last executing test programs: 2m9.481228176s ago: executing program 1 (id=932): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_io_uring_setup(0x760b, &(0x7f0000001400)={0x0, 0x79e7, 0x400, 0xffffffff, 0x11c}, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYBLOB="0200"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001000"/27], 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000001c0)='./bus/file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0xffffffff, 0xffffffff, 0x400001, 0x0, 0xa, "ff00f7000000000000000020af88008300"}) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0xa4000061) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r5, 0x0, 0x54) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0xb9, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000038847aaaac90650c092002051b71d24459852c59032361d5563a477e1ea1a5c02f56169a4fa06f5c1f91fff765b952fc4dde2f89b51aa713829e0e9c1ef0ac8e4d3bafc6a81cd7e73f08db357b742ca3ec11ab20a98dd1e5bb4d09530c3b10fcc86d300d4d9e7231d2a8c74e2b84ca30af10652f401394c6d4d9d626bfd9903ec34b54fa1"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14b0}}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000280)={0x44, 0x11, 0x306, 0xfffe, 0x0, 0xffffc, 0x0}) 2m7.80210839s ago: executing program 1 (id=937): getitimer(0x1000000, &(0x7f0000000cc0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x26, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_ethernet(0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004508004c00000000000690780a010100ac1414bb00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e04000089078000013120a717a541be0bee70c67e003c005d23e1312ffffffffcdf38296b558c3853ddabe16"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002cbd7000fbdbdf250e0000003c00028014000100fe80e0ffffff000000000000000000bb08000400ffffffff14000100fe8000000000000000000000000000bb06000e004e2000000c00018008000b00736970001400028005000d0000020000000c0002800800070005000000e8"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x14000801) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x4000, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xfb, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000880)={[{@i_version}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noacl}, {@nobarrier}, {@init_itable}, {@block_validity}], [{@smackfsroot={'smackfsroot', 0x3d, 'nombcache'}}, {@dont_appraise}, {@subj_role={'subj_role', 0x3d, '+'}}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x80020849, 0x3, 0x1, 0x2, 0xffffff01}, 0x20, 0x100) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000400)={r9, @in={{0x2, 0x4e21, @remote}}}, 0x84) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f80)=@deltaction={0x1e4, 0x31, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xce}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3a5a8}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000d40), 0x40, 0x0) read$watch_queue(r10, &(0x7f0000000240)=""/30, 0x1e) sendmsg$IPSET_CMD_GET_BYNAME(r10, &(0x7f0000000b00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c0000000e0601010000000000000000000000080900020073797a31000000000900020073797a3000000000050001000700000005000100070000002fdbb041863ec35086ccfa5c477b1a24b2dafc5346df27174f8f836b251327b565b8ccdc1561228e4b780bd010fea076c215e4f12058ca41abfb55403b68f3b739ab397ab9ffec78e66b0fbfb973b63fb8e77262d9bd15703981a28e81f6e32944372aa1841417"], 0x3c}, 0x1, 0x0, 0x0, 0x8804}, 0x80) 2m6.998539066s ago: executing program 1 (id=940): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffb, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x2, 0x4, 0x1, 0x8, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="090000000702820412"], 0x9) r2 = memfd_create(&(0x7f0000000900)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x16\xfd\x9c\x84\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\x97d\x00\x00\x00\x00\x00\x00\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea\x00\x00\x00\x00\x00\x00\x00\x00\x03\xc23l\x9c\xda\xed\x98\x0fK=X\xfdY\n\x0e\x00\x00\x00\x00\x00\x004\xd8\x1e\xa7\nEJ\x9b\x1bb\x80|`\xfb\x16\xcf5F\xac\xae=r\x8c)\x97\x9e7\xd7\x01\x0e\a\x17F\xb8\x1eD\r-\x11o\xa1X\x90\x8f^\xf0S\xb2\xce\x06\xa4\x8e\xc6\x9a:\xd9\x02\x90\x8db\xee\xc7}\xb0W\xea\xcbm\x17.%\"\xec\x9d\x90\xb7[W\xce\xb9^\xa3|\xd4\xeb\xc1\xcd@\x15n/\a\x00\x00\x00O\xaf\xee\x88W\x0f00~\xf2\xe9\xcdm\xb9e|O.\xc8\x85\x1a\xe9\xcf\xe5\x1e\x86\xaa\xed|\x15i\xeb4pv\"\fd\xa4\xf4\xc0\xac\x8eO\xb8\xa8\x8e\x9c\x0f\xf9\x80\x90\xdf3[\xee\r\x88\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\a\x89L\xd7\x84%\x8cY\xfe\xed\x83!\xa0\x91\xf2\x00o30N\x16\x03\xe9\xe2-\xe9\x0e\xca\xdb\x89\x04\x12\xf1\x13\xcf\xd3\x93\x9c\x12\xbf\xb4}\x15`6-\xf1$\xabL\x14\x84\x98\x9d\xc3G\xc7lI=\xb4\x1c\"\x81\v\xaf\xf3)\xa8&\xd1\xe7\xbbk=\xe4\xbbI0P\x0e\xf3\xbb\xf0\x96\xa3}\xb6\x1e_\x97\x14W\x82@\xb4+\xd8\xec\xdf\x8b)M\x91\xb2\x8a\x14\xfb\xc5\xa4\xc5p\xf3\x99H\x02\xc8\x1e\x9f\a\xfel\xf6\xf5\x8b+\xea\xbc`\\\xf3L|\xf4\xafI\x92 \xda,\n\xaf\x96&\x86\xd5\xfeZ\xf4\xc2\xed\x7f\xc8R\x9ap\xe4P\x9f\x06\x0f\x1b\xda\xca\xd4\x81C\xb81\x8c\xdc\xfc]\xdd\xb7S(x\xdf>\v\x15wm\xfa\x8bS\xdf\xed\xe0\xab\x8d\xf0 \xfcU\x13!\x11\xfb*\x86\xe9NF\xa3/`|Fx\xb5\x06y\xe1\xe6#W\xa4\xf5\xc7\xf8\x99\aX\xd5\xd9}n\xf3L \x1b\xd8}U`\xd3\xfeb\xab\x11tz\xf3\xd9l#\xf2R_\x19\xb0\x18\x1a\xf7\xf6\f\xa9!W\xde\xf2\x8a\xd2\xc8\x82\x19T\x03\x88e\xf4\xa9\xdf\x18\xba\xdd\xdd6\xde\xbcc\xf7,\x8c\xaf', 0x2) r3 = syz_init_net_socket$llc(0x1a, 0x6, 0x0) setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f00000001c0)=0xfffffff7, 0x4) fcntl$dupfd(r2, 0x40a, r2) socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x2a, 0x20000000000001, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x9, &(0x7f0000000340)=0x0) io_submit(r4, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047ee, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0xa2) ftruncate(r5, 0x8800000) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x51) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r6, r5, 0x0, 0x578410ed) 2m5.212058604s ago: executing program 1 (id=944): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xa}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@gettaction={0x48, 0x5a, 0xffffffffffffffff, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x48}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000500), 0x1, 0x485, &(0x7f0000001040)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000070000000300000000000008050000000000000001000004a60100000300000004000000000000000100000000000012050008000400000000000012030000000600000000000010080000000061726a95"], 0x0, 0x67}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000070000000300000000000008050000000000000001000004a60100000300000004000000000000000100000000000012050008000400000000000012030000000600000000000010080000000061726a95"], 0x0, 0x67}, 0x28) creat(&(0x7f0000000040)='./file0\x00', 0x81) (async) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x81) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r3, 0x0, 0x0, 0x19, 0x0) close(r2) socket$caif_stream(0x25, 0x1, 0x1) (async) r4 = socket$caif_stream(0x25, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="24001b82c4513d131e7770000000000002201400d32bbb0aebac42ae08000400e0000001"], 0x24}}, 0xea5bc50b6199d7fe) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="24001b82c4513d131e7770000000000002201400d32bbb0aebac42ae08000400e0000001"], 0x24}}, 0xea5bc50b6199d7fe) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) fsetxattr$security_selinux(r2, &(0x7f0000000280), &(0x7f0000000300)='system_u:object_r:tape_device_t:s0\x00', 0x23, 0x3) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r9, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r9, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) (async) setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r9, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb) (async) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb) 2m4.864439405s ago: executing program 1 (id=947): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x102, 0x0) sendfile(r0, r0, 0x0, 0x4) io_uring_setup(0x1c79, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x40, 0x0, @gue={{0x2, 0x0, 0x2, 0x6, 0x8106, @val=0xc3f339eccd85e028}, "134a318536459f049f83764c07010000000000000000000000000000000000020000000080f6d6082d6015a6749554c6"}}}}}}}, 0x66) socket$inet6(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r4}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r5}, &(0x7f0000000400), &(0x7f0000000440)=r6}, 0x20) syz_emit_ethernet(0xd74, &(0x7f0000000a40)={@local, @random="7f2a5602d17c", @void, {@generic={0xa00, "43299914be5288d64bc16b9290195a752ec248309e828c619caecc33485ba1f5f08674de1f6b2ac5924f5117ca461fb5ade5385e5a8c7d063d265abe27b6b0754a6d13b8ec1efd610024a92889ec5ec0434bdbeea4063061c2a929ceb192571b4bdb4c5565d86f43b42122d0872c61f4c5895546845a26d07aae4a4a7f48926d942652e37d92dc731682f814d1134dbe3951ec21673ee72549a13572430a2c2d3907b732464040985005c156ed3aaf1702644d60f59fa6c8519e503f99dfa26e59bc087fb6525e81fc7433ea3f0f99793d65d328c2e43f5e65b57d02aef61653e797e47557b34917441489951360649c2d59e6df6ad31dec8e7620b8b8b59bdfd4776664cf5951073d366fa7fbdba4d032f65c3005052812e04ee9520ce7b0a79f26dd39899f8552a2cf611346e1560a0c7d9c850e0b5b4332f14a71484a5f4b16574d4b6fca330f1b81fb937a9c5b08d4b8323cbab1ab5a08103bb1e58164f2b63d2fcba525f221057f854acc6c5e53c7f16a7b741fa8b05654a5c0fb516d0d68e0e5d9d204bec6cf754e31f0de1aa8826f80aff44e29c8b066d32b0e7305d3fd75389004ed1d1cae2b3d20f778103878599562905904eed9300ef257b69c5b12c015ee6ee3975a5ac6d4709e4c208c02bd8bac8343ae289d8426924a5dbb781204a1e03f13e86fc4d82ffbfd295533c4976ad0516e7742d99a642b725d44742daf7a8451aae474dd092cd73e8f04be4cf3fd456eae0434bd51de01008d152c70f600c8c88536f4b417efad6d5054b164b49cb51579919434f282cb36bb19ffa33f9a31bf3f7210c6a2f4517649ebf36d82af3ffafffaf6d6ce698ea234c29e326dccf18f4288f61c74a3cbcb40f692b4ff6dcd4d31868ed0d2b2cea56e614ed93bcf89e79ee53b00a86b70071b061af2a13f3f654f0bfcec293475e8a054651696276dcdf1af29ec5a8f5c186d33481fd863dd97354fe0c5d7f9eeb24f935b14c5affa3a009db910fc01951eb8aa62e467079a4895b41208a41054b930bab5b255a0093f60b7c4aa9698f7a6971cf4c9fe26081f27383111fa4b73062a578e3a7cc9b0109206c8479af15165227546d87b107024f87236122d49c5b6e1fe5e7b5572b397cd3000a9f03b1d1099075292431fc2ac08e49ca9311a9ea483a33c494829f4685f91d6a9bd88952c9b5746588a1e0404dd2c0186e75bac071228bf6ad3e67e984b07372c467564694605f5958e9ed1f6b854684505c6afb37be795b99238f66cd384295e31e6f9affc786ecc76c0de9542e2172d4a1db4ba66661d723fedaf0a995f277de7bdae1243a9281d49d3e21f784cb73a270c74de7c5fea854ea409028957555f4b22c65b10a25a4c7e41231ae3b0f40db6bcfce68cc61343ca40d99e065b838856d60033d3d93c24330495576828672b7ec2a76aab6b1969028f2bf63d43e75d4e1a42eb1662cfe7d0de5a0a1580dff9558c4808027d8707ee697e53bb52ccfce79ee712d76d001c0702f6f745f5ce85d083867bcc11195733245ed59478a974d92d18c8f9b768d3b4187b62e0a16a710de9faf3710f85f6d30f70afe9510a0ab3be9a3c0bd175b26719542d9d80c4890a4775f17f7376ec955766572cac088035b333ff072d4b4955484e70fd67b81ce0fd1db4c8fb1bad66a77f1e0752a8ba219c90fda659d49f217ee7ae049035f5e7755fe3d5e1dc96e93a6224a76f682bddf3d7b5d40f14eaf21cf13b891827281219c834bc5f7c961c0828c1001fb19d7926c318eca7b8b48309a629aa0247adbcccbea18739efd34ca0d287069215c2badbda149ef38af2cddf2760451d09be563dcd917f71779596cb195aa7ce91dcfaeaab01b26562ef0e88b21407ce5a710d3c5718cc8c2056bd114256ae0aa0651dc72a1d98c1db187d3c43850ec689a3c04d33421f88f1e49d64290d68a9e805625f4e1d68b8e80006443368222063385379747b3a6a4ccb251bb1215d9e2ab5c528580ff9d205b90b58036f3cc8563a9ad358b7a3447794734ab1ae01d41176a47629b80c0f54a5cc6bac5c4a09d99015cda3a32666c4a785a01733b53cbc7c6b4bdfa6e9ca766a34bb311b790fb56ef18da6529c6ac8a623e988c4bfb276580e0bc9c4ac2b2bf256fa9d6ba4174cfcb62de1297f0919f8a132144088d1802f6a6bde014ab05738a72ebf4ad3becc3dce2fb957748879d896d6e1b0b89a7d55e11d98de34dabef5d7bae5fc0b9cdc4898f7d138c8c5a82c30e827b86f8b56b1470e6f2bf109b0535a5268aa7f16351e27c532d689b22bdea8a83281c9f523d7be02384aa5ef70c2c3f76f3e8e48a23e92aa67519af0bfd6698497efbaee1c4bd63b8c4be93b8654ce1b13f7172c23fa394ba42421122939de6a2d98e7e63d3068b29b526e0b172bacefac914f6c451e5f9e6a9ac8910528b43c1a96ad55138d4eaf0aaf749c182cc1d9cdb5b37ac5c7c3e13d5e195fb60cc19b135ec7828fea22258dae80e7b41eef715a862c78ce57552cc092c0c8d9929ad619a5bd4dd26d98472b878353a93b7789e118d0bec767a4ca4fb3e3264641730a5367ba3ceaaa30a5e48e6688736cf488116bc9dfc2906fa951553eb170dbfd007ce61cbc39566e5c0fbddf807a2c36d611d1bbb738127d06b0f765e1ddfdf42cd96f3d94d9effa01dad1ca13a4f8bdcf09789fd3b47a158c94b8bb1c84078ddc51170c1f259c283eac1ab6fddfce5e1c999fbd14602a872e5359d70a9144651072c202b79141c263693ce5fd2ba77622ef3c5e7089fd7d9cf5bada60f0b490d5fc153a3872a77eaebcd353b0920b6ce7a43cb6118d6706c22b4519c1673e4873fb2b53de308bf01bf036311f19c264c50a50261dbc2abe7adc30f2f77b2868a01f5c5a3eee72ce7fe4cda1156da5fd473264ae96dde83b3bea52ed48fb2edb8ebd97558d3a33b28471387e5a917afda425cc766fabdb37d6f880f82e2f96567d4dd11d3f38d19c386dfe8069a4c7d69a6b20fe68b8ef8450858fc7f9791c5e4b1799a33ce6a27e5b08faa7bc19842cb477ac2e09d2a71eb3584e5943ec3bcf9f80c1121c289697ad6bc9927a115cc173d95db3e968bd94f97674e05f2a0fb685d5092a13c5a839f75a4563885dec96cebbf1d837d6b807f539f2ee11dbd350a8a3b93282484800b6e69aa94a22b4acff148a5edd760452e5ff56c31287fc9004d75e2bd35c64a2930e1580a01535595b6a125777d869d6944012485a59f72c925df136644e25dd59cc4a3c0a22281714316fc8a05d4e11381aad5fa73e22e118dde0b9c2232b9845ea5eee0675bd07a84370111a55fd14f0e38a98356753161002ec4e0659cd00c4857868ac4c1e08b0047a49ec978efd5dcb2ec65afc3e9def40296dd0d55137afd709e37034f0a53f63e8576ba48b6dcd0feb21eefd8c8e7f1b31e918b4034d0341bed7cdafe1c3e00a49a1d5ad973fe903a97a02550e5d3d59f519ec3fd719a4b755f55a8b60e6c75790c0632642aee9eebf26408651196f3ef886b227d0bae1c60305930998a25a21428ce7fd5dd5956ea1b62e51af90fe1621aa837a9e42ff00b554a3e1e6182aa494738cfde493f6ece61f12e47a46cc1e6dc9e8b99bcc40d1260f7402cf1a1bcfbc62c062cbc1d214a7aa2dbeb2fe13296ca73a47dbfccd0b6d5ef1b3aa0a855493f146292aeec48a04205544bd3003d3974f41a54519052614aab1f7cb182061290a0b311748ddf5776fe4d4b4be280c5fb8385f650ee22a6c4434fffa85cf53eec04ab8118c2101c552df9f0f7f63d6b875919e5710de058d46b369fa31b34b91a094f4ebda458339ed0663055e10b12889daa649d0ade783131ec92ca9c95d575ed2dcc4279f337f4e6e77e9abfd61fbcda706a49eb6e4967b0185bcf5901c6c025959468313302046f2ced838231c335fb57d950b405e001cc78b13226a5bc90a12400e98b973e0157eb3976ced33cfa8383437dbed3b4f6f7dff7a4901bdf6a4a0a1c0900632c037ea475278bed5013faa096381a76cbef1cde16bb1129e874a1e3f9ac1fb24cf80e5ed43afe1e380664eaacbbdfcd90ba4358b9e199b152b0e27aa7cda5a176f6f03a9235e7612988e58300e7114273181910debc9f097d5ff1586719d288f89148256e01263b00db1e47551567780f0cbc79ca7b8c3d3e8d3ca8fb247f3699ec2ad067f0b33a09a98fa61f4b05fbeece63a256bb6638afb152068a4a69bdbaede0f5c661beaf2cb2734231374ffa917f0835f1d290fe5b96671337372ada2058578cc533120c20685b65ca749c4d207edf6d391b9436cbd090c4dbd7e0ee9d80372d6e8507c6075b64ae95ab2500f683ba1df9a5fc47ef432ce7be220caad6290f5cf18ea87fa44a9cb705ba2560938534083eaac990162e93c08def8f04923ec437d7269c833480bc4bc8299c1b1787361cc066e5375570c64333dc1aae3f91e88b0d26b3708df13c7c377bcac8027e371d2c43f2d327459f024f1e186bbd25f40440bfff35d3f1047f0823fa996ed7bc72c606567f6a253da0e6415e17ca0461084cdaa8c5a23297910a9b86d08134fb9791fa06c5daba5c912a9d1a5d62dd0bbeee393c2c2433375867687d00820e2dd0ae2366fd9b215e045b03576c4fbf68f93df80ffc85b4b05c84351773ae8b8ee73fe077db2639a79a136edcdfebf0e50fc32a26b6cf697b0561d6a6692fdf7cd9e80b1aed3be47920e11fae6cf5dd7b28b8b98c0bf4b9c38731a99056129a255a8d4a907f3fc9d0312f36ed376502b2219bc0dc8cd601866d1131f57f065eb7757a0dcc4913e5b4bd2553b0da2c6f727f938f3a1221d90"}}}, 0x0) 2m4.269620444s ago: executing program 1 (id=952): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) r3 = fsopen(&(0x7f0000000180)='sysfs\x00', 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0x5, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x9) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xe) r5 = socket$kcm(0x10, 0x2, 0x0) fallocate(r5, 0x0, 0xd5, 0xd3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(r6, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000ef090101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010900030073797a773171350014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a050000000000000000000200000220000000000a010400000000000000000a00000a0900010073797a3100000000200000000b0a01010000000000000000020000040900012373797a3000000000140000001100010000000000000000000800000a"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) r8 = eventfd2(0x1000006, 0x800) r9 = bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="08000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000000000000000000000f00000000000"], 0x50) io_setup(0x3ff, &(0x7f0000000500)=0x0) r11 = epoll_create1(0x80000) fsetxattr$trusted_overlay_origin(r9, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f0000000000)={0x80000000}) io_submit(r10, 0x2, &(0x7f0000000440)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x200, r8, 0x0, 0x0, 0x4, 0x0, 0x1, r8}]) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000540)=@ethtool_per_queue_op={0x4b, 0xf, [0x40, 0xfff, 0x8f0, 0x72aa6ae5, 0x7, 0x20b2, 0xf8, 0x850, 0x2, 0x4d0000, 0xedd, 0x2, 0x481f3fbb, 0x1, 0x5, 0x9, 0x4, 0x5, 0x5, 0xb02, 0xf3, 0xffff, 0x40, 0x0, 0x8, 0x54, 0x8fa, 0x7, 0x101, 0x7, 0x0, 0x58e3, 0x0, 0x2, 0x3ae, 0x0, 0x6, 0xffffffff, 0x80000000, 0x401, 0x1ff, 0x8000, 0x7, 0xffff, 0x10000, 0x3ff, 0x4, 0xf9, 0x5, 0x200, 0x1, 0xfffff243, 0x6, 0x0, 0x800, 0x10000, 0x7, 0xa2, 0xffff0001, 0x1, 0x2, 0x7, 0x9, 0x7ff, 0x8007, 0x3, 0x58a69ae3, 0x0, 0x1, 0x8, 0x370, 0x0, 0x81, 0x80000000, 0x9, 0x9, 0x3, 0xa1f000, 0xe8, 0x80000001, 0x0, 0x4, 0x2, 0x5, 0x4, 0x5, 0x2, 0x2, 0x7, 0x3, 0x77fd, 0x8, 0x0, 0xa6400000, 0x2, 0xffffffff, 0x8, 0x8, 0xffffffff, 0x800, 0xfffffffe, 0x6, 0x8dc9, 0x0, 0xe, 0x0, 0x4, 0x5, 0x3, 0x40, 0x60002000, 0x4, 0x400, 0xeb8, 0x7, 0x80, 0x241f, 0xfff, 0x200, 0x9, 0x2, 0x3a, 0x5402c16c, 0x2e1afee6, 0xf, 0x8, 0x8, 0x6a8], "dbfd0822476e32703533a31ff4981597cadca91757900e03dee68e65eec7870664be192c9cf1f978b9f8612fd47bb70eec9095b4fd54d389b1b67c90b10f1843c1978c61c51e05c22db71f150f9b21e1928ff128189e1388a05caf95f3f51c9fe0cc6c4e9116ebc755fab684b0739a87703fa8b583203be174f02f6cab6edb2b17730e85be8c"}}) 2m4.253600695s ago: executing program 32 (id=952): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) r3 = fsopen(&(0x7f0000000180)='sysfs\x00', 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0x5, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x9) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xe) r5 = socket$kcm(0x10, 0x2, 0x0) fallocate(r5, 0x0, 0xd5, 0xd3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(r6, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000ef090101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010900030073797a773171350014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a050000000000000000000200000220000000000a010400000000000000000a00000a0900010073797a3100000000200000000b0a01010000000000000000020000040900012373797a3000000000140000001100010000000000000000000800000a"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) r8 = eventfd2(0x1000006, 0x800) r9 = bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="08000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000000000000000000000f00000000000"], 0x50) io_setup(0x3ff, &(0x7f0000000500)=0x0) r11 = epoll_create1(0x80000) fsetxattr$trusted_overlay_origin(r9, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f0000000000)={0x80000000}) io_submit(r10, 0x2, &(0x7f0000000440)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x200, r8, 0x0, 0x0, 0x4, 0x0, 0x1, r8}]) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000540)=@ethtool_per_queue_op={0x4b, 0xf, [0x40, 0xfff, 0x8f0, 0x72aa6ae5, 0x7, 0x20b2, 0xf8, 0x850, 0x2, 0x4d0000, 0xedd, 0x2, 0x481f3fbb, 0x1, 0x5, 0x9, 0x4, 0x5, 0x5, 0xb02, 0xf3, 0xffff, 0x40, 0x0, 0x8, 0x54, 0x8fa, 0x7, 0x101, 0x7, 0x0, 0x58e3, 0x0, 0x2, 0x3ae, 0x0, 0x6, 0xffffffff, 0x80000000, 0x401, 0x1ff, 0x8000, 0x7, 0xffff, 0x10000, 0x3ff, 0x4, 0xf9, 0x5, 0x200, 0x1, 0xfffff243, 0x6, 0x0, 0x800, 0x10000, 0x7, 0xa2, 0xffff0001, 0x1, 0x2, 0x7, 0x9, 0x7ff, 0x8007, 0x3, 0x58a69ae3, 0x0, 0x1, 0x8, 0x370, 0x0, 0x81, 0x80000000, 0x9, 0x9, 0x3, 0xa1f000, 0xe8, 0x80000001, 0x0, 0x4, 0x2, 0x5, 0x4, 0x5, 0x2, 0x2, 0x7, 0x3, 0x77fd, 0x8, 0x0, 0xa6400000, 0x2, 0xffffffff, 0x8, 0x8, 0xffffffff, 0x800, 0xfffffffe, 0x6, 0x8dc9, 0x0, 0xe, 0x0, 0x4, 0x5, 0x3, 0x40, 0x60002000, 0x4, 0x400, 0xeb8, 0x7, 0x80, 0x241f, 0xfff, 0x200, 0x9, 0x2, 0x3a, 0x5402c16c, 0x2e1afee6, 0xf, 0x8, 0x8, 0x6a8], "dbfd0822476e32703533a31ff4981597cadca91757900e03dee68e65eec7870664be192c9cf1f978b9f8612fd47bb70eec9095b4fd54d389b1b67c90b10f1843c1978c61c51e05c22db71f150f9b21e1928ff128189e1388a05caf95f3f51c9fe0cc6c4e9116ebc755fab684b0739a87703fa8b583203be174f02f6cab6edb2b17730e85be8c"}}) 1m28.446170358s ago: executing program 5 (id=1185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000090000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008"], 0x10c}}, 0x0) 1m28.271563944s ago: executing program 5 (id=1187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f61"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1m28.018673713s ago: executing program 5 (id=1189): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) 1m27.869919587s ago: executing program 5 (id=1190): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000000c0)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00007c5000/0x3000)=nil, 0x3000, 0x8, 0x4000010, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x0, 0x7, 0x80006) socket$inet_icmp(0x2, 0x2, 0x1) io_uring_setup(0x71bf, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000000240)={0x8}, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) fdatasync(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r3, 0x4a8e) syz_open_procfs(0x0, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x2}, 0xfe7c, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffd, r5, &(0x7f00000003c0)="95", 0x1}]) 1m27.327843225s ago: executing program 5 (id=1193): ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000080)={0x0}) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6020400) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000100)) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0xf, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) 1m26.646635837s ago: executing program 5 (id=1204): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cce801000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1c}, [@typed={0x6, 0x1, 0x0, 0x0, @str='*\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={0x0}, 0x1, 0x0, 0x0, 0x44040}, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x2400c800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x7, &(0x7f00000000c0)=""/98) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r0}, 0x38) 1m26.625950397s ago: executing program 33 (id=1204): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cce801000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1c}, [@typed={0x6, 0x1, 0x0, 0x0, @str='*\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={0x0}, 0x1, 0x0, 0x0, 0x44040}, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x2400c800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x7, &(0x7f00000000c0)=""/98) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r0}, 0x38) 4.986680489s ago: executing program 2 (id=1942): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 4.93818128s ago: executing program 2 (id=1945): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x1}, @exit, @alu={0x4, 0x0, 0x6, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r2 = memfd_create(&(0x7f0000000080)=',\xea\x02', 0x4) ftruncate(r2, 0x7000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0x7, 0x0, &(0x7f0000000080)="63eced8e46dc3f", 0x0, 0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = dup(r2) preadv2(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) r7 = getpid() r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r8, &(0x7f0000000080)=""/1, 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x32, 0xffffffffffffffff, 0x34d4b000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_pid(r8, &(0x7f00000000c0)=r7, 0x12) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) r11 = getegid() r12 = syz_clone3(&(0x7f0000001640)={0x18000080, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x3}, &(0x7f00000004c0)=""/59, 0x3b, &(0x7f0000000500)=""/151, &(0x7f0000001600)=[0x0, 0x0], 0x2}, 0x58) r13 = geteuid() r14 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r15, 0x0) r16 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000014c0)={0x3, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x1}, r16, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getgid() r19 = dup3(r0, r0, 0x80000) sendmmsg$unix(r1, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000600)="2a193e9ff603f6f0a341caf82541272a41f58790364904b83a195dc951049d7371a175f300fbdc9b48fc282d8f3b6113970344467fa8307834c3ebfafc50df8ab6aa9b0d08e008663c1a0bdeb9b3999bc29fccb6a43369f8b96b59355613d2ed5da330ec2dda8f02ae483e72c3b47dd5c9d301de75db96121a7a1a2f8933c4b3a7e560f9717c72428d1a3f8e1d91d86b076b694ff1f1d911faff1b25ef2302b7ade80f529776e9a1efeb6b0e75d1d852bbad7154b23795b9f1e8e7d1735abe9b4de0ee5f11bb22c6c36059c3257b0b583a3af662c799c72e67985a6bb069847dc9a5e306e3452ab30683048e47b90d46e6d012b1b92a63fbf37b63a71578b1d203e879e7a1c776feff4f1003fbdbd9e31c9a202d495d5d647f79c698238657f5bc26a424439779fb5db48a272fe4b8386141c224cdef65a90caca0bb669d247fcebe7c4ea50a54a910c4d7b79a3ad47e435cd35b12ade3f257e6783a80bbe1bdebe4b3683b2d49d3c3dbe19458371d78388e2761625e3efb948e448d068fdf8973525e2bd1529d348e744ce1a96844f6c708edcca2dcaa9daa0f2dc580ce969018ca8caedab863b1dae5b55a7a3c290a30f0f7422e3cc6053cd99ff2f6d8a71f9a55b671ce3aa9a782663ebae7c460795c024658401f7446abc8e212d6292e7e3d9e0ff6400cd8aea6dbc7f9f6c8b213f8b06fb42b984555de1eeac3b00e8c7801fa0ce5e0b2fd040f64bf5c25a91ec3f876c674e2b2a868bf28a6d0e0e368f5a0c341eb56e862e8b2b5f82b96d3940eb9647707b2ecd8ecd21ccb1a7c3406c342475f6bc9e335c54349891500aceba0dcd36cfe3363d78771a02d0ddc80e9ff9781fbc95e099d873321df9d7ca7e622b27275eab13fe683ec21a43298f6aa8f19ae81285d3ffa86f8bdbbd3c968a2778db898ddd302cbd2f87a6f483288f3fba16316f5adaa42e6b8b6eee67919695930e58131e244b11d1c331b0b6e4d2986ae61dc251dbd3e744e7a4c62a673ae70f39b342c4d644dc4229c96c7eeac78085ebcfbb7d5b3620161eb5700a4ae9535e9a7ed01e81a1ed2adc201b61df87f60fc0803062a153934414a2c609588604725734ebe1c766befecf63633b7e3456ca4e7d5d72f05786cc918ebcc4beb3ba230972609841e17c9800d21a8941b505eb49d6a5a4cdda0de70d6aa13d3897aed9355f919962dde2841a6f19e8eb17fef8855ba0ec5aa62d7d682a329e8b664059ab8af4427bb6d1c00faba0324d39da2495697b8822b3a44377648d316512f0cd0dbd34e17c2e9063399792271eee7703509073ee828abdb96cf320a830607375775be28a2919c99cd30f06ea25ad6553de44dbc5e2b1774f8fec873428cc66214d5c33e845bb9d303920852f286fd22c251c6057eeb99dc396e7d3f3033a33f114b899e937f500d108fb1d7cf3a3fad007656c8b94bccf8b8631d7bf34602b050f34a3143f01a760ee13c23393ca8fa9ddce51df8c61ded562bb11df7185ca16eea3f16f7a34b2435ac2bc2f5796a79413f8d67155cccbda548061771462f490f245196f292337ffd5a9a5b225f017ce79f3adacc9431ee8c01031648ac7577654fc99cc06e1221ff7d52830d50ac05c8dca4052c89a420d2f92550d6b9e25607c05e49a55a180c600390c5081d15715330479d314c882c50bcaf79cf5d8ec343a2073ba1c0af1c7cc4dc0e8a6c059fb8523e1c314018d0bbadcd6d16887d88c7b3cefffc45ae03959c30616aed1bdf1195fe217d7ee2b190bf66d1ba94fd8adb5b2f9a074abd9156a8b6b0c8232e45a227413748d66608c4ff762af039936f9381a7380c6a68e92cd36e8cc91dcdb0122d1967ef816568f15a44e396e7ad9b95d1083282468a3f8aecf2a0ca6f20bb5e6aa115c95aa4ad108cadcf718baf53202e417581332f7a80a6ff240ff1a72b51122a7bab2cc774ca29ba2fe482a727ef365e575037831ee4c234bafa8d19195e3b26f8a239dadc3aea4a9e6f48f3dc9cefe528234352242df4a2b96b271896f4721baa26453988e30b17644e830aa8c64c49ddcb1074c9d2415b3d2a4e4d1719feb1cce50397869e20eec4c5ef71a058689666d89f5c19ca76b1f240b32bc7df5e6b512a3689e67ade7047b299f9ebbbe4e315e36785154b09e1d8bfa2053293e29917c2b225546188b239b6cf5b85ba6150e4c8e4703438b56d1885c78ed153e13e066423df60e7f447b1188f7fe286d66b9dc3a95468fbf9ad366a930a6fed5cd7871e1c22c3ad082b22d36daf3207e70835941967b53cc1637c0ab038b0c977f6fac14d2ce8dd9d22f26a12a2f71e9b446d6cc6a2d555064cf36b8d7d4403d553571d6d25da4a96e02cd2572e88049e511e9cee5e0f8865ad4018d9c2341c2a56fa85f001f76d340b13009a7027bb45080e3c59c536e27e6739c450fff24800271572fdfe01cbd658a3eaa0c5b366e29b723bf8259604f1a4fb1571f43a7cfc6dc3ef7cbf2f12efc687ab220a33883da810ac4243eae90aa47864c70b4d1b038215626c93d5d2fa82b0364e6649d59b1d3bd772cfa2193d973da5bc6f14d7f97d8124e0b42ce1062284a10250568422e03a4c132775fd1756b29f336f907885f7e91ba65ae42761cb68cb671de5cb1cf6ded1dcad786b64b8f44601b35259491e500cfb212cb4b2ec53b69e1fcc3271af0365293758bc4b2aeb1038c3b524370334efd12f93309aeae3db182913160b07d69da8adafc63c36aa9cf3138df3a5b31a78419b6f9b35351ecbc72de3635da0d82eb56a819d6c581b05a7c6c13ae5c1b43a03ce8f609dad4bbc6b77ef29a758774df51be2c4ff90533003b923ee8cdb3dac15d55f814e8f1344094e90296124910742a1ed23b5a832afc3b9ffa5a4e8cf56e5cb27f5006ff2fb6f70d29a65e14d25d73666172d37adff83657f488668033f6ef86ec207025d2c165cc77c6e5f562180fa7ea292f86238cdca2fb5ef730b71d5f9a1546d5e084c981f2a755c9adb50a0bba5ed09398b0bd09ab1c86533b891f7300e011d9d6fc4a1866db3aa2de7357c2f5ae122ca711b446f73ad70771427448a1e4d04fd427a8f1a4a8b90d4c7dd433a2a8cddd05476e688166fed9226f2bf6b5bb7f25f0a184b251b74fbdb4834e0f6d730feb240ce0477f75a5a5861265a9d471fbf5fc32da79fe45d7f532e7bddd82496ad9119d939af7bc47dfe75e572cf6578a42c63ab5f8bbec240ab782b0a245dc52e8ea7ed063e6abb805caa81083a0f212fc9a9cd1feb7445aeb224291b1cada55d3a3343fb62b9d2c17b534a23d8013c70d1214dc437cb62e3f8a3fb6504fc5f660318ce2051d9c4ea314fd3e1b00d6e691aa4854300526d5d001f4db5c0e3acf8e6c3d057e63a2ef771fd47e4768ea070ba6fd9711a6f4ce5a10b2b61994a4c995a422b33b55e66312b51c7eaa9116003a66c746b9bf4958dabc3274eba8836a3b79c76e92092cf827af06d3828628b58469bbc94cb543366cb6402a038d7bf70e6a60bcb9e7f64934ce743550cab891c5268deeed0aa680a5dbd8b5db35a924aab70fbf15cc41c61b342ffaa7008be80906c32024dc586cc539b1e932296a2af4fc856beec7e64755a23b9c779c093fa4c596f1aeaa2c85b598a5feb8ad87c794ace5093e1265a0663ed28f7aa7c4b53a8f69ebaea8b602b38c84966069d01cdc3022507e826583e21a4b8d0c4854bee7a48211db17a3ae97b389175ced4c2179cc9683f42a6f6562d560518dcb6e41beae233402980a00f4497d47e4a8dbbd71db9f33ff162f6b4e9e17923cf5c514ff6875988fb32cdc6884dd2c2694ba45966df393e9a50e408981c9921ef0ef594ac0335951496ef6a5ecb9129de166cc4e3526c564693ba671f5d5b33af39f55cdfaa4892395229917b826473b0edcd548e6dad4e617d1ae01e8402157b015e908c2500163be754f12891863ad4fde68fd50752bb19bdb319f2455b89eeda8802b968147cd9617a3fbe8e04af9eaabf463b1a5de61244fc21bc7fe5fc32aa98dc3c7775f0783ea5ad35deca001c4029dc6c82304e35af085ea01e3b19cc7f412d306e61b1c5aa6603b64dafdd2e8ab4d995684e60886cfb9693fc41cb84ef038bc06ae953b38754a97a567121c682131e4e2ede95f9fc411b638fbaad7f87fe8df96a7e2a0a5346ef58e5467e202ec35567c5a7aa61bf1cfe155b2e82cfd7b5befdeb22399108ade428e6d259049b06dc587c5a1bd0428e6067a5af07b77e862634bdc387c692795b724abef57dfbd2509f0adefdf19f8355e3436c0d8511f174c102d84842f70ac5a346d3bc9db2a5152c020f20a90b6acfe196c9af9c60562d2b919c1e0f4c237f7ef4e59361ad4a6fa8c533b2fb3ef5c72602e4105b28c711af19092e907a4f5adf47dd9857c5f4434c3869d2b495a059f034893b09dac1ba489f847d14bc7b5cfabeb15eaf6e2e91f5872d4e302920c0276f14299dc28500330482390250c75421f2e8cca301694d5a11feca7a0d8eb896a24e1c9e11d5bc15ede8c8205a277ae4adf5c14a8054c18f1e7267506391679410b60b046b1d3d9d89e258259ca89737a7d1fc5691ee5188652a64df885eda3b2dffae0fe8b7f1be8bbc849c7052d3f73c23fa957355a3df27fcb5e9bd47623cec6e8e51cf4ac9d7f993d930be660ba2b505d559296a5753fa41739926ffa3e23d67c2ca93465119629823b79876c89a73bfa7c50825397f97e7e2b2cab342dcd92794cd570a291af0586c0425d070498b7595fe297c557f5d676aabab5b6edfe15d599ab55581684c4ea4ba0986c8ea766e5e39f06a96c19b5a9e3ac7d66da156489f383870e8f9090306afab69de4f2c1fb2d45c08c01b91eb957efe7183d307ef1a763bdda5c5d00177091fbbc39761a36a5cc8ed423e453b1e7829b9c8981fc6c1408cae8430f0d03711b66748b444eee495b845b2a5ece96ac520333b94797256ec5a1daebc72b9deec3431d931ac4fc6312207061f9d20b681dd8bb662b2eaa38193004f0e5e5206092faca047826a8ebc1424b18e7fa3f4994cbd7b67d038d4ad0ee868427534d27c460b288ab4966b5ed1709fcd747e686645f8de6e4a7a77254c2f59f6431fae752b25268c9bcfa490a0a8aa34f9ee490c887ab3b3b698faa6ef9e3d5857a6aa61b671feb4b29efb0b3fcb8283786df7b025d8685fb4250bbe8f1e95275eba6aea5d46556187eaaa4d82a819ad2cbcff45a4728fe0343d7ada9b6eb8da24bf7c10cd5950cbb0a046e06b7f29de2ea2b60ca979abf8209dad451e8236e1c3c250dbf385b4874a7d76306f1da30c5d3e006132778eb7c96e8ca71ab878b72825ebbb8c74542e7c45165755a777c0ba3d33ec7aecc87c7fc9edd706de1cf408654111a8586f6357733524d5558f6e80c5a26a9b9740b1fd8e6ff9d952c13a71d8c99141e3f42338cd8e669b6071ce6cda145adb2146558963a65416c22f2a8af81ad8b918f01a92440fea7bf00f81f2f9086bbd8e6112fa292173da697fa3c7d21e0772941d68b88cf1241147f13899cb3fd1615a533b1c75698f5290e4e51b9b248f26ed73db1f5beb14e3c99e2d0e406c349ea0232e891cb80158abc2090599c1241515bc1a56c93ba457f1ed15428f6b286b3b383229093afb35ece7762cd35cbf93726422677ed69eafb444d23c61fd17b260260ad0eab5aea05717ad0f64eeabca11c7bad67b42e9afdbd40aa3bda3ea2d10485b1d97bc5234fb6c47c2314753a73e83291fe926b5c5491d612f26dd6aca", 0x1000}, {&(0x7f0000000280)="2919b4c1d25a85803eb8d759d1e34c859fe223273f8cf8ae24db9de9c47d786d968fb9e8834a1ce3874ac6488bb452f3a55094c95b1de2cc4b4179f8646f7aa30535c5a3ebcbfe6dd3f90238175dd6e47d89e535988cf8ff46bc6c6ac4eefceea08d3a000c7989676c6b4786dc8ae408d287d43afff15e596384026a88045cbe56968137433cc0e14cbcb59859c42d", 0x8f}, {&(0x7f00000000c0)="ac58a902dfbbf84fa64a9fc8c873b3516f2b42954945bbecf1219969f0ead1241579c7b8705fe324838298fbd218", 0x2e}], 0x3, &(0x7f0000001780)=[@rights={{0x20, 0x1, 0x1, [r0, r6, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r10, r11}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x2c, 0x1, 0x1, [r19, r0, r0, r0, r0, r0, r0]}}], 0xd0, 0x800}}], 0x1, 0x11) 4.752902096s ago: executing program 2 (id=1947): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs={0x0, 0x0, 0xfffffffb}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x40, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000880), 0x4}, 0x3003, 0x0, 0x0, 0x4, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unlink(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00') rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r5 = socket(0xa, 0x2400000001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={[0x2fce]}, 0x8}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x1, 0x0, 0x4000000000, 0x101d0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x7, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x33}, 0x28) 2.76750604s ago: executing program 3 (id=1970): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) socket(0x400000000010, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x2, 0x0, 0x0, 0x0) preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/175, 0xaf}], 0x1, 0x9, 0xfffffff6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x56a8, &(0x7f0000000040)={0x0, 0x36d, 0x8, 0x8, 0xe6}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x5) accept4(r9, 0x0, 0x0, 0x80800) sendmmsg$unix(r6, &(0x7f0000009440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x1, 0x2004) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.867602489s ago: executing program 3 (id=1979): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) 1.781428172s ago: executing program 3 (id=1981): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x1}, @exit, @alu={0x4, 0x0, 0x6, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r2 = memfd_create(&(0x7f0000000080)=',\xea\x02', 0x4) ftruncate(r2, 0x7000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xb, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9", 0x0, 0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = dup(r2) preadv2(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) r7 = getpid() r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r8, &(0x7f0000000080)=""/1, 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x32, 0xffffffffffffffff, 0x34d4b000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_pid(r8, &(0x7f00000000c0)=r7, 0x12) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) r11 = getegid() r12 = syz_clone3(&(0x7f0000001640)={0x18000080, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x3}, &(0x7f00000004c0)=""/59, 0x3b, &(0x7f0000000500)=""/151, &(0x7f0000001600)=[0x0, 0x0], 0x2}, 0x58) r13 = geteuid() r14 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r15, 0x0) r16 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000014c0)={0x3, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x1}, r16, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getgid() r19 = dup3(r0, r0, 0x80000) sendmmsg$unix(r1, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000280)="2919b4c1d25a85803eb8d759d1e34c859fe223273f8cf8ae24db9de9c47d786d968fb9e8834a1ce3874ac6488bb452f3a55094c95b1de2cc4b4179f8646f7aa30535c5a3ebcbfe6dd3f90238175dd6e47d89e535988cf8ff46bc6c6ac4eefceea08d3a000c7989676c6b4786dc8ae408d287d43afff15e596384026a88045cbe56968137433cc0e14cbcb59859c42d", 0x8f}, {&(0x7f00000000c0)="ac58a902dfbbf84fa64a9fc8c873b3516f2b42954945bbecf1219969f0ead1241579c7b8705fe324838298fbd218", 0x2e}], 0x3, &(0x7f0000001780)=[@rights={{0x20, 0x1, 0x1, [r0, r6, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r10, r11}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x2c, 0x1, 0x1, [r19, r0, r0, r0, r0, r0, r0]}}], 0xd0, 0x800}}], 0x1, 0x11) 1.742102053s ago: executing program 3 (id=1983): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x4dd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000002380)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c00", 0x2d}], 0x1}, 0x0) syz_read_part_table(0x104b, &(0x7f0000001080)="$eJzsz7ENwjAUBNBLSEAwCzUzsEDmiViHwShp6fjIUeiogeK9wtJZd5YcfuqYbbLL/p3n5DDksqZHVVXfjx+G3a2d5yFJLZI+yZhs2oOLdlH305RubbVdqvKseSlM12/8EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+3SsAAP//iicZfA==") r5 = dup(r1) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x4}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, 0xe, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0xc0) socket$isdn_base(0x22, 0x3, 0x0) lseek(r0, 0x2000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x5c, 0x11, 0x0, 0x1, @tunnel={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r6 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x10c000) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x61, 0x0, 0x0, 0x2}) 1.53970631s ago: executing program 2 (id=1987): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd9, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) syz_emit_ethernet(0x7a, &(0x7f0000000480)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x2, '\x00', {0x7, 0x6, "0f0d29", 0x7, 0x33, 0x0, @private1, @empty, [@dstopts={0xff, 0x0, '\x00', [@padn]}]}}}}}}}, 0x0) 1.450861872s ago: executing program 2 (id=1989): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x4dd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000002380)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c00", 0x2d}], 0x1}, 0x0) syz_read_part_table(0x104b, &(0x7f0000001080)="$eJzsz7ENwjAUBNBLSEAwCzUzsEDmiViHwShp6fjIUeiogeK9wtJZd5YcfuqYbbLL/p3n5DDksqZHVVXfjx+G3a2d5yFJLZI+yZhs2oOLdlH305RubbVdqvKseSlM12/8EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+3SsAAP//iicZfA==") r5 = dup(r1) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x4}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, 0xe, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0xc0) socket$isdn_base(0x22, 0x3, 0x0) lseek(r0, 0x2000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x5c, 0x11, 0x0, 0x1, @tunnel={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r6 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x10c000) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x61, 0x0, 0x0, 0x2}) 1.20622041s ago: executing program 6 (id=1994): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000008000d0a0000000000000001000005"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0xfffffffa}, 0x28) 1.198439381s ago: executing program 0 (id=1995): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x277) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x2, 0x3, 0x505, 0x0, 0x0, {0x7, 0x0, 0x28}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x30}]}, 0x1c}}, 0xc0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9}, 0x0, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) r6 = accept(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) shutdown(r6, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_open_procfs(0x0, 0x0) 1.162955052s ago: executing program 4 (id=1996): r0 = perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x45, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) 1.158904122s ago: executing program 6 (id=1997): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@allocspi={0x1a4, 0x16, 0x1, 0x0, 0x0, {{{@in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, @in6=@empty, {0xb1a00100, 0x0, 0x0, 0xbffffffffffffffc, 0x3, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@policy={0xac, 0x7, {{@in=@empty, @in=@rand_addr=0x64010100, 0x4e23, 0x6, 0x4e22, 0xe0f, 0xa, 0x80, 0x80, 0x2f}, {0x1, 0x9, 0xd9, 0x8, 0x7, 0x0, 0x6, 0x10}, {0xd, 0x7, 0x4}, 0xe, 0x6e6bb9, 0x1, 0x1, 0x1}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 1.061125175s ago: executing program 6 (id=1998): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x704) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x9, 0x8) read$watch_queue(r2, &(0x7f00000008c0)=""/155, 0x9b) 1.060480395s ago: executing program 4 (id=1999): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = io_uring_setup(0x662, &(0x7f0000000140)={0x0, 0xb369, 0x20, 0x2, 0x194}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000000200)=""/184, 0xb8}], 0x2) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0100001900010025bd700001000000fe8800000000000000000000000001016401010100000000000000000000000000040000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000200000000006000000000000000900000000000000000000000000000005000000000000000800000000000000000000000000000000000000000000000000000000000000000800000000000002000000000000000002000000000000010101000000000044010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000fe34000000000000000000000000000040200000ac1414bb000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000004d56c00000000000000ffffffff0000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000010000000033000000020000000000000000000000b19cd3e3ec98d016eb37c3fc91"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4080) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406022400007f4e54000e000a000f000000028000001294569ee0cfb342050c49e69c1f41b572952cbe349b8d2b850fa8d8258753c879330f761c491908dd7877ae0f0efc74df27e8", 0x62}], 0x1}, 0x90) 928.040369ms ago: executing program 4 (id=2000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0xf3, 0x3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 911.35774ms ago: executing program 4 (id=2001): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xfff9, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x2, 0x80000001}, 0x8}, 0x94) 869.115141ms ago: executing program 4 (id=2002): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000000)={0x1, 0x1, 0x9c, &(0x7f0000000140)=""/156}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) getresuid(0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1c) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x20008004) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 332.327618ms ago: executing program 0 (id=2003): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000fd00000300000d00000000fd"], &(0x7f0000001f00)=""/4096, 0x3e, 0x1000, 0x1}, 0x28) 277.652551ms ago: executing program 0 (id=2004): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9}, 0xb0, 0x6, 0x800020, 0x6, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0xc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup2(r2, r2) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x85, 0x0, 0x0, 0x5, 0x4001, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x4}, 0x100997, 0x7ff, 0x7, 0x6, 0x8, 0x2, 0x6f7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x2) (async) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) (async) sendfile(r0, r4, 0x0, 0x400007ffff004) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="0df488bc6da86ee15b1728c164e7c490d71c5ea472f556f1a2f071cbe2fd270153c130e649c44c63f6f852becee0e4352c66d40e14dba6b15074fa70aa44471afd6cdf54b7224f79fd63fd649d94b531c3bfdaf723c74e29f2272aa4db3778255139f5f53a02054f914a765fc2adbde1d6ca0fa3abe860c7a4e7e0ade32f9bb860796eed46e2e1847aafe19c5fcff8b27262ee3a1f34c732398cbc53c72a0eb38391c4db6aa49bfc47fb54458d9a01f625255c43d2e33c5642f9b4c5ed9017e33fe83d7803c39f5d35492540ea30585d816c59ee6e78bac41ba3fdab45122cb6ddf71db6241d2b39fb77e7fb5c16792da3335a", 0xf3}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b400000000200000dd0a00100000000073013700000000009500000000000000be38291cf5595cd586d4e40b2ca93e93ceefa421eed1c1a19d1b09d0dedd4cbdde47df2f20799124ea754b99fe0a10e24b48a605c64d5ddb2a16bcc66635d70e66527c0f02a823d114d1ca58bcde585e6a8388a23aa8336e57328987"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r8, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)=""/101, 0x65}], 0x2) (async) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) setresuid(0xee01, r7, r7) (async) quotactl_fd$Q_GETFMT(r6, 0xffffffff80000400, r7, &(0x7f0000000400)) 277.31725ms ago: executing program 0 (id=2005): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x1, 0x333}, &(0x7f0000000080), 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x4000050) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x6f6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000241000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) r8 = socket(0x400000000010, 0x3, 0x0) write(r8, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040014) r9 = socket(0x10, 0x4, 0xcc6) sendmsg$SMC_PNETID_GET(r9, 0x0, 0x0) getsockname$packet(r9, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 252.997291ms ago: executing program 0 (id=2006): socket$kcm(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10000000000003, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x200}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000019580)=@deltclass={0x24, 0x29, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff3}, {0x10, 0xfff1}, {0xffe0, 0x9}}}, 0x24}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) utimes(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f000001d500)=@newtfilter={0x44, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0xb047}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xf, 0xe}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044061}, 0x4890) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xa, r8, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x20, 0x2, 0x7e, 0xfffff034}, {0x6, 0xb8, 0x2, 0xffff}]}, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 224.650932ms ago: executing program 6 (id=2007): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x1}, @exit, @alu={0x4, 0x0, 0x6, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r2 = memfd_create(&(0x7f0000000080)=',\xea\x02', 0x4) ftruncate(r2, 0x7000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xd, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = dup(r2) preadv2(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) r7 = getpid() r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r8, &(0x7f0000000080)=""/1, 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x32, 0xffffffffffffffff, 0x34d4b000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_pid(r8, &(0x7f00000000c0)=r7, 0x12) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) r11 = getegid() r12 = syz_clone3(&(0x7f0000001640)={0x18000080, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x3}, &(0x7f00000004c0)=""/59, 0x3b, &(0x7f0000000500)=""/151, &(0x7f0000001600)=[0x0, 0x0], 0x2}, 0x58) r13 = geteuid() r14 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r15, 0x0) r16 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000014c0)={0x3, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x1}, r16, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getgid() r19 = dup3(r0, r0, 0x80000) sendmmsg$unix(r1, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000280)="2919b4c1d25a85803eb8d759d1e34c859fe223273f8cf8ae24db9de9c47d786d968fb9e8834a1ce3874ac6488bb452f3a55094c95b1de2cc4b4179f8646f7aa30535c5a3ebcbfe6dd3f90238175dd6e47d89e535988cf8ff46bc6c6ac4eefceea08d3a000c7989676c6b4786dc8ae408d287d43afff15e596384026a88045cbe56968137433cc0e14cbcb59859c42d", 0x8f}, {&(0x7f00000000c0)="ac58a902dfbbf84fa64a9fc8c873b3516f2b42954945bbecf1219969f0ead1241579c7b8705fe324838298fbd218", 0x2e}], 0x3, &(0x7f0000001780)=[@rights={{0x20, 0x1, 0x1, [r0, r6, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r10, r11}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x2c, 0x1, 0x1, [r19, r0, r0, r0, r0, r0, r0]}}], 0xd0, 0x800}}], 0x1, 0x11) 170.918663ms ago: executing program 3 (id=2008): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x1c6, &(0x7f0000000040)={0x4d3f98f6, 0x2, 0x4, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0xfffffffe) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r5, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) 109.762816ms ago: executing program 6 (id=2009): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0xa000000, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x7}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xbcf6}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 107.087436ms ago: executing program 0 (id=2010): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") syz_clone(0xc000, &(0x7f0000000000)="d585479da38c3b09ff159ab544e028fbef7a3287f90e55368602611bbce50c66725d44109e6c92832055eefc23a3f0ac22943acf6c1252af6b2894f184d2368f419ee63d9fbaaf4304d8ce19946c1a87c0843ae5651a5527e210bbde1b7469db3af44d85fe", 0x65, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="aa782860195ea1e0a6a04cf5a7d03c45ea317341d1eef3d367f19634f8b90be265c30ca8884776304dd405a95bffc0273837f1bd5d6b25cd3c29b918690d74d311a5a542b4ec8b476c184bd81f38fe19fe479c7a5448d0ee50a0655c0d06549a71c037a263cf46a69a393eebcd178ac147b9d7986fda8ad6cbc0f539adc441e7ec7f2ec2079689343338b24e7f0626e1ed7600c3fa9112736e51dd293e9d8e456edc882b92b51abc98db025a0b3afad80b35f099ab508a6dfd8366e906958e1529b2c59ff263f926792f6b0218ffe39d36636dda61260f9c") 87.645416ms ago: executing program 3 (id=2011): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc0100000000000a0000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) 84.426556ms ago: executing program 2 (id=2012): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x1c6, &(0x7f0000000040)={0x4d3f98f6, 0x2, 0x4, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0xfffffffe) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r4 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r4, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) 82.732026ms ago: executing program 6 (id=2013): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000160001002cbd7000000000000a00"], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000010000000080007000000020018000180140002006e657464657673696d300000000000000800060000020000080008"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 4 (id=2014): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0118020003110000280012800b00010065727370616e0000180002800400120005001700000000000500160002"], 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x1000000) kernel console output (not intermixed with test programs): t/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 195.039120][ T28] audit: type=1326 audit(2000000354.261:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.6.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 195.063684][ T28] audit: type=1326 audit(2000000354.261:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.6.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 195.095399][ T28] audit: type=1326 audit(2000000354.261:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.6.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 195.149857][ T28] audit: type=1326 audit(2000000354.261:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.6.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 195.174930][ T28] audit: type=1326 audit(2000000354.261:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.6.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 195.347568][ T8024] : port 1(veth0_to_bridge) entered blocking state [ 195.369637][ T8024] : port 1(veth0_to_bridge) entered disabled state [ 195.382450][ T8024] veth0_to_bridge: entered allmulticast mode [ 195.389584][ T8024] veth0_to_bridge: entered promiscuous mode [ 195.392338][ T3413] rtc_cmos 00:00: Alarms can be up to one day in the future [ 195.413916][ T3413] rtc_cmos 00:00: Alarms can be up to one day in the future [ 195.435996][ T8029] loop3: detected capacity change from 0 to 512 [ 195.450756][ T3413] rtc_cmos 00:00: Alarms can be up to one day in the future [ 195.466878][ T8029] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 195.476064][ T3413] rtc_cmos 00:00: Alarms can be up to one day in the future [ 195.504714][ T3413] rtc rtc0: __rtc_set_alarm: err=-22 [ 195.515414][ T8029] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1259: Invalid inode bitmap blk 4 in block_group 0 [ 195.536157][ T8035] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1261'. [ 195.549089][ T8035] loop6: detected capacity change from 0 to 512 [ 195.587978][ T8035] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 195.598391][ T8029] loop3: lost filesystem error report for type 5 error -117 [ 195.600708][ T8037] loop4: detected capacity change from 0 to 512 [ 195.614445][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 195.614463][ C1] EXT4-fs (loop3): initial error at time 2000000354: ext4_read_inode_bitmap:139 [ 195.614485][ C1] EXT4-fs (loop3): last error at time 2000000354: ext4_read_inode_bitmap:139 [ 195.639175][ T8029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.654185][ T8035] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 195.669780][ T8040] netlink: 'syz.0.1263': attribute type 3 has an invalid length. [ 195.693111][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.702958][ T8035] EXT4-fs (loop6): 1 truncate cleaned up [ 195.709919][ T8035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.734895][ T8040] netlink: 'syz.0.1263': attribute type 1 has an invalid length. [ 195.743405][ T8037] EXT4-fs: Ignoring removed nobh option [ 195.770799][ T8040] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1263'. [ 195.772158][ T8037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.794977][ T8037] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.798460][ T8043] loop3: detected capacity change from 0 to 512 [ 195.834178][ T8040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8040 comm=syz.0.1263 [ 195.852304][ T7741] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.916274][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.941332][ T8049] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1265'. [ 195.975086][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1268'. [ 196.101776][ T8057] loop6: detected capacity change from 0 to 8192 [ 196.213495][ T8049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.227703][ T8068] loop3: detected capacity change from 0 to 512 [ 196.256049][ T8068] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 196.302674][ T8049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.395592][ T8049] bond0 (unregistering): Released all slaves [ 196.466091][ T8074] netlink: 'syz.3.1272': attribute type 6 has an invalid length. [ 196.498699][ T8079] loop0: detected capacity change from 0 to 512 [ 196.541266][ T8079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 196.554365][ T8079] ext4 filesystem being mounted at /192/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.620977][ T8085] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1275'. [ 196.632983][ T8085] loop2: detected capacity change from 0 to 512 [ 196.642605][ T8085] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 196.667623][ T8085] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 196.676470][ T8085] EXT4-fs (loop2): 1 truncate cleaned up [ 196.682766][ T8085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.722723][ T8088] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1273'. [ 196.742855][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.190393][ T8099] loop6: detected capacity change from 0 to 512 [ 197.213113][ T8099] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 197.228212][ T8099] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1278: invalid indirect mapped block 1023410176 (level 0) [ 197.243013][ T8099] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 197.244824][ T8099] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, [ 197.254453][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 197.254522][ C1] EXT4-fs (loop6): initial error at time 2000000356: ext4_free_branches:1023: inode 11 [ 197.254654][ C1] EXT4-fs (loop6): last error at time 2000000356: ext4_free_branches:1023: inode 11 [ 197.291061][ T8099] inode 11: block 237:freeing already freed block (bit 236); block bitmap corrupt. [ 197.302138][ T8099] EXT4-fs (loop6): 1 truncate cleaned up [ 197.310930][ T8099] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.326456][ T8099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.386307][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 197.406142][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1280'. [ 197.419631][ T8102] vlan2: entered promiscuous mode [ 197.424779][ T8102] veth0: entered promiscuous mode [ 197.675623][ T8113] loop0: detected capacity change from 0 to 256 [ 198.533678][ T8121] loop6: detected capacity change from 0 to 164 [ 198.544429][ T8121] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1285'. [ 198.559338][ T8123] netlink: 'syz.0.1286': attribute type 1 has an invalid length. [ 198.567097][ T8123] netlink: 'syz.0.1286': attribute type 2 has an invalid length. [ 198.612199][ T8125] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1287'. [ 198.628391][ T8125] loop0: detected capacity change from 0 to 512 [ 198.639690][ T8125] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 198.647862][ T8125] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 198.656667][ T8125] EXT4-fs (loop0): 1 truncate cleaned up [ 198.662934][ T8125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.708101][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.710270][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1290'. [ 198.729806][ T8134] gretap0: entered promiscuous mode [ 198.735136][ T8134] vlan2: entered promiscuous mode [ 198.817752][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 198.817777][ T28] audit: type=1326 audit(2000000358.201:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.6.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 198.865243][ T28] audit: type=1326 audit(2000000358.201:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.6.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 198.889533][ T28] audit: type=1326 audit(2000000358.201:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.6.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 198.913346][ T28] audit: type=1326 audit(2000000358.201:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.6.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 198.938099][ T28] audit: type=1326 audit(2000000358.201:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.6.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 198.973654][ T3412] usb 7-1: enqueue for inactive port 0 [ 198.974983][ T28] audit: type=1326 audit(2000000358.241:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.6.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 198.983405][ T3412] usb 7-1: enqueue for inactive port 0 [ 199.002955][ T28] audit: type=1326 audit(2000000358.241:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.6.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 199.031740][ T28] audit: type=1326 audit(2000000358.251:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.6.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 199.056291][ T28] audit: type=1326 audit(2000000358.251:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.6.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 199.086142][ T28] audit: type=1326 audit(2000000358.251:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.6.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 199.114723][ T8148] syzkaller1: entered promiscuous mode [ 199.127142][ T8148] syzkaller1: entered allmulticast mode [ 199.158319][ T3412] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 199.232551][ T8150] loop6: detected capacity change from 0 to 256 [ 199.250990][ T8150] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 199.344938][ T8070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.820820][ T8161] netlink: 'syz.3.1296': attribute type 4 has an invalid length. [ 199.856128][ T8161] netlink: 'syz.3.1296': attribute type 4 has an invalid length. [ 199.898014][ T8179] syzkaller1: entered promiscuous mode [ 199.903747][ T8179] syzkaller1: entered allmulticast mode [ 200.022346][ T8181] loop0: detected capacity change from 0 to 1024 [ 200.031331][ T8181] EXT4-fs: Ignoring removed bh option [ 200.062444][ T8181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.563285][ T8197] __nla_validate_parse: 1 callbacks suppressed [ 200.563307][ T8197] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1309'. [ 200.591564][ T8197] hsr_slave_0: left promiscuous mode [ 200.599000][ T8197] hsr_slave_1: left promiscuous mode [ 201.270985][ T8205] loop6: detected capacity change from 0 to 128 [ 201.433295][ T8205] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.658511][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.670185][ T8205] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.775675][ T8205] FAULT_INJECTION: forcing a failure. [ 201.775675][ T8205] name failslab, interval 1, probability 0, space 0, times 0 [ 201.890919][ T8205] CPU: 1 UID: 0 PID: 8205 Comm: syz.6.1311 Tainted: G W syzkaller #0 PREEMPT(full) [ 201.890960][ T8205] Tainted: [W]=WARN [ 201.890969][ T8205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 201.890982][ T8205] Call Trace: [ 201.890990][ T8205] [ 201.891026][ T8205] __dump_stack+0x1d/0x30 [ 201.891075][ T8205] dump_stack_lvl+0x95/0xd0 [ 201.891157][ T8205] dump_stack+0x15/0x1b [ 201.891179][ T8205] should_fail_ex+0x263/0x280 [ 201.891205][ T8205] should_failslab+0x8c/0xb0 [ 201.891228][ T8205] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 201.891271][ T8205] ? __alloc_skb+0x2d6/0x690 [ 201.891308][ T8205] __alloc_skb+0x2d6/0x690 [ 201.891343][ T8205] ? __alloc_skb+0x200/0x690 [ 201.891451][ T8205] sock_wmalloc+0x7e/0xc0 [ 201.891473][ T8205] l2tp_ip_sendmsg+0x168/0x950 [ 201.891512][ T8205] ? __pfx_l2tp_ip_sendmsg+0x10/0x10 [ 201.891583][ T8205] inet_sendmsg+0xc5/0xd0 [ 201.891600][ T8205] ? __pfx_inet_sendmsg+0x10/0x10 [ 201.891620][ T8205] ____sys_sendmsg+0x519/0x5b0 [ 201.891688][ T8205] ___sys_sendmsg+0x195/0x1e0 [ 201.891720][ T8205] __sys_sendmmsg+0x185/0x320 [ 201.891745][ T8205] __x64_sys_sendmmsg+0x57/0x70 [ 201.891797][ T8205] x64_sys_call+0x27aa/0x3020 [ 201.891882][ T8205] do_syscall_64+0x12c/0x370 [ 201.891977][ T8205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.892001][ T8205] RIP: 0033:0x7f7655dfc819 [ 201.892017][ T8205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.892108][ T8205] RSP: 002b:00007f765484f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 201.892132][ T8205] RAX: ffffffffffffffda RBX: 00007f7656075fa0 RCX: 00007f7655dfc819 [ 201.892146][ T8205] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000004 [ 201.892158][ T8205] RBP: 00007f765484f090 R08: 0000000000000000 R09: 0000000000000000 [ 201.892170][ T8205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.892183][ T8205] R13: 00007f7656076038 R14: 00007f7656075fa0 R15: 00007ffee197fa68 [ 201.892256][ T8205] [ 202.131065][ T7741] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.388937][ T8245] loop6: detected capacity change from 0 to 164 [ 202.402804][ T8245] ISOFS: unable to read i-node block [ 202.415375][ T8245] isofs_fill_super: get root inode failed [ 202.427766][ T8247] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1322'. [ 202.659579][ T8256] loop2: detected capacity change from 0 to 512 [ 203.029710][ T8259] dummy0 speed is unknown, defaulting to 1000 [ 205.586856][ T8288] netlink: 'syz.4.1330': attribute type 12 has an invalid length. [ 205.621509][ T8288] netlink: 'syz.4.1330': attribute type 29 has an invalid length. [ 205.668504][ T8288] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1330'. [ 205.683173][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1333'. [ 205.723088][ T8288] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1330'. [ 205.764722][ T8298] bridge2: port 1(veth0_to_bond) entered blocking state [ 205.801922][ T8298] bridge2: port 1(veth0_to_bond) entered disabled state [ 205.828474][ T8301] loop3: detected capacity change from 0 to 1024 [ 205.854832][ T8298] veth0_to_bond: entered allmulticast mode [ 205.865411][ T8301] EXT4-fs: inline encryption not supported [ 205.897758][ T8298] veth0_to_bond: entered promiscuous mode [ 205.928096][ T8301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 205.990440][ T8301] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.097252][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 206.097270][ T28] audit: type=1400 audit(2000000365.481:983): avc: denied { mount } for pid=8299 comm="syz.3.1334" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 206.185044][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 206.251916][ T8316] loop2: detected capacity change from 0 to 8192 [ 206.306070][ T28] audit: type=1400 audit(2000000365.691:984): avc: denied { write } for pid=8314 comm="syz.2.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.335651][ T8313] batadv_slave_0: entered promiscuous mode [ 206.342060][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1335'. [ 206.409058][ T8313] batadv_slave_0 (unregistering): left promiscuous mode [ 206.484823][ T8338] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 206.497338][ T8327] dummy0 speed is unknown, defaulting to 1000 [ 206.559149][ T8338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1341'. [ 206.665530][ T8346] loop0: detected capacity change from 0 to 4096 [ 206.699555][ T8346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.732161][ T8358] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1346'. [ 206.759275][ T8304] loop4: detected capacity change from 0 to 32768 [ 206.771633][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.803933][ T3300] loop4: p1 p3 < > [ 206.833220][ T8304] loop4: p1 p3 < > [ 206.859300][ T28] audit: type=1400 audit(2000000366.251:985): avc: denied { create } for pid=8362 comm="syz.6.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.949066][ T8368] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1349'. [ 207.238271][ T28] audit: type=1400 audit(2000000366.611:986): avc: denied { create } for pid=8379 comm="syz.0.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 207.272123][ T8378] siw: device registration error -23 [ 207.287484][ T28] audit: type=1400 audit(2000000366.611:987): avc: denied { write } for pid=8379 comm="syz.0.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 207.320789][ T8382] SELinux: failed to load policy [ 207.343191][ T8382] loop0: detected capacity change from 0 to 128 [ 207.503630][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 207.530057][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1357'. [ 207.557822][ T8382] syz.0.1356 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 207.578313][ T8382] CPU: 0 UID: 0 PID: 8382 Comm: syz.0.1356 Tainted: G W syzkaller #0 PREEMPT(full) [ 207.578411][ T8382] Tainted: [W]=WARN [ 207.578419][ T8382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 207.578500][ T8382] Call Trace: [ 207.578509][ T8382] [ 207.578517][ T8382] __dump_stack+0x1d/0x30 [ 207.578545][ T8382] dump_stack_lvl+0x95/0xd0 [ 207.578649][ T8382] dump_stack+0x15/0x1b [ 207.578719][ T8382] dump_header+0x80/0x240 [ 207.578747][ T8382] oom_kill_process+0x295/0x350 [ 207.578775][ T8382] out_of_memory+0x97d/0xb80 [ 207.578803][ T8382] try_charge_memcg+0x62e/0xa10 [ 207.578921][ T8382] obj_cgroup_charge_pages+0x23/0xc0 [ 207.579040][ T8382] __memcg_kmem_charge_page+0x9e/0x170 [ 207.579132][ T8382] __alloc_frozen_pages_noprof+0x18a/0x360 [ 207.579168][ T8382] alloc_pages_bulk_noprof+0x4aa/0x530 [ 207.579198][ T8382] ? policy_nodemask+0x417/0x5e0 [ 207.579229][ T8382] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 207.579309][ T8382] alloc_pages_bulk_mempolicy_noprof+0x35b/0xeb0 [ 207.579358][ T8382] ? alloc_pages_mpol+0x217/0x260 [ 207.579446][ T8382] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 207.579501][ T8382] __kvmalloc_node_noprof+0x3d4/0x650 [ 207.579531][ T8382] ? futex_hash_allocate+0x190/0x9d0 [ 207.579573][ T8382] ? futex_hash_allocate+0x190/0x9d0 [ 207.579615][ T8382] futex_hash_allocate+0x190/0x9d0 [ 207.579647][ T8382] ? cap_task_prctl+0x13f/0x6e0 [ 207.579716][ T8382] futex_hash_prctl+0xd8/0xf0 [ 207.579850][ T8382] __se_sys_prctl+0xa3d/0x13f0 [ 207.579884][ T8382] __x64_sys_prctl+0x67/0x80 [ 207.579977][ T8382] x64_sys_call+0x2533/0x3020 [ 207.580007][ T8382] do_syscall_64+0x12c/0x370 [ 207.580067][ T8382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.580129][ T8382] RIP: 0033:0x7f280e0fc819 [ 207.580148][ T8382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.580169][ T8382] RSP: 002b:00007f280cb4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 207.580201][ T8382] RAX: ffffffffffffffda RBX: 00007f280e375fa0 RCX: 00007f280e0fc819 [ 207.580218][ T8382] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 207.580234][ T8382] RBP: 00007f280e192c91 R08: 0000000000000000 R09: 0000000000000000 [ 207.580249][ T8382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.580286][ T8382] R13: 00007f280e376038 R14: 00007f280e375fa0 R15: 00007ffcafc7e528 [ 207.580308][ T8382] [ 207.580372][ T8382] memory: usage 307200kB, limit 307200kB, failcnt 100 [ 207.864384][ T8395] tmpfs: Bad value for 'mpol' [ 207.878293][ T28] audit: type=1400 audit(2000000367.251:988): avc: denied { mounton } for pid=8391 comm="syz.4.1358" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 207.919019][ T8382] memory+swap: usage 220008kB, limit 9007199254740988kB, failcnt 0 [ 207.927020][ T8382] kmem: usage 219584kB, limit 9007199254740988kB, failcnt 0 [ 207.937312][ T8397] loop4: detected capacity change from 0 to 1024 [ 207.966894][ T8397] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.968260][ T8382] Memory cgroup stats for /syz0: [ 207.973877][ T8382] cache 143360 [ 207.983100][ T8397] EXT4-fs (loop4): stripe (14) is not aligned with cluster size (16), stripe is disabled [ 208.027910][ T8382] rss 32768 [ 208.031373][ T8382] shmem 0 [ 208.034398][ T8382] mapped_file 131072 [ 208.049503][ T8382] dirty 0 [ 208.052704][ T8382] writeback 0 [ 208.053793][ T8397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.056076][ T8382] workingset_refault_anon 8247 [ 208.098589][ T8382] workingset_refault_file 386 [ 208.108417][ T8382] swap 172032 [ 208.126225][ T8382] swapcached 34295808 [ 208.141151][ T8382] pgpgin 172467 [ 208.144719][ T8382] pgpgout 172411 [ 208.148372][ T8382] pgfault 235284 [ 208.152011][ T8382] pgmajfault 1093 [ 208.155692][ T8382] inactive_anon 86016 [ 208.159807][ T8382] active_anon 0 [ 208.163441][ T8382] inactive_file 135168 [ 208.167552][ T8382] active_file 8192 [ 208.171391][ T8382] unevictable 0 [ 208.175000][ T8382] hierarchical_memory_limit 314572800 [ 208.180523][ T8382] hierarchical_memsw_limit 9223372036854771712 [ 208.187036][ T8382] total_cache 143360 [ 208.191036][ T8382] total_rss 32768 [ 208.194721][ T8382] total_shmem 0 [ 208.200209][ T8382] total_mapped_file 131072 [ 208.206257][ T8382] total_dirty 0 [ 208.209841][ T8382] total_writeback 0 [ 208.213892][ T8382] total_workingset_refault_anon 8247 [ 208.219234][ T8382] total_workingset_refault_file 386 [ 208.224595][ T8382] total_swap 172032 [ 208.230471][ T8382] total_swapcached 34295808 [ 208.235218][ T8382] total_pgpgin 172467 [ 208.239826][ T8382] total_pgpgout 172411 [ 208.244016][ T8382] total_pgfault 235284 [ 208.248200][ T8382] total_pgmajfault 1093 [ 208.252523][ T8382] total_inactive_anon 86016 [ 208.257136][ T8382] total_active_anon 0 [ 208.261432][ T8382] total_inactive_file 135168 [ 208.266094][ T8382] total_active_file 8192 [ 208.270439][ T8382] total_unevictable 0 [ 208.274771][ T8382] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1356,pid=8381,uid=0 [ 208.290049][ T8382] Memory cgroup out of memory: Killed process 8381 (syz.0.1356) total-vm:94032kB, anon-rss:1336kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 208.699055][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.780796][ T28] audit: type=1400 audit(2000000368.161:989): avc: denied { write } for pid=8419 comm="syz.4.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 208.825069][ T28] audit: type=1400 audit(2000000368.211:990): avc: denied { ioctl } for pid=8424 comm="syz.4.1370" path="socket:[21511]" dev="sockfs" ino=21511 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.877526][ T28] audit: type=1400 audit(2000000368.211:991): avc: denied { bind } for pid=8424 comm="syz.4.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.927338][ T8430] loop4: detected capacity change from 0 to 1024 [ 208.934452][ T8430] ext4: Bad value for 'auto_da_alloc' [ 209.097446][ T8438] loop3: detected capacity change from 0 to 128 [ 209.112284][ T8438] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.1368'. [ 209.136448][ T8438] vhci_hcd vhci_hcd.4: invalid port number 254 [ 209.142918][ T8438] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 209.548086][ T8451] tmpfs: Bad value for 'mpol' [ 210.214841][ T28] audit: type=1400 audit(2000000369.601:992): avc: denied { sys_module } for pid=8459 comm="syz.4.1382" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 210.291643][ T8470] loop6: detected capacity change from 0 to 128 [ 210.370216][ T8470] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.407665][ T8470] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 210.450993][ T8470] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.501139][ T8486] loop3: detected capacity change from 0 to 512 [ 210.543788][ T8486] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 210.553851][ T8492] loop4: detected capacity change from 0 to 512 [ 210.586673][ T8492] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 210.605000][ T8486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.606583][ T8492] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 210.617757][ T8486] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.656981][ T8492] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1394: inode #15: comm syz.4.1394: iget: illegal inode # [ 210.669954][ T8492] loop4: lost filesystem error report for type 5 error -117 [ 210.678272][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 210.692078][ C1] EXT4-fs (loop4): initial error at time 2000000370: ext4_orphan_get:1397 [ 210.700639][ C1] EXT4-fs (loop4): last error at time 2000000370: ext4_orphan_get:1397 [ 210.709921][ T8492] EXT4-fs (loop4): Remounting filesystem read-only [ 210.723795][ T8492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.748490][ T8506] loop2: detected capacity change from 0 to 512 [ 210.778161][ T8506] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 210.786411][ T8506] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 210.815193][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.818661][ T8506] EXT4-fs (loop2): 1 truncate cleaned up [ 210.830383][ T8506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.942975][ T8514] loop0: detected capacity change from 0 to 8192 [ 211.004338][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.140761][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 211.140825][ T28] audit: type=1400 audit(2000000370.521:994): avc: denied { read } for pid=8527 comm="syz.4.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 211.189563][ T28] audit: type=1400 audit(2000000370.581:995): avc: denied { setopt } for pid=8527 comm="syz.4.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 211.796422][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.826737][ T8547] __nla_validate_parse: 3 callbacks suppressed [ 211.826798][ T8547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1410'. [ 211.875247][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'. [ 211.896649][ T8550] siw: device registration error -23 [ 212.192799][ T8558] loop6: detected capacity change from 0 to 512 [ 213.830641][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1422'. [ 213.992116][ T8586] bridge0: entered promiscuous mode [ 213.997439][ T8586] vlan4: entered promiscuous mode [ 214.491007][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1435'. [ 214.971571][ T8633] SET target dimension over the limit! [ 214.986844][ T8635] loop2: detected capacity change from 0 to 128 [ 215.018461][ T28] audit: type=1400 audit(2000000374.411:996): avc: denied { ioctl } for pid=8637 comm="syz.0.1442" path="socket:[21075]" dev="sockfs" ino=21075 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 215.079740][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1443'. [ 215.257421][ T8659] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1448'. [ 215.302180][ T28] audit: type=1400 audit(2000000374.661:997): avc: denied { connect } for pid=8657 comm="syz.3.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 215.425844][ T8669] loop0: detected capacity change from 0 to 512 [ 215.457496][ T8665] loop4: detected capacity change from 0 to 512 [ 215.596948][ T8669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.610159][ T8665] ext4: Unknown parameter 'smackfshat' [ 216.129516][ T8669] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.174549][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1453'. [ 216.609012][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.800017][ T8677] loop6: detected capacity change from 0 to 512 [ 216.980633][ T28] audit: type=1400 audit(2000000376.371:998): avc: denied { create } for pid=8680 comm="syz.2.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 217.035354][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 217.163162][ T8691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1458'. [ 217.203469][ T28] audit: type=1400 audit(2000000376.421:999): avc: denied { nlmsg_read } for pid=8680 comm="syz.2.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 217.266716][ T8691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1458'. [ 217.762768][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1462'. [ 218.332154][ T8723] bridge4: entered promiscuous mode [ 218.351900][ T8723] bridge4: entered allmulticast mode [ 218.712338][ T8737] loop0: detected capacity change from 0 to 512 [ 218.726702][ T8737] FAT-fs (loop0): IO charset utfѾh$#ww9C= Y撳t EŒ&y3_@rRhB&5dxpO߁up@HX[曖[7VG1 y{vX)P1u&-@=6 not found [ 219.117913][ T8741] loop3: detected capacity change from 0 to 164 [ 219.166536][ T8741] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1472'. [ 219.282623][ T8739] loop6: detected capacity change from 0 to 32768 [ 219.821598][ T8739] loop6: p1 p3 < > [ 219.848456][ T8686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.892818][ T8747] netlink: 'syz.0.1474': attribute type 1 has an invalid length. [ 219.961057][ T8747] bond1: entered promiscuous mode [ 219.966890][ T8747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.078463][ T28] audit: type=1326 audit(2000000379.441:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201829c819 code=0x7ffc0000 [ 220.114298][ T28] audit: type=1326 audit(2000000379.441:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f201829c819 code=0x7ffc0000 [ 220.137967][ T28] audit: type=1326 audit(2000000379.441:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201829c819 code=0x7ffc0000 [ 220.173564][ T28] audit: type=1326 audit(2000000379.441:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f201825d04e code=0x7ffc0000 [ 220.210955][ T28] audit: type=1326 audit(2000000379.441:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f201829db17 code=0x7ffc0000 [ 220.306707][ T8774] loop4: detected capacity change from 0 to 512 [ 220.363617][ T8769] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1482'. [ 220.495121][ T28] audit: type=1326 audit(2000000379.441:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f201829c819 code=0x7ffc0000 [ 220.545040][ T8778] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1483'. [ 220.555925][ T8773] loop3: detected capacity change from 0 to 512 [ 220.638389][ T8773] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 220.695623][ T8773] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 220.720574][ T28] audit: type=1326 audit(2000000379.441:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f201829db17 code=0x7ffc0000 [ 220.781858][ T8773] EXT4-fs (loop3): 1 truncate cleaned up [ 220.829664][ T8773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.072408][ T28] audit: type=1326 audit(2000000379.441:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f201825d04e code=0x7ffc0000 [ 222.062624][ T28] audit: type=1326 audit(2000000379.441:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201829c819 code=0x7ffc0000 [ 222.086275][ T28] audit: type=1326 audit(2000000379.441:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f201829e087 code=0x7ffc0000 [ 222.297505][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.322348][ T28] audit: type=1326 audit(2000000379.441:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f201825d04e code=0x7ffc0000 [ 222.684838][ T28] audit: type=1326 audit(2000000379.441:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f201825d04e code=0x7ffc0000 [ 222.759886][ T28] audit: type=1326 audit(2000000379.441:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f201825d04e code=0x7ffc0000 [ 222.783862][ T28] audit: type=1326 audit(2000000379.441:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f201825d04e code=0x7ffc0000 [ 222.807604][ T28] audit: type=1326 audit(2000000379.441:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201829c819 code=0x7ffc0000 [ 222.833354][ T28] audit: type=1326 audit(2000000379.441:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201829c819 code=0x7ffc0000 [ 222.856914][ T28] audit: type=1326 audit(2000000379.441:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f201829c819 code=0x7ffc0000 [ 222.881718][ T28] audit: type=1326 audit(2000000379.441:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201829c819 code=0x7ffc0000 [ 223.006819][ T8808] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8808 comm=syz.3.1493 [ 223.431096][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1497'. [ 225.013745][ T8846] hub 9-0:1.0: USB hub found [ 225.031438][ T8846] hub 9-0:1.0: 8 ports detected [ 225.186885][ T8849] dns_resolver: Unsupported content type (254) [ 225.215339][ T8853] loop4: detected capacity change from 0 to 512 [ 225.263192][ T8853] EXT4-fs: Ignoring removed nobh option [ 225.327747][ T8859] loop3: detected capacity change from 0 to 2048 [ 225.352815][ T8853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.361556][ T8878] loop6: detected capacity change from 0 to 512 [ 225.375136][ T8853] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.393954][ T8875] syzkaller0: entered promiscuous mode [ 225.399584][ T8875] syzkaller0: entered allmulticast mode [ 225.418724][ T8859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.449198][ T8884] netlink: 'syz.2.1515': attribute type 9 has an invalid length. [ 225.457375][ T8878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.478821][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.479982][ T8878] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.554635][ T8886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=8886 comm=syz.4.1516 [ 225.605822][ T8878] EXT4-fs error (device loop6): ext4_add_entry:2415: inode #12: comm syz.6.1514: Directory hole found for htree leaf block 0 [ 225.645609][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.667748][ T8890] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1519'. [ 225.690970][ T7741] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.708959][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1518'. [ 225.761847][ T8897] loop6: detected capacity change from 0 to 164 [ 225.763283][ T8892] vlan4: entered promiscuous mode [ 225.783499][ T8892] syz_tun: entered promiscuous mode [ 225.839300][ T8895] loop4: detected capacity change from 0 to 8192 [ 225.992736][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1524'. [ 226.036911][ T8916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8916 comm=syz.0.1524 [ 226.086316][ T8917] netlink: 'syz.4.1527': attribute type 9 has an invalid length. [ 226.097234][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1527'. [ 226.117707][ T8917] macvlan2: entered promiscuous mode [ 226.124768][ T8917] hsr0: entered promiscuous mode [ 226.129985][ T8917] macvlan2: entered allmulticast mode [ 226.135448][ T8917] hsr0: entered allmulticast mode [ 226.148480][ T8917] hsr_slave_0: entered allmulticast mode [ 226.158270][ T8917] hsr_slave_1: entered allmulticast mode [ 226.881031][ T8953] loop0: detected capacity change from 0 to 128 [ 226.947612][ T8954] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.1537'. [ 226.956814][ T8954] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.1537'. [ 227.002128][ T8955] vhci_hcd vhci_hcd.4: invalid port number 254 [ 227.008358][ T8955] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 227.542336][ T8963] bond1: entered promiscuous mode [ 227.561161][ T8962] ip6gretap2: entered promiscuous mode [ 227.568589][ T8962] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 227.584411][ T8971] loop4: detected capacity change from 0 to 512 [ 227.628123][ T8978] loop0: detected capacity change from 0 to 512 [ 227.636047][ T8971] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 227.649277][ T8980] loop3: detected capacity change from 0 to 512 [ 227.661849][ T8980] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 227.670391][ T8978] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 227.679119][ T8980] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 227.701461][ T8980] EXT4-fs (loop3): 1 truncate cleaned up [ 227.704278][ T8971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.716446][ T8980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.733210][ T8971] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.750051][ T8990] loop6: detected capacity change from 0 to 1024 [ 227.755529][ T8978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.765081][ T8990] __quota_error: 50 callbacks suppressed [ 227.765097][ T8990] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 227.799806][ T8978] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.808188][ T8990] EXT4-fs warning (device loop6): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 227.826780][ T8990] EXT4-fs (loop6): mount failed [ 227.876012][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.879609][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1553'. [ 227.930214][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.966576][ T9007] loop2: detected capacity change from 0 to 4096 [ 228.033176][ T9013] netlink: 'syz.6.1558': attribute type 8 has an invalid length. [ 228.061283][ T9007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.095165][ T9009] EXT4-fs: Ignoring removed bh option [ 228.131831][ T9009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.198412][ T9009] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.236826][ T28] audit: type=1400 audit(2000000387.611:1068): avc: denied { read } for pid=9008 comm="syz.3.1555" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 228.288694][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.308281][ T9018] Unable to read rock-ridge attributes [ 228.373852][ T9018] dummy0 speed is unknown, defaulting to 1000 [ 228.457546][ T9026] siw: device registration error -23 [ 228.471639][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.534081][ T9033] netlink: 'syz.3.1564': attribute type 1 has an invalid length. [ 228.577188][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.661879][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'. [ 228.683322][ T28] audit: type=1400 audit(2000000388.061:1069): avc: denied { bind } for pid=9036 comm="syz.6.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 228.709823][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1565'. [ 228.719857][ T28] audit: type=1400 audit(2000000388.071:1070): avc: denied { accept } for pid=9036 comm="syz.6.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 228.723475][ T9041] vlan2: entered promiscuous mode [ 228.748965][ T28] audit: type=1400 audit(2000000388.071:1071): avc: denied { read } for pid=9036 comm="syz.6.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 228.796404][ T9039] dummy0 speed is unknown, defaulting to 1000 [ 228.829065][ T9046] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 228.853888][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'. [ 228.869650][ T9046] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1568: invalid indirect mapped block 4294967295 (level 1) [ 228.908582][ T9046] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 228.908810][ T9046] EXT4-fs (loop6): Remounting filesystem read-only [ 228.924676][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 228.924697][ C1] EXT4-fs (loop6): initial error at time 2000000388: ext4_free_branches:1023: inode 11 [ 228.924732][ C1] EXT4-fs (loop6): last error at time 2000000388: ext4_free_branches:1023: inode 11 [ 228.987127][ T9046] EXT4-fs (loop6): 2 truncates cleaned up [ 228.994552][ T9050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.022352][ T9046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.036185][ T9050] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.059501][ T28] audit: type=1400 audit(2000000388.441:1072): avc: denied { setattr } for pid=9047 comm="syz.0.1569" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 229.106038][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.116988][ T7741] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.229696][ T9070] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1574: inode has both inline data and extents flags [ 229.256511][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 229.262416][ T9070] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 229.268308][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 229.283919][ C1] EXT4-fs (loop3): initial error at time 2000000388: ext4_orphan_get:1397: inode 15 [ 229.287477][ T9070] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1574: couldn't read orphan inode 15 (err -117) [ 229.293348][ C1] EXT4-fs (loop3): last error at time 2000000388: ext4_orphan_get:1397: inode 15 [ 229.336204][ T9070] loop3: lost filesystem error report for type 5 error -117 [ 229.336820][ T9070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.361611][ T28] audit: type=1326 audit(2000000388.751:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9080 comm="syz.4.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f45b8c819 code=0x7ffc0000 [ 229.385124][ T28] audit: type=1326 audit(2000000388.751:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9080 comm="syz.4.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f45b8c819 code=0x7ffc0000 [ 229.409798][ T9081] EXT4-fs: Ignoring removed nobh option [ 229.416050][ T9081] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 229.438319][ T28] audit: type=1326 audit(2000000388.751:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9080 comm="syz.4.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1f45b8c819 code=0x7ffc0000 [ 229.465346][ T28] audit: type=1326 audit(2000000388.751:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9080 comm="syz.4.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1f45b8c582 code=0x7ffc0000 [ 229.468433][ T9081] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 229.502699][ T9087] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 229.512229][ T9087] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1581: Invalid inode bitmap blk 4 in block_group 0 [ 229.525860][ T9087] loop0: lost filesystem error report for type 5 error -117 [ 229.526450][ T9087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.558618][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.588363][ T9081] EXT4-fs (loop4): 1 truncate cleaned up [ 229.618708][ T9081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.718931][ T9103] xt_TPROXY: Can be used only with -p tcp or -p udp [ 229.726296][ T9081] EXT4-fs (loop4): shut down requested (0) [ 229.865526][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.923497][ T9114] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 229.938371][ T9114] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 229.949854][ T9114] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 229.987556][ T9114] System zones: 0-2 [ 229.987866][ T9117] EXT4-fs: Ignoring removed nobh option [ 229.999741][ T9114] , 18-18, 34-34 [ 230.003755][ T9114] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1589: inode #15: comm syz.4.1589: iget: illegal inode # [ 230.024364][ T9070] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 230.029010][ T9114] loop4: lost filesystem error report for type 5 error -117 [ 230.036373][ T9117] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 230.048302][ T9070] block device autoloading is deprecated and will be removed. [ 230.060097][ T9117] ext4 filesystem being mounted at /281/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 230.064012][ T9120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.074047][ T9114] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1589: couldn't read orphan inode 15 (err -117) [ 230.086162][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 230.086184][ C0] EXT4-fs (loop4): initial error at time 2000000389: ext4_orphan_get:1397 [ 230.086207][ C0] EXT4-fs (loop4): last error at time 2000000389: ext4_orphan_get:1397 [ 230.086596][ T9120] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.143314][ T9114] loop4: lost filesystem error report for type 5 error -117 [ 230.144909][ T9114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.181861][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.228860][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.285336][ T9136] netlink: 'syz.2.1595': attribute type 1 has an invalid length. [ 230.311541][ T9117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.349798][ T9140] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1595'. [ 230.361377][ T9140] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.375519][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.389406][ T9136] vlan4: entered promiscuous mode [ 230.394710][ T9136] bond2: entered promiscuous mode [ 230.420420][ T9144] set_capacity_and_notify: 11 callbacks suppressed [ 230.420493][ T9144] loop4: detected capacity change from 0 to 1764 [ 230.495952][ T9117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.510109][ T9136] loop2: detected capacity change from 0 to 512 [ 230.579634][ T9136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.597605][ T9136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1595'. [ 230.607704][ T9136] EXT4-fs error (device loop2): ext4_readdir:225: inode #12: comm syz.2.1595: path /338/file0/file0: directory fails checksum at offset 0 [ 230.681332][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.775757][ T9161] hub 9-0:1.0: USB hub found [ 230.780705][ T9161] hub 9-0:1.0: 8 ports detected [ 231.002510][ T9165] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1604'. [ 231.070083][ T9117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.221495][ T9165] vlan2: entered promiscuous mode [ 231.455875][ T9171] 9p: Bad value for 'rfdno' [ 231.473929][ T9117] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.605171][ T9174] SELinux: ebitmap start bit (32768) is beyond the end of the bitmap (1088) [ 231.628695][ T5363] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.643053][ T9174] SELinux: failed to load policy [ 231.648800][ T5363] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.648846][ T5363] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.648947][ T5363] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.749141][ T9180] dummy0 speed is unknown, defaulting to 1000 [ 231.752093][ T9177] 9pnet_virtio: no channels available for device elfrom [ 231.839196][ T5363] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.852760][ T9180] loop3: detected capacity change from 0 to 512 [ 231.909037][ T9180] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.942373][ T9180] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #15: comm syz.3.1609: corrupted inode contents [ 231.955016][ T9180] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 231.955301][ T9180] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 231.964493][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 231.964525][ C1] EXT4-fs (loop3): initial error at time 2000000391: ext4_do_update_inode:5602: inode 15 [ 231.964558][ C1] EXT4-fs (loop3): last error at time 2000000391: ext4_do_update_inode:5602: inode 15 [ 231.999654][ T9180] loop3: lost filesystem error report for type 5 error -117 [ 232.002043][ T5361] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.028324][ T9180] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #15: comm syz.3.1609: corrupted inode contents [ 232.041346][ T9180] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 232.041644][ T9180] EXT4-fs error (device loop3): ext4_evict_inode:313: inode #15: comm syz.3.1609: mark_inode_dirty error [ 232.062355][ T9180] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 232.062576][ T9180] EXT4-fs (loop3): 1 orphan inode deleted [ 232.078405][ T9180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.137615][ T5363] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.158423][ T9185] loop4: detected capacity change from 0 to 256 [ 232.251480][ T9185] FAT-fs (loop4): Directory bread(block 64) failed [ 232.258087][ T9185] FAT-fs (loop4): Directory bread(block 65) failed [ 232.264979][ T9185] FAT-fs (loop4): Directory bread(block 66) failed [ 232.271670][ T9185] FAT-fs (loop4): Directory bread(block 67) failed [ 232.278369][ T9185] FAT-fs (loop4): Directory bread(block 68) failed [ 232.284940][ T9185] FAT-fs (loop4): Directory bread(block 69) failed [ 232.291528][ T9185] FAT-fs (loop4): Directory bread(block 70) failed [ 232.298067][ T9185] FAT-fs (loop4): Directory bread(block 71) failed [ 232.305434][ T9185] FAT-fs (loop4): Directory bread(block 72) failed [ 232.312164][ T9185] FAT-fs (loop4): Directory bread(block 73) failed [ 232.406924][ T9185] ipip0: left promiscuous mode [ 232.414086][ T9185] bond0: left promiscuous mode [ 232.418978][ T9185] bridge2: left promiscuous mode [ 232.427557][ T9185] hsr0: left allmulticast mode [ 232.432554][ T9185] hsr_slave_0: left allmulticast mode [ 232.437969][ T9185] hsr_slave_1: left allmulticast mode [ 232.443518][ T9185] hsr0: left promiscuous mode [ 232.457572][ T9185] macvlan2: left promiscuous mode [ 232.462835][ T9185] macvlan2: left allmulticast mode [ 232.672529][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.892890][ T9190] bridge2: entered promiscuous mode [ 232.904157][ T9190] bridge2: entered allmulticast mode [ 232.999463][ T9193] syzkaller1: entered promiscuous mode [ 233.005597][ T9193] syzkaller1: entered allmulticast mode [ 233.015894][ T821] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.056855][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 233.056875][ T28] audit: type=1400 audit(2000000392.441:1141): avc: denied { map } for pid=9194 comm="syz.3.1613" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 233.173922][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.237155][ T9204] loop3: detected capacity change from 0 to 164 [ 233.246959][ T9202] bridge_slave_0: left allmulticast mode [ 233.257915][ T9204] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1617'. [ 233.277360][ T9205] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1615'. [ 233.301272][ T9202] bridge_slave_0: left promiscuous mode [ 233.309828][ T9202] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.320951][ T9202] bridge_slave_1: left allmulticast mode [ 233.326785][ T9202] bridge_slave_1: left promiscuous mode [ 233.366496][ T9202] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.385267][ T9202] team0: Port device team_slave_0 removed [ 233.394854][ T9202] team0: Port device team_slave_1 removed [ 233.402157][ T9202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.410126][ T9202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.419190][ T9202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.426787][ T9202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.439097][ T9202] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 233.479763][ T9212] loop2: detected capacity change from 0 to 512 [ 233.553687][ T9212] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 233.564847][ T9215] loop3: detected capacity change from 0 to 512 [ 233.592760][ T9215] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 233.601369][ T9212] FAT-fs (loop2): Filesystem has been set read-only [ 233.634328][ T9215] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1620: iget: bad i_size value: 38620345925642 [ 233.672728][ T9215] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 233.672963][ T9215] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1620: couldn't read orphan inode 15 (err -117) [ 233.682171][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 233.682223][ C0] EXT4-fs (loop3): initial error at time 2000000393: ext4_orphan_get:1397: inode 15 [ 233.682251][ C0] EXT4-fs (loop3): last error at time 2000000393: ext4_orphan_get:1397: inode 15 [ 233.727289][ T9219] siw: device registration error -23 [ 233.776857][ T9215] loop3: lost filesystem error report for type 5 error -117 [ 233.777611][ T9215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.940491][ T28] audit: type=1400 audit(2000000393.331:1142): avc: denied { map } for pid=9214 comm="syz.3.1620" path="/304/bus/cpuset.effective_mems" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 233.987042][ T9221] loop4: detected capacity change from 0 to 4096 [ 234.018738][ T9221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.077198][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1622'. [ 234.122780][ T9215] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1620: bg 0: block 5: invalid block bitmap [ 234.167334][ T28] audit: type=1400 audit(2000000393.531:1143): avc: denied { setattr } for pid=9220 comm="syz.4.1622" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 234.191816][ T9215] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 234.204752][ T9215] EXT4-fs (loop3): This should not happen!! Data will be lost [ 234.204752][ T9215] [ 234.214451][ T9215] EXT4-fs (loop3): Total free blocks count 0 [ 234.220766][ T9215] EXT4-fs (loop3): Free/Dirty block details [ 234.226887][ T9215] EXT4-fs (loop3): free_blocks=0 [ 234.235667][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.248515][ T9215] EXT4-fs (loop3): dirty_blocks=3500 [ 234.275383][ T9215] EXT4-fs (loop3): Block reservation details [ 234.296779][ T9233] loop0: detected capacity change from 0 to 128 [ 234.326129][ T9215] EXT4-fs (loop3): i_reserved_data_blocks=3500 [ 234.389032][ T9233] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.417512][ T9242] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1628'. [ 234.427078][ T9233] ext4 filesystem being mounted at /283/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 234.441321][ T9242] loop4: detected capacity change from 0 to 512 [ 234.661671][ T9242] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 234.670207][ T9242] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 234.681185][ T9242] EXT4-fs (loop4): 1 truncate cleaned up [ 234.798443][ T9242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.853609][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.926123][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.191940][ T28] audit: type=1400 audit(2000000394.581:1144): avc: denied { create } for pid=9247 comm="syz.2.1631" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1 [ 235.283492][ T28] audit: type=1400 audit(2000000394.601:1145): avc: denied { create } for pid=9247 comm="syz.2.1631" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 235.454296][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.614869][ T9262] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1634'. [ 235.733415][ T9264] set_capacity_and_notify: 1 callbacks suppressed [ 235.733445][ T9264] loop3: detected capacity change from 0 to 256 [ 235.929699][ T9264] FAT-fs (loop3): Directory bread(block 64) failed [ 236.003144][ T9264] FAT-fs (loop3): Directory bread(block 65) failed [ 236.045522][ T9264] FAT-fs (loop3): Directory bread(block 66) failed [ 236.094588][ T9264] FAT-fs (loop3): Directory bread(block 67) failed [ 236.146950][ T9264] FAT-fs (loop3): Directory bread(block 68) failed [ 236.192991][ T9264] FAT-fs (loop3): Directory bread(block 69) failed [ 236.235681][ T9264] FAT-fs (loop3): Directory bread(block 70) failed [ 236.272232][ T9264] FAT-fs (loop3): Directory bread(block 71) failed [ 236.295530][ T9264] FAT-fs (loop3): Directory bread(block 72) failed [ 236.336165][ T9264] FAT-fs (loop3): Directory bread(block 73) failed [ 236.435432][ T9274] loop4: detected capacity change from 0 to 8192 [ 236.452446][ T28] audit: type=1400 audit(2000000395.831:1146): avc: denied { module_load } for pid=9263 comm="syz.3.1635" path="/306/file0/bus" dev="loop3" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 236.476237][ T9264] syz.3.1635: attempt to access beyond end of device [ 236.476237][ T9264] loop3: rw=2049, sector=1224, nr_sectors = 76 limit=256 [ 236.674726][ T9282] FAULT_INJECTION: forcing a failure. [ 236.674726][ T9282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.697342][ T9282] CPU: 1 UID: 0 PID: 9282 Comm: syz.2.1640 Tainted: G W syzkaller #0 PREEMPT(full) [ 236.697450][ T9282] Tainted: [W]=WARN [ 236.697457][ T9282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.697472][ T9282] Call Trace: [ 236.697480][ T9282] [ 236.697490][ T9282] __dump_stack+0x1d/0x30 [ 236.697522][ T9282] dump_stack_lvl+0x95/0xd0 [ 236.697549][ T9282] dump_stack+0x15/0x1b [ 236.697643][ T9282] should_fail_ex+0x263/0x280 [ 236.697670][ T9282] should_fail+0xb/0x20 [ 236.697691][ T9282] should_fail_usercopy+0x1a/0x20 [ 236.697717][ T9282] _copy_from_user+0x1c/0xb0 [ 236.697806][ T9282] __sys_bpf+0x183/0x7e0 [ 236.697838][ T9282] __x64_sys_bpf+0x41/0x50 [ 236.697906][ T9282] x64_sys_call+0x10cb/0x3020 [ 236.697945][ T9282] do_syscall_64+0x12c/0x370 [ 236.698048][ T9282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.698085][ T9282] RIP: 0033:0x7f201829c819 [ 236.698101][ T9282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.698118][ T9282] RSP: 002b:00007f2016cef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.698141][ T9282] RAX: ffffffffffffffda RBX: 00007f2018515fa0 RCX: 00007f201829c819 [ 236.698158][ T9282] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000008 [ 236.698175][ T9282] RBP: 00007f2016cef090 R08: 0000000000000000 R09: 0000000000000000 [ 236.698189][ T9282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.698222][ T9282] R13: 00007f2018516038 R14: 00007f2018515fa0 R15: 00007fff4b6e42c8 [ 236.698286][ T9282] [ 236.877383][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1638'. [ 237.082353][ T9293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1643'. [ 237.093781][ T9293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1643'. [ 237.457249][ T9319] loop2: detected capacity change from 0 to 512 [ 237.465086][ T28] audit: type=1326 audit(2000000396.811:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d4bcc819 code=0x7ffc0000 [ 237.488900][ T28] audit: type=1326 audit(2000000396.811:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d4bcc819 code=0x7ffc0000 [ 237.515433][ T28] audit: type=1326 audit(2000000396.821:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d4bcc819 code=0x7ffc0000 [ 237.543685][ T28] audit: type=1326 audit(2000000396.821:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d4bcc819 code=0x7ffc0000 [ 237.568492][ T9323] loop0: detected capacity change from 0 to 512 [ 237.578345][ T9323] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 237.588174][ T9319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.590322][ T9323] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 237.612860][ T9323] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1655: Corrupt directory, running e2fsck is recommended [ 237.626995][ T9323] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 237.635724][ T9323] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #15: comm syz.0.1655: corrupted in-inode xattr: e_name out of bounds [ 237.650091][ T9323] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 237.650243][ T9319] ext4 filesystem being mounted at /349/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.659588][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 237.659607][ C1] EXT4-fs (loop0): initial error at time 2000000397: ext4_iget_extra_inode:5040: inode 15 [ 237.659647][ C1] EXT4-fs (loop0): last error at time 2000000397: ext4_iget_extra_inode:5040: inode 15 [ 237.668310][ T9323] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1655: couldn't read orphan inode 15 (err -117) [ 237.716747][ T9323] loop0: lost filesystem error report for type 5 error -117 [ 237.717508][ T9323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.778797][ T9336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10703 sclass=netlink_route_socket pid=9336 comm=syz.3.1657 [ 237.866982][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.537362][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.665516][ T9367] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26289 sclass=netlink_tcpdiag_socket pid=9367 comm=syz.0.1667 [ 238.689787][ T9368] loop3: detected capacity change from 0 to 164 [ 238.867284][ T9409] hub 9-0:1.0: USB hub found [ 238.872070][ T9409] hub 9-0:1.0: 8 ports detected [ 239.361691][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1670'. [ 239.484983][ T9422] vlan2: entered promiscuous mode [ 239.494250][ T9422] syz_tun: entered promiscuous mode [ 239.651517][ T9439] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1677'. [ 239.655819][ T9440] loop3: detected capacity change from 0 to 512 [ 239.674875][ T9440] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.682540][ T9438] loop4: detected capacity change from 0 to 512 [ 239.699307][ T9438] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 239.716352][ T9440] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 239.745252][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 239.745286][ T28] audit: type=1400 audit(2000000399.111:1172): avc: denied { accept } for pid=9442 comm="syz.0.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.748699][ T9440] EXT4-fs (loop3): orphan cleanup on readonly fs [ 239.772790][ T28] audit: type=1400 audit(2000000399.111:1173): avc: denied { read } for pid=9442 comm="syz.0.1678" dev="sockfs" ino=23397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.800855][ T9438] EXT4-fs (loop4): 1 truncate cleaned up [ 239.806572][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 239.816034][ T9440] EXT4-fs warning (device loop3): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 239.816147][ T9438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.834622][ T28] audit: type=1400 audit(2000000399.111:1174): avc: denied { write } for pid=9442 comm="syz.0.1678" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 239.872660][ T9440] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 239.880086][ T28] audit: type=1400 audit(2000000399.271:1175): avc: denied { rename } for pid=9436 comm="syz.4.1675" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 239.880805][ T9438] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1675: bg 0: block 465: padding at end of block bitmap is not set [ 240.008361][ T9440] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.1676: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 240.029793][ T9440] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 240.030129][ T9440] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1676: couldn't read orphan inode 13 (err -117) [ 240.039396][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 240.039412][ C0] EXT4-fs (loop3): last error at time 2000000399: ext4_ext_check_inode:521: inode 13 [ 240.127595][ T9440] loop3: lost filesystem error report for type 5 error -117 [ 240.218633][ T9440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.271047][ T9435] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 240.299584][ T9435] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 240.388431][ T9435] EXT4-fs warning (device loop3): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 240.439934][ T9440] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 240.469430][ T9440] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 240.492575][ T9435] EXT4-fs error (device loop3): ext4_lookup:1785: comm syz.3.1676: inode #15: comm syz.3.1676: iget: illegal inode # [ 240.508825][ T9440] EXT4-fs warning (device loop3): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 240.562257][ T9465] syzkaller0: entered promiscuous mode [ 240.577456][ T9465] syzkaller0: entered allmulticast mode [ 240.583387][ T50] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 240.585199][ T28] audit: type=1400 audit(2000000399.971:1176): avc: denied { bind } for pid=9463 comm="syz.2.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 240.598494][ T50] EXT4-fs (loop4): This should not happen!! Data will be lost [ 240.598494][ T50] [ 240.625279][ T50] EXT4-fs (loop4): Total free blocks count 0 [ 240.632154][ T50] EXT4-fs (loop4): Free/Dirty block details [ 240.647109][ T50] EXT4-fs (loop4): free_blocks=0 [ 240.652337][ T50] EXT4-fs (loop4): dirty_blocks=2 [ 240.657532][ T50] EXT4-fs (loop4): Block reservation details [ 240.663972][ T50] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 240.678741][ T3317] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 240.695090][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.744349][ T9479] siw: device registration error -23 [ 240.764265][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.824080][ T9484] sch_fq: defrate 7 ignored. [ 240.877007][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1687'. [ 240.893881][ T9491] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1686'. [ 240.903147][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 240.913582][ T9491] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1686'. [ 240.970318][ T9494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1688'. [ 240.988279][ T9494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1688'. [ 241.635799][ T28] audit: type=1400 audit(2000000401.021:1177): avc: denied { create } for pid=9511 comm="syz.6.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.636859][ T9512] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1695'. [ 241.690286][ T9514] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 241.709734][ T9512] loop6: detected capacity change from 0 to 512 [ 241.734019][ T9512] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 241.742556][ T9512] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 241.751930][ T9512] EXT4-fs (loop6): 1 truncate cleaned up [ 241.758577][ T9512] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.814413][ T9517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=9517 comm=syz.2.1697 [ 241.832724][ T7741] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.887621][ T9521] team0: Mode "" not found [ 241.908976][ T9519] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9519 comm=syz.6.1698 [ 241.991778][ T9526] loop2: detected capacity change from 0 to 128 [ 242.021051][ T9528] netlink: 'syz.6.1702': attribute type 8 has an invalid length. [ 242.140151][ T9532] loop6: detected capacity change from 0 to 1024 [ 242.148655][ T9532] EXT4-fs: Ignoring removed orlov option [ 242.440077][ T9532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.734609][ T7741] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.760601][ T9543] loop3: detected capacity change from 0 to 2368 [ 242.768668][ T9543] iso9660: Unknown parameter 'X-' [ 242.870798][ T9549] loop3: detected capacity change from 0 to 512 [ 242.890243][ T9549] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 242.925319][ T9549] EXT4-fs error (device loop3): ext4_iget_extra_inode:5040: inode #15: comm syz.3.1706: corrupted in-inode xattr: invalid ea_ino [ 242.925357][ T9549] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 242.925526][ T9549] EXT4-fs (loop3): Remounting filesystem read-only [ 242.925976][ T9549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.929273][ T9554] loop2: detected capacity change from 0 to 512 [ 242.930139][ T9554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 242.954795][ T9554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.954859][ T9554] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.974699][ T28] audit: type=1400 audit(2000000402.361:1178): avc: denied { write } for pid=9546 comm="syz.6.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 243.179544][ T9563] ip6erspan0: entered allmulticast mode [ 243.220657][ T9563] dvmrp0: entered allmulticast mode [ 243.643318][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.728118][ T9571] siw: device registration error -23 [ 243.762091][ T9573] bridge0: entered promiscuous mode [ 243.783248][ T9573] vlan2: entered promiscuous mode [ 243.914032][ T9558] syz.2.1710 (9558) used greatest stack depth: 6464 bytes left [ 243.924623][ T9582] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 243.951293][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.017277][ T9585] FAULT_INJECTION: forcing a failure. [ 244.017277][ T9585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.053023][ T9585] CPU: 1 UID: 0 PID: 9585 Comm: syz.2.1719 Tainted: G W syzkaller #0 PREEMPT(full) [ 244.053062][ T9585] Tainted: [W]=WARN [ 244.053069][ T9585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 244.053082][ T9585] Call Trace: [ 244.053089][ T9585] [ 244.053131][ T9585] __dump_stack+0x1d/0x30 [ 244.053167][ T9585] dump_stack_lvl+0x95/0xd0 [ 244.053188][ T9585] dump_stack+0x15/0x1b [ 244.053275][ T9585] should_fail_ex+0x263/0x280 [ 244.053350][ T9585] should_fail+0xb/0x20 [ 244.053376][ T9585] should_fail_usercopy+0x1a/0x20 [ 244.053406][ T9585] _copy_to_user+0x20/0xa0 [ 244.053442][ T9585] simple_read_from_buffer+0xb5/0x130 [ 244.053487][ T9585] proc_fail_nth_read+0x10e/0x150 [ 244.053520][ T9585] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.053606][ T9585] vfs_read+0x1ab/0x7f0 [ 244.053627][ T9585] ? __rcu_read_unlock+0x4e/0x70 [ 244.053704][ T9585] ? __fget_files+0x184/0x1c0 [ 244.053766][ T9585] ? mutex_lock+0x57/0x90 [ 244.053787][ T9585] ksys_read+0xdc/0x1a0 [ 244.053808][ T9585] __x64_sys_read+0x40/0x50 [ 244.053829][ T9585] x64_sys_call+0x2886/0x3020 [ 244.053905][ T9585] do_syscall_64+0x12c/0x370 [ 244.053997][ T9585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.054049][ T9585] RIP: 0033:0x7f201825d04e [ 244.054070][ T9585] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 244.054090][ T9585] RSP: 002b:00007f2016ceefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.054115][ T9585] RAX: ffffffffffffffda RBX: 00007f2016cef6c0 RCX: 00007f201825d04e [ 244.054131][ T9585] RDX: 000000000000000f RSI: 00007f2016cef0a0 RDI: 0000000000000005 [ 244.054221][ T9585] RBP: 00007f2016cef090 R08: 0000000000000000 R09: 0000000000000000 [ 244.054291][ T9585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.054305][ T9585] R13: 00007f2018516038 R14: 00007f2018515fa0 R15: 00007fff4b6e42c8 [ 244.054325][ T9585] [ 244.561360][ T9602] loop2: detected capacity change from 0 to 512 [ 244.669409][ T9605] xt_hashlimit: size too large, truncated to 1048576 [ 245.268411][ T9621] loop2: detected capacity change from 0 to 512 [ 245.276590][ T9621] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 245.371770][ T9620] loop3: detected capacity change from 0 to 8192 [ 245.966058][ T28] audit: type=1400 audit(2000000405.351:1179): avc: denied { ioctl } for pid=9608 comm="syz.2.1728" path="socket:[24184]" dev="sockfs" ino=24184 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 246.311744][ T9639] loop0: detected capacity change from 0 to 512 [ 246.626789][ T28] audit: type=1400 audit(2000000406.011:1180): avc: denied { setopt } for pid=9647 comm="syz.3.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 246.712146][ T9656] __nla_validate_parse: 7 callbacks suppressed [ 246.712169][ T9656] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1743'. [ 246.734471][ T9653] siw: device registration error -23 [ 246.809669][ T9656] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 246.812350][ T9660] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 246.878595][ T9660] FAT-fs (loop0): Filesystem has been set read-only [ 246.915845][ T9662] netlink: 'syz.2.1744': attribute type 1 has an invalid length. [ 246.935364][ T28] audit: type=1400 audit(2000000406.321:1181): avc: denied { setopt } for pid=9663 comm="syz.6.1745" lport=35270 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 246.978571][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1744'. [ 247.232471][ T9679] set_capacity_and_notify: 2 callbacks suppressed [ 247.232491][ T9679] loop6: detected capacity change from 0 to 512 [ 247.339755][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1752'. [ 247.435238][ T9686] loop6: detected capacity change from 0 to 128 [ 247.514019][ T9691] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.559714][ T9695] loop6: detected capacity change from 0 to 256 [ 247.592790][ T9691] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.642064][ T9691] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.711660][ T9691] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.812526][ T30] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.816885][ T9706] loop0: detected capacity change from 0 to 164 [ 247.821962][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.848587][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.859665][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.873476][ T9706] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1760'. [ 247.907434][ T28] audit: type=1326 audit(2000000407.291:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.6.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 247.934971][ T28] audit: type=1326 audit(2000000407.291:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.6.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 247.959164][ T28] audit: type=1326 audit(2000000407.291:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.6.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 247.982968][ T28] audit: type=1326 audit(2000000407.291:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.6.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 248.007104][ T28] audit: type=1326 audit(2000000407.291:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.6.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 248.030768][ T28] audit: type=1326 audit(2000000407.291:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.6.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 248.055249][ T28] audit: type=1326 audit(2000000407.291:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.6.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 248.105064][ T9712] loop6: detected capacity change from 0 to 512 [ 248.125836][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1764'. [ 248.136768][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1764'. [ 248.145795][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1764'. [ 248.171111][ T9716] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1763'. [ 248.201557][ T9716] loop0: detected capacity change from 0 to 128 [ 248.403293][ T9728] dummy0 speed is unknown, defaulting to 1000 [ 248.471923][ T9724] loop4: detected capacity change from 0 to 32768 [ 248.494523][ T9731] loop3: detected capacity change from 0 to 2048 [ 248.549018][ T9731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.579976][ T3276] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 248.587018][ T3276] loop4: p1 start 460800 is beyond EOD, truncated [ 248.594204][ T3276] loop4: p2 size 83886080 extends beyond EOD, truncated [ 248.614288][ T50] kworker/u8:3: attempt to access beyond end of device [ 248.614288][ T50] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 248.629550][ T50] kworker/u8:3: attempt to access beyond end of device [ 248.629550][ T50] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 248.645053][ T3276] loop4: p5 start 460800 is beyond EOD, truncated [ 248.652511][ T3276] loop4: p6 size 83886080 extends beyond EOD, truncated [ 248.660063][ T50] kworker/u8:3: attempt to access beyond end of device [ 248.660063][ T50] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 248.674024][ T50] kworker/u8:3: attempt to access beyond end of device [ 248.674024][ T50] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 248.691629][ T9724] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 248.697636][ T9724] loop4: p1 start 460800 is beyond EOD, truncated [ 248.728505][ T50] kworker/u8:3: attempt to access beyond end of device [ 248.728505][ T50] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 248.738384][ T9724] loop4: p2 size 83886080 extends beyond EOD, truncated [ 248.742326][ T50] kworker/u8:3: attempt to access beyond end of device [ 248.742326][ T50] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 248.750943][ T9724] loop4: p5 start 460800 is beyond EOD, [ 248.762346][ T50] kworker/u8:3: attempt to access beyond end of device [ 248.762346][ T50] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 248.781683][ T9731] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.1769: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 248.799168][ T50] kworker/u8:3: attempt to access beyond end of device [ 248.799168][ T50] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 248.812592][ T9724] truncated [ 248.815967][ T9724] loop4: p6 size 83886080 extends beyond EOD, truncated [ 248.823113][ T50] kworker/u8:3: attempt to access beyond end of device [ 248.823113][ T50] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 248.837974][ T50] kworker/u8:3: attempt to access beyond end of device [ 248.837974][ T50] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 249.088973][ T9744] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1773'. [ 249.105303][ T9744] loop4: detected capacity change from 0 to 512 [ 249.148066][ T9744] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 249.156412][ T9744] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 249.167382][ T9744] EXT4-fs (loop4): 1 truncate cleaned up [ 249.176573][ T9744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.236868][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 249.241350][ T7770] udevd[7770]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 249.248019][ T3276] udevd[3276]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 249.267833][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 249.290916][ T9737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1770'. [ 249.303749][ T9753] loop2: detected capacity change from 0 to 512 [ 249.333279][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.648438][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.768230][ T9758] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.380733][ T9795] sch_fq: defrate 7 ignored. [ 250.406668][ T9797] EXT4-fs: Ignoring removed i_version option [ 250.444407][ T9797] EXT4-fs: Ignoring removed bh option [ 250.471882][ T9797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.495363][ T9801] siw: device registration error -23 [ 250.531584][ T9797] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.615805][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.747581][ T9812] syzkaller0: entered promiscuous mode [ 250.763354][ T9812] syzkaller0: entered allmulticast mode [ 250.777573][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 252.265857][ T9832] set_capacity_and_notify: 2 callbacks suppressed [ 252.265880][ T9832] loop3: detected capacity change from 0 to 1024 [ 252.288383][ T9832] EXT4-fs: Ignoring removed i_version option [ 252.294770][ T9832] ext4: Unknown parameter 'noacl' [ 252.330302][ T9832] loop3: detected capacity change from 0 to 1024 [ 252.370246][ T9832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 252.388003][ T9832] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.410114][ T9837] __nla_validate_parse: 7 callbacks suppressed [ 252.410134][ T9837] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1804'. [ 252.455882][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 252.455901][ T28] audit: type=1326 audit(2000002990.843:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9839 comm="syz.6.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 252.494642][ T9840] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1805'. [ 252.506660][ T9841] FAULT_INJECTION: forcing a failure. [ 252.506660][ T9841] name failslab, interval 1, probability 0, space 0, times 0 [ 252.508410][ T9843] loop4: detected capacity change from 0 to 2048 [ 252.527645][ T28] audit: type=1326 audit(2000002990.843:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9839 comm="syz.6.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7655dfc819 code=0x7ffc0000 [ 252.552041][ T28] audit: type=1326 audit(2000002990.883:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f45b8c819 code=0x7ffc0000 [ 252.558768][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 252.575765][ T28] audit: type=1326 audit(2000002990.883:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f45b8c819 code=0x7ffc0000 [ 252.585546][ T9841] CPU: 1 UID: 0 PID: 9841 Comm: syz.6.1807 Tainted: G W syzkaller #0 PREEMPT(full) [ 252.585578][ T9841] Tainted: [W]=WARN [ 252.585585][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.585598][ T9841] Call Trace: [ 252.585606][ T9841] [ 252.585616][ T9841] __dump_stack+0x1d/0x30 [ 252.585700][ T9841] dump_stack_lvl+0x95/0xd0 [ 252.585753][ T9841] dump_stack+0x15/0x1b [ 252.585774][ T9841] should_fail_ex+0x263/0x280 [ 252.585803][ T9841] should_failslab+0x8c/0xb0 [ 252.585825][ T9841] kmem_cache_alloc_noprof+0x66/0x400 [ 252.585886][ T9841] ? audit_log_start+0x34c/0x730 [ 252.585909][ T9841] audit_log_start+0x34c/0x730 [ 252.585931][ T9841] ? kstrtouint_from_user+0xa8/0xf0 [ 252.585959][ T9841] audit_seccomp+0x47/0x100 [ 252.586030][ T9841] ? __seccomp_filter+0x8db/0x1350 [ 252.586058][ T9841] __seccomp_filter+0x8ec/0x1350 [ 252.586118][ T9841] ? __rcu_read_unlock+0x4e/0x70 [ 252.586139][ T9841] ? __fget_files+0x184/0x1c0 [ 252.586164][ T9841] ? mutex_lock+0x57/0x90 [ 252.586184][ T9841] ? mutex_unlock+0x4e/0x90 [ 252.586260][ T9841] __secure_computing+0x81/0x150 [ 252.586315][ T9841] do_syscall_64+0xd3/0x370 [ 252.586342][ T9841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.586365][ T9841] RIP: 0033:0x7f7655dfc819 [ 252.586382][ T9841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.586418][ T9841] RSP: 002b:00007f765484f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fc [ 252.586448][ T9841] RAX: ffffffffffffffda RBX: 00007f7656075fa0 RCX: 00007f7655dfc819 [ 252.586463][ T9841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 252.586516][ T9841] RBP: 00007f765484f090 R08: 0000000000000000 R09: 0000000000000000 [ 252.586543][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.586556][ T9841] R13: 00007f7656076038 R14: 00007f7656075fa0 R15: 00007ffee197fa68 [ 252.586581][ T9841] [ 252.586683][ T9841] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 252.617354][ T9843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.619618][ T9841] audit: out of memory in audit_log_start [ 252.645799][ T28] audit: type=1326 audit(2000002990.883:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f45b8c819 code=0x7ffc0000 [ 252.804153][ T3551] Bluetooth: hci0: command 0x1003 tx timeout [ 252.804203][ T6031] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 252.823666][ T9850] audit: audit_backlog=65 > audit_backlog_limit=64 [ 252.826995][ T28] audit: type=1326 audit(2000002990.883:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1f45b8c819 code=0x7ffc0000 [ 252.833407][ T9850] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 252.879417][ T9851] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1808'. [ 252.915301][ T9851] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1808'. [ 252.990015][ T9853] loop6: detected capacity change from 0 to 512 [ 252.996699][ T9853] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.076066][ T9853] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.155151][ T9853] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.039105][ T9883] loop6: detected capacity change from 0 to 512 [ 254.134404][ T9883] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 254.157086][ T9886] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1819'. [ 254.174186][ T9886] loop3: detected capacity change from 0 to 512 [ 254.232242][ T9886] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 254.240624][ T9886] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 254.250024][ T9886] EXT4-fs (loop3): 1 truncate cleaned up [ 254.321537][ T9895] loop4: detected capacity change from 0 to 2048 [ 254.334897][ T9892] loop0: detected capacity change from 0 to 4096 [ 254.669699][ T9927] netlink: 'syz.4.1826': attribute type 9 has an invalid length. [ 255.056459][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1830'. [ 255.552670][ T9981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.561353][ T9981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.570307][ T9981] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1831'. [ 255.803699][ T9930] loop0: detected capacity change from 0 to 32768 [ 255.842013][ T9989] loop3: detected capacity change from 0 to 128 [ 256.075898][ T9988] syz.3.1834 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 256.117345][ T3300] loop0: p1 p3 < > [ 256.180961][ T9930] loop0: p1 p3 < > [ 256.219385][ T9992] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1835'. [ 256.237347][ T9988] CPU: 1 UID: 0 PID: 9988 Comm: syz.3.1834 Tainted: G W syzkaller #0 PREEMPT(full) [ 256.237420][ T9988] Tainted: [W]=WARN [ 256.237426][ T9988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.237438][ T9988] Call Trace: [ 256.237446][ T9988] [ 256.237454][ T9988] __dump_stack+0x1d/0x30 [ 256.237525][ T9988] dump_stack_lvl+0x95/0xd0 [ 256.237546][ T9988] dump_stack+0x15/0x1b [ 256.237566][ T9988] dump_header+0x80/0x240 [ 256.237588][ T9988] oom_kill_process+0x295/0x350 [ 256.237627][ T9988] out_of_memory+0x97d/0xb80 [ 256.237727][ T9988] try_charge_memcg+0x62e/0xa10 [ 256.237767][ T9988] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 256.237833][ T9988] __swap_cache_prepare_and_add+0x67/0x460 [ 256.237910][ T9988] ? alloc_pages_mpol+0x217/0x260 [ 256.237945][ T9988] swap_cache_alloc_folio+0xa2/0x120 [ 256.238031][ T9988] swap_cluster_readahead+0x26e/0x3d0 [ 256.238087][ T9988] swapin_readahead+0xde/0x840 [ 256.238152][ T9988] ? _raw_spin_unlock+0x9/0x30 [ 256.238178][ T9988] ? swap_put_entries_cluster+0x385/0x3a0 [ 256.238213][ T9988] ? swap_put_entries_cluster+0x71/0x3a0 [ 256.238263][ T9988] ? __rcu_read_unlock+0x4e/0x70 [ 256.238288][ T9988] ? swap_cache_get_folio+0x26f/0x280 [ 256.238363][ T9988] do_swap_page+0x2fe/0x21e0 [ 256.238391][ T9988] ? css_rstat_updated+0xbb/0x280 [ 256.238411][ T9988] ? __rcu_read_lock+0x36/0x50 [ 256.238434][ T9988] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 256.238540][ T9988] handle_mm_fault+0xb46/0x3020 [ 256.238573][ T9988] ? vma_start_read+0x1c7/0x2c0 [ 256.238604][ T9988] do_user_addr_fault+0x62f/0x1050 [ 256.238641][ T9988] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 256.238742][ T9988] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 256.238765][ T9988] ? trace_page_fault_user+0x1f/0xe0 [ 256.238800][ T9988] exc_page_fault+0x62/0xa0 [ 256.238903][ T9988] asm_exc_page_fault+0x26/0x30 [ 256.238922][ T9988] RIP: 0033:0x7f92d4bcd336 [ 256.238940][ T9988] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 256.238961][ T9988] RSP: 002b:00007ffe96257460 EFLAGS: 00010246 [ 256.238979][ T9988] RAX: 000000000003e826 RBX: 00007f92d4e45fa0 RCX: 000000000003e800 [ 256.238992][ T9988] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 00000000000003e8 [ 256.239042][ T9988] RBP: 00007f92d4e47da0 R08: 000000000246c9a3 R09: 7fffffffffffffff [ 256.239094][ T9988] R10: 3fffffffffffffff R11: 0000000000000246 R12: 000000000003ea8e [ 256.239110][ T9988] R13: 00007f92d4e45fac R14: 000000000003e79c R15: 00007ffe96257590 [ 256.239131][ T9988] [ 256.239138][ T9988] memory: usage 251612kB, limit 307200kB, failcnt 457 [ 256.559402][ T9988] memory+swap: usage 142104kB, limit 9007199254740988kB, failcnt 0 [ 256.603524][ T9988] kmem: usage 140700kB, limit 9007199254740988kB, failcnt 0 [ 256.681610][ T9992] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 256.697427][ T9992] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 256.707928][ T9988] Memory cgroup stats for /syz3: [ 256.708163][ T9988] cache 524288 [ 256.716475][ T9988] rss 4096 [ 256.737720][ T9992] EXT4-fs (loop4): 1 truncate cleaned up [ 256.743955][ T9992] EXT4-fs mount: 9 callbacks suppressed [ 256.743972][ T9992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.763834][ T9988] shmem 0 [ 256.766787][ T9988] mapped_file 65536 [ 256.770968][ T9988] dirty 0 [ 256.773931][ T9988] writeback 0 [ 256.779540][ T9988] workingset_refault_anon 9475 [ 256.784321][ T9988] workingset_refault_file 3880 [ 256.790030][ T9988] swap 512000 [ 256.793337][ T9988] swapcached 43741184 [ 256.799266][ T9988] pgpgin 262578 [ 256.802740][ T9988] pgpgout 262419 [ 256.810150][ T9988] pgfault 303625 [ 256.833540][ T9988] pgmajfault 1276 [ 256.837340][ T9999] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1837'. [ 256.850152][ T9988] inactive_anon 8192 [ 256.854180][ T9988] active_anon 106496 [ 256.872237][ T9988] inactive_file 393216 [ 256.880606][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.899800][T10003] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1840'. [ 256.902486][ T9988] active_file 143360 [ 256.914554][ T9988] unevictable 0 [ 256.938331][ T9988] hierarchical_memory_limit 314572800 [ 256.943944][ T9988] hierarchical_memsw_limit 9223372036854771712 [ 256.950566][ T9988] total_cache 524288 [ 256.954468][ T9988] total_rss 4096 [ 256.958250][ T9988] total_shmem 0 [ 256.961851][ T9988] total_mapped_file 65536 [ 256.966272][ T9988] total_dirty 0 [ 256.970019][ T9988] total_writeback 0 [ 256.974122][ T9988] total_workingset_refault_anon 9475 [ 256.979594][ T9988] total_workingset_refault_file 3880 [ 256.985759][T10006] netlink: 'syz.4.1838': attribute type 21 has an invalid length. [ 256.993694][T10006] netlink: 'syz.4.1838': attribute type 4 has an invalid length. [ 257.012955][T10006] dummy0 speed is unknown, defaulting to 1000 [ 257.080038][ T9988] total_swap 512000 [ 257.094644][T10003] blktrace: Concurrent blktraces are not allowed on loop12 [ 257.112329][ T9988] total_swapcached 43741184 [ 257.147599][ T9988] total_pgpgin 262578 [ 257.156402][T10003] msdos: Unknown parameter '\-8a|G~Idos1xfloppy' [ 257.180923][ T9988] total_pgpgout 262419 [ 257.224902][ T9988] total_pgfault 303625 [ 257.264839][ T9988] total_pgmajfault 1276 [ 257.307440][ T9988] total_inactive_anon 8192 [ 257.385226][ T9988] total_active_anon 106496 [ 257.389781][ T9988] total_inactive_file 393216 [ 257.394381][ T9988] total_active_file 143360 [ 257.424197][ T9988] total_unevictable 0 [ 257.456079][ T9988] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1834,pid=9988,uid=0 [ 257.520262][ T9988] Memory cgroup out of memory: Killed process 9988 (syz.3.1834) total-vm:94032kB, anon-rss:1228kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 257.626715][T10008] __nla_validate_parse: 2 callbacks suppressed [ 257.626789][T10008] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1841'. [ 257.693409][T10032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1847'. [ 257.728353][T10032] netlink: 'syz.3.1847': attribute type 6 has an invalid length. [ 257.736125][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1847'. [ 258.584328][T10047] set_capacity_and_notify: 2 callbacks suppressed [ 258.584379][T10047] loop3: detected capacity change from 0 to 512 [ 258.943264][T10085] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1849'. [ 259.007184][T10085] loop4: detected capacity change from 0 to 512 [ 259.058129][T10085] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 259.067982][T10087] tipc: Enabling of bearer rejected, failed to enable media [ 259.107462][T10085] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 259.276839][T10085] EXT4-fs (loop4): 1 truncate cleaned up [ 259.293414][T10085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.401679][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.899569][T10100] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1854'. [ 259.958196][T10105] xt_hashlimit: size too large, truncated to 1048576 [ 260.007071][T10110] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1856'. [ 260.054948][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'. [ 260.343904][T10121] loop0: detected capacity change from 0 to 128 [ 260.354089][T10121] EXT4-fs: Ignoring removed nobh option [ 260.366148][T10121] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.369829][T10121] ext4 filesystem being mounted at /327/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 260.398683][ T28] kauditd_printk_skb: 152 callbacks suppressed [ 260.398702][ T28] audit: type=1400 audit(2000002998.794:1369): avc: denied { connect } for pid=10122 comm="syz.2.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 260.785403][T10139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1864'. [ 260.796535][ T28] audit: type=1400 audit(2000002999.184:1370): avc: denied { bind } for pid=10140 comm="syz.6.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.818487][ T28] audit: type=1400 audit(2000002999.214:1371): avc: denied { write } for pid=10140 comm="syz.6.1865" path="socket:[25935]" dev="sockfs" ino=25935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.870289][T10145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.888385][T10143] loop6: detected capacity change from 0 to 128 [ 261.165439][T10152] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1869'. [ 261.175065][T10152] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1869'. [ 261.186350][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.199143][T10152] erspan0: entered promiscuous mode [ 261.233749][T10152] debugfs: 'hsr1' already exists in 'hsr' [ 261.246038][T10152] Cannot create hsr debugfs directory [ 261.254570][T10155] loop0: detected capacity change from 0 to 512 [ 261.261325][T10155] ext4: Unknown parameter 'smackfshat' [ 261.283418][T10158] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 261.531753][T10178] netlink: 'syz.0.1879': attribute type 4 has an invalid length. [ 261.567688][T10182] loop2: detected capacity change from 0 to 512 [ 261.598852][T10182] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 261.607193][T10182] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 261.616121][T10182] EXT4-fs (loop2): 1 truncate cleaned up [ 261.622661][T10182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.673840][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.739980][ T28] audit: type=1326 audit(2000003000.134:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10192 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280e0fc819 code=0x7ffc0000 [ 261.846973][ T28] audit: type=1326 audit(2000003000.134:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10192 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280e0fc819 code=0x7ffc0000 [ 261.913138][ T28] audit: type=1326 audit(2000003000.134:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10192 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280e0fc819 code=0x7ffc0000 [ 261.986623][ T28] audit: type=1326 audit(2000003000.134:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10192 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f280e0fc819 code=0x7ffc0000 [ 262.056840][ T28] audit: type=1326 audit(2000003000.184:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10192 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280e0fc819 code=0x7ffc0000 [ 262.126652][ T28] audit: type=1326 audit(2000003000.184:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10192 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280e0fc819 code=0x7ffc0000 [ 262.236658][ T28] audit: type=1326 audit(2000003000.184:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10192 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f280e0fc582 code=0x7ffc0000 [ 262.311456][T10214] loop0: detected capacity change from 0 to 1024 [ 262.335695][T10215] loop2: detected capacity change from 0 to 4096 [ 262.342510][T10215] EXT4-fs: Ignoring removed bh option [ 262.352197][T10215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.422122][T10214] loop0: detected capacity change from 0 to 512 [ 262.465900][T10214] EXT4-fs: dax option not supported [ 262.735447][T10227] __nla_validate_parse: 4 callbacks suppressed [ 262.735468][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1896'. [ 262.835307][T10227] loop6: detected capacity change from 0 to 512 [ 262.857121][T10227] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 262.896715][T10227] EXT4-fs (loop6): 1 truncate cleaned up [ 262.897048][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.902908][T10227] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.980606][T10230] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1897'. [ 263.009510][ T7741] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.036131][T10230] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 263.236934][T10244] netlink: 'syz.6.1903': attribute type 1 has an invalid length. [ 263.304011][T10244] bond0: (slave geneve2): making interface the new active one [ 263.331696][T10244] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 263.341079][ T4105] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 263.375337][ T4105] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 263.393831][T10253] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1907'. [ 263.402984][ T4105] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 263.412130][ T4105] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 263.479311][T10264] netlink: 'syz.0.1910': attribute type 4 has an invalid length. [ 263.487229][T10264] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1910'. [ 263.591648][T10276] loop3: detected capacity change from 0 to 512 [ 263.664080][T10281] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1909'. [ 263.763476][T10285] loop0: detected capacity change from 0 to 512 [ 263.799074][T10285] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 263.822826][T10285] FAT-fs (loop0): Filesystem has been set read-only [ 264.253765][T10305] loop3: detected capacity change from 0 to 512 [ 264.316138][T10305] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 264.542853][T10305] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1921: invalid indirect mapped block 1023410176 (level 0) [ 264.610093][T10305] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 264.616647][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 264.633502][ C0] EXT4-fs (loop3): initial error at time 2000003003: ext4_free_branches:1023: inode 11 [ 264.644564][ C0] EXT4-fs (loop3): last error at time 2000003003: ext4_free_branches:1023: inode 11 [ 264.907693][T10305] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 11: block 237:freeing already freed block (bit 236); block bitmap corrupt. [ 264.945589][T10325] loop2: detected capacity change from 0 to 512 [ 264.957304][T10305] EXT4-fs (loop3): 1 truncate cleaned up [ 264.977561][T10325] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 264.977561][T10325] program syz.2.1926 not setting count and/or reply_len properly [ 265.052706][T10305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.127514][T10305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.217023][T10334] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1925'. [ 265.438095][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1935'. [ 266.351408][ T3412] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 266.369847][ T3412] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 266.640255][T10393] loop0: detected capacity change from 0 to 256 [ 266.863922][T10397] loop4: detected capacity change from 0 to 8192 [ 266.938354][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 266.938447][ T28] audit: type=1326 audit(2000003005.334:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.0.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280e0fc819 code=0x7ffc0000 [ 266.973748][ T28] audit: type=1326 audit(2000003005.364:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.0.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280e0fc819 code=0x7ffc0000 [ 267.046083][ T28] audit: type=1326 audit(2000003005.364:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.0.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280e0fc819 code=0x7ffc0000 [ 267.103496][T10412] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20003 [ 267.136135][ T28] audit: type=1326 audit(2000003005.364:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.0.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f280e0fc819 code=0x7ffc0000 [ 267.175439][ T28] audit: type=1326 audit(2000003005.364:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.0.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280e0fc819 code=0x7ffc0000 [ 267.230186][ T28] audit: type=1326 audit(2000003005.415:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.0.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280e0fc819 code=0x7ffc0000 [ 267.278788][ T28] audit: type=1326 audit(2000003005.415:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.0.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280e0fc819 code=0x7ffc0000 [ 267.312337][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 267.386003][ T28] audit: type=1326 audit(2000003005.415:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.0.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f280e0fc582 code=0x7ffc0000 [ 267.482663][ T28] audit: type=1326 audit(2000003005.415:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.0.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f280e0fc617 code=0x7ffc0000 [ 267.551297][T10428] bridge5: entered promiscuous mode [ 267.555970][ T28] audit: type=1326 audit(2000003005.415:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.0.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f280e0b9511 code=0x7ffc0000 [ 267.575957][T10428] bridge5: entered allmulticast mode [ 267.589928][T10428] team0: Port device bridge5 added [ 268.121448][T10436] siw: device registration error -23 [ 268.248774][T10440] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1963'. [ 268.435914][T10451] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1966'. [ 269.544496][T10490] loop0: detected capacity change from 0 to 128 [ 269.562426][T10498] netlink: 288 bytes leftover after parsing attributes in process `syz.6.1984'. [ 269.571268][T10496] siw: device registration error -23 [ 269.704925][T10501] 9p: Could not find request transport: xen [ 269.726535][T10501] netlink: 'syz.0.1982': attribute type 10 has an invalid length. [ 269.754257][T10501] team0: Port device dummy0 added [ 269.776022][T10511] netlink: 'syz.0.1982': attribute type 10 has an invalid length. [ 269.798853][T10513] netlink: 'syz.6.1990': attribute type 9 has an invalid length. [ 269.816035][T10511] team0: Port device dummy0 removed [ 269.858929][T10510] siw: device registration error -23 [ 269.931392][T10515] netlink: 'syz.4.1991': attribute type 4 has an invalid length. [ 270.182546][T10536] netlink: 'syz.4.1999': attribute type 10 has an invalid length. [ 270.222113][T10536] team0: Port device netdevsim1 added [ 270.239913][T10536] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1999'. [ 270.454420][T10545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2002'. [ 270.477542][T10545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2002'. [ 270.503172][T10545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2002'. [ 270.517568][T10545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2002'. [ 271.101010][T10573] sch_fq: defrate 7 ignored. [ 271.161691][T10580] loop0: detected capacity change from 0 to 1024 [ 271.163991][T10583] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2011'. [ 271.185084][T10586] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2013'. [ 271.194954][T10580] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 271.248694][ T2] ================================================================== [ 271.256794][ T2] BUG: KCSAN: data-race in copy_process / free_pid [ 271.263314][ T2] [ 271.265636][ T2] read-write to 0xffffffff86c5ffa8 of 4 bytes by task 7741 on cpu 1: [ 271.273697][ T2] free_pid+0xbc/0x1e0 [ 271.277790][ T2] free_pids+0x54/0xb0 [ 271.281870][ T2] release_task+0x9a7/0xb60 [ 271.286381][ T2] wait_consider_task+0x1160/0x1670 [ 271.291613][ T2] __do_wait+0xf9/0x510 [ 271.295781][ T2] do_wait+0xb6/0x260 [ 271.299799][ T2] kernel_wait4+0x19f/0x210 [ 271.304315][ T2] __x64_sys_wait4+0x91/0x120 [ 271.309013][ T2] x64_sys_call+0x2aee/0x3020 [ 271.313696][ T2] do_syscall_64+0x12c/0x370 [ 271.318292][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.324187][ T2] [ 271.326509][ T2] read to 0xffffffff86c5ffa8 of 4 bytes by task 2 on cpu 0: [ 271.333788][ T2] copy_process+0x187f/0x20b0 [ 271.338465][ T2] kernel_clone+0x16b/0x5d0 [ 271.342972][ T2] kernel_thread+0xe5/0x120 [ 271.347480][ T2] kthreadd+0x25b/0x320 [ 271.351645][ T2] ret_from_fork+0x150/0x360 [ 271.356247][ T2] ret_from_fork_asm+0x1a/0x30 [ 271.361120][ T2] [ 271.363436][ T2] value changed: 0x80000111 -> 0x8000010f [ 271.369175][ T2] [ 271.371508][ T2] Reported by Kernel Concurrency Sanitizer on: [ 271.377667][ T2] CPU: 0 UID: 0 PID: 2 Comm: kthreadd Tainted: G W syzkaller #0 PREEMPT(full) [ 271.388114][ T2] Tainted: [W]=WARN [ 271.391914][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.401966][ T2] ================================================================== [ 271.442582][T10580] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2010: Invalid block bitmap block 0 in block_group 0 [ 271.456537][T10580] loop0: lost filesystem error report for type 5 error -117 [ 271.456894][T10580] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.2010: Failed to acquire dquot type 0 [ 271.475616][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 271.475646][ C1] EXT4-fs (loop0): initial error at time 2000003009: ext4_read_block_bitmap_nowait:483 [ 271.475673][ C1] EXT4-fs (loop0): last error at time 2000003009: ext4_read_block_bitmap_nowait:483 [ 271.502048][T10580] loop0: lost filesystem error report for type 5 error -117 [ 271.502352][T10580] EXT4-fs error (device loop0): ext4_free_blocks:6724: comm syz.0.2010: Freeing blocks not in datazone - block = 0, count = 4096 [ 271.523387][T10580] loop0: lost filesystem error report for type 5 error -117 [ 271.523670][T10580] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2010: Invalid inode bitmap blk 0 in block_group 0 [ 271.543762][ T5369] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:18: Failed to release dquot type 0 [ 271.543821][T10580] loop0: lost filesystem error report for type 5 error -117 [ 271.555606][T10580] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 271.555681][ T5369] loop0: lost filesystem error report for type 5 error -117 [ 271.562909][T10580] loop0: lost filesystem error report for type 5 error -117 [ 271.563023][T10580] EXT4-fs (loop0): 1 orphan inode deleted [ 271.592156][T10580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.622298][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.633244][ T6467] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:21: Failed to release dquot type 0