last executing test programs: 5m36.316102077s ago: executing program 32 (id=298): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x54, 0x8, 0x0, {0x9, 0x1}, {0x49, 0x2}, @cond=[{0x100, 0x20c8, 0x20, 0x4, 0xaf}, {0x7ffe, 0x11, 0x1, 0x10, 0x5, 0xfaa}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) timerfd_create(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8604, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x736f, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/tcp\x00') cachestat(r1, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000000803000000000000000000020000090900010073797a3100000000050003003a00000006000240891700000900010073797a310000000014000480080003400000000208000440000000030900010073797a310000000024000480080005400000975a0800014000000005080002400000000308000340000000083e642c9e359d9452877b"], 0x80}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) 5m31.101812221s ago: executing program 5 (id=364): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) setresuid(0x0, 0xffffffffffffffff, 0xee00) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed008e, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@min_batch_time={'min_batch_time', 0x3d, 0xd23b}}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x47d, &(0x7f0000000dc0)="$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") r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000340)=@v2={0x2000000, [{0x2, 0x9}, {0x6, 0x5}]}, 0x14, 0x2) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x0) 5m29.159600594s ago: executing program 5 (id=390): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x0, 0x579, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x900, 0x0, 0x2, 0x3}, 0x20) getdents64(r0, 0x0, 0x0) openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x52000775) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) 5m28.907781399s ago: executing program 5 (id=397): r0 = socket(0x400000000010, 0x3, 0x0) unshare(0x4020480) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$eJzs3c9LFG0AB/DHVfHFF8XTy1uXHurUZVDPHZRQkBaKcoMKghHHWnbalZ097EoHO3cJOvYfRMduQfQP+F90k0A8ecqw8dcKXdI08PO5zJf5zjM8zww8c5zNW29eNFaKZCXthMrMQKjMhFDZGQgToRIOrIebb1+9e/3g0eM7s9Xq3P0Y52cXp6ZjjOPXPj95+eH6l86/Dz+OfxoJGxNPN7emv278t3Fl8/vi83oR60VstjoxjUutViddyrO4XC8aSYz38iwtslhvFlm7r1/JW6urvZg2l8dGV9tZUcS02YuNrBc7rdhp92L6LK03Y5IkcWw0cBq19zu7u2Frt3TRs+H8ef+X27FN/Z8Qtte7tW6tPJb9/EJ1bjL+NHw0arvbrQ0e9lNlH/v74TC630+f7A8+LTfKfq+7fbd6YvxIWP7DawcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODySuKhiaOz291ubbDsk1/1ZZpfqM5N7l/Q3w+Fq0PntgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJWit9ZI8zxrC78f9h7kXzANQTi7cNE7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJy//p/YAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFkVvbVGmudZ+6zCt//LGx+rLnqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBaPwIAAP//P3honA==") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103a42, 0x32) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x2}}, 0x20) ftruncate(r1, 0x9) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x269ccdab, 0x271a, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300}}) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'batadv0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x1}}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) 5m28.414199587s ago: executing program 5 (id=405): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x3, 0x4deb, 0x10, @private2, @loopback, 0x8000, 0x700, 0x7fffffff, 0x401}}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r2, @ANYBLOB="000000008c00661800000000000000007b70f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) 5m27.985877082s ago: executing program 5 (id=409): socket(0x40000000015, 0x5, 0x0) socket(0xf, 0x6, 0x1) socket$unix(0x1, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4001080) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfb61cb0106df6c98}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x411, 0x0, 0x0, 0x33c6, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x8800) 5m27.898270898s ago: executing program 5 (id=412): r0 = syz_open_dev$mouse(&(0x7f00000005c0), 0x6, 0x801) r1 = socket(0x2, 0x80805, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000014c0)='tasks\x00', 0x2, 0x0) unshare(0x26020480) write$cgroup_pid(r3, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000400)="1b", 0x1}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001280)='W', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r4, 0x2}, 0x8) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x1) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xe0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x4000, 0xa00}]) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000600)={r4, @in6={{0xa, 0x4e21, 0x2, @local, 0x6}}}, &(0x7f00000006c0)=0x84) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Ls1cYB+CTwEsoVCIiONhBMLg0KsRBh2SwEtMsRsSKFGfBQQfBwUFSorMf/4DiF4iL2NlRjCAKcZKM4lxQXDKltD6FtnZpiyl9ua4lnHPf59w5/J7A/1o8/NRsNmMhhGbi75/+7jQ/XuyZHJ2aDiEW5kII+a++/LUSizp+u/U8WpeidTGRqe3fjL2ctt/23ldTh/GofhEP4YcQwuLjUfLfvo3P31nuKrm+sVzYXM0tPBTWnobm+/PdW/mlneGDbHmmKzsbfVgX8dbMT9VGju+apefdtoFP1Vojcx31pWMfM5//1p/z3+us1CuNib6TlcF0R/2yvB3l/ip/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgg53lrpLrG8uFzdXcwkNh7Wlovj/fvZVf2hk+yJZnurKz8be+i3hr5qdqI8d3zdLzbtvAp2qtkbmO+tKxd0e/+fFj/hIt9HX4Y/57nZV6pTHRd7IymO6oX5a3o9xf3+cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCX8uPFnsnRqekQYmEuhPDt/fe9v+w3E2/1WNR3Hv2Wov1iIlPbvxl7OW2/7b2vpg4nEyEkfnfv4uNR8otWPoR/5OcAAAD//2wlhu4=") socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r11 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x294}) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x68642, 0x0) unshare(0x26020480) pselect6(0x40, &(0x7f0000000040)={0x0, 0x10, 0x4, 0x2, 0x7fffffff, 0x10, 0x4c4, 0x8096}, &(0x7f0000000100)={0x9, 0x2, 0x400000000000006, 0x8, 0x6, 0x8, 0x4, 0x8}, 0x0, 0x0, 0x0) io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) tee(r9, r8, 0x2000200000000, 0x3) 5m24.374090613s ago: executing program 33 (id=479): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008", 0x8a) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 5m12.869454983s ago: executing program 34 (id=412): r0 = syz_open_dev$mouse(&(0x7f00000005c0), 0x6, 0x801) r1 = socket(0x2, 0x80805, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000014c0)='tasks\x00', 0x2, 0x0) unshare(0x26020480) write$cgroup_pid(r3, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000400)="1b", 0x1}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001280)='W', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r4, 0x2}, 0x8) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x1) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xe0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x4000, 0xa00}]) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000600)={r4, @in6={{0xa, 0x4e21, 0x2, @local, 0x6}}}, &(0x7f00000006c0)=0x84) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Ls1cYB+CTwEsoVCIiONhBMLg0KsRBh2SwEtMsRsSKFGfBQQfBwUFSorMf/4DiF4iL2NlRjCAKcZKM4lxQXDKltD6FtnZpiyl9ua4lnHPf59w5/J7A/1o8/NRsNmMhhGbi75/+7jQ/XuyZHJ2aDiEW5kII+a++/LUSizp+u/U8WpeidTGRqe3fjL2ctt/23ldTh/GofhEP4YcQwuLjUfLfvo3P31nuKrm+sVzYXM0tPBTWnobm+/PdW/mlneGDbHmmKzsbfVgX8dbMT9VGju+apefdtoFP1Vojcx31pWMfM5//1p/z3+us1CuNib6TlcF0R/2yvB3l/ip/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgg53lrpLrG8uFzdXcwkNh7Wlovj/fvZVf2hk+yJZnurKz8be+i3hr5qdqI8d3zdLzbtvAp2qtkbmO+tKxd0e/+fFj/hIt9HX4Y/57nZV6pTHRd7IymO6oX5a3o9xf3+cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCX8uPFnsnRqekQYmEuhPDt/fe9v+w3E2/1WNR3Hv2Wov1iIlPbvxl7OW2/7b2vpg4nEyEkfnfv4uNR8otWPoR/5OcAAAD//2wlhu4=") socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r11 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x294}) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x68642, 0x0) unshare(0x26020480) pselect6(0x40, &(0x7f0000000040)={0x0, 0x10, 0x4, 0x2, 0x7fffffff, 0x10, 0x4c4, 0x8096}, &(0x7f0000000100)={0x9, 0x2, 0x400000000000006, 0x8, 0x6, 0x8, 0x4, 0x8}, 0x0, 0x0, 0x0) io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) tee(r9, r8, 0x2000200000000, 0x3) 5m6.91080691s ago: executing program 7 (id=692): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x38d340, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket(0xa, 0x3, 0x3c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003b40)=@ipv4_getnexthop={0x20, 0x6a, 0xf5c1404b35d587dd, 0x0, 0x0, {0x2, 0x2}, [@NHA_MASTER={0x8, 0xa, 0xffffffff}]}, 0x20}}, 0x0) unshare(0x26020480) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, 0xfffffffffffffffc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x5, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1d3f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb00"/137) ptrace$getregset(0x4204, r1, 0x1, &(0x7f0000000340)={0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f00000000c0)) 5m6.781331388s ago: executing program 7 (id=695): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/30], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110007"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r5 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x8}}, 0x20) 5m6.627963117s ago: executing program 7 (id=699): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x303, 0x8, 0x5}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1}, 0x8) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = socket$inet_tcp(0x2, 0x1, 0x0) flistxattr(r3, &(0x7f0000000240)=""/7, 0x7) r4 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e23, 0x7, @empty, 0x2001}}, 0x6, 0x6}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x0, 0xca, 0xfffe1896, 0x7, 0xcb5fbd5f1adb1ccc, 0x1900, 0x1b}, 0x9c) 5m6.547485251s ago: executing program 7 (id=702): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000200)={r2, 0x1, r1, 0x0, 0x80000}) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0/file0\x00') 5m6.413606179s ago: executing program 7 (id=704): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) (fail_nth: 2) 5m5.457639745s ago: executing program 7 (id=716): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000500050007000000000008000900060000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) syz_usb_connect$uac1(0x1, 0x94, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x5, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x8}, [@extension_unit={0xb, 0x24, 0x8, 0x4, 0x0, 0x4, "f54acb6b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x39, 0x2, 0x4, {0x7, 0x25, 0x1, 0x0, 0x1, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xe8d, 0x9d2, 0x6, "ab562cf7"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x3, 0x4, 0x4e, "", "e56a5f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0xfc, 0x7d, {0x7, 0x25, 0x1, 0x0, 0x0, 0x6}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x64, 0x0, 0xd8, 0x10, 0x10}, 0x20, &(0x7f0000000500)={0x5, 0xf, 0x20, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x9, 0xff00, 0x6, [0xc00f, 0x18000, 0x0]}]}, 0x1, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x421}}]}) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd78000400d486050000000800e0000200000008000c00a50a000008000b000000080006000100070000000c00160005000000000000004f50567619f129162bfa96246666a198e0e6a50f7bd1288e4e29b4dd1f0c89a1a90504c44d8d558af106586c51e708009f8948aa5bf5383ff333290ef781"], 0x40}}, 0x20) r9 = socket$key(0xf, 0x3, 0x2) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000200)=0x3) r11 = syz_io_uring_setup(0x2750, &(0x7f0000000680)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r12, r13, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r11, 0xa3d, 0x4, 0x0, 0x0, 0x0) sendmsg$key(r9, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 5m5.457203915s ago: executing program 35 (id=716): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000500050007000000000008000900060000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) syz_usb_connect$uac1(0x1, 0x94, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x5, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x8}, [@extension_unit={0xb, 0x24, 0x8, 0x4, 0x0, 0x4, "f54acb6b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x39, 0x2, 0x4, {0x7, 0x25, 0x1, 0x0, 0x1, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xe8d, 0x9d2, 0x6, "ab562cf7"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x3, 0x4, 0x4e, "", "e56a5f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0xfc, 0x7d, {0x7, 0x25, 0x1, 0x0, 0x0, 0x6}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x64, 0x0, 0xd8, 0x10, 0x10}, 0x20, &(0x7f0000000500)={0x5, 0xf, 0x20, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x9, 0xff00, 0x6, [0xc00f, 0x18000, 0x0]}]}, 0x1, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x421}}]}) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd78000400d486050000000800e0000200000008000c00a50a000008000b000000080006000100070000000c00160005000000000000004f50567619f129162bfa96246666a198e0e6a50f7bd1288e4e29b4dd1f0c89a1a90504c44d8d558af106586c51e708009f8948aa5bf5383ff333290ef781"], 0x40}}, 0x20) r9 = socket$key(0xf, 0x3, 0x2) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000200)=0x3) r11 = syz_io_uring_setup(0x2750, &(0x7f0000000680)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r12, r13, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r11, 0xa3d, 0x4, 0x0, 0x0, 0x0) sendmsg$key(r9, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 4m26.006110183s ago: executing program 4 (id=1178): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x24004000) 4m25.994006603s ago: executing program 4 (id=1179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\f'}]}], {0x14}}, 0x84}}, 0x0) 4m25.941126966s ago: executing program 4 (id=1180): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3, 0x0, 0x3}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m25.596899996s ago: executing program 4 (id=1185): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) close(r2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000440)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00', 0x100) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc0000000000000, 0x7fb, &(0x7f0000006680)) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2e5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) syz_read_part_table(0x5cb, &(0x7f0000000000)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4m24.6750278s ago: executing program 4 (id=1196): r0 = eventfd2(0x0, 0x80000) r1 = epoll_create1(0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="759892c3eb", 0x5}], 0x1}}, {{&(0x7f0000000900)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000940)="d1a2", 0x2}], 0x1}}], 0x2, 0x4000014) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa0022, r3}) r6 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r6, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x1000, 0x1000}], 0x1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) getpid() r7 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000680)={[{@nombcache}, {@jqfmt_vfsv0}, {@nojournal_checksum}, {@errors_remount}, {@usrjquota}, {@acl}]}, 0x1, 0x4e4, &(0x7f0000001c40)="$eJzs3M9vVNUeAPDvnXbaAo/3+hBREKWAxsbElhYUFm4wMXGhiREXsGzaQioFDO1CCJGSGFyTuDcujTtN3OrSuPIPwIWJJoaEGDaAqzF35t7p/GxnoD8o8/kk055z77n3nHPvOXfOvWdmAuhZI+mfJOI/EXE7Iv5XidYnGKn8e3Dv2vTDe9emY6lUOvV3Uk53P41n8u12ZJHRQkTh86RhhxULV66en5qfn72cxccXL3wyvnDl6utzF6bOzZ6bvTh54sSxoxPH35x8o/tKtcgvrdf9fZ9d2r/33TO33p/uz5cPZf9r69FWf3fFGFlh3Svd7eqJt7MmnDQfp+sbWhg6NpQ162La/6/NHzqz2QUCNkypVCoNtl+9VGp0o2kJsGUlsdklADZH/kaf3v/mrw0aejwR7p6s3ACl9X6QvSpr+qOQpSk23N+upZGIOL30z1fpK+qeQ/xxsa824e/rVAAAoOf8dDIfCTaO/wqxpybdf7M5lOGI+H9E7IqIZyJid0Q8G1FO+1xEPN+YQRJRWiH/3Q3x5fy/z2YRCnceu5IrSMd/b2VzW/Xjv3z0F8N9WWxnRD5gnj2SHZPRKA6endsxO9Fm/wMRfSvlXzv+S19p/vlYMCvHnf6GB3QzU4tTj1zhBndvROzrb6x/0p+euHwaJ4mIvRGxr4v9DteE5177Zn81UqxPt3r9y0otpvS6no9rpfR1xKuV878Uded/Ocdk5fnJ8aGYnz0yfnZuvtwqmv3y680P2uW/av1/+LNxk3eO/3jqcatdlZ7/7TXtP/L52+X6DycRSXW+diGitGKLbnbzty/K+x053LzuUdv/QPJROTyQLft0anHx8kTEQPJe8/LJ5W3zeJ4+rf/o4db9f1e2TXokXoiItBG/GBEvRcSBrOwHI+JQRLSoWtXPb7/8cbt1I0Mdtf91k9Z/puX1r+78L8/XdxjIN06X9J0/ePthm4tHZ+f/WDk0mi1pff1L6i4RnZb08Y4eAAAAbA2FKH/2vzBWDRcKY2OVZ0C7Y3th/tLC4oGIuDhT+Y7AcBQL+ZOuyvPgYpLGJ7JnfsNxunz3PVmNV9YfzZ4bfxlRjo9NX5qf2ezKQ4/bUe7zSVP/T/3V5XNeYAtag3k0YItarf/vubVBBQE2XN7/jfeh99S8/y+1STLokzLwdHL/D72rVf+/Ht8OdLsNsLWU9GXoafo/9K7++LAaLn/tueW3bYGnkfd/6Endfq+/u0BpsPWqoWjxiwFD61OMbS3y2pRAOrJawx0WI6KzxNseJYt8CNj+Fx4K3e1wMJpX9UU5MNQ6r6SL33HIA+lRWTXxuT1r3vjz30RZ62bz3XI/LXZ4utcosOGXIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHXxbwAAAP//aizTCw==") openat(r7, 0x0, 0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x142) getdents64(r8, 0x0, 0x0) 4m24.416832725s ago: executing program 4 (id=1199): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x54, 0x8, 0x0, {0x9, 0x1}, {0x49, 0x2}, @cond=[{0x100, 0x20c8, 0x20, 0x4, 0xaf}, {0x7ffe, 0x11, 0x1, 0x10, 0x5, 0xfaa}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8604, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x736f, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/tcp\x00') 4m24.362505398s ago: executing program 36 (id=1199): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x54, 0x8, 0x0, {0x9, 0x1}, {0x49, 0x2}, @cond=[{0x100, 0x20c8, 0x20, 0x4, 0xaf}, {0x7ffe, 0x11, 0x1, 0x10, 0x5, 0xfaa}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8604, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x736f, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/tcp\x00') 2m29.64337192s ago: executing program 3 (id=2905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x80, r1, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4040) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000840)=[{{&(0x7f0000000300)={0xa, 0x4e25, 0x40000, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x24004001) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x100, 0x1) getdents64(r3, 0x0, 0x27) shutdown(r2, 0x1) 2m29.489512699s ago: executing program 3 (id=2908): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='system_u:object_r:syslogd_exec_t:s0') ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc00000002000000000004"], 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[], 0x3, 0x58f, &(0x7f0000000800)="$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") r5 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x2, 0x101080) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0x20, 0x79, 0x6, 0x2a, @dev={0xfe, 0x80, '\x00', 0x35}, @rand_addr=' \x01\x00', 0x80, 0x7800, 0x1, 0xffffffff}}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@getchain={0x64, 0x66, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffff}, {0xe, 0x8}, {0x8, 0x9}}, [{0x8, 0xb, 0xa}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0xc28b}, {0x8, 0xb, 0x1}]}, 0x64}}, 0x4) r7 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_create(r7, &(0x7f00000001c0)=@access={'system_u:object_r:syslogd_exec_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x4}, 0x5e) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4044045}, 0x4040850) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) io_cancel(0x0, 0x0, 0x0) 2m29.358910456s ago: executing program 3 (id=2910): syz_usb_connect(0x2, 0x6ee78b90ef7fb6da, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000005c0)) setresuid(0x0, 0xee00, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) r3 = socket(0x10, 0x80002, 0x0) connect$netlink(r3, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) 2m26.605381497s ago: executing program 3 (id=2963): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') setxattr(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000100)='/\x00', 0x2, 0x3) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048010}, 0x404c800) 2m26.503209343s ago: executing program 3 (id=2965): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 2m25.457990303s ago: executing program 3 (id=2981): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 2m25.431477876s ago: executing program 37 (id=2981): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 1m43.505666117s ago: executing program 0 (id=3548): syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75e, &(0x7f0000001280)="$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") (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x40000, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x9, 0x6, 0xfffffffa, 0xfffffff6, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000814}, 0x10) syz_clone3(&(0x7f0000000440)={0x8200000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x75, 0x1, 0x0, 0x0, 0x0, 0x7ff5, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x6}, 0x14d03, 0x7, 0xfffffbff, 0x7, 0x2, 0x1, 0x6, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async) open(&(0x7f0000000240)='./bus\x00', 0x145142, 0x0) 1m43.146868048s ago: executing program 0 (id=3552): ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40e8662e, &(0x7f0000000000)={0x9, 0x4000009, 0x7fffffffffffffff, 0x3, 0xffffffff, 0xa}) 1m43.057975323s ago: executing program 0 (id=3554): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x6, 0x28000000}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x80, 0x1, 0x10001, 0x2b0, 0x7}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x34}, {0x0, 0x0, 0x0, 0x800000}, {0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x6, 0x28000000}, 0x0) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x80, 0x1, 0x10001, 0x2b0, 0x7}, 0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x34}, {0x0, 0x0, 0x0, 0x800000}, {0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) (async) 1m43.053835834s ago: executing program 0 (id=3555): perf_event_open(0x0, 0x0, 0xdffffffeffffffff, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x6144, 0x2, 0x800000, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22400049, &(0x7f0000000180)={[{@dioread_nolock}, {@noinit_itable}, {@nomblk_io_submit}, {@noblock_validity}, {@data_err_abort}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x1, 0x471, &(0x7f0000000bc0)="$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") mount(0x0, 0x0, 0x0, 0x2200020, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) set_mempolicy(0x5, 0x0, 0xf) r1 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x8c397e) 1m42.492588956s ago: executing program 0 (id=3562): r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {0x3}}, 0x17) r3 = socket$unix(0x1, 0x2, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r5) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$SIOCPNENABLEPIPE(r5, 0x5411, 0x1000000000000) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setreuid(0x0, 0xee00) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x4, 0x9}) r6 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r6, 0xb) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x58, 0x3, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x6d}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) connect$unix(r3, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 1m42.265654689s ago: executing program 0 (id=3565): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8f, 0x8, 0x6}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e1f, 0x3, @private0, 0x800}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="826089c82606847c8e6af390d976da0ef4fdb8ef19bdc1237d56998e39df2d82065271f779e719c7be783b84104db2b04e9aaf6ef0e27d93cdd99acb", 0x3c}, {&(0x7f00000001c0)="ce1ef2ffae63c3beaf1ff8d8efdf96f0b11909677f7e7a49b6cc9ee08e2d3fcd82ced9d151c24c6db82378fc336cd5731cc4368328ed4f4b39cbf3e15adae062159126b672006d0bea6bf7c74097dd0bc9fdd97cccf4a79645303c503907f6b97997d52a8aae897061bca36b2847ac576574267ae6bb6ea4920387472b9af7621044f720c761b6327108bc4cfa83ac4ddcd20d9ce6bb2c40bc1e", 0x9a}, {&(0x7f00000002c0)="e27e32bb34112fe8e14c064711c67a05ab793f96d7267673c33022774b2f891e5330b2aab18ab43a66093ccc348a85f172710bb6a77591ba9a320fb8f47441e9ed943b9e488c27f236f837fae2585d654161a9134bae4baad2c53617b6331b6b9347bd7d8138739d97891e3ac540e4b7fb749363773f295efd0117ec78441773ac0643882593dba07f1a0f0dcafd9f454fa2ced22c064d563f48b10a83581c7727f57033609d896e46f5b50210c2e6bb1bdbf842ee9ba9cf8c8e6d0d6940e8f80e1e3ef53c94f0aff3b8adce35080065bd212541f5abdc53", 0xd8}], 0x3, &(0x7f0000000580)=[@dstopts_2292={{0x38, 0x29, 0x4, {0x62, 0x4, '\x00', [@ra={0x5, 0x2, 0x7}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xc}, @calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0x4, [0xe]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hopopts={{0x28, 0x29, 0x36, {0x4, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}]}}}, @hopopts={{0x38, 0x29, 0x36, {0x2, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0xd6b4ef54}}, @hopopts_2292={{0xa8, 0x29, 0x36, {0x87, 0x11, '\x00', [@pad1, @pad1, @generic={0x10, 0x33, "11d92327536aae6f13fbec1b1f31b230b88f1bb9b428dae33cb0e4fbc1dbdd709dbb61fc024383bb0c2a26643a14b116c30007"}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x8}, @generic={0x2, 0x41, "3d8d64638bd8247d25d5249efec63e59106f83bfdc2dc5daa6becd0f0b7a51c38982dcab8e8364b6a91635ed490d934b3d8d054230c78efecf58ffa3136e2a3d6e"}, @padn={0x1, 0x1, [0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x400000}}], 0x188}, 0x4000800) 1m26.140621532s ago: executing program 38 (id=3565): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8f, 0x8, 0x6}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e1f, 0x3, @private0, 0x800}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="826089c82606847c8e6af390d976da0ef4fdb8ef19bdc1237d56998e39df2d82065271f779e719c7be783b84104db2b04e9aaf6ef0e27d93cdd99acb", 0x3c}, {&(0x7f00000001c0)="ce1ef2ffae63c3beaf1ff8d8efdf96f0b11909677f7e7a49b6cc9ee08e2d3fcd82ced9d151c24c6db82378fc336cd5731cc4368328ed4f4b39cbf3e15adae062159126b672006d0bea6bf7c74097dd0bc9fdd97cccf4a79645303c503907f6b97997d52a8aae897061bca36b2847ac576574267ae6bb6ea4920387472b9af7621044f720c761b6327108bc4cfa83ac4ddcd20d9ce6bb2c40bc1e", 0x9a}, {&(0x7f00000002c0)="e27e32bb34112fe8e14c064711c67a05ab793f96d7267673c33022774b2f891e5330b2aab18ab43a66093ccc348a85f172710bb6a77591ba9a320fb8f47441e9ed943b9e488c27f236f837fae2585d654161a9134bae4baad2c53617b6331b6b9347bd7d8138739d97891e3ac540e4b7fb749363773f295efd0117ec78441773ac0643882593dba07f1a0f0dcafd9f454fa2ced22c064d563f48b10a83581c7727f57033609d896e46f5b50210c2e6bb1bdbf842ee9ba9cf8c8e6d0d6940e8f80e1e3ef53c94f0aff3b8adce35080065bd212541f5abdc53", 0xd8}], 0x3, &(0x7f0000000580)=[@dstopts_2292={{0x38, 0x29, 0x4, {0x62, 0x4, '\x00', [@ra={0x5, 0x2, 0x7}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xc}, @calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0x4, [0xe]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hopopts={{0x28, 0x29, 0x36, {0x4, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}]}}}, @hopopts={{0x38, 0x29, 0x36, {0x2, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0xd6b4ef54}}, @hopopts_2292={{0xa8, 0x29, 0x36, {0x87, 0x11, '\x00', [@pad1, @pad1, @generic={0x10, 0x33, "11d92327536aae6f13fbec1b1f31b230b88f1bb9b428dae33cb0e4fbc1dbdd709dbb61fc024383bb0c2a26643a14b116c30007"}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x8}, @generic={0x2, 0x41, "3d8d64638bd8247d25d5249efec63e59106f83bfdc2dc5daa6becd0f0b7a51c38982dcab8e8364b6a91635ed490d934b3d8d054230c78efecf58ffa3136e2a3d6e"}, @padn={0x1, 0x1, [0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x400000}}], 0x188}, 0x4000800) 3.385653732s ago: executing program 2 (id=6015): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@fwd={0x2}, @typedef={0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x770, [{0x1, 0x2}]}]}, {0x0, [0x5f, 0x4f]}}, 0x0, 0x4c, 0x0, 0xa}, 0x28) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba01001e0a04001c00128009000100766c616e000000000c000280060001002023"], 0x3c}}, 0x8000002) 3.377802423s ago: executing program 2 (id=6016): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4206}, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x4, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 3.141873356s ago: executing program 2 (id=6023): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 3.088329819s ago: executing program 2 (id=6027): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000440), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000240), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x2f08, 0xe, 0x0, &(0x7f0000000b80)="46c33c56e981df5e1559014932a2", 0x0, 0x1, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="7a0a00ff000100007110430000000000b500000200080000743aa8d7380580"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000080)=""/29, 0x1d) getdents(r4, 0xfffffffffffffffd, 0x58) 3.019627104s ago: executing program 2 (id=6030): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e0500001e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba0", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) 2.534781482s ago: executing program 1 (id=6037): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 2.534392152s ago: executing program 1 (id=6038): socket$kcm(0x10, 0x2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000140)}], 0x1) 2.361619472s ago: executing program 1 (id=6041): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000440), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000240), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="7a0a00ff000100007110430000000000b500000200080000743aa8d7380580"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000080)=""/29, 0x1d) getdents(r3, 0xfffffffffffffffd, 0x58) 2.299388436s ago: executing program 1 (id=6043): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xe, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000024080000000000f6180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) pread64(r0, &(0x7f0000003c40)=""/58, 0x3a, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) recvmmsg(r3, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40010000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0xea, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0xffffffff, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r11}, @IFLA_HSR_SLAVE2={0x8, 0x2, r12}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x24000010) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@getchain={0x5c, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x7, 0x6}, {0x10, 0x4}, {0x2, 0x9}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0xf12}, {0x8, 0xb, 0x80001000}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xae4}, {0x8, 0xb, 0x54c987ca}]}, 0x5c}}, 0x0) 1.985912464s ago: executing program 2 (id=6048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x20008040) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0xfffff000, 0x100, r1}, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x0, 0x401}], 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) fadvise64(0xffffffffffffffff, 0x36a9, 0x9, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x148) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0x2) fallocate(r2, 0x3, 0xefd, 0x10000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11ce, &(0x7f0000002440)="$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") pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.854035091s ago: executing program 9 (id=6049): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r0 = getpid() r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r0, &(0x7f0000000080), 0x1, &(0x7f0000000280)) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000001c0)=0x2, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='gid_map\x00') socket$xdp(0x2c, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0x0, 0x3}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) bind$rds(r3, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) ioperm(0x0, 0x7, 0x80006) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'team0\x00'}) get_mempolicy(&(0x7f0000000340), &(0x7f0000000380), 0x1, &(0x7f0000ffc000/0x4000)=nil, 0x4) 1.765684887s ago: executing program 6 (id=6050): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r2, r0, 0x4, r1}, 0x10) (fail_nth: 2) sendmsg$NL80211_CMD_GET_MPATH(r0, 0x0, 0x885) 1.436702866s ago: executing program 8 (id=6052): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000181) 1.383831359s ago: executing program 6 (id=6053): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000440), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000240), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="7a0a00ff000100007110430000000000b500000200080000743aa8d7380580"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000080)=""/29, 0x1d) getdents(r3, 0xfffffffffffffffd, 0x58) 1.347834371s ago: executing program 6 (id=6054): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x9, 0x105880) setns(r1, 0x40000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setuid(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) fchmod(r4, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x48f, &(0x7f00000013c0)="$eJzs28tvG8UfAPDvOnHS5y/5lfLoAwgURMQjadICPXABgdQLEhIcyjGkaVWaNqgJEq0qGhAqEhfUvwA4IvEXcIILAk4gOILEBQkhVagXCge0aO3dxrGd1Ekcm9afj+RkZnY2M9/dnex41g6gZ41kP5KIHRHx00DEUDW7vMJI9df1axen/7p2cTqJNH35j6RS789rF6eLqsV+2/PMaCmi9F4S+5q0O3/+wump2dmZc3l+fOHMG+Pz5y88cerM1MmZkzNnJ48cOXxo4umnJp9sS5w7s77ufXtu/56jr155cfrYlde++Swr35Fvr42janjDbY7ESHFM0vptD0f8mqYNxbesnTXppL+LHWFN+iIiO13lbPzHUPTF0skbihfe7WrngE2Vpmk62FDaVyQWU+A2lkS3ewB0R3Gjz97/Fq8OTj+67uqz1TdAWdzX81d1S3+U8jrluve37TQSEccW//7o2GI222q2DgEA0F5fZPOfx5vN/0pxV029/0X12dBwRPw/InZFxB0RsTsi7oyo1L07Iu5Z/udv+iRgpC7fOP/5fuu6g2tBNv97Jn+2tXz+V8z+Yrgvz+2sxF9OTpyanTmYH5PRKA9m+YlV2vjy+R8+XGnb0vyv+sraz34v1Sj93l+3QHd8amFqIzHXuvpOxN7+ZvEnN05eEhF7ImLvOv5+dsxOPfrp/pW23zz+VbThOVP6ScQj1fO/GHXxF5LVn0+Ob4nZmYPjxVXR6NvvLr+0Uvsbir8NsvO/ren1fyP+4aT2ee18NC4XL/NBQ8nln99f8T3Neq//geSVSnogL3tramHh3ETEQLLYWD65tG+RL+pn8Y8eaD7+d0X883G+376IyC7ieyPivoi4P+/7AxHxYEQcWOWIfP3cQ6+vP/7NlcV/fE3nf+2JvtNffb5S+62d/8OV1Ghe0sr/v1Y7uJFjBwAAALeKpPIZ+KQ0lq9x7ohSaWys+hn+3bGtNDs3v/DYibk3zx6vflZ+OMqlYqVrqGY9dCJfGy7yk3X5Q5V14zRN062V/Nj03OxmPVMHWrN9hfGf+S3/GLCvc8BtbE0DPNm8fgCd5wYPvcv4h97V6vgvb3I/gM5z/4fe1Wz8X4q43oWuAB3m/g+9q+n4L3W+H0Dnuf9D7zL+oSdt5Hv9qyV2Ha0rGWx593RDrW/JA1vn7r9sytFYLdHXwbbamYhS003liPiP9LBp4sdKotTtbtQmBiOi1cqX1nthrznR5X9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbfJvAAAA//9BL+kV") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4, 0x4, 0x7, 0x2}, {0x3, 0x3, 0x10, 0x5}, {0xeb6, 0xc0, 0xb, 0xffffffff}, {0x2, 0x1, 0x7, 0xdcd2}, {0x9, 0xea, 0x8, 0x2}]}, 0x10) ftruncate(r5, 0x40006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f00000000c0)={0x87, @multicast1, 0x4e21, 0x3, 'lc\x00', 0x9, 0x10001, 0x4a}, 0x2c) timer_create(0x2, 0x0, &(0x7f0000000100)) syz_read_part_table(0x105b, &(0x7f0000001940)="$eJzsz7FxwkAQhtHf0kiyanDozAU4duAOGGJaoQbKUDHEVKGcBDF30lACELwX7Epz9wUXXupnSJ/x3JTvMsbkL8lQDz/KWDbr7+5R/mdp0y+3NF3aa+1P5fI8f33Xbuvn3yTdZ22OzboylXU57KenPxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3tA9AAD//xx/Gbo=") 1.254076296s ago: executing program 9 (id=6055): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r2, r0, 0x4, r1}, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r0, 0x0, 0x885) 1.253599426s ago: executing program 6 (id=6056): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534", 0xcd}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 1.225378728s ago: executing program 9 (id=6057): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x41100, 0xc}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x14) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) pipe2$watch_queue(&(0x7f00000003c0), 0x80) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) 1.19973728s ago: executing program 6 (id=6058): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) 1.143499853s ago: executing program 9 (id=6059): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) 1.013969371s ago: executing program 9 (id=6060): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) getpid() socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='gid_map\x00') socket$xdp(0x2c, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x3}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 702.677619ms ago: executing program 8 (id=6061): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) pwrite64(r0, &(0x7f00000001c0)='u', 0x1, 0x10000) 500.121281ms ago: executing program 9 (id=6062): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x8000}, {0x1, 0x5, 0x1400}], 0x2, 0x0) semctl$GETZCNT(r0, 0x4, 0xf, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe00000a0000000008000400010000", 0x23) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)) 435.013015ms ago: executing program 6 (id=6063): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x83b, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)=ANY=[@ANYBLOB="300000002b000701feffffff0000000010"], 0x30}, 0x1, 0x0, 0x0, 0x2404c801}, 0x4014) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x40000000015, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x38, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008064) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000000)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x15, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x24}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0xb8, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0xa4, 0x1, [@m_police={0xa0, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x72, 0x6, "6f7f32fa9959239f24c01a2b8b659066822169f966e2a25b6847f68a1c798df7f70ef1e02534a3ee91c549efbfb7cb2432dc9662a1fefa35db73961768c4918f97fa262f91a85956f91c47d7c9ce7eb1f7800000001b42d2bf706d6ee4a8372028e853b9a9debc6463f7bb8d24f3"}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8800}, 0x4000040) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409776d0a89"], 0xa) 327.236471ms ago: executing program 8 (id=6064): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000440), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="7a0a00ff000100007110430000000000b500000200080000743aa8d7380580"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000080)=""/29, 0x1d) getdents(r2, 0xfffffffffffffffd, 0x58) 261.914315ms ago: executing program 1 (id=6065): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @cond=[{0x283, 0xfff, 0x9, 0x1, 0x400, 0x401}, {0x400, 0x2, 0x5, 0x6, 0x4, 0x200}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4bd, &(0x7f0000000a00)="$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") r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0xe22, 0x39b, @mcast2, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x9b7e) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) 197.644638ms ago: executing program 8 (id=6066): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200d8df78fe0000000000feffffff180100002020702500000000002020207b1af8ff0007010000f8ffffffb702000008000000b703000004010000850000009b000000850000002a0000009500"/96], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000011c0)={'veth1_macvtap\x00', 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x2, 0x2, {0x4000}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0xb}}, {0x0, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x0, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x0, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001200)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000012c0)={'ip6gre0\x00', &(0x7f0000001240)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x4, 0x10001, 0x35, @mcast2, @remote, 0x700, 0x10, 0x5, 0xe}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001340)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000013c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001480)={'syztnl2\x00', &(0x7f0000001400)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x80, 0x5, 0x0, @remote, @private1, 0x80, 0x40, 0x2, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001540)={'ip6gre0\x00', &(0x7f00000014c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x3, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x40, 0x8, 0x3}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0x58, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001700)={'gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x10, 0x8, 0x2, 0x6, {{0x2b, 0x4, 0x3, 0x7, 0xac, 0x67, 0x0, 0x0, 0x0, 0x0, @local, @broadcast, {[@end, @timestamp_prespec={0x44, 0x3c, 0x6f, 0x3, 0x6, [{@remote, 0x2d6a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@rand_addr=0x64010100, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb54}, {@remote, 0x101}, {@private=0xa010102, 0xc30}, {@multicast1, 0x4}]}, @cipso={0x86, 0x4c, 0x1, [{0x0, 0x7, "499d89ffb5"}, {0x2, 0x3, '/'}, {0x5, 0xa, "1c87f9fde0c6c108"}, {0x1, 0x6, "949c0825"}, {0x0, 0xf, "326f55f8cc360ce5ab2fca6282"}, {0x0, 0x12, "eab7486d2b947d6a770281825626ccb0"}, {0x6, 0xb, "f14f575dbd2d2e6994"}]}, @timestamp={0x44, 0xc, 0xc5, 0x0, 0xf, [0x7, 0x0]}]}}}}}) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r14, 0x107, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r14, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendto$packet(r14, &(0x7f0000000280)='D', 0x1, 0x805, &(0x7f0000000300)={0x11, 0x9, r16, 0x1, 0xf7}, 0x14) r17 = socket(0x400000000010, 0x3, 0x0) r18 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r17, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r19, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000023c0)={&(0x7f0000001800)={0xb90, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xad8b}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaede}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffe01}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xc2, 0x68, 0x4, 0x1}]}}}]}}, {{0x8, 0x1, r6}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x200, 0x1, 0xa3, 0xe9d7949}, {0x5, 0x0, 0x0, 0xba}, {0x5, 0xdc, 0x2b, 0x1}, {0xf4f5, 0x3, 0x2, 0x3}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x93ea, 0x5, 0xc}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe7f2}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}]}}, {{0x8, 0x1, r19}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x997b45e5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0xe, 0xa, 0x3}, {0x8000, 0xa, 0x2}, {0x2, 0x47, 0x5, 0x1}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xb90}, 0x1, 0x0, 0x0, 0x4008000}, 0x80a4) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000000c0)=0x7fc4, 0x4) 94.307534ms ago: executing program 8 (id=6067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000003840)={&(0x7f00000037c0)={0x20, 0xe, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 53.526387ms ago: executing program 8 (id=6068): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534", 0xcd}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 0s ago: executing program 1 (id=6069): r0 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x101800, 0x80, 0x5}, 0x18) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000080)='syz', &(0x7f00000000c0)='./file0\x00', r1) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0xee00) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) kernel console output (not intermixed with test programs): d disabled state [ 306.364331][T16647] bridge_slave_1: entered allmulticast mode [ 306.371034][T16647] bridge_slave_1: entered promiscuous mode [ 306.433744][T16647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.444339][T16733] loop9: detected capacity change from 0 to 512 [ 306.462259][T16647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.509238][T16647] team0: Port device team_slave_0 added [ 306.523047][T16647] team0: Port device team_slave_1 added [ 306.569407][T16647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.576454][T16647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.602468][T16647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.634989][T16647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.642073][T16647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.668117][T16647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.751510][T16647] hsr_slave_0: entered promiscuous mode [ 306.759735][T16647] hsr_slave_1: entered promiscuous mode [ 306.766033][T16647] debugfs: 'hsr0' already exists in 'hsr' [ 306.771867][T16647] Cannot create hsr debugfs directory [ 306.964627][T16647] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.975072][T16647] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 306.985451][T16647] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 307.013225][T16788] loop9: detected capacity change from 0 to 512 [ 307.029392][T16788] EXT4-fs: Ignoring removed oldalloc option [ 307.045355][T16647] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.055692][T16647] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 307.066117][T16647] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 307.105377][T16788] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.131961][T16788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.153669][T16647] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.164108][T16647] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 307.174535][T16647] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 307.344107][T16647] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.354753][T16647] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 307.365278][T16647] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 307.591265][T16647] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 307.645789][T16647] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 307.698916][T16647] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 307.709179][T16647] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 308.317967][T16647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.344753][T16647] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.380747][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.387850][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.399714][ T29] audit: type=1400 audit(1770162896.685:14635): avc: denied { create } for pid=16878 comm="syz.1.3898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 308.421652][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.426439][T16880] validate_nla: 2 callbacks suppressed [ 308.426476][T16880] netlink: 'syz.1.3898': attribute type 10 has an invalid length. [ 308.428871][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.492261][T16880] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.505000][T16880] bridge_slave_1: left allmulticast mode [ 308.510799][T16880] bridge_slave_1: left promiscuous mode [ 308.516519][T16880] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.592940][T16647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 308.603431][T16647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.938564][ T29] audit: type=1400 audit(1770162897.190:14636): avc: denied { create } for pid=16887 comm="syz.1.3902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 309.014528][ T29] audit: type=1400 audit(1770162897.265:14637): avc: denied { setopt } for pid=16892 comm="syz.9.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 309.120522][T16647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.359292][T16915] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.3909'. [ 309.435912][ T29] audit: type=1400 audit(1770162897.658:14638): avc: denied { write } for pid=16920 comm="syz.9.3911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 309.555127][ T29] audit: type=1400 audit(1770162897.770:14639): avc: denied { create } for pid=16929 comm="syz.6.3912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 309.629458][T16647] veth0_vlan: entered promiscuous mode [ 309.668062][T16647] veth1_vlan: entered promiscuous mode [ 309.701492][T16647] veth0_macvtap: entered promiscuous mode [ 309.727365][T16647] veth1_macvtap: entered promiscuous mode [ 309.775632][T16647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.801011][T16647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.898228][T16941] syzkaller0: entered promiscuous mode [ 309.903878][T16941] syzkaller0: entered allmulticast mode [ 309.966724][T14046] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.029498][T14057] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.042545][T16944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.049843][T16944] IPv6: NLM_F_CREATE should be set when creating new route [ 310.057143][T16944] IPv6: NLM_F_CREATE should be set when creating new route [ 310.064369][T16944] IPv6: NLM_F_CREATE should be set when creating new route [ 310.082969][T14057] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.104238][T14057] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.381311][T16954] netlink: 'syz.1.3920': attribute type 21 has an invalid length. [ 310.398447][T16958] syzkaller0: entered promiscuous mode [ 310.404009][T16958] syzkaller0: entered allmulticast mode [ 310.428195][T16954] netlink: 'syz.1.3920': attribute type 10 has an invalid length. [ 310.803111][T16987] @0Ù: renamed from bond_slave_1 (while UP) [ 310.829959][T16990] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.072751][T16995] syzkaller0: entered promiscuous mode [ 311.078322][T16995] syzkaller0: entered allmulticast mode [ 311.160630][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 311.160648][ T29] audit: type=1400 audit(1770162899.276:14642): avc: denied { attach_queue } for pid=16996 comm="syz.9.3940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 311.214035][ T29] audit: type=1400 audit(1770162899.304:14643): avc: denied { write } for pid=17003 comm="syz.6.3942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 311.394941][ T29] audit: type=1400 audit(1770162899.482:14644): avc: denied { name_bind } for pid=17012 comm="syz.9.3946" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 311.448649][ T29] audit: type=1400 audit(1770162899.519:14645): avc: denied { name_connect } for pid=17012 comm="syz.9.3946" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 311.812450][T17025] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3950'. [ 311.922440][ T29] audit: type=1400 audit(1770162899.978:14646): avc: denied { create } for pid=17026 comm="syz.1.3951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 311.942795][T17027] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3951'. [ 312.205034][T17048] net_ratelimit: 2 callbacks suppressed [ 312.205047][T17048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 312.222780][T17048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 312.249745][T17048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 312.262535][T17048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 312.272658][T17048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 312.282875][T17048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 312.295647][T17048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 312.305593][T17048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 312.315690][T17048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 312.325515][T17048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 312.405432][ T29] audit: type=1400 audit(1770162900.436:14647): avc: denied { ioctl } for pid=17060 comm="syz.1.3965" path="socket:[53972]" dev="sockfs" ino=53972 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 312.496522][T17070] lo: entered allmulticast mode [ 312.510465][T17070] lo: entered promiscuous mode [ 312.515268][T17070] lo: left allmulticast mode [ 312.616113][T17076] syzkaller0: entered promiscuous mode [ 312.621693][T17076] syzkaller0: entered allmulticast mode [ 312.676909][ T29] audit: type=1400 audit(1770162900.689:14648): avc: denied { setopt } for pid=17079 comm="syz.1.3973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.726505][ T29] audit: type=1400 audit(1770162900.717:14649): avc: denied { write } for pid=17079 comm="syz.1.3973" path="socket:[52932]" dev="sockfs" ino=52932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 312.948425][ T29] audit: type=1400 audit(1770162900.951:14650): avc: denied { read } for pid=17092 comm="syz.1.3979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 313.111229][ T29] audit: type=1400 audit(1770162901.100:14651): avc: denied { write } for pid=17106 comm="syz.9.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 313.201368][T17109] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3986'. [ 313.311873][T17119] netlink: 'syz.9.3988': attribute type 39 has an invalid length. [ 313.454364][T17130] netlink: 'syz.1.3991': attribute type 10 has an invalid length. [ 313.463533][T17130] syz_tun: entered promiscuous mode [ 313.473911][T17130] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 314.510788][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4028'. [ 314.567237][T17228] netlink: 61967 bytes leftover after parsing attributes in process `syz.8.4032'. [ 314.949400][T17253] netlink: 'syz.6.4044': attribute type 10 has an invalid length. [ 315.348979][T17291] netlink: 'syz.1.4059': attribute type 2 has an invalid length. [ 315.457341][T17295] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 315.463933][T17295] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 315.471697][T17295] vhci_hcd vhci_hcd.0: Device attached [ 315.480122][T17295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.488957][T17295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.497762][T17296] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 315.506584][ T12] vhci_hcd vhci_hcd.8: stop threads [ 315.511968][ T12] vhci_hcd vhci_hcd.8: release socket [ 315.517370][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 315.594223][T17301] syzkaller0: entered promiscuous mode [ 315.599862][T17301] syzkaller0: entered allmulticast mode [ 315.711926][T17306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4065'. [ 316.021148][T17320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.029895][T17320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.172732][T17327] syzkaller0: entered promiscuous mode [ 316.178381][T17327] syzkaller0: entered allmulticast mode [ 316.196442][T17331] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 316.304861][T17353] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.312181][T17353] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.341331][T17353] bridge0: port 3(syz_tun) entered blocking state [ 316.347955][T17353] bridge0: port 3(syz_tun) entered disabled state [ 316.355013][T17353] syz_tun: entered allmulticast mode [ 316.361294][T17353] syz_tun: entered promiscuous mode [ 316.732786][T17379] syzkaller0: entered promiscuous mode [ 316.738397][T17379] syzkaller0: entered allmulticast mode [ 317.014837][T17404] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 317.299535][T17428] netlink: 'syz.1.4109': attribute type 2 has an invalid length. [ 317.328704][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 317.328717][ T29] audit: type=1400 audit(1770162905.048:14658): avc: denied { create } for pid=17429 comm="syz.2.4110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 317.410523][T17432] syzkaller0: entered promiscuous mode [ 317.416079][T17432] syzkaller0: entered allmulticast mode [ 317.463249][T17438] loop2: detected capacity change from 0 to 2048 [ 317.483165][T17438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.496450][ T29] audit: type=1400 audit(1770162905.197:14659): avc: denied { create } for pid=17437 comm="syz.2.4114" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 317.517572][ T29] audit: type=1400 audit(1770162905.197:14660): avc: denied { read append open } for pid=17437 comm="syz.2.4114" path="/66/file1/memory.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 317.579940][ T29] audit: type=1400 audit(1770162905.272:14661): avc: denied { map } for pid=17437 comm="syz.2.4114" path="/66/file1/memory.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 317.602276][T17438] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 317.603549][ T29] audit: type=1400 audit(1770162905.272:14662): avc: denied { write } for pid=17437 comm="syz.2.4114" path="/66/file1/memory.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 317.643348][T17438] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 950 with error 28 [ 317.655821][T17438] EXT4-fs (loop2): This should not happen!! Data will be lost [ 317.655821][T17438] [ 317.665576][T17438] EXT4-fs (loop2): Total free blocks count 0 [ 317.671689][T17438] EXT4-fs (loop2): Free/Dirty block details [ 317.677595][T17438] EXT4-fs (loop2): free_blocks=2415919504 [ 317.683345][T17438] EXT4-fs (loop2): dirty_blocks=960 [ 317.688558][T17438] EXT4-fs (loop2): Block reservation details [ 317.694661][T17438] EXT4-fs (loop2): i_reserved_data_blocks=60 [ 317.705394][ T3375] net_ratelimit: 29076 callbacks suppressed [ 317.705409][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.734557][ T3424] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 317.807307][T17459] loop2: detected capacity change from 0 to 512 [ 317.822480][T17459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.835265][T17459] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.862916][ T29] audit: type=1400 audit(1770162905.534:14663): avc: denied { remove_name } for pid=17458 comm="syz.2.4122" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 317.886200][ T29] audit: type=1400 audit(1770162905.534:14664): avc: denied { unlink } for pid=17458 comm="syz.2.4122" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 317.938165][T16273] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.988957][T17470] syz_tun: entered allmulticast mode [ 317.996390][T17469] syz_tun: left allmulticast mode [ 318.002015][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.013721][T17413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.055818][T17475] loop1: detected capacity change from 0 to 512 [ 318.069226][T17475] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 318.079853][T17475] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4127: invalid indirect mapped block 2683928664 (level 1) [ 318.096027][T17475] EXT4-fs (loop1): Remounting filesystem read-only [ 318.102754][T17475] EXT4-fs (loop1): 1 truncate cleaned up [ 318.109200][T17475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.123194][ T29] audit: type=1400 audit(1770162905.787:14665): avc: denied { read } for pid=17473 comm="syz.1.4127" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 318.145725][ T29] audit: type=1400 audit(1770162905.787:14666): avc: denied { open } for pid=17473 comm="syz.1.4127" path="/230/file0/file0/file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 318.169653][ T29] audit: type=1400 audit(1770162905.787:14667): avc: denied { map } for pid=17473 comm="syz.1.4127" path="/230/file0/file0/file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 318.226055][T13339] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.236677][ T1680] bond0: (slave bond_slave_0): interface is now down [ 318.242224][T17483] netlink: 'syz.2.4131': attribute type 10 has an invalid length. [ 318.243510][ T1680] bond0: (slave bond_slave_1): interface is now down [ 318.259552][T17483] syz_tun: entered promiscuous mode [ 318.269550][T14046] bond0: (slave bond_slave_0): interface is now down [ 318.276304][T14046] bond0: (slave bond_slave_1): interface is now down [ 318.283047][T14046] bond0: (slave syz_tun): interface is now down [ 318.284519][T17483] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 318.302793][ T1680] bond0: (slave bond_slave_0): interface is now down [ 318.309509][ T1680] bond0: (slave bond_slave_1): interface is now down [ 318.316288][ T1680] bond0: (slave syz_tun): interface is now down [ 318.323090][ T1680] bond0: now running without any active interface! [ 318.435323][T17497] netlink: 'syz.2.4138': attribute type 29 has an invalid length. [ 318.444105][T17497] netlink: 'syz.2.4138': attribute type 29 has an invalid length. [ 318.457438][T17497] netlink: 'syz.2.4138': attribute type 29 has an invalid length. [ 318.523590][T17501] syzkaller0: entered promiscuous mode [ 318.529158][T17501] syzkaller0: entered allmulticast mode [ 319.184890][T17557] loop1: detected capacity change from 0 to 8192 [ 319.194616][T17557] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 319.207906][T17557] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 319.216766][T17557] FAT-fs (loop1): Filesystem has been set read-only [ 319.223486][T17557] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 319.232325][T17557] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 319.241224][T17557] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 319.250173][T17557] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 319.259312][T17557] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 319.269950][T17557] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 319.279341][T17557] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 319.288314][T17557] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 319.297589][T17557] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 319.390975][T17567] syzkaller0: entered promiscuous mode [ 319.396619][T17567] syzkaller0: entered allmulticast mode [ 319.478337][T17344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.601910][T17581] netlink: 'syz.8.4170': attribute type 2 has an invalid length. [ 319.764742][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4174'. [ 320.010376][T17595] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4175'. [ 320.019565][T17595] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4175'. [ 320.028562][T17595] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4175'. [ 320.044124][T17595] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4175'. [ 320.193631][T17597] syzkaller0: entered promiscuous mode [ 320.199177][T17597] syzkaller0: entered allmulticast mode [ 320.401685][T17613] netlink: 'syz.1.4178': attribute type 2 has an invalid length. [ 320.737467][T14046] bond0: (slave bond_slave_0): interface is now down [ 320.741558][T17651] netlink: 'syz.8.4194': attribute type 10 has an invalid length. [ 320.744619][T14046] bond0: (slave 4@0Ù): interface is now down [ 320.761747][T17651] syz_tun: left allmulticast mode [ 320.766918][T17651] bridge0: port 3(syz_tun) entered disabled state [ 320.773710][T14046] bond0: (slave bond_slave_0): interface is now down [ 320.780422][T14046] bond0: (slave 4@0Ù): interface is now down [ 320.794702][T17651] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 320.803873][T14046] bond0: (slave bond_slave_0): interface is now down [ 320.810595][T14046] bond0: (slave 4@0Ù): interface is now down [ 320.816821][T14046] bond0: (slave syz_tun): interface is now down [ 320.823871][T14046] bond0: now running without any active interface! [ 321.078579][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4211'. [ 321.356700][T17723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4229'. [ 321.526853][T17756] netlink: 'syz.2.4240': attribute type 2 has an invalid length. [ 321.569105][T17753] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.4237'. [ 321.608528][T17762] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 321.611714][T17753] netlink: 'syz.6.4237': attribute type 21 has an invalid length. [ 321.665970][T17753] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.4237'. [ 321.680859][T17753] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.4237'. [ 321.792287][T17753] syzkaller0: entered promiscuous mode [ 321.798085][T17753] syzkaller0: entered allmulticast mode [ 323.061872][T17858] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 323.329308][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 323.329326][ T29] audit: type=1400 audit(1770162910.651:14674): avc: denied { create } for pid=17878 comm="syz.2.4293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 323.416600][T17895] netlink: 'syz.6.4297': attribute type 10 has an invalid length. [ 323.427792][T17895] syz_tun: entered promiscuous mode [ 323.437389][T17895] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 323.515246][T17870] chnl_net:caif_netlink_parms(): no params data found [ 323.618066][T17870] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.625330][T17870] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.635378][T17870] bridge_slave_0: entered allmulticast mode [ 323.642535][T17870] bridge_slave_0: entered promiscuous mode [ 323.649981][T17870] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.657184][T17870] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.676770][T17870] bridge_slave_1: entered allmulticast mode [ 323.685234][T17870] bridge_slave_1: entered promiscuous mode [ 323.692012][T17927] : renamed from veth0_vlan (while UP) [ 323.721602][T17870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.733504][T17870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.755350][T17870] team0: Port device team_slave_0 added [ 323.762728][T17870] team0: Port device team_slave_1 added [ 323.797660][T17870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.804654][T17870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.830884][T17870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.843395][T17870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.850410][T17870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.876457][T17870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.915828][T17870] hsr_slave_0: entered promiscuous mode [ 323.922184][T17870] hsr_slave_1: entered promiscuous mode [ 323.928378][T17870] debugfs: 'hsr0' already exists in 'hsr' [ 323.934151][T17870] Cannot create hsr debugfs directory [ 324.005865][T17870] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 57652 - 0 [ 324.015940][T17870] netdevsim netdevsim9 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 324.068213][T17870] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 57652 - 0 [ 324.078131][T17870] netdevsim netdevsim9 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 324.129611][T17870] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 57652 - 0 [ 324.139628][T17870] netdevsim netdevsim9 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 324.164349][T17957] netlink: 'syz.8.4323': attribute type 10 has an invalid length. [ 324.201254][T17870] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 57652 - 0 [ 324.211172][T17870] netdevsim netdevsim9 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 324.283665][ T29] audit: type=1400 audit(1770162911.549:14675): avc: denied { create } for pid=17968 comm="syz.2.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 324.343850][T17870] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 324.358708][T17870] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 324.375622][T17870] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 324.390504][T17870] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 324.470120][T17870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.498583][T17870] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.520266][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.527386][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.549714][ T1680] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.556842][ T1680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.685960][T17870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.849638][T17870] veth0_vlan: entered promiscuous mode [ 324.860123][T17870] veth1_vlan: entered promiscuous mode [ 324.880393][T17870] veth0_macvtap: entered promiscuous mode [ 324.888784][T17870] veth1_macvtap: entered promiscuous mode [ 324.901470][T17870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.915663][T17870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.935521][ T52] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.945268][ T52] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.960665][ T52] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.977875][ T52] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.113282][T18023] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 325.148132][T18029] netlink: 'syz.6.4345': attribute type 10 has an invalid length. [ 325.428638][T18083] netlink: 'syz.9.4360': attribute type 10 has an invalid length. [ 325.441194][T18083] syz_tun: entered promiscuous mode [ 325.453804][T18083] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 325.760444][T18144] netlink: 'syz.8.4377': attribute type 10 has an invalid length. [ 325.916697][T18150] syzkaller0: entered promiscuous mode [ 325.922238][T18150] syzkaller0: entered allmulticast mode [ 326.093953][T18202] netlink: 'syz.8.4391': attribute type 10 has an invalid length. [ 326.382960][T18261] netlink: 'syz.2.4404': attribute type 39 has an invalid length. [ 326.910802][T18321] delete_channel: no stack [ 326.923057][T18321] delete_channel: no stack [ 327.074678][T18338] netlink: 'syz.1.4440': attribute type 10 has an invalid length. [ 327.241422][ T29] audit: type=1400 audit(1770162914.318:14676): avc: denied { setopt } for pid=18344 comm="syz.1.4443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 328.462961][T18457] : renamed from veth0_vlan (while UP) [ 328.495749][T18459] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 328.547487][T18465] pimreg: tun_chr_ioctl cmd 1074025677 [ 328.553380][T18465] pimreg: linktype set to 780 [ 328.781077][T18484] netlink: 'syz.1.4506': attribute type 10 has an invalid length. [ 329.311584][T18503] syzkaller0: entered promiscuous mode [ 329.317213][T18503] syzkaller0: entered allmulticast mode [ 329.327477][ T29] audit: type=1400 audit(1770162916.263:14677): avc: denied { setopt } for pid=18504 comm="syz.1.4515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 329.348902][T18506] netlink: 'syz.1.4515': attribute type 3 has an invalid length. [ 329.356738][T18506] __nla_validate_parse: 3 callbacks suppressed [ 329.356761][T18506] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4515'. [ 329.774032][T18546] netlink: 'syz.8.4531': attribute type 10 has an invalid length. [ 329.934431][T18567] netlink: 'syz.8.4541': attribute type 33 has an invalid length. [ 329.942290][T18567] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4541'. [ 330.246151][T18604] netlink: 'syz.9.4557': attribute type 21 has an invalid length. [ 330.449999][T18621] syzkaller0: entered promiscuous mode [ 330.455648][T18621] syzkaller0: entered allmulticast mode [ 330.466054][T18624] netlink: 'syz.6.4564': attribute type 10 has an invalid length. [ 330.586979][T18643] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 331.105767][T18688] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.4595'. [ 331.223671][T18697] validate_nla: 1 callbacks suppressed [ 331.223694][T18697] netlink: 'syz.6.4599': attribute type 10 has an invalid length. [ 331.237543][T18697] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.249489][T18697] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.256826][T18697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.267570][T18697] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 331.290142][T18707] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 331.411161][T18723] netlink: 'syz.6.4608': attribute type 3 has an invalid length. [ 331.419148][T18723] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4608'. [ 331.962296][T18771] netlink: 'syz.9.4628': attribute type 13 has an invalid length. [ 331.970217][T18771] netlink: 'syz.9.4628': attribute type 58 has an invalid length. [ 331.978139][T18771] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4628'. [ 332.006566][T18771] netlink: 'syz.9.4628': attribute type 29 has an invalid length. [ 332.314861][T18789] syzkaller0: entered promiscuous mode [ 332.320593][T18789] syzkaller0: entered allmulticast mode [ 332.333911][ T29] audit: type=1400 audit(1770162919.079:14678): avc: denied { relabelfrom } for pid=18788 comm="syz.8.4636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 332.353992][ T29] audit: type=1400 audit(1770162919.079:14679): avc: denied { relabelto } for pid=18788 comm="syz.8.4636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 332.506443][T18802] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 332.690861][T18831] netlink: 'syz.2.4656': attribute type 10 has an invalid length. [ 333.003008][T18857] netlink: 'syz.6.4668': attribute type 3 has an invalid length. [ 333.010855][T18857] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4668'. [ 333.046605][T18859] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4669'. [ 333.069250][T18861] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 333.583851][T18911] netlink: 'syz.8.4694': attribute type 3 has an invalid length. [ 333.591817][T18911] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.4694'. [ 333.635470][T18925] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 333.756961][T18933] netlink: 'syz.1.4705': attribute type 29 has an invalid length. [ 333.893296][T18948] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 333.979285][T18952] netlink: 'syz.9.4713': attribute type 3 has an invalid length. [ 333.987168][T18952] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.4713'. [ 334.212027][T18988] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4729'. [ 334.367191][T19002] caif0: entered promiscuous mode [ 334.372420][T19002] caif0: entered allmulticast mode [ 334.377699][T19002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.830092][T19031] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 335.053170][T19047] __nla_validate_parse: 2 callbacks suppressed [ 335.053203][T19047] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4757'. [ 335.241307][T19054] syzkaller0: entered promiscuous mode [ 335.246876][T19054] syzkaller0: entered allmulticast mode [ 335.748993][T19103] syzkaller: port 1(erspan0) entered blocking state [ 335.755840][T19103] syzkaller: port 1(erspan0) entered disabled state [ 335.769861][T19103] erspan0: entered allmulticast mode [ 335.776766][T19103] erspan0: entered promiscuous mode [ 335.784455][T19103] syzkaller: port 1(erspan0) entered blocking state [ 335.791129][T19103] syzkaller: port 1(erspan0) entered forwarding state [ 335.995267][T19123] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4789'. [ 336.153318][T19134] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 336.402538][T19148] syzkaller0: entered promiscuous mode [ 336.408089][T19148] syzkaller0: entered allmulticast mode [ 336.429293][T19150] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 337.428183][T19268] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4858'. [ 337.437954][T19268] validate_nla: 5 callbacks suppressed [ 337.437966][T19268] netlink: 'syz.2.4858': attribute type 10 has an invalid length. [ 337.837592][T19300] netlink: 'syz.2.4874': attribute type 3 has an invalid length. [ 337.845679][T19300] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4874'. [ 337.937227][T19314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.944767][T19314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.960536][T19318] netlink: 'syz.1.4881': attribute type 10 has an invalid length. [ 337.969169][T19314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.976907][T19314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.208291][T19332] netlink: 'syz.1.4888': attribute type 3 has an invalid length. [ 338.216198][T19332] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4888'. [ 338.456677][T19351] netlink: 'syz.9.4895': attribute type 33 has an invalid length. [ 338.464662][T19351] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4895'. [ 338.969818][T19384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4912'. [ 339.031395][T19391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.040228][T19391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.090482][T19395] netlink: 'syz.8.4917': attribute type 3 has an invalid length. [ 339.098331][T19395] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.4917'. [ 339.303207][ T29] audit: type=1400 audit(1770162925.598:14680): avc: denied { ioctl } for pid=19410 comm="syz.1.4924" path="socket:[62248]" dev="sockfs" ino=62248 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 339.514609][T14046] bond0: (slave syz_tun): link status definitely down, disabling slave [ 339.757860][ T29] audit: type=1400 audit(1770162926.029:14681): avc: denied { module_load } for pid=19426 comm="syz.6.4930" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 339.786642][T19427] Invalid ELF header len 6 [ 339.812187][T19429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.821723][T19429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.123032][ T29] audit: type=1400 audit(1770162926.365:14682): avc: denied { lock } for pid=19434 comm="syz.8.4934" path="socket:[62276]" dev="sockfs" ino=62276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 340.364152][ T29] audit: type=1400 audit(1770162926.590:14683): avc: denied { bind } for pid=19445 comm="syz.9.4939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.665602][ T29] audit: type=1400 audit(1770162926.871:14684): avc: denied { connect } for pid=19474 comm="syz.6.4953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 340.697924][ T29] audit: type=1400 audit(1770162926.871:14685): avc: denied { write } for pid=19474 comm="syz.6.4953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 340.827088][T19491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.840073][T19491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.858008][T19493] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 340.895062][T19497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.904107][T19497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.347574][T19512] netlink: 'syz.2.4970': attribute type 10 has an invalid length. [ 341.503839][T19525] netlink: 'syz.9.4976': attribute type 3 has an invalid length. [ 341.511769][T19525] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.4976'. [ 341.566446][T19536] netlink: 'syz.6.4981': attribute type 10 has an invalid length. [ 341.593159][ T29] audit: type=1400 audit(1770162927.741:14686): avc: denied { read } for pid=19538 comm="syz.6.4983" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 342.296494][ T29] audit: type=1400 audit(1770162928.395:14687): avc: denied { map } for pid=19570 comm="syz.2.4998" path="socket:[63550]" dev="sockfs" ino=63550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 342.388190][T19580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.396758][T19580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.491884][T19586] netlink: 'syz.9.5004': attribute type 3 has an invalid length. [ 342.499813][T19586] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.5004'. [ 342.839001][T19613] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 343.256605][ T29] audit: type=1400 audit(1770162929.293:14688): avc: denied { mount } for pid=19633 comm="syz.2.5025" name="/" dev="configfs" ino=1552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 343.279714][ T29] audit: type=1400 audit(1770162929.293:14689): avc: denied { search } for pid=19633 comm="syz.2.5025" name="/" dev="configfs" ino=1552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 343.372462][T19642] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 343.944291][T19657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.952942][T19657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.548169][T19677] netlink: 'syz.1.5044': attribute type 3 has an invalid length. [ 344.556052][T19677] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5044'. [ 344.637923][T19687] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5049'. [ 344.855752][T19704] netlink: 'syz.6.5057': attribute type 3 has an invalid length. [ 344.863672][T19704] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.5057'. [ 344.905730][T19708] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5059'. [ 345.031299][T19720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.049207][T19720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.059789][T19720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.074463][T19720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.076434][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 345.076463][ T29] audit: type=1400 audit(1770162930.996:14695): avc: denied { create } for pid=19723 comm="syz.2.5066" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 345.112074][ T29] audit: type=1400 audit(1770162931.005:14696): avc: denied { write } for pid=19723 comm="syz.2.5066" name="file2" dev="tmpfs" ino=1621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 345.134824][ T29] audit: type=1400 audit(1770162931.005:14697): avc: denied { open } for pid=19723 comm="syz.2.5066" path="/315/file2" dev="tmpfs" ino=1621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 345.157829][ T29] audit: type=1400 audit(1770162931.005:14698): avc: denied { ioctl } for pid=19723 comm="syz.2.5066" path="/315/file2" dev="tmpfs" ino=1621 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 345.182473][ T29] audit: type=1400 audit(1770162931.033:14699): avc: denied { unlink } for pid=16273 comm="syz-executor" name="file2" dev="tmpfs" ino=1621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 345.612630][T19741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.621244][T19741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.694354][T19749] netlink: 'syz.6.5076': attribute type 10 has an invalid length. [ 345.731582][ T29] audit: type=1400 audit(1770162931.604:14700): avc: denied { bind } for pid=19752 comm="syz.1.5079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 345.751641][ T29] audit: type=1400 audit(1770162931.604:14701): avc: denied { listen } for pid=19752 comm="syz.1.5079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 345.771598][ T29] audit: type=1400 audit(1770162931.604:14702): avc: denied { accept } for pid=19752 comm="syz.1.5079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 345.791456][ T29] audit: type=1400 audit(1770162931.604:14703): avc: denied { read } for pid=19752 comm="syz.1.5079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 346.077796][T19771] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 346.154746][T19777] netlink: 'syz.2.5089': attribute type 10 has an invalid length. [ 346.270525][T19791] netlink: 'syz.2.5096': attribute type 3 has an invalid length. [ 346.278301][T19791] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5096'. [ 346.346187][ T29] audit: type=1400 audit(1770162932.184:14704): avc: denied { write } for pid=19797 comm="syz.2.5099" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 346.346371][T19798] random: crng reseeded on system resumption [ 346.383992][T19798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.394079][T19798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.529383][T19806] random: crng reseeded on system resumption [ 347.027247][T19838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.036397][T19838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.142814][T19843] random: crng reseeded on system resumption [ 347.175102][T19847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.192532][T19847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.617402][T19883] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 347.842508][T19899] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 347.842508][T19899] The task syz.2.5143 (19899) triggered the difference, watch for misbehavior. [ 347.873466][T19899] 9p: Bad value for 'rfdno' [ 347.991600][T19911] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5150'. [ 348.001783][T19911] netlink: 'syz.8.5150': attribute type 10 has an invalid length. [ 348.358649][T19925] netlink: 'syz.9.5157': attribute type 13 has an invalid length. [ 348.442374][T19931] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 348.486012][T19935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5161'. [ 348.497820][T19935] netlink: 'syz.1.5161': attribute type 10 has an invalid length. [ 348.761444][T19966] random: crng reseeded on system resumption [ 348.771028][T19966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.786715][T19966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.945849][T19979] loop1: detected capacity change from 0 to 512 [ 349.035920][T19993] 9p: Bad value for 'rfdno' [ 349.036145][T19995] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.095519][T19999] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 349.207671][T20013] loop2: detected capacity change from 0 to 512 [ 349.471510][T20042] netlink: 'syz.2.5209': attribute type 12 has an invalid length. [ 349.662293][T20079] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5219'. [ 349.721214][T20067] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5219'. [ 349.769403][T20079] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5219'. [ 349.808034][T20088] loop1: detected capacity change from 0 to 512 [ 349.885399][T20098] loop1: detected capacity change from 0 to 512 [ 349.922525][T20098] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.5231: EA inode hash validation failed [ 349.935982][T20098] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.5231: corrupted inode contents [ 349.948763][T20098] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.5231: mark_inode_dirty error [ 349.961818][T20098] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.5231: corrupted inode contents [ 349.974178][T20098] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.5231: mark_inode_dirty error [ 349.989124][T20098] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.5231: mark inode dirty (error -117) [ 350.009635][T20098] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 350.018829][T20098] EXT4-fs (loop1): 1 orphan inode deleted [ 350.025118][T20098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.038503][T20098] 9p: Bad value for 'rfdno' [ 350.058115][T13339] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.226943][T20125] loop2: detected capacity change from 0 to 512 [ 350.391359][T20121] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5241'. [ 350.429632][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 350.429650][ T29] audit: type=1326 audit(1770162936.009:14749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20123 comm="syz.1.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 350.445098][T20121] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5241'. [ 350.488077][ T29] audit: type=1326 audit(1770162936.009:14750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20123 comm="syz.1.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 350.511796][ T29] audit: type=1326 audit(1770162936.009:14751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20123 comm="syz.1.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f662b2cb78e code=0x7ffc0000 [ 350.517836][T20140] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5241'. [ 350.535491][ T29] audit: type=1326 audit(1770162936.047:14752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20123 comm="syz.1.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f662b2cb78e code=0x7ffc0000 [ 350.568148][ T29] audit: type=1326 audit(1770162936.047:14753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20123 comm="syz.1.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 350.591806][ T29] audit: type=1326 audit(1770162936.056:14754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20123 comm="syz.1.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 350.615458][ T29] audit: type=1326 audit(1770162936.056:14755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20123 comm="syz.1.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 350.639355][ T29] audit: type=1326 audit(1770162936.056:14756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20123 comm="syz.1.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 350.662896][ T29] audit: type=1326 audit(1770162936.056:14757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20123 comm="syz.1.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 350.686755][ T29] audit: type=1326 audit(1770162936.056:14758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20123 comm="syz.1.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 350.767321][T20154] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 350.799704][T20158] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5253'. [ 350.889804][T20163] loop1: detected capacity change from 0 to 512 [ 351.337161][T20204] loop8: detected capacity change from 0 to 512 [ 351.567210][T20238] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5283'. [ 351.831348][T20253] loop6: detected capacity change from 0 to 8192 [ 352.279904][T20273] netlink: 'syz.9.5301': attribute type 10 has an invalid length. [ 352.889259][T20348] netlink: 'syz.2.5332': attribute type 2 has an invalid length. [ 352.898962][T20338] loop6: detected capacity change from 0 to 512 [ 353.011780][T20362] netlink: 'syz.8.5338': attribute type 2 has an invalid length. [ 353.085255][T20368] bridge_slave_0: left allmulticast mode [ 353.091108][T20368] bridge_slave_0: left promiscuous mode [ 353.096826][T20368] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.317087][T20394] netlink: 'syz.6.5351': attribute type 10 has an invalid length. [ 353.511620][T20413] loop9: detected capacity change from 0 to 2048 [ 353.542622][T20413] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.560208][T20426] __nla_validate_parse: 3 callbacks suppressed [ 353.560224][T20426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5363'. [ 353.599353][T20413] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 353.611163][T20433] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5366'. [ 353.639965][T20413] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 353.652349][T20413] EXT4-fs (loop9): This should not happen!! Data will be lost [ 353.652349][T20413] [ 353.662079][T20413] EXT4-fs (loop9): Total free blocks count 0 [ 353.668140][T20413] EXT4-fs (loop9): Free/Dirty block details [ 353.674109][T20413] EXT4-fs (loop9): free_blocks=2415919504 [ 353.679927][T20413] EXT4-fs (loop9): dirty_blocks=48 [ 353.685201][T20413] EXT4-fs (loop9): Block reservation details [ 353.691387][T20413] EXT4-fs (loop9): i_reserved_data_blocks=3 [ 353.857525][T18229] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 353.869953][T20440] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5369'. [ 353.886310][T20459] netlink: 'syz.1.5375': attribute type 2 has an invalid length. [ 353.917890][T20440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5369'. [ 353.929483][T20440] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5369'. [ 355.157583][T20600] netlink: 'syz.6.5433': attribute type 10 has an invalid length. [ 355.177411][T20595] loop8: detected capacity change from 0 to 2048 [ 355.210888][T20595] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.288256][T20618] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 355.299973][ T5751] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 355.319831][ T5751] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 355.332076][ T5751] EXT4-fs (loop8): This should not happen!! Data will be lost [ 355.332076][ T5751] [ 355.341912][ T5751] EXT4-fs (loop8): Total free blocks count 0 [ 355.348012][ T5751] EXT4-fs (loop8): Free/Dirty block details [ 355.353943][ T5751] EXT4-fs (loop8): free_blocks=2415919504 [ 355.359709][ T5751] EXT4-fs (loop8): dirty_blocks=48 [ 355.364921][ T5751] EXT4-fs (loop8): Block reservation details [ 355.370947][ T5751] EXT4-fs (loop8): i_reserved_data_blocks=3 [ 355.389132][ T5751] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 2 with error 28 [ 355.492094][T20632] netlink: 'syz.8.5445': attribute type 10 has an invalid length. [ 355.502814][T20619] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5439'. [ 355.534790][T20619] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5439'. [ 355.549028][T20619] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5439'. [ 355.650663][T20646] loop6: detected capacity change from 0 to 512 [ 355.683164][T20646] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.5451: EA inode hash validation failed [ 355.697164][T20646] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.5451: corrupted inode contents [ 355.728793][T20658] bridge_slave_0: left allmulticast mode [ 355.734559][T20658] bridge_slave_0: left promiscuous mode [ 355.740239][T20658] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.750537][T20646] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #15: comm syz.6.5451: mark_inode_dirty error [ 355.786460][T20646] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.5451: corrupted inode contents [ 355.805669][T20646] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3001: inode #15: comm syz.6.5451: mark_inode_dirty error [ 355.824267][T20646] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3004: inode #15: comm syz.6.5451: mark inode dirty (error -117) [ 355.856094][T20646] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 355.889747][T20646] EXT4-fs (loop6): 1 orphan inode deleted [ 355.900876][T20646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.904106][T20646] 9p: Bad value for 'rfdno' [ 355.963814][T14535] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.994282][T20680] loop2: detected capacity change from 0 to 512 [ 356.125413][T20677] loop8: detected capacity change from 0 to 8192 [ 356.176552][T20690] loop2: detected capacity change from 0 to 512 [ 356.176927][T20690] EXT4-fs: Ignoring removed oldalloc option [ 356.194250][T20690] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.5467: Parent and EA inode have the same ino 15 [ 356.196052][T20690] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.5467: Parent and EA inode have the same ino 15 [ 356.217833][T20690] EXT4-fs (loop2): 1 orphan inode deleted [ 356.251759][T20690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.403219][T16273] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.563794][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 356.563813][ T29] audit: type=1326 audit(1770162941.743:14949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20706 comm="syz.6.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9de9aeb9 code=0x7ffc0000 [ 356.604397][ T29] audit: type=1326 audit(1770162941.743:14950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20706 comm="syz.6.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9de9aeb9 code=0x7ffc0000 [ 356.628319][ T29] audit: type=1326 audit(1770162941.743:14951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20706 comm="syz.6.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7efe9de9aeb9 code=0x7ffc0000 [ 356.652336][ T29] audit: type=1326 audit(1770162941.743:14952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20706 comm="syz.6.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9de9aeb9 code=0x7ffc0000 [ 356.676026][ T29] audit: type=1326 audit(1770162941.743:14953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20706 comm="syz.6.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7efe9de9aeb9 code=0x7ffc0000 [ 356.699892][ T29] audit: type=1326 audit(1770162941.743:14954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20706 comm="syz.6.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9de9aeb9 code=0x7ffc0000 [ 356.729304][T20713] loop6: detected capacity change from 0 to 512 [ 356.764172][T20713] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.5474: EA inode hash validation failed [ 356.820134][T20713] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.5474: corrupted inode contents [ 356.832372][T20713] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #15: comm syz.6.5474: mark_inode_dirty error [ 356.848979][T20713] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.5474: corrupted inode contents [ 356.850619][T20717] netlink: 'syz.9.5476': attribute type 2 has an invalid length. [ 356.880362][T20713] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3001: inode #15: comm syz.6.5474: mark_inode_dirty error [ 356.895632][T20713] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3004: inode #15: comm syz.6.5474: mark inode dirty (error -117) [ 356.937148][T20713] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 356.985412][ T29] audit: type=1326 audit(1770162942.136:14955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20722 comm="syz.1.5478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f662b30aeb9 code=0x0 [ 357.016805][T20713] EXT4-fs (loop6): 1 orphan inode deleted [ 357.023224][T20713] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.058789][T20713] 9p: Bad value for 'rfdno' [ 357.119871][T14535] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.204783][T20741] netlink: 'syz.8.5488': attribute type 10 has an invalid length. [ 357.363287][T20749] loop8: detected capacity change from 0 to 8192 [ 357.440942][T20756] loop2: detected capacity change from 0 to 512 [ 357.457935][T20756] EXT4-fs: Ignoring removed oldalloc option [ 357.525248][T20756] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.5495: Parent and EA inode have the same ino 15 [ 357.548670][T20756] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.5495: Parent and EA inode have the same ino 15 [ 357.561426][T20756] EXT4-fs (loop2): 1 orphan inode deleted [ 357.567690][T20756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.612414][T20765] netlink: 'syz.9.5499': attribute type 2 has an invalid length. [ 357.707883][T16273] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.888146][T20780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5505'. [ 358.176254][T20799] loop2: detected capacity change from 0 to 2048 [ 358.212431][T20799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.233030][T20799] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 358.256897][T20799] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 358.269245][T20799] EXT4-fs (loop2): This should not happen!! Data will be lost [ 358.269245][T20799] [ 358.279047][T20799] EXT4-fs (loop2): Total free blocks count 0 [ 358.285144][T20799] EXT4-fs (loop2): Free/Dirty block details [ 358.291138][T20799] EXT4-fs (loop2): free_blocks=2415919504 [ 358.296932][T20799] EXT4-fs (loop2): dirty_blocks=32 [ 358.302160][T20799] EXT4-fs (loop2): Block reservation details [ 358.308190][T20799] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 358.366034][T20812] loop6: detected capacity change from 0 to 512 [ 358.393094][T18229] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 358.674223][T20850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.723136][T20850] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 358.759950][T20850] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 358.772375][T20850] EXT4-fs (loop2): This should not happen!! Data will be lost [ 358.772375][T20850] [ 358.782083][T20850] EXT4-fs (loop2): Total free blocks count 0 [ 358.788253][T20850] EXT4-fs (loop2): Free/Dirty block details [ 358.794233][T20850] EXT4-fs (loop2): free_blocks=2415919504 [ 358.800143][T20850] EXT4-fs (loop2): dirty_blocks=32 [ 358.805270][T20850] EXT4-fs (loop2): Block reservation details [ 358.811346][T20850] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 358.865343][T18229] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 359.776529][ T29] audit: type=1326 audit(1770162944.746:14956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20957 comm="syz.1.5584" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f662b30aeb9 code=0x0 [ 360.100618][T20973] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5591'. [ 360.358765][ T29] audit: type=1326 audit(1770162945.289:14957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.2.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f91b3aeb9 code=0x7ffc0000 [ 360.396797][ T29] audit: type=1326 audit(1770162945.298:14958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.2.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f91b3aeb9 code=0x7ffc0000 [ 360.792949][T21019] set_capacity_and_notify: 2 callbacks suppressed [ 360.792963][T21019] loop1: detected capacity change from 0 to 512 [ 360.823466][T21019] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.5611: EA inode hash validation failed [ 360.837080][T21019] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.5611: corrupted inode contents [ 360.849354][T21019] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.5611: mark_inode_dirty error [ 360.861147][T21019] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.5611: corrupted inode contents [ 360.873315][T21019] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.5611: mark_inode_dirty error [ 360.885523][T21019] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.5611: mark inode dirty (error -117) [ 360.898359][T21019] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 360.907830][T21019] EXT4-fs (loop1): 1 orphan inode deleted [ 360.914203][T21019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.032374][T13339] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.703712][T21050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5623'. [ 361.719329][T21050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5623'. [ 361.760269][T21056] 9p: Bad value for 'rfdno' [ 361.785715][T21051] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5623'. [ 362.306063][T21082] loop8: detected capacity change from 0 to 512 [ 362.322755][T21082] EXT4-fs: Ignoring removed oldalloc option [ 362.346445][T21082] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.5636: Parent and EA inode have the same ino 15 [ 362.397963][T21082] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.5636: Parent and EA inode have the same ino 15 [ 362.506183][T21082] EXT4-fs (loop8): 1 orphan inode deleted [ 362.512536][T21082] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.546960][T21087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5638'. [ 362.558244][T21087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5638'. [ 362.569988][T21087] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5638'. [ 362.615497][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 362.615510][ T29] audit: type=1326 audit(1770162947.403:15051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21097 comm="syz.1.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 362.736676][ T29] audit: type=1326 audit(1770162947.431:15052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21097 comm="syz.1.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 362.760252][ T29] audit: type=1326 audit(1770162947.449:15053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21097 comm="syz.1.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 362.783902][ T29] audit: type=1326 audit(1770162947.449:15054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21097 comm="syz.1.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 362.807542][ T29] audit: type=1326 audit(1770162947.449:15055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21097 comm="syz.1.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 362.831273][ T29] audit: type=1326 audit(1770162947.449:15056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21097 comm="syz.1.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 362.854770][ T29] audit: type=1326 audit(1770162947.449:15057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21097 comm="syz.1.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 362.878433][ T29] audit: type=1326 audit(1770162947.449:15058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21097 comm="syz.1.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 362.901946][ T29] audit: type=1326 audit(1770162947.459:15059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21097 comm="syz.1.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 362.925605][ T29] audit: type=1326 audit(1770162947.459:15060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21097 comm="syz.1.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 363.051544][T16647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.097147][T21113] loop8: detected capacity change from 0 to 512 [ 363.247207][T21122] loop9: detected capacity change from 0 to 8192 [ 363.270577][T21124] netlink: 'syz.6.5650': attribute type 3 has an invalid length. [ 363.278466][T21124] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.5650'. [ 363.558558][T21127] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5651'. [ 363.599244][T21127] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5651'. [ 363.797851][T21150] loop6: detected capacity change from 0 to 512 [ 364.419829][T21164] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 364.734844][T21174] loop2: detected capacity change from 0 to 8192 [ 364.826984][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 365.184293][T21198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.192594][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.201117][T21198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.242854][T21193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.251141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.259389][T21193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.267590][T21193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.329328][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.337509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.346130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.050194][T21234] loop2: detected capacity change from 0 to 2048 [ 366.076390][T21234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.092978][T21234] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 366.107972][T21234] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 366.120649][T21234] EXT4-fs (loop2): This should not happen!! Data will be lost [ 366.120649][T21234] [ 366.130288][T21234] EXT4-fs (loop2): Total free blocks count 0 [ 366.136369][T21234] EXT4-fs (loop2): Free/Dirty block details [ 366.142413][T21234] EXT4-fs (loop2): free_blocks=2415919504 [ 366.148191][T21234] EXT4-fs (loop2): dirty_blocks=32 [ 366.153375][T21234] EXT4-fs (loop2): Block reservation details [ 366.159423][T21234] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 366.187421][T21241] loop1: detected capacity change from 0 to 8192 [ 366.226977][T18229] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 366.324568][T21247] bridge_slave_0: left allmulticast mode [ 366.330268][T21247] bridge_slave_0: left promiscuous mode [ 366.336145][T21247] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.780628][T21277] netlink: 'syz.8.5715': attribute type 3 has an invalid length. [ 366.788540][T21277] __nla_validate_parse: 4 callbacks suppressed [ 366.788559][T21277] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.5715'. [ 367.493027][T21306] loop6: detected capacity change from 0 to 8192 [ 367.566011][T21310] loop9: detected capacity change from 0 to 512 [ 367.632655][T21310] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.654835][T21310] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 368.081943][T17870] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.556719][T21358] loop9: detected capacity change from 0 to 512 [ 368.593628][T21361] loop9: detected capacity change from 0 to 512 [ 368.603135][T21361] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.5745: EA inode hash validation failed [ 368.616214][T21361] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.5745: corrupted inode contents [ 368.629598][T21361] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #15: comm syz.9.5745: mark_inode_dirty error [ 368.641534][T21361] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.5745: corrupted inode contents [ 368.654129][T21361] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3001: inode #15: comm syz.9.5745: mark_inode_dirty error [ 368.666370][T21361] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3004: inode #15: comm syz.9.5745: mark inode dirty (error -117) [ 368.680757][T21361] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117) [ 368.690006][T21361] EXT4-fs (loop9): 1 orphan inode deleted [ 368.696204][T21361] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.713336][ T29] kauditd_printk_skb: 391 callbacks suppressed [ 368.713351][ T29] audit: type=1400 audit(1770162953.109:15452): avc: denied { getopt } for pid=21363 comm="syz.6.5746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 368.741403][T17870] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.782358][ T29] audit: type=1400 audit(1770162953.146:15453): avc: denied { load_policy } for pid=21363 comm="syz.6.5746" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 368.824828][T21364] SELinux: failed to load policy [ 368.886690][ T29] audit: type=1326 audit(1770162953.268:15454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21369 comm="syz.6.5749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe9de9aeb9 code=0x0 [ 368.966034][T21378] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5753'. [ 368.986886][T21378] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5753'. [ 369.131352][T21382] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5755'. [ 369.160323][T21382] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5755'. [ 369.173632][T21382] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5755'. [ 369.182834][ T29] audit: type=1326 audit(1770162953.539:15455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21386 comm="syz.1.5756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 369.185119][ T29] audit: type=1326 audit(1770162953.548:15456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21386 comm="syz.1.5756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 369.236832][ T29] audit: type=1326 audit(1770162953.595:15457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21386 comm="syz.1.5756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 369.261167][ T29] audit: type=1326 audit(1770162953.595:15458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21386 comm="syz.1.5756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 369.345753][ T29] audit: type=1326 audit(1770162953.614:15459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21386 comm="syz.1.5756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 369.369642][ T29] audit: type=1326 audit(1770162953.623:15460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21386 comm="syz.1.5756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 369.393494][ T29] audit: type=1326 audit(1770162953.632:15461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21386 comm="syz.1.5756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662b30aeb9 code=0x7ffc0000 [ 369.674152][T21422] loop2: detected capacity change from 0 to 512 [ 369.683333][T21422] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 369.700233][T21422] EXT4-fs (loop2): 1 truncate cleaned up [ 369.706936][T21422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.749774][T21422] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.5769'. [ 369.831399][T16273] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.868888][T21439] cgroup: subsys name conflicts with all [ 369.915286][T21445] FAULT_INJECTION: forcing a failure. [ 369.915286][T21445] name failslab, interval 1, probability 0, space 0, times 0 [ 369.928068][T21445] CPU: 1 UID: 0 PID: 21445 Comm: syz.6.5778 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 369.928267][T21445] Tainted: [W]=WARN [ 369.928276][T21445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.928293][T21445] Call Trace: [ 369.928303][T21445] [ 369.928313][T21445] __dump_stack+0x1d/0x30 [ 369.928339][T21445] dump_stack_lvl+0x95/0xd0 [ 369.928362][T21445] dump_stack+0x15/0x1b [ 369.928440][T21445] should_fail_ex+0x263/0x280 [ 369.928565][T21445] should_failslab+0x8c/0xb0 [ 369.928598][T21445] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 369.928637][T21445] ? kstrdup_const+0x3e/0x50 [ 369.928664][T21445] ? __xa_alloc+0x291/0x300 [ 369.928717][T21445] kstrdup+0x3e/0xd0 [ 369.928737][T21445] kstrdup_const+0x3e/0x50 [ 369.928758][T21445] alloc_vfsmnt+0xe7/0x300 [ 369.928798][T21445] clone_mnt+0x30/0x5d0 [ 369.928867][T21445] __do_loopback+0x241/0x280 [ 369.928905][T21445] do_loopback+0x203/0x2b0 [ 369.928957][T21445] path_mount+0x401/0xbc0 [ 369.928985][T21445] ? user_path_at+0xbf/0x130 [ 369.929046][T21445] __se_sys_mount+0x28c/0x2e0 [ 369.929107][T21445] ? fput+0x8f/0xc0 [ 369.929184][T21445] __x64_sys_mount+0x67/0x80 [ 369.929212][T21445] x64_sys_call+0x2cca/0x3000 [ 369.929245][T21445] do_syscall_64+0xc0/0x2a0 [ 369.929287][T21445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.929317][T21445] RIP: 0033:0x7efe9de9aeb9 [ 369.929367][T21445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.929385][T21445] RSP: 002b:00007efe9c8f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 369.929486][T21445] RAX: ffffffffffffffda RBX: 00007efe9e115fa0 RCX: 00007efe9de9aeb9 [ 369.929504][T21445] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000000 [ 369.929522][T21445] RBP: 00007efe9c8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 369.929540][T21445] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000001 [ 369.929632][T21445] R13: 00007efe9e116038 R14: 00007efe9e115fa0 R15: 00007fff71f98f88 [ 369.929661][T21445] [ 370.567900][T21478] net_ratelimit: 120 callbacks suppressed [ 370.567922][T21478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.567991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.728324][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.266444][T21519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.310438][T21521] loop6: detected capacity change from 0 to 512 [ 371.334267][T21521] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 371.345846][T21521] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 371.356010][T21521] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.5805: Corrupt directory, running e2fsck is recommended [ 371.383815][T21521] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 371.392618][T21521] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.5805: corrupted in-inode xattr: e_name out of bounds [ 371.408174][T21526] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5807'. [ 371.420551][T21521] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.5805: couldn't read orphan inode 15 (err -117) [ 371.469288][T21521] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.502370][T21531] loop8: detected capacity change from 0 to 512 [ 371.515354][T21521] tipc: Started in network mode [ 371.520350][T21521] tipc: Node identity 72e50b0e0651, cluster identity 4711 [ 371.527554][T21521] tipc: Enabled bearer , priority 0 [ 371.536074][T21531] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.5809: EA inode hash validation failed [ 371.553542][T21531] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.5809: corrupted inode contents [ 371.565968][T21521] syzkaller0: entered promiscuous mode [ 371.571461][T21521] syzkaller0: entered allmulticast mode [ 371.577792][T21531] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #15: comm syz.8.5809: mark_inode_dirty error [ 371.593545][T21521] tipc: Resetting bearer [ 371.600976][T21520] tipc: Resetting bearer [ 371.606964][T21531] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.5809: corrupted inode contents [ 371.620511][T21520] tipc: Disabling bearer [ 371.658422][T21531] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.5809: mark_inode_dirty error [ 371.689134][T21531] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.5809: mark inode dirty (error -117) [ 371.707035][T21531] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 371.730009][T14535] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.740710][T21531] EXT4-fs (loop8): 1 orphan inode deleted [ 371.757703][T21531] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.791466][T16647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.827515][T21543] loop1: detected capacity change from 0 to 2048 [ 371.841190][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.852909][T21543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.887289][T21543] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 371.902286][T21543] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 371.914592][T21543] EXT4-fs (loop1): This should not happen!! Data will be lost [ 371.914592][T21543] [ 371.924273][T21543] EXT4-fs (loop1): Total free blocks count 0 [ 371.930346][T21543] EXT4-fs (loop1): Free/Dirty block details [ 371.936285][T21543] EXT4-fs (loop1): free_blocks=2415919504 [ 371.942041][T21543] EXT4-fs (loop1): dirty_blocks=32 [ 371.947294][T21543] EXT4-fs (loop1): Block reservation details [ 371.953289][T21543] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 371.972532][ T5751] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 372.035497][T21558] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5819'. [ 372.147810][T21564] IPVS: length: 101 != 8 [ 372.259629][T21572] FAULT_INJECTION: forcing a failure. [ 372.259629][T21572] name failslab, interval 1, probability 0, space 0, times 0 [ 372.272489][T21572] CPU: 1 UID: 0 PID: 21572 Comm: syz.9.5823 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 372.272527][T21572] Tainted: [W]=WARN [ 372.272553][T21572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.272570][T21572] Call Trace: [ 372.272578][T21572] [ 372.272586][T21572] __dump_stack+0x1d/0x30 [ 372.272637][T21572] dump_stack_lvl+0x95/0xd0 [ 372.272661][T21572] dump_stack+0x15/0x1b [ 372.272696][T21572] should_fail_ex+0x263/0x280 [ 372.272734][T21572] should_failslab+0x8c/0xb0 [ 372.272783][T21572] kmem_cache_alloc_noprof+0x68/0x490 [ 372.272813][T21572] ? security_inode_alloc+0x37/0x100 [ 372.272847][T21572] security_inode_alloc+0x37/0x100 [ 372.272956][T21572] inode_init_always_gfp+0x4b7/0x500 [ 372.272992][T21572] ? __pfx_proc_alloc_inode+0x10/0x10 [ 372.273102][T21572] alloc_inode+0x58/0x170 [ 372.273133][T21572] new_inode+0x1d/0xe0 [ 372.273161][T21572] proc_pid_make_inode+0x1f/0xd0 [ 372.273186][T21572] proc_map_files_instantiate+0x81/0x120 [ 372.273223][T21572] proc_fill_cache+0x1e5/0x260 [ 372.273253][T21572] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 372.273292][T21572] proc_map_files_readdir+0x521/0x6a0 [ 372.273400][T21572] iterate_dir+0x114/0x330 [ 372.273433][T21572] __se_sys_getdents+0xd2/0x220 [ 372.273469][T21572] ? __pfx_filldir+0x10/0x10 [ 372.273490][T21572] __x64_sys_getdents+0x43/0x50 [ 372.273575][T21572] x64_sys_call+0xe03/0x3000 [ 372.273620][T21572] do_syscall_64+0xc0/0x2a0 [ 372.273693][T21572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.273718][T21572] RIP: 0033:0x7fc0954baeb9 [ 372.273796][T21572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.273817][T21572] RSP: 002b:00007fc093f17028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 372.273840][T21572] RAX: ffffffffffffffda RBX: 00007fc095735fa0 RCX: 00007fc0954baeb9 [ 372.273859][T21572] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000003 [ 372.273875][T21572] RBP: 00007fc093f17090 R08: 0000000000000000 R09: 0000000000000000 [ 372.273892][T21572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.273992][T21572] R13: 00007fc095736038 R14: 00007fc095735fa0 R15: 00007ffec71156f8 [ 372.274018][T21572] [ 372.542365][T21575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.551105][T21575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.622572][T21577] loop9: detected capacity change from 0 to 128 [ 372.629408][T21577] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 372.646883][T21577] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 372.695798][T12117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.719604][T21577] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5825'. [ 372.866975][T21584] loop9: detected capacity change from 0 to 2048 [ 372.880533][T21584] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.894509][T21584] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 372.909396][T21584] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 372.921790][T21584] EXT4-fs (loop9): This should not happen!! Data will be lost [ 372.921790][T21584] [ 372.931576][T21584] EXT4-fs (loop9): Total free blocks count 0 [ 372.937581][T21584] EXT4-fs (loop9): Free/Dirty block details [ 372.943603][T21584] EXT4-fs (loop9): free_blocks=2415919504 [ 372.949385][T21584] EXT4-fs (loop9): dirty_blocks=32 [ 372.954561][T21584] EXT4-fs (loop9): Block reservation details [ 372.960570][T21584] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 372.966642][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.007843][T18229] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 373.199673][T21603] loop6: detected capacity change from 0 to 2048 [ 373.224359][T21603] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.255529][T21603] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 373.296801][T21603] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 373.309169][T21603] EXT4-fs (loop6): This should not happen!! Data will be lost [ 373.309169][T21603] [ 373.318925][T21603] EXT4-fs (loop6): Total free blocks count 0 [ 373.324910][T21603] EXT4-fs (loop6): Free/Dirty block details [ 373.330923][T21603] EXT4-fs (loop6): free_blocks=2415919504 [ 373.336795][T21603] EXT4-fs (loop6): dirty_blocks=32 [ 373.342033][T21603] EXT4-fs (loop6): Block reservation details [ 373.348061][T21603] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 373.450550][ T5751] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 373.741298][T21624] syz_tun: left promiscuous mode [ 373.932754][T21624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.002948][T21626] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20004 [ 374.064037][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.176431][T21634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5847'. [ 374.185473][T21635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5847'. [ 374.289925][T21646] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.5853'. [ 374.302448][T21646] loop6: detected capacity change from 0 to 512 [ 374.328065][T21646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.376950][T21646] ext4 filesystem being mounted at /533/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 374.388150][T21653] loop9: detected capacity change from 0 to 2048 [ 374.422057][T21646] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.5853: iget: bad i_size value: 2533274857506816 [ 374.430323][T21653] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.447311][T21646] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.5853: iget: bad i_size value: 2533274857506816 [ 374.451726][T21653] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 374.474867][T21653] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 374.487201][T21653] EXT4-fs (loop9): This should not happen!! Data will be lost [ 374.487201][T21653] [ 374.496996][T21653] EXT4-fs (loop9): Total free blocks count 0 [ 374.503030][T21653] EXT4-fs (loop9): Free/Dirty block details [ 374.508976][T21653] EXT4-fs (loop9): free_blocks=2415919504 [ 374.514748][T21653] EXT4-fs (loop9): dirty_blocks=32 [ 374.519926][T21653] EXT4-fs (loop9): Block reservation details [ 374.525973][T21653] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 374.547850][T14535] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.567565][T14046] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 374.597769][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 374.597786][ T29] audit: type=1400 audit(1770162958.609:15595): avc: denied { getopt } for pid=21665 comm="syz.9.5859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 374.669643][ T29] audit: type=1326 audit(1770162958.655:15596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21670 comm="syz.9.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 374.693338][ T29] audit: type=1326 audit(1770162958.655:15597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21670 comm="syz.9.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 374.717123][ T29] audit: type=1326 audit(1770162958.655:15598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21670 comm="syz.9.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 374.741220][ T29] audit: type=1326 audit(1770162958.665:15599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21670 comm="syz.9.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 374.765128][ T29] audit: type=1326 audit(1770162958.665:15600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21670 comm="syz.9.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 374.788878][ T29] audit: type=1326 audit(1770162958.665:15601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21670 comm="syz.9.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 374.812338][ T29] audit: type=1326 audit(1770162958.665:15602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21670 comm="syz.9.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 374.836062][ T29] audit: type=1326 audit(1770162958.665:15603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21670 comm="syz.9.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 374.859565][ T29] audit: type=1326 audit(1770162958.674:15604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21670 comm="syz.9.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 375.095241][T21694] FAULT_INJECTION: forcing a failure. [ 375.095241][T21694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.108430][T21694] CPU: 1 UID: 0 PID: 21694 Comm: syz.6.5871 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 375.108471][T21694] Tainted: [W]=WARN [ 375.108480][T21694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.108617][T21694] Call Trace: [ 375.108623][T21694] [ 375.108630][T21694] __dump_stack+0x1d/0x30 [ 375.108730][T21694] dump_stack_lvl+0x95/0xd0 [ 375.108756][T21694] dump_stack+0x15/0x1b [ 375.108775][T21694] should_fail_ex+0x263/0x280 [ 375.108805][T21694] should_fail+0xb/0x20 [ 375.108861][T21694] should_fail_usercopy+0x1a/0x20 [ 375.108899][T21694] _copy_from_user+0x1c/0xb0 [ 375.108924][T21694] ___sys_sendmsg+0xc1/0x1e0 [ 375.109007][T21694] __x64_sys_sendmsg+0xd4/0x160 [ 375.109034][T21694] x64_sys_call+0x17ba/0x3000 [ 375.109119][T21694] do_syscall_64+0xc0/0x2a0 [ 375.109201][T21694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.109227][T21694] RIP: 0033:0x7efe9de9aeb9 [ 375.109246][T21694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.109268][T21694] RSP: 002b:00007efe9c8f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.109294][T21694] RAX: ffffffffffffffda RBX: 00007efe9e115fa0 RCX: 00007efe9de9aeb9 [ 375.109311][T21694] RDX: 0000000024008004 RSI: 0000200000000180 RDI: 0000000000000004 [ 375.109401][T21694] RBP: 00007efe9c8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 375.109417][T21694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.109432][T21694] R13: 00007efe9e116038 R14: 00007efe9e115fa0 R15: 00007fff71f98f88 [ 375.109452][T21694] [ 375.273046][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.508206][T21721] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5881'. [ 375.552858][T21724] loop6: detected capacity change from 0 to 1764 [ 375.607748][T21728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.644264][T21724] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.659952][T21732] 9p: Bad value for 'rfdno' [ 375.689904][T21732] usb usb2: usbfs: process 21732 (syz.8.5886) did not claim interface 1 before use [ 375.697438][T21724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.711029][T21724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.825215][T21735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5885'. [ 375.834262][T21735] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5885'. [ 375.914236][T21735] netlink: 'syz.2.5885': attribute type 4 has an invalid length. [ 375.948414][T21730] syz_tun: left promiscuous mode [ 375.970632][T12117] net_ratelimit: 1 callbacks suppressed [ 375.970650][T12117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.011208][T21760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=21760 comm=syz.8.5892 [ 376.062372][T21730] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.263210][ T52] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.283445][T21760] syz_tun: left promiscuous mode [ 376.291908][T21760] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.299148][T21760] bridge0: port 2(bridge_slave_1) entered listening state [ 376.315453][T21760] caif0: left promiscuous mode [ 376.320305][T21760] caif0: left allmulticast mode [ 376.325171][T21760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.343526][ T52] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.374446][ T52] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.391171][ T52] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.400662][ T52] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.421852][ T52] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.440904][ T52] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.449088][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.467956][ T52] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.538110][T21774] loop8: detected capacity change from 0 to 2048 [ 376.566228][T21781] 9p: Bad value for 'rfdno' [ 376.572292][T21774] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.587399][T21774] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 376.624439][T21789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.627974][T21774] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 376.645037][T21774] EXT4-fs (loop8): This should not happen!! Data will be lost [ 376.645037][T21774] [ 376.654728][T21774] EXT4-fs (loop8): Total free blocks count 0 [ 376.660739][T21774] EXT4-fs (loop8): Free/Dirty block details [ 376.666729][T21774] EXT4-fs (loop8): free_blocks=2415919504 [ 376.672582][T21774] EXT4-fs (loop8): dirty_blocks=32 [ 376.677707][T21774] EXT4-fs (loop8): Block reservation details [ 376.684006][T21774] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 376.771413][ T3438] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 376.880751][T21802] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 376.917906][T21802] bond1 (unregistering): Released all slaves [ 377.050151][T21812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5910'. [ 377.083730][T21809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5910'. [ 377.096702][T21809] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5910'. [ 377.158992][T21822] FAULT_INJECTION: forcing a failure. [ 377.158992][T21822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.172160][T21822] CPU: 0 UID: 0 PID: 21822 Comm: syz.1.5915 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 377.172200][T21822] Tainted: [W]=WARN [ 377.172243][T21822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 377.172260][T21822] Call Trace: [ 377.172268][T21822] [ 377.172277][T21822] __dump_stack+0x1d/0x30 [ 377.172309][T21822] dump_stack_lvl+0x95/0xd0 [ 377.172338][T21822] dump_stack+0x15/0x1b [ 377.172363][T21822] should_fail_ex+0x263/0x280 [ 377.172431][T21822] should_fail+0xb/0x20 [ 377.172465][T21822] should_fail_usercopy+0x1a/0x20 [ 377.172536][T21822] _copy_from_user+0x1c/0xb0 [ 377.172639][T21822] ___sys_sendmsg+0xc1/0x1e0 [ 377.172684][T21822] __x64_sys_sendmsg+0xd4/0x160 [ 377.172723][T21822] x64_sys_call+0x17ba/0x3000 [ 377.172750][T21822] do_syscall_64+0xc0/0x2a0 [ 377.172791][T21822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.172819][T21822] RIP: 0033:0x7f662b30aeb9 [ 377.172846][T21822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.172909][T21822] RSP: 002b:00007f6629d67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.172933][T21822] RAX: ffffffffffffffda RBX: 00007f662b585fa0 RCX: 00007f662b30aeb9 [ 377.172952][T21822] RDX: 0000000024008004 RSI: 0000200000000180 RDI: 0000000000000005 [ 377.172970][T21822] RBP: 00007f6629d67090 R08: 0000000000000000 R09: 0000000000000000 [ 377.172988][T21822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.173003][T21822] R13: 00007f662b586038 R14: 00007f662b585fa0 R15: 00007ffcccf14028 [ 377.173112][T21822] [ 377.188972][T21825] loop8: detected capacity change from 0 to 512 [ 377.349162][T21825] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 377.358403][T21825] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 377.366640][T21825] EXT4-fs (loop8): SIPHASH is not a valid default hash value [ 377.570630][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.604347][T21834] loop8: detected capacity change from 0 to 512 [ 377.870094][T21851] VFS: Mount too revealing [ 378.107875][T21867] loop8: detected capacity change from 0 to 8192 [ 378.116849][T21866] cgroup: fork rejected by pids controller in /syz9 [ 378.344967][T22488] loop2: detected capacity change from 0 to 512 [ 378.824088][T22917] __nla_validate_parse: 6 callbacks suppressed [ 378.824123][T22917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5941'. [ 378.868386][T22917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5941'. [ 378.914131][T22917] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5941'. [ 378.995384][T22932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.025838][T22932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.040270][T22932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.049765][T22932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.073221][T22932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.083444][T22932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.093055][T22932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.104301][T22932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.150357][T22937] loop8: detected capacity change from 0 to 8192 [ 379.596836][T22949] syz.9.5952 (22949): attempted to duplicate a private mapping with mremap. This is not supported. [ 379.841549][T22958] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5956'. [ 379.850941][T22958] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5956'. [ 379.860787][T22958] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5956'. [ 379.962053][T22962] lo: left promiscuous mode [ 380.119335][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 380.119349][ T29] audit: type=1326 audit(1770162963.772:15993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22974 comm="syz.8.5959" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf52e3aeb9 code=0x0 [ 380.253738][T22962] syz_tun: left promiscuous mode [ 380.284548][T22982] loop6: detected capacity change from 0 to 512 [ 380.417746][T22962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.456838][ T29] audit: type=1400 audit(1770162964.100:15994): avc: denied { connect } for pid=22984 comm="syz.9.5964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 380.546451][T22993] loop6: detected capacity change from 0 to 512 [ 380.560444][ T29] audit: type=1400 audit(1770162964.184:15995): avc: denied { listen } for pid=22994 comm="syz.9.5969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 380.587471][T22995] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5969'. [ 380.601545][T22993] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 380.636030][ T29] audit: type=1400 audit(1770162964.259:15996): avc: denied { accept } for pid=22994 comm="syz.9.5969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 380.656206][T22993] EXT4-fs (loop6): orphan cleanup on readonly fs [ 380.683882][T22993] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 4294967295 out of range 0-7 [ 380.699116][ T29] audit: type=1326 audit(1770162964.315:15997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22996 comm="syz.1.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662b30aeb9 code=0x7fc00000 [ 380.722852][ T29] audit: type=1326 audit(1770162964.315:15998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22996 comm="syz.1.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f662b30aeb9 code=0x7fc00000 [ 380.757559][T22993] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 380.787166][T22993] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.5968: Failed to acquire dquot type 1 [ 380.799269][T22993] EXT4-fs (loop6): Remounting filesystem read-only [ 380.805925][T22993] EXT4-fs (loop6): 1 truncate cleaned up [ 380.811953][T14046] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 380.822517][T14046] Quota error (device loop6): write_blk: dquota write failed [ 380.829904][T14046] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 380.839986][T14046] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 380.855852][T14046] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 380.867757][T22993] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 381.037804][T14535] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 381.182414][T23026] loop8: detected capacity change from 0 to 512 [ 381.359761][T23031] netlink: 'syz.8.5980': attribute type 10 has an invalid length. [ 381.374893][T23031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.377050][ T5751] bond0: (slave batadv0): interface is now down [ 381.380863][T23031] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 381.397308][ T37] bond0: (slave batadv0): interface is now down [ 381.397447][ T37] bond0: now running without any active interface! [ 381.686379][T23044] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5985'. [ 382.140563][T23064] loop1: detected capacity change from 0 to 2048 [ 382.176099][T23064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.307140][T23069] loop8: detected capacity change from 0 to 1024 [ 382.391704][T13339] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.423889][T23074] netlink: 'syz.6.5996': attribute type 5 has an invalid length. [ 382.645294][T23092] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6002'. [ 382.654325][T23092] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6002'. [ 382.730136][T23097] FAULT_INJECTION: forcing a failure. [ 382.730136][T23097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.743369][T23097] CPU: 1 UID: 0 PID: 23097 Comm: syz.6.6007 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 382.743397][T23097] Tainted: [W]=WARN [ 382.743403][T23097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 382.743414][T23097] Call Trace: [ 382.743420][T23097] [ 382.743427][T23097] __dump_stack+0x1d/0x30 [ 382.743471][T23097] dump_stack_lvl+0x95/0xd0 [ 382.743497][T23097] dump_stack+0x15/0x1b [ 382.743520][T23097] should_fail_ex+0x263/0x280 [ 382.743588][T23097] should_fail+0xb/0x20 [ 382.743656][T23097] should_fail_usercopy+0x1a/0x20 [ 382.743685][T23097] _copy_to_user+0x20/0xa0 [ 382.743705][T23097] simple_read_from_buffer+0xb5/0x130 [ 382.743750][T23097] proc_fail_nth_read+0x10e/0x150 [ 382.743776][T23097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.743804][T23097] vfs_read+0x1ab/0x7f0 [ 382.743871][T23097] ? __rcu_read_unlock+0x4e/0x70 [ 382.743903][T23097] ? __fget_files+0x184/0x1c0 [ 382.743930][T23097] ? mutex_lock+0x57/0x90 [ 382.743959][T23097] ksys_read+0xdc/0x1a0 [ 382.743981][T23097] __x64_sys_read+0x40/0x50 [ 382.744056][T23097] x64_sys_call+0x2889/0x3000 [ 382.744078][T23097] do_syscall_64+0xc0/0x2a0 [ 382.744110][T23097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.744133][T23097] RIP: 0033:0x7efe9de5b78e [ 382.744147][T23097] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 382.744242][T23097] RSP: 002b:00007efe9c8f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 382.744265][T23097] RAX: ffffffffffffffda RBX: 00007efe9c8f76c0 RCX: 00007efe9de5b78e [ 382.744281][T23097] RDX: 000000000000000f RSI: 00007efe9c8f70a0 RDI: 0000000000000004 [ 382.744296][T23097] RBP: 00007efe9c8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 382.744311][T23097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.744402][T23097] R13: 00007efe9e116038 R14: 00007efe9e115fa0 R15: 00007fff71f98f88 [ 382.744426][T23097] [ 382.951488][T23101] set_capacity_and_notify: 1 callbacks suppressed [ 382.951525][T23101] loop1: detected capacity change from 0 to 512 [ 382.982741][T23100] loop9: detected capacity change from 0 to 512 [ 382.999998][T23101] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 383.014233][T23104] netlink: 'syz.2.6008': attribute type 21 has an invalid length. [ 383.033410][T23101] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 383.055077][T23104] netlink: 'syz.2.6008': attribute type 1 has an invalid length. [ 383.065107][T23101] System zones: 1-2, 4-12, 8-8 [ 383.075119][T23101] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.6005: iget: bad i_size value: 38620345925642 [ 383.094042][T23101] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.6005: couldn't read orphan inode 15 (err -117) [ 383.123804][T23101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.186682][T13339] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.407621][T23136] netlink: 'syz.1.6021': attribute type 12 has an invalid length. [ 383.471473][T23140] loop8: detected capacity change from 0 to 512 [ 383.814270][T23160] loop2: detected capacity change from 0 to 8192 [ 384.091433][T23175] loop8: detected capacity change from 0 to 512 [ 384.304388][T23193] lo: entered allmulticast mode [ 384.326753][T23193] lo: left allmulticast mode [ 384.457788][T23195] dummy0: entered promiscuous mode [ 384.464141][T23195] bond0: entered promiscuous mode [ 384.469259][T23195] bond_slave_0: entered promiscuous mode [ 384.475016][T23195] bond_slave_1: entered promiscuous mode [ 384.480871][T23195] syz_tun: entered promiscuous mode [ 384.514213][T23195] hsr1: entered allmulticast mode [ 384.533728][T23195] dummy0: entered allmulticast mode [ 384.539074][T23195] bond0: entered allmulticast mode [ 384.544339][T23195] bond_slave_0: entered allmulticast mode [ 384.550082][T23195] bond_slave_1: entered allmulticast mode [ 384.555855][T23195] syz_tun: entered allmulticast mode [ 384.572540][T23203] __nla_validate_parse: 8 callbacks suppressed [ 384.572556][T23203] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6043'. [ 384.595752][T23207] netlink: 108 bytes leftover after parsing attributes in process `syz.9.6047'. [ 384.788748][T23189] loop8: detected capacity change from 0 to 128 [ 384.819100][T23189] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 384.977701][T23215] FAULT_INJECTION: forcing a failure. [ 384.977701][T23215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.992682][T23215] CPU: 0 UID: 0 PID: 23215 Comm: syz.6.6050 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 384.992862][T23215] Tainted: [W]=WARN [ 384.992870][T23215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 384.992886][T23215] Call Trace: [ 384.992893][T23215] [ 384.992902][T23215] __dump_stack+0x1d/0x30 [ 384.992931][T23215] dump_stack_lvl+0x95/0xd0 [ 384.992995][T23215] dump_stack+0x15/0x1b [ 384.993063][T23215] should_fail_ex+0x263/0x280 [ 384.993097][T23215] should_fail+0xb/0x20 [ 384.993128][T23215] should_fail_usercopy+0x1a/0x20 [ 384.993162][T23215] _copy_to_user+0x20/0xa0 [ 384.993233][T23215] simple_read_from_buffer+0xb5/0x130 [ 384.993332][T23215] proc_fail_nth_read+0x10e/0x150 [ 384.993382][T23215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 384.993417][T23215] vfs_read+0x1ab/0x7f0 [ 384.993440][T23215] ? __rcu_read_unlock+0x4e/0x70 [ 384.993508][T23215] ? __fget_files+0x184/0x1c0 [ 384.993529][T23215] ? mutex_lock+0x57/0x90 [ 384.993552][T23215] ksys_read+0xdc/0x1a0 [ 384.993575][T23215] __x64_sys_read+0x40/0x50 [ 384.993630][T23215] x64_sys_call+0x2889/0x3000 [ 384.993696][T23215] do_syscall_64+0xc0/0x2a0 [ 384.993729][T23215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.993754][T23215] RIP: 0033:0x7efe9de5b78e [ 384.993773][T23215] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 384.993839][T23215] RSP: 002b:00007efe9c8f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 384.993860][T23215] RAX: ffffffffffffffda RBX: 00007efe9c8f76c0 RCX: 00007efe9de5b78e [ 384.993877][T23215] RDX: 000000000000000f RSI: 00007efe9c8f70a0 RDI: 0000000000000007 [ 384.993893][T23215] RBP: 00007efe9c8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 384.993908][T23215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.993926][T23215] R13: 00007efe9e116038 R14: 00007efe9e115fa0 R15: 00007fff71f98f88 [ 384.994024][T23215] [ 385.639607][ T29] kauditd_printk_skb: 1151 callbacks suppressed [ 385.639627][ T29] audit: type=1326 audit(1770162968.926:17147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23239 comm="syz.9.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 385.690802][ T29] audit: type=1326 audit(1770162968.936:17148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23239 comm="syz.9.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 385.714486][ T29] audit: type=1326 audit(1770162968.936:17149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23239 comm="syz.9.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 385.737993][ T29] audit: type=1326 audit(1770162968.945:17150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23239 comm="syz.9.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 385.761734][ T29] audit: type=1326 audit(1770162968.945:17151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23239 comm="syz.9.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 385.785323][ T29] audit: type=1326 audit(1770162968.954:17152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23239 comm="syz.9.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 385.808994][ T29] audit: type=1326 audit(1770162968.964:17153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23239 comm="syz.9.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 385.832608][ T29] audit: type=1326 audit(1770162968.964:17154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23239 comm="syz.9.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 385.856256][ T29] audit: type=1326 audit(1770162968.973:17155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23239 comm="syz.9.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 385.979266][ T29] audit: type=1326 audit(1770162968.982:17156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23239 comm="syz.9.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0954baeb9 code=0x7ffc0000 [ 386.124077][T23243] loop8: detected capacity change from 0 to 2048 [ 386.170595][T23243] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.208788][T23243] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 386.231422][T23243] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 386.243764][T23243] EXT4-fs (loop8): This should not happen!! Data will be lost [ 386.243764][T23243] [ 386.253469][T23243] EXT4-fs (loop8): Total free blocks count 0 [ 386.259471][T23243] EXT4-fs (loop8): Free/Dirty block details [ 386.265410][T23243] EXT4-fs (loop8): free_blocks=2415919504 [ 386.271214][T23243] EXT4-fs (loop8): dirty_blocks=32 [ 386.276379][T23243] EXT4-fs (loop8): Block reservation details [ 386.282375][T23243] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 386.307222][T14046] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 386.348411][T23253] loop1: detected capacity change from 0 to 512 [ 386.356165][T23253] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 386.374349][T23253] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6065: bg 0: block 255: padding at end of block bitmap is not set [ 386.411498][T23253] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 386.424482][T23257] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6063'. [ 386.442176][T23253] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6065: invalid indirect mapped block 1 (level 1) [ 386.457347][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6066'. [ 386.477156][T23253] EXT4-fs (loop1): 1 truncate cleaned up [ 386.491261][T23253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.553347][T23253] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 386.591972][T13339] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.601924][T13339] ================================================================== [ 386.610053][T13339] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 386.617648][T13339] [ 386.620000][T13339] read-write to 0xffff888237c26468 of 1 bytes by task 23264 on cpu 0: [ 386.628175][T13339] folio_add_lru+0xa4/0x1e0 [ 386.632713][T13339] folio_add_lru_vma+0x49/0x70 [ 386.637507][T13339] do_wp_page+0x15be/0x2560 [ 386.642036][T13339] handle_mm_fault+0x8c7/0x3030 [ 386.646947][T13339] do_user_addr_fault+0x62f/0x1050 [ 386.652107][T13339] exc_page_fault+0x62/0xa0 [ 386.656648][T13339] asm_exc_page_fault+0x26/0x30 [ 386.661546][T13339] [ 386.663893][T13339] read to 0xffff888237c26468 of 1 bytes by task 13339 on cpu 1: [ 386.671543][T13339] __lru_add_drain_all+0x17e/0x450 [ 386.676701][T13339] lru_add_drain_all+0x10/0x20 [ 386.681499][T13339] invalidate_bdev+0x47/0x70 [ 386.686128][T13339] ext4_put_super+0x624/0x7d0 [ 386.690829][T13339] generic_shutdown_super+0xe6/0x210 [ 386.696147][T13339] kill_block_super+0x2a/0x70 [ 386.700840][T13339] ext4_kill_sb+0x42/0x80 [ 386.705227][T13339] deactivate_locked_super+0x75/0x1c0 [ 386.710629][T13339] deactivate_super+0x97/0xa0 [ 386.715333][T13339] cleanup_mnt+0x2bb/0x330 [ 386.719805][T13339] __cleanup_mnt+0x19/0x20 [ 386.724244][T13339] task_work_run+0x130/0x1a0 [ 386.728864][T13339] exit_to_user_mode_loop+0x1f7/0x6f0 [ 386.734266][T13339] do_syscall_64+0x1d3/0x2a0 [ 386.738889][T13339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.744803][T13339] [ 386.747136][T13339] value changed: 0x11 -> 0x12 [ 386.751827][T13339] [ 386.754168][T13339] Reported by Kernel Concurrency Sanitizer on: [ 386.760364][T13339] CPU: 1 UID: 0 PID: 13339 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 386.771938][T13339] Tainted: [W]=WARN [ 386.775759][T13339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.785829][T13339] ================================================================== [ 386.800338][ T5751] gretap0: left allmulticast mode [ 386.805426][ T5751] gretap0: left promiscuous mode [ 386.810634][ T5751] bridge0: port 3(gretap0) entered disabled state [ 386.826900][T23267] netlink: 'syz.1.6069': attribute type 13 has an invalid length. [ 386.834612][T23210] loop2: detected capacity change from 0 to 8192 [ 386.853796][ T5751] bridge_slave_1: left allmulticast mode [ 386.859489][ T5751] bridge_slave_1: left promiscuous mode [ 386.865306][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.948430][ T5751] bond1 (unregistering): (slave gretap1): Releasing active interface [ 387.032953][ T5751] bond1 (unregistering): Released all slaves [ 387.041678][ T5751] bond2 (unregistering): Released all slaves [ 387.109405][T23267] syzkaller: port 1(erspan0) entered disabled state [ 387.243770][T23267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.257625][T23267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.395790][ T1680] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.413062][ T1680] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.424629][ T5751] hsr_slave_0: left promiscuous mode [ 387.430576][ T5751] hsr_slave_1: left promiscuous mode [ 387.436171][ T5751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.443618][ T5751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.451548][ T5751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.458997][ T5751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.471564][ T5751] veth1_macvtap: left promiscuous mode [ 387.477177][ T5751] veth0_macvtap: left promiscuous mode [ 387.482812][ T5751] veth1_vlan: left promiscuous mode [ 387.488092][ T5751] veth0_vlan: left promiscuous mode [ 387.590162][ T1680] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.599337][ T1680] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.803867][ T5751] IPVS: stop unused estimator thread 0...