f17b9fc5c278fa0a85978265f3ef251648f7fc990c7b892234b66b82aef3c9fc275c9361443c436c6384a6b658cc53", 0x91, 0x0, &(0x7f0000000640)="a69b2084b899b46604a7adea4bbebe0cca379f15f4c5867876ba1e4bc7df8500306d3c45e9ecb01313876ad95a952593b3fce32fed124379f20bb1d69fd37408cdb7ece6d1562cf704af364125bb1bc4ea58a80ed9cff33048e4b2794b84222e553cc112b97152f73dcbda7ac083633d45612be42bfbce6e902318e6e511dc3eaef0434cda130faa8521f41342b1778126"}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14c45, &(0x7f0000000780)={[{}, {@sb={'sb', 0x3d, 0xfffffffffffffc01}}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x4000022}}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") 628.59943ms ago: executing program 0 (id=74): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0xe0dbc017d1378feb) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f00000001c0)=0x0) pipe2$9p(0x0, 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 627.59466ms ago: executing program 2 (id=75): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000680)={0x1, &(0x7f0000000000)=[{0x6, 0x14, 0x4, 0x7ffc0001}]}) r2 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x2, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x9}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000feffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a010100000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000410000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a0101000000f3ff000000010000000900030073797a310000000014000480080002401000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000040000480240001800b00010072656a656374000014000280050002000800020008000140000000854c9138cf7bdd04006f7366000c000280080001400000001408000b40000000000900010073797a30"], 0xf0}}, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x80) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11ce, &(0x7f0000002440)="$eJzs3V9Ls3UYB/BLH/doM83+WXrSjzqpk5v0oKNOJBSiQZGuqCC4xVljaxu7d7BJkNBZR72O6LCzIHoDvotOQoKoE49a6ExTDDPSPeDnc7JrfO+LXReDwT32Y4evf/1ZY7fIdvNeTE5MxFSnFOkoRYrJeBAj+/HKlxu/f7X58PR5ShtrWyuvpZTmX/jho8+/ffHH3ux7381/Px0HCx8f/rr608HiwdLhH1uf1otUL1Kr3Ut52m63e/l2s5Z26kUjS+mdZi0vaqneKmrdC/lus93pDFLe2pkrd7q1okh5a5AatUHqtVOvO0j5J3m9lbIsS3Pl4LLhcDj84l9eW/3maDgcHveU4uFJ52NRjtl4POZiPp6IhXgynoqn45l4NhbjuXg+lk6uuuUVAAAAAAAAAAAAAAAAAAAA4J5x/h8AAAAAAAAAAAAAAAAAAADG70bn/0vHHc7/AwAAAAAAAAAAAAAAAAAAwP/N//8DAAAAAAAAAAAAAAAAAADA+G1+8OFba5XK+rspzUT8st+v9qujx1G+8WZl/dV0YuG867d+v/rgLF8Z5eliPh3l03z1ynwmXn5plB9nb7xduZQvx87trw8AAAD3QpbOXHl/n2X/lI+qv30/cOn+fSqWp656xZnbWoX/oBjsNfJms9YtBqW/ir2xFROnU415DIXi+uLn9yNu3jX5aAx/fTHmDybuxPmbPu5JAAAAAAAAAAAAuIm7+DnhuHcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9mBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVwUAAP//GASTNA==") lsetxattr(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='b[rgs4}%'], 0x0, 0x0, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x5, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0x4}, @enum64={0x7, 0x2, 0x0, 0x13, 0x0, 0xf, [{0x2, 0x6, 0x8}, {0x4, 0x1, 0xf5}]}, @restrict={0x4, 0x0, 0x0, 0xb, 0x3}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x5}, @float={0x2, 0x0, 0x0, 0x10, 0x1c}, @ptr={0xf, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x5f, 0x5f, 0x30]}}, &(0x7f00000003c0)=""/205, 0x85, 0xcd, 0x1, 0x5, 0x10000, @value=r5}, 0x28) 387.742291ms ago: executing program 3 (id=76): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r1, @ANYBLOB="000000000031010024001280110001006272696467655f736c617665000000000c000580050019000300"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe3, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=""/207, 0xcf, 0x0, &(0x7f0000000180)=""/248, 0xf8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r6], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 381.454362ms ago: executing program 0 (id=77): socket$inet(0x2b, 0x801, 0x2) (async) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x10000, 0x40000, 0x5, 0x3, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_retopts={{0x10, 0x0, 0x34}}], 0x30}}], 0x1, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f00000001c0)=0x5) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 376.472072ms ago: executing program 2 (id=78): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) sendfile(0xffffffffffffffff, r0, 0x0, 0x1c4) 360.659704ms ago: executing program 1 (id=79): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f00000001c0)=0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x0, 0x0) 359.201985ms ago: executing program 2 (id=80): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}], 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000200)={0xa, 0x4e20, 0x800, @remote, 0x7}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000002c0)="2b790a749c5b68fea3bdd63fe4b88c35c45bb67eefcf5c885c7bfec29b0ad892470b6d5ff2195a77501816d914a2108771885c87cac0067f6273e1c84f3b7c3a802aa63c93f99d8caaa522c4f90bf39f07b5ff7d9dd373f1537a0d1e73dc0f2b5290c005fc381027b2d856", 0x6b}], 0x1}, 0x20000000) 332.389668ms ago: executing program 4 (id=81): r0 = signalfd(0xffffffffffffffff, &(0x7f00000006c0)={[0xffffffffffffff37]}, 0x8) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) readv(r1, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000002c00)=""/4096, 0xb4d}, {0x0}], 0x3) syz_emit_ethernet(0xb77, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) io_setup(0x6, &(0x7f0000000680)=0x0) (async, rerun: 64) r4 = geteuid() (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@nodevmap}], [{@measure}, {@fowner_lt={'fowner<', 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, '-@,\xa3:}'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fowner_lt={'fowner<', r4}}, {@subj_user={'subj_user', 0x3d, 'acl'}}]}}) (async) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x3000, 0x3, 0x1, 0x80, r2, 0x0}]) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f0000000100)={0x80, 0x0, 0x3, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x3ff}, &(0x7f0000000000)={0xffff, 0x3, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0xfffffffffffffffe, 0x10000001f}, 0x0, 0x0, 0x0) (rerun: 64) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8000000005c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46c, &(0x7f0000000bc0)="$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") 219.830913ms ago: executing program 1 (id=82): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380006fe207576f600008e265a4608c07cb113f2b9b8612d17c96ca2bbb18f0fb2a0", @ANYRES16=r1, @ANYBLOB="020029bd7000fddbdf250200000014000500fc02000000000000000000000000000008000c0002000000080008000a010102"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20005801) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = timerfd_create(0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x78, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040000}, 0x40010) timerfd_settime(r4, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r4, &(0x7f0000000240)=""/123, 0x7b) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330, r2}, &(0x7f0000000080)={0x6, 0xffffffff, 0x2, 0x83, 0x8, 0x4000002}) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x1d, 0x2, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={0x0, 0x1}, 0x0, &(0x7f0000000200)="d2", 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4080) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB='check=strict,check=relaxed,nodots,allow_utime=00000000000000000002001,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c0010692736a7d71587b2aa925131af68a953e9654b2ecf5d56b906c6634904a2c797c0967170ccd94d52b50ce4ac5e83d35db753773f6286b937a371f2165ef36786b422a7f1e4b5d8c5386cff041e325d7221dff09dff499683a70ac29f86793bf221f83a46533329cd0a6becb756381bae91977d5547b3"], 0x1, 0x235, &(0x7f00000008c0)="$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") socket(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x1, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 218.038843ms ago: executing program 4 (id=83): r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x1, 0x1, 0xb, 0x0, 0x100}, 0x20) r2 = syz_clone3(&(0x7f0000000280)={0x10000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x21}, &(0x7f0000000180)=""/113, 0x71, &(0x7f00000000c0), &(0x7f0000000200)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x9, {r0}}, 0x58) fcntl$lock(r0, 0x24, &(0x7f0000000300)={0x2, 0x4, 0xc, 0x24bc, r2}) lsetxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974792e00cc2e1cf396229a15963ab4077541e4ad64713c426f56a537aa504a8d5bbe28a39d3735b7603765b3cb959eb05eeb80584a6a1d9bc1ee1d48e1260db529329e4f174472355e106a46e1ab00f4eafa488e82d7179aa475b242bbb3a8b55681120da76997888bdca0fb89bdb96f318e93bd9347f2b2db0da06e9a2e00b9b54ff6bac13eaf873ed17654d0a9c022"], 0x0, 0x0, 0x3) 217.831663ms ago: executing program 4 (id=84): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32003600a9a6000000110001", @ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 213.410743ms ago: executing program 0 (id=85): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0x3, 0x0, 0x0) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = epoll_create(0x4) (async) r3 = socket(0x28, 0x801, 0x0) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x40, 0x52, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async, rerun: 32) connect$vsock_stream(r3, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 32) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5000, 0x4, &(0x7f0000ffa000/0x5000)=nil) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') read(r7, &(0x7f00000005c0)=""/4096, 0x1000) (async) ioctl$IMSETDEVNAME(r3, 0x80184947, &(0x7f0000000000)={0x80000000, 'syz1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x1c161, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x328}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000040) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r9, 0x0}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1c080, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000280)={0x30000010}) 183.380787ms ago: executing program 4 (id=86): syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x8}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0x100, 0x4000, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xb, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400cc}, 0x4000080) prctl$PR_SCHED_CORE(0x41, 0x4, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'erspan0\x00', r2, 0x0, 0x700, 0xe6, 0x0, {{0x16, 0x4, 0x1, 0x24, 0x58, 0x64, 0x0, 0xe, 0x4, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x5, [{@rand_addr=0x64010100, 0x8}, {@private=0xa010102, 0x2}, {@multicast2, 0x39}, {@broadcast, 0x40}, {@local, 0x1}, {@empty, 0x5}, {@empty, 0x7c}, {@broadcast, 0x6}]}]}}}}}) r3 = getpgid(0x0) r4 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x6902b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x117b80, 0x4, @perf_config_ext={0x200, 0x4}, 0x0, 0x35, 0x43a1bd76, 0x5, 0x40, 0x7f, 0x8, 0x0, 0xfffffffd, 0x0, 0x8}, r3, 0x10, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r6 = fsmount(r5, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000680)={r4}) fchdir(r6) r7 = open(0x0, 0x68800, 0x101) rename(&(0x7f00000003c0)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x40000004, 0xd2, 0x9, 0xc, 0x202, 0x1ff, 0x0, 0x0, 0x0, 0x400000000100007}, 0x0, 0x1, r4, 0x9) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) sendfile(r9, r8, 0x0, 0x7ffff000) getdents(r7, &(0x7f0000000540)=""/184, 0xb8) 127.297444ms ago: executing program 0 (id=87): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0xe0dbc017d1378feb) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f00000001c0)=0x0) pipe2$9p(0x0, 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 0s ago: executing program 0 (id=88): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x90020, &(0x7f00000002c0)={[{@inlinecrypt}, {@nouser_xattr}, {@test_dummy_encryption_v1}]}, 0x1, 0x5b3, &(0x7f0000000c40)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='size=']) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000340)=ANY=[@ANYBLOB="9fe901004100000000000000100000001000000002000000000000000000000100000000000000000000d5e7481861109f54bbc5b6e23488779ac89ca27bf9a08a99f467701fd6392fce5cbde9ee9088e322728823d4b22506c30047bb3fe6643be61cf5c4bd8de9d8bfef46500832701dfa21fef6ed038349535b1a60b03f813f4bf5b8"], 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x20000000000000d2, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='\x00', 0x0, r0) ioprio_set$pid(0x3, 0xffffffffffffffff, 0x2004) socket$vsock_stream(0x28, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = inotify_init1(0x0) pidfd_send_signal(0xffffffffffffffff, 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x3f79, &(0x7f0000000500)={0x0, 0x4958, 0x10000, 0x6, 0x25a}, &(0x7f0000000580), &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x41, 0x0, r0, &(0x7f0000000300)={0x10000, 0x4}, &(0x7f00000006c0)='./bus/file0\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r5, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x729000, 0xb6) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0xda90) r8 = accept4(r7, 0x0, 0x0, 0x0) sendto$inet_nvme_of_msg(r8, &(0x7f00000001c0)={@data_h2c={{0x6, 0x2, 0x18, 0x3}, 0x1, 0x8, 0x7ff, 0x7, "103fcafa"}, @val=0x0}, 0x88, 0x0, 0x0, 0x0) dup(r4) socket$tipc(0x1e, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. [ 33.639929][ T29] audit: type=1400 audit(1768780872.332:62): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.663023][ T29] audit: type=1400 audit(1768780872.362:63): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.665074][ T3307] cgroup: Unknown subsys name 'net' [ 33.691189][ T29] audit: type=1400 audit(1768780872.382:64): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.836875][ T3307] cgroup: Unknown subsys name 'cpuset' [ 33.843056][ T3307] cgroup: Unknown subsys name 'rlimit' [ 33.953953][ T29] audit: type=1400 audit(1768780872.642:65): avc: denied { setattr } for pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.981866][ T29] audit: type=1400 audit(1768780872.642:66): avc: denied { create } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.002369][ T29] audit: type=1400 audit(1768780872.642:67): avc: denied { write } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.022811][ T29] audit: type=1400 audit(1768780872.642:68): avc: denied { read } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.043133][ T29] audit: type=1400 audit(1768780872.642:69): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.067944][ T29] audit: type=1400 audit(1768780872.642:70): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.082827][ T3310] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.091224][ T29] audit: type=1400 audit(1768780872.672:71): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.229733][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.249630][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 36.274369][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 36.305166][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 36.330638][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 36.370448][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 36.383384][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.390632][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.397891][ T3319] bridge_slave_0: entered allmulticast mode [ 36.404445][ T3319] bridge_slave_0: entered promiscuous mode [ 36.415437][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.422549][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.430033][ T3319] bridge_slave_1: entered allmulticast mode [ 36.436607][ T3319] bridge_slave_1: entered promiscuous mode [ 36.493116][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.509014][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.516101][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.523285][ T3320] bridge_slave_0: entered allmulticast mode [ 36.529696][ T3320] bridge_slave_0: entered promiscuous mode [ 36.543745][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.555116][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.562261][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.569793][ T3320] bridge_slave_1: entered allmulticast mode [ 36.576119][ T3320] bridge_slave_1: entered promiscuous mode [ 36.582316][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.589409][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.596614][ T3322] bridge_slave_0: entered allmulticast mode [ 36.603050][ T3322] bridge_slave_0: entered promiscuous mode [ 36.624686][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.631830][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.638983][ T3322] bridge_slave_1: entered allmulticast mode [ 36.645375][ T3322] bridge_slave_1: entered promiscuous mode [ 36.673687][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.680837][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.688114][ T3327] bridge_slave_0: entered allmulticast mode [ 36.694574][ T3327] bridge_slave_0: entered promiscuous mode [ 36.701945][ T3319] team0: Port device team_slave_0 added [ 36.713539][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.726860][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.733932][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.741064][ T3327] bridge_slave_1: entered allmulticast mode [ 36.747626][ T3327] bridge_slave_1: entered promiscuous mode [ 36.753964][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.761056][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.768205][ T3324] bridge_slave_0: entered allmulticast mode [ 36.774762][ T3324] bridge_slave_0: entered promiscuous mode [ 36.781844][ T3319] team0: Port device team_slave_1 added [ 36.788334][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.798737][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.812325][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.819476][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.826555][ T3324] bridge_slave_1: entered allmulticast mode [ 36.832857][ T3324] bridge_slave_1: entered promiscuous mode [ 36.848531][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.884265][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.894059][ T3322] team0: Port device team_slave_0 added [ 36.904417][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.911473][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.937451][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.948910][ T3320] team0: Port device team_slave_0 added [ 36.955632][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.965486][ T3322] team0: Port device team_slave_1 added [ 36.972438][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.981904][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.988898][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.014887][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.026704][ T3320] team0: Port device team_slave_1 added [ 37.042042][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.074620][ T3324] team0: Port device team_slave_0 added [ 37.081795][ T3324] team0: Port device team_slave_1 added [ 37.097166][ T3327] team0: Port device team_slave_0 added [ 37.103020][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.110023][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.135938][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.152025][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.159011][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.185043][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.196353][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.203326][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.229306][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.240680][ T3327] team0: Port device team_slave_1 added [ 37.246470][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.253492][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.279494][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.294631][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.301611][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.327561][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.344758][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.351826][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.377785][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.407315][ T3319] hsr_slave_0: entered promiscuous mode [ 37.413356][ T3319] hsr_slave_1: entered promiscuous mode [ 37.431623][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.438610][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.464595][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.476516][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.483569][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.509518][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.543682][ T3320] hsr_slave_0: entered promiscuous mode [ 37.549737][ T3320] hsr_slave_1: entered promiscuous mode [ 37.555549][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 37.561317][ T3320] Cannot create hsr debugfs directory [ 37.584916][ T3324] hsr_slave_0: entered promiscuous mode [ 37.590847][ T3324] hsr_slave_1: entered promiscuous mode [ 37.596831][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 37.602549][ T3324] Cannot create hsr debugfs directory [ 37.610860][ T3322] hsr_slave_0: entered promiscuous mode [ 37.617009][ T3322] hsr_slave_1: entered promiscuous mode [ 37.622816][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 37.628600][ T3322] Cannot create hsr debugfs directory [ 37.675614][ T3327] hsr_slave_0: entered promiscuous mode [ 37.681851][ T3327] hsr_slave_1: entered promiscuous mode [ 37.688152][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 37.693901][ T3327] Cannot create hsr debugfs directory [ 37.863647][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.872431][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.883131][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.891696][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.913130][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.922141][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.931288][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.942503][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.974778][ T3322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.988121][ T3322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.996961][ T3322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.007903][ T3322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.034930][ T3324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.054355][ T3324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.065752][ T3324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.078613][ T3324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.099747][ T3327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.108520][ T3327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.118669][ T3327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.136910][ T3327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.151702][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.172812][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.189380][ T2781] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.196435][ T2781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.222535][ T2781] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.229675][ T2781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.240017][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.274613][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.283978][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.292035][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.310167][ T2781] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.317218][ T2781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.330615][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.347905][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.356427][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.363542][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.372192][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.379423][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.388274][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.395319][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.429615][ T2781] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.436777][ T2781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.453562][ T2781] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.460713][ T2781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.478302][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.515873][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.530713][ T2781] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.537822][ T2781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.548293][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.563538][ T2781] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.570760][ T2781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.620286][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.690640][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.715976][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.731303][ T3319] veth0_vlan: entered promiscuous mode [ 38.759707][ T3319] veth1_vlan: entered promiscuous mode [ 38.799492][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.814019][ T3319] veth0_macvtap: entered promiscuous mode [ 38.830074][ T3319] veth1_macvtap: entered promiscuous mode [ 38.845146][ T3320] veth0_vlan: entered promiscuous mode [ 38.859955][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.870208][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.887918][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.900919][ T3320] veth1_vlan: entered promiscuous mode [ 38.910756][ T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.939339][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 38.939350][ T29] audit: type=1400 audit(1768780877.632:85): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.x6hjSX/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.960188][ T3324] veth0_vlan: entered promiscuous mode [ 38.972003][ T29] audit: type=1400 audit(1768780877.632:86): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.983358][ T3324] veth1_vlan: entered promiscuous mode [ 38.997400][ T29] audit: type=1400 audit(1768780877.632:87): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.x6hjSX/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.018553][ T3324] veth0_macvtap: entered promiscuous mode [ 39.027938][ T29] audit: type=1400 audit(1768780877.632:88): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.049289][ T3320] veth0_macvtap: entered promiscuous mode [ 39.055217][ T29] audit: type=1400 audit(1768780877.632:89): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.x6hjSX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.086255][ T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.087732][ T29] audit: type=1400 audit(1768780877.632:90): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.x6hjSX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.105549][ T3324] veth1_macvtap: entered promiscuous mode [ 39.123699][ T29] audit: type=1400 audit(1768780877.632:91): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.135194][ T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.152662][ T29] audit: type=1400 audit(1768780877.672:92): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.161557][ T3322] veth0_vlan: entered promiscuous mode [ 39.180101][ T29] audit: type=1400 audit(1768780877.672:93): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="gadgetfs" ino=3528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.217271][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.224856][ T3320] veth1_macvtap: entered promiscuous mode [ 39.239523][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.242991][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.270029][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.281416][ T29] audit: type=1400 audit(1768780877.972:94): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.295811][ T2781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.319280][ T3322] veth1_vlan: entered promiscuous mode [ 39.329335][ T2781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.340196][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.354291][ T2781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.380069][ T3322] veth0_macvtap: entered promiscuous mode [ 39.401526][ T402] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.411907][ T3322] veth1_macvtap: entered promiscuous mode [ 39.443193][ T402] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.453436][ T402] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.480966][ T402] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.494350][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.514293][ T402] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.530982][ T3327] veth0_vlan: entered promiscuous mode [ 39.555767][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.587286][ T3327] veth1_vlan: entered promiscuous mode [ 39.597690][ T2781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.646952][ T2781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.660066][ T3327] veth0_macvtap: entered promiscuous mode [ 39.678738][ T2781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.699062][ T2781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.708873][ T3327] veth1_macvtap: entered promiscuous mode [ 39.733192][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.733925][ T3503] loop2: detected capacity change from 0 to 128 [ 39.752660][ T3505] loop1: detected capacity change from 0 to 128 [ 39.763890][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.780098][ T3503] ======================================================= [ 39.780098][ T3503] WARNING: The mand mount option has been deprecated and [ 39.780098][ T3503] and is ignored by this kernel. Remove the mand [ 39.780098][ T3503] option from the mount to silence this warning. [ 39.780098][ T3503] ======================================================= [ 39.798641][ T383] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.866626][ T383] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.885600][ T383] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.889539][ C0] hrtimer: interrupt took 64515 ns [ 39.921053][ T383] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.974854][ T3500] 9p: Unknown uid 00000000004294967295 [ 40.003215][ T3511] loop4: detected capacity change from 0 to 8192 [ 40.025226][ T3506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.035479][ T3506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.073225][ T3506] loop0: detected capacity change from 0 to 256 [ 40.228810][ T3516] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET) [ 40.247977][ T3327] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 40.255846][ T3327] FAT-fs (loop4): Filesystem has been set read-only [ 40.355404][ T3514] loop1: detected capacity change from 0 to 128 [ 40.458667][ T3528] loop4: detected capacity change from 0 to 512 [ 40.465349][ T3528] EXT4-fs: Ignoring removed bh option [ 40.470809][ T3528] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.488616][ T3530] loop1: detected capacity change from 0 to 128 [ 40.508673][ T3528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.510254][ T3530] syz.1.11: attempt to access beyond end of device [ 40.510254][ T3530] loop1: rw=2049, sector=138, nr_sectors = 68 limit=128 [ 40.538620][ T3528] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.582215][ T3519] syz.3.6 (3519) used greatest stack depth: 9632 bytes left [ 40.607292][ T3530] syz.1.11: attempt to access beyond end of device [ 40.607292][ T3530] loop1: rw=2049, sector=218, nr_sectors = 32 limit=128 [ 40.617855][ T3536] syzkaller0: entered allmulticast mode [ 40.644397][ T3536] syzkaller0: entered promiscuous mode [ 40.655836][ T3536] syzkaller0 (unregistering): left allmulticast mode [ 40.662663][ T3536] syzkaller0 (unregistering): left promiscuous mode [ 40.776902][ T3547] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.789254][ T3547] SET target dimension over the limit! [ 40.795068][ T3547] Zero length message leads to an empty skb [ 40.801637][ T3547] loop6: detected capacity change from 0 to 7 [ 40.808121][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 40.817750][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 40.825696][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 40.835340][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 40.843243][ T3547] loop6: unable to read partition table [ 40.849516][ T3547] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 40.864025][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 40.873658][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 40.882009][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 40.891640][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 40.900341][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 40.909931][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 40.918731][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 40.928336][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 40.936432][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 40.946039][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 41.022166][ T3552] netlink: 'syz.0.16': attribute type 1 has an invalid length. [ 41.214073][ T3570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22'. [ 41.222959][ T3570] netlink: 'syz.1.22': attribute type 11 has an invalid length. [ 41.232919][ T3572] FAULT_INJECTION: forcing a failure. [ 41.232919][ T3572] name failslab, interval 1, probability 0, space 0, times 1 [ 41.245680][ T3572] CPU: 1 UID: 0 PID: 3572 Comm: syz.3.23 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.245725][ T3572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.245737][ T3572] Call Trace: [ 41.245746][ T3572] [ 41.245754][ T3572] __dump_stack+0x1d/0x30 [ 41.245895][ T3572] dump_stack_lvl+0x95/0xd0 [ 41.245922][ T3572] dump_stack+0x15/0x1b [ 41.245947][ T3572] should_fail_ex+0x263/0x280 [ 41.245996][ T3572] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 41.246031][ T3572] should_failslab+0x8c/0xb0 [ 41.246057][ T3572] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 41.246125][ T3572] ? shmem_alloc_inode+0x34/0x50 [ 41.246149][ T3572] ? kstrtouint_from_user+0xa8/0xf0 [ 41.246175][ T3572] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 41.246239][ T3572] shmem_alloc_inode+0x34/0x50 [ 41.246276][ T3572] alloc_inode+0x40/0x170 [ 41.246306][ T3572] new_inode+0x1d/0xe0 [ 41.246330][ T3572] shmem_get_inode+0x246/0x750 [ 41.246364][ T3572] __shmem_file_setup+0x112/0x210 [ 41.246391][ T3572] shmem_file_setup+0x3b/0x50 [ 41.246459][ T3572] __se_sys_memfd_create+0x2f6/0x6c0 [ 41.246489][ T3572] __x64_sys_memfd_create+0x31/0x40 [ 41.246560][ T3572] x64_sys_call+0x28cb/0x3000 [ 41.246585][ T3572] do_syscall_64+0xc0/0x2a0 [ 41.246604][ T3572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.246651][ T3572] RIP: 0033:0x7f8e5d9cacb9 [ 41.246670][ T3572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.246686][ T3572] RSP: 002b:00007f8e5c426e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 41.246739][ T3572] RAX: ffffffffffffffda RBX: 000000000000043b RCX: 00007f8e5d9cacb9 [ 41.246754][ T3572] RDX: 00007f8e5c426ee0 RSI: 0000000000000000 RDI: 00007f8e5da3730b [ 41.246769][ T3572] RBP: 0000200000000200 R08: 00000000ffffffff R09: 0000000000000000 [ 41.246783][ T3572] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000001c0 [ 41.246795][ T3572] R13: 00007f8e5c426ee0 R14: 00007f8e5c426ea0 R15: 0000200000000140 [ 41.246812][ T3572] [ 41.464789][ T3566] loop0: detected capacity change from 0 to 512 [ 41.473878][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.484598][ T3566] EXT4-fs: Ignoring removed oldalloc option [ 41.493609][ T3566] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.506826][ T3566] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.516711][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.518075][ T3570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22'. [ 41.526509][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.534367][ T3570] netlink: 'syz.1.22': attribute type 11 has an invalid length. [ 41.543887][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.562882][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.574134][ T3566] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 41.610093][ T3566] EXT4-fs (loop0): 1 truncate cleaned up [ 41.650777][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.658328][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.659404][ T3566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.678393][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.685793][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.748099][ T3592] netlink: 'syz.2.27': attribute type 29 has an invalid length. [ 41.774042][ T3596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28'. [ 41.867735][ T3603] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 41.878334][ T3603] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.022700][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.047713][ T3606] SET target dimension over the limit! [ 42.053854][ T3606] loop6: detected capacity change from 0 to 7 [ 42.061328][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 42.070916][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 42.079078][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 42.088690][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 42.096626][ T3606] loop6: unable to read partition table [ 42.104319][ T3606] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 42.118297][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 42.127908][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 42.456093][ T3603] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.466555][ T3603] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.505295][ T3625] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.530018][ T3627] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 42.539838][ T3313] udevd[3313]: incorrect jbd checksum on /dev/loop2 [ 42.543555][ T3627] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 42.554804][ T3625] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.631530][ T3629] FAULT_INJECTION: forcing a failure. [ 42.631530][ T3629] name failslab, interval 1, probability 0, space 0, times 0 [ 42.644341][ T3629] CPU: 1 UID: 0 PID: 3629 Comm: syz.3.39 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.644367][ T3629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.644387][ T3629] Call Trace: [ 42.644469][ T3629] [ 42.644477][ T3629] __dump_stack+0x1d/0x30 [ 42.644504][ T3629] dump_stack_lvl+0x95/0xd0 [ 42.644527][ T3629] dump_stack+0x15/0x1b [ 42.644550][ T3629] should_fail_ex+0x263/0x280 [ 42.644630][ T3629] should_failslab+0x8c/0xb0 [ 42.644654][ T3629] __kmalloc_noprof+0xb8/0x580 [ 42.644679][ T3629] ? memcg_list_lru_alloc+0x308/0x4f0 [ 42.644710][ T3629] memcg_list_lru_alloc+0x308/0x4f0 [ 42.644808][ T3629] __memcg_slab_post_alloc_hook+0x1a9/0x530 [ 42.644836][ T3629] kmem_cache_alloc_lru_noprof+0x2bb/0x490 [ 42.644897][ T3629] ? shmem_alloc_inode+0x34/0x50 [ 42.644930][ T3629] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 42.644993][ T3629] shmem_alloc_inode+0x34/0x50 [ 42.645024][ T3629] alloc_inode+0x40/0x170 [ 42.645127][ T3629] new_inode+0x1d/0xe0 [ 42.645152][ T3629] shmem_get_inode+0x246/0x750 [ 42.645181][ T3629] __shmem_file_setup+0x112/0x210 [ 42.645287][ T3629] shmem_file_setup+0x3b/0x50 [ 42.645310][ T3629] __se_sys_memfd_create+0x2f6/0x6c0 [ 42.645394][ T3629] __x64_sys_memfd_create+0x31/0x40 [ 42.645428][ T3629] x64_sys_call+0x28cb/0x3000 [ 42.645456][ T3629] do_syscall_64+0xc0/0x2a0 [ 42.645504][ T3629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.645527][ T3629] RIP: 0033:0x7f8e5d9cacb9 [ 42.645541][ T3629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.645614][ T3629] RSP: 002b:00007f8e5c426e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 42.645635][ T3629] RAX: ffffffffffffffda RBX: 000000000000043b RCX: 00007f8e5d9cacb9 [ 42.645673][ T3629] RDX: 00007f8e5c426ee0 RSI: 0000000000000000 RDI: 00007f8e5da3730b [ 42.645684][ T3629] RBP: 0000200000000200 R08: 00000000ffffffff R09: 0000000000000000 [ 42.645695][ T3629] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000001c0 [ 42.645705][ T3629] R13: 00007f8e5c426ee0 R14: 00007f8e5c426ea0 R15: 0000200000000140 [ 42.645720][ T3629] [ 42.872130][ T3603] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.882546][ T3603] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.887435][ T3627] EXT4-fs: Ignoring removed orlov option [ 42.988354][ T3627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.018803][ T3627] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.37: bit already cleared for inode 15 [ 43.040100][ T3625] smc: net device bond0 applied user defined pnetid SYZ0 [ 43.107274][ T3603] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.117819][ T3603] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.126425][ T3630] smc: net device bond0 erased user defined pnetid SYZ0 [ 43.179477][ T3327] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.249128][ T3638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.41'. [ 43.265927][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.270014][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.274408][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.323729][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.332168][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.368796][ T3642] 9p: Bad value for 'wfdno' [ 43.376820][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.385024][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.427841][ T3646] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.439736][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.447957][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.517485][ T3651] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.619732][ T3661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.51'. [ 43.622538][ T3663] netlink: 75 bytes leftover after parsing attributes in process `syz.2.47'. [ 43.650899][ T3661] netlink: 'syz.4.51': attribute type 1 has an invalid length. [ 43.658589][ T3661] netlink: 'syz.4.51': attribute type 1 has an invalid length. [ 43.693455][ T3665] netlink: 28 bytes leftover after parsing attributes in process `syz.1.52'. [ 43.710476][ T3667] netlink: 'syz.4.53': attribute type 29 has an invalid length. [ 43.940438][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.60'. [ 43.954000][ T3683] team0: Port device team_slave_1 removed [ 44.038691][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 44.038714][ T29] audit: type=1400 audit(1768780882.732:269): avc: denied { bind } for pid=3699 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 44.128206][ T29] audit: type=1400 audit(1768780882.772:270): avc: denied { create } for pid=3699 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.147722][ T29] audit: type=1400 audit(1768780882.772:271): avc: denied { connect } for pid=3699 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.167236][ T29] audit: type=1400 audit(1768780882.772:272): avc: denied { accept } for pid=3699 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.202619][ T3713] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.236514][ T3713] EXT4-fs error (device loop4): ext4_init_orphan_info:620: comm syz.4.68: orphan file block 0: bad magic [ 44.309643][ T3713] EXT4-fs (loop4): Remounting filesystem read-only [ 44.310819][ T29] audit: type=1400 audit(1768780882.992:273): avc: denied { write } for pid=3720 comm="syz.3.70" name="netstat" dev="proc" ino=4026532422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 44.326767][ T3713] EXT4-fs (loop4): mount failed [ 44.469587][ T3731] ext4: Bad value for 'sb' [ 44.502580][ T3709] xt_hashlimit: max too large, truncated to 1048576 [ 44.513298][ T29] audit: type=1326 audit(1768780883.202:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72979acb9 code=0x7ffc0000 [ 44.520997][ T3709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 44.552650][ T3709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 44.564278][ T29] audit: type=1326 audit(1768780883.202:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72979acb9 code=0x7ffc0000 [ 44.587491][ T29] audit: type=1400 audit(1768780883.242:276): avc: denied { listen } for pid=3708 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 44.607748][ T29] audit: type=1326 audit(1768780883.262:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72979acb9 code=0x7ffc0000 [ 44.631041][ T29] audit: type=1326 audit(1768780883.262:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72979acb9 code=0x7ffc0000 [ 44.777543][ T3753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3753 comm=syz.3.76 [ 44.900448][ T3766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 44.941486][ T3772] set_capacity_and_notify: 12 callbacks suppressed [ 44.941505][ T3772] loop4: detected capacity change from 0 to 128 [ 44.956860][ T3772] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.970003][ T3775] capability: warning: `syz.1.82' uses 32-bit capabilities (legacy support in use) [ 44.982042][ T3772] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.999558][ T3777] loop0: detected capacity change from 0 to 128 [ 45.135509][ T3781] loop0: detected capacity change from 0 to 512 [ 45.428740][ T3778] ================================================================== [ 45.436875][ T3778] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 45.444108][ T3778] [ 45.446459][ T3778] write to 0xffff88811a4e7214 of 4 bytes by task 3772 on cpu 1: [ 45.454105][ T3778] __xa_set_mark+0x172/0x1a0 [ 45.458763][ T3778] __folio_mark_dirty+0x383/0x490 [ 45.463828][ T3778] mark_buffer_dirty+0x11e/0x200 [ 45.468815][ T3778] block_write_end+0x12d/0x210 [ 45.473616][ T3778] generic_write_end+0x56/0x150 [ 45.478514][ T3778] fat_write_end+0x4f/0x160 [ 45.483054][ T3778] generic_perform_write+0x311/0x490 [ 45.488372][ T3778] __generic_file_write_iter+0x9e/0x120 [ 45.493961][ T3778] generic_file_write_iter+0x8d/0x310 [ 45.499362][ T3778] iter_file_splice_write+0x6bc/0xa80 [ 45.504772][ T3778] direct_splice_actor+0x156/0x2a0 [ 45.509914][ T3778] splice_direct_to_actor+0x311/0x670 [ 45.515312][ T3778] do_splice_direct+0x119/0x1a0 [ 45.520185][ T3778] do_sendfile+0x380/0x650 [ 45.524629][ T3778] __x64_sys_sendfile64+0x105/0x150 [ 45.529870][ T3778] x64_sys_call+0x2db1/0x3000 [ 45.534585][ T3778] do_syscall_64+0xc0/0x2a0 [ 45.539115][ T3778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.545045][ T3778] [ 45.547390][ T3778] read to 0xffff88811a4e7214 of 4 bytes by task 3778 on cpu 0: [ 45.554952][ T3778] xas_find_marked+0x5d7/0x620 [ 45.559805][ T3778] find_get_entry+0x5d/0x380 [ 45.564436][ T3778] filemap_get_folios_tag+0xb6/0x230 [ 45.569743][ T3778] file_write_and_wait_range+0x20c/0x2f0 [ 45.575403][ T3778] __generic_file_fsync+0x46/0x160 [ 45.580541][ T3778] fat_file_fsync+0x49/0x100 [ 45.585177][ T3778] vfs_fsync_range+0x10d/0x130 [ 45.589976][ T3778] generic_file_write_iter+0x1ba/0x310 [ 45.595473][ T3778] iter_file_splice_write+0x6bc/0xa80 [ 45.600881][ T3778] direct_splice_actor+0x156/0x2a0 [ 45.606023][ T3778] splice_direct_to_actor+0x311/0x670 [ 45.611421][ T3778] do_splice_direct+0x119/0x1a0 [ 45.616286][ T3778] do_sendfile+0x380/0x650 [ 45.620726][ T3778] __x64_sys_sendfile64+0x105/0x150 [ 45.625939][ T3778] x64_sys_call+0x2db1/0x3000 [ 45.630652][ T3778] do_syscall_64+0xc0/0x2a0 [ 45.635168][ T3778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.641088][ T3778] [ 45.643421][ T3778] value changed: 0x04000021 -> 0x0e000021 [ 45.649139][ T3778] [ 45.651511][ T3778] Reported by Kernel Concurrency Sanitizer on: [ 45.657716][ T3778] CPU: 0 UID: 0 PID: 3778 Comm: syz.4.86 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.667363][ T3778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.677431][ T3778] ================================================================== [ 45.817546][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)