last executing test programs: 1m24.442489791s ago: executing program 1 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x8, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r4, 0x402, 0x80000023) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r5, 0x402, 0x40000008) close_range(r3, r4, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r0) 1m24.218735396s ago: executing program 1 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="f5af25bd7000000000000e00000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80210, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) (async) setpgid(0x0, r6) (async) fchdir(r5) (async) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') (async) sendmmsg$inet(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000640)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000840)='\a', 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000003040)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000d40)='{g', 0x2}], 0x1}}], 0x3, 0x0) 1m23.954875824s ago: executing program 1 (id=113): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000004, 0x511, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x7}, 0x2, 0x3ff, 0x9, 0x5, 0x80000000, 0x20006, 0x0, 0x0, 0x7f, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)={{0xcc, 0x3, 0x2, 0x27b, 0xdf, 0x9, 0x44, 0x3}}, 0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x65e, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x1, 0x21, 0x1, 0x0, 0x0) 1m23.893706389s ago: executing program 1 (id=115): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fgetxattr(r0, &(0x7f0000000000)=@random={'os2.', 'NLBL_CIPSOv4\x00'}, &(0x7f0000000040)=""/230, 0xe6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r6 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r6, &(0x7f00000003c0)='net/wireless\x00') ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000380)=0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="b72abab9439ca41f5cf14d6435575ba774ee5f5c23ff2f5176f5773d08a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67b6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f87d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceebc569478657aedeb62c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbfae303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0536b90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a23b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9ce8f6346cb5c08a9dcb2", 0xa41}], 0x1}, 0x40000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r8, 0xd9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000004e1a6d8cd3c46e27c75165919768f69f000000000000000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fcdbdf25020000000800010003000000"], 0x1c}}, 0x20000000) r9 = syz_open_dev$evdev(&(0x7f00000001c0), 0x9, 0x20000) ioctl$EVIOCGSND(r9, 0x8040451a, &(0x7f0000001240)=""/4096) 1m23.715951891s ago: executing program 1 (id=118): ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000040)={0x1, 0x6}) r0 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getgroups(0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001400090003000000ffdbdf25050000000c00010080f9000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/58) 1m23.414624502s ago: executing program 1 (id=121): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x1, 0x1000000, 0x3}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m23.382732023s ago: executing program 32 (id=121): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x1, 0x1000000, 0x3}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 44.71826218s ago: executing program 0 (id=677): r0 = getpid() socket$nl_xfrm(0x10, 0x3, 0x6) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000f80), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180600"/15, @ANYRES32=r3, @ANYBLOB="001f000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_notify(r2, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="6c6f636b0f0942fdb2"], 0x9) ftruncate(0xffffffffffffffff, 0x5) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) 43.875462168s ago: executing program 0 (id=692): openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 43.85349527s ago: executing program 0 (id=694): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r1, 0x2, {0x1, 0xf0, 0x3}, 0xfd}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x34, r4, 0x301, 0x0, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {}, 0x1}, 0x18) 43.798472563s ago: executing program 0 (id=696): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000001380)=ANY=[], 0xe6f, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000cc0)=ANY=[], 0x8, 0x2ef, &(0x7f00000007c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 43.474259535s ago: executing program 0 (id=706): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000006c0)={r3, @in6={{0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x58}}}, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB="640100001800010027bd7001fddbdf251d0104001e01060000010302ff71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953acabaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c005c8d03001d00000e0001000000c8a95d290800ea000015000100010000c002010000d7b08865f8ee33fb0300000015000300030000200786000054831bdbae1d82b305"], 0x164}}, 0x240448c8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x20000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x50) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0xa, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x19}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x13}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, 0x0) 43.118789619s ago: executing program 0 (id=714): syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) (async) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40010000060a010400000000000000000a0000010900010073797a310000000034000480300001800b0001006f626a7265660000200002800900020073797a3200000000080003400000001008000140000000070900020073797a32000000"], 0x168}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2af5) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000006c0)="f0", 0x1}], 0x1}, 0x40850) (async) sendmsg$inet6(r5, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000006c0)="f0", 0x1}], 0x1}, 0x40850) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x7, @local, 0x4}}, 0x2, 0x7, 0x8001, 0x2, 0x44, 0x3, 0x3}, &(0x7f0000000140)=0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x7, @local, 0x4}}, 0x2, 0x7, 0x8001, 0x2, 0x44, 0x3, 0x3}, &(0x7f0000000140)=0x9c) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000227bd7000fbdbdf250600000008001100000000000800110001000000080009000400000008000900010000000500060006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40095}, 0x4005) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x48010) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x48010) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029a83ddfc6dbdf254c0000000c00a70404000000000000000f00a900736563786e646e616d6500000e0001006ee90c64657673691cd006e4b6c133a190646d9100000f0002006e657464657673696d300000"], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029a83ddfc6dbdf254c0000000c00a70404000000000000000f00a900736563786e646e616d6500000e0001006ee90c64657673691cd006e4b6c133a190646d9100000f0002006e657464657673696d300000"], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) r8 = socket$inet6(0xa, 0x5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3200000000240007800c00028008000163000080020c0001800800014000001c02080006400000000005000500020000000500010006"], 0x70}}, 0x0) dup2(r8, r8) (async) dup2(r8, r8) personality(0xfe47fef9f5ff7379) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x20) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 43.118378569s ago: executing program 33 (id=714): syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) (async) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40010000060a010400000000000000000a0000010900010073797a310000000034000480300001800b0001006f626a7265660000200002800900020073797a3200000000080003400000001008000140000000070900020073797a32000000"], 0x168}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2af5) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000006c0)="f0", 0x1}], 0x1}, 0x40850) (async) sendmsg$inet6(r5, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000006c0)="f0", 0x1}], 0x1}, 0x40850) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x7, @local, 0x4}}, 0x2, 0x7, 0x8001, 0x2, 0x44, 0x3, 0x3}, &(0x7f0000000140)=0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x7, @local, 0x4}}, 0x2, 0x7, 0x8001, 0x2, 0x44, 0x3, 0x3}, &(0x7f0000000140)=0x9c) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000227bd7000fbdbdf250600000008001100000000000800110001000000080009000400000008000900010000000500060006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40095}, 0x4005) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x48010) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x48010) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029a83ddfc6dbdf254c0000000c00a70404000000000000000f00a900736563786e646e616d6500000e0001006ee90c64657673691cd006e4b6c133a190646d9100000f0002006e657464657673696d300000"], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029a83ddfc6dbdf254c0000000c00a70404000000000000000f00a900736563786e646e616d6500000e0001006ee90c64657673691cd006e4b6c133a190646d9100000f0002006e657464657673696d300000"], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) r8 = socket$inet6(0xa, 0x5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3200000000240007800c00028008000163000080020c0001800800014000001c02080006400000000005000500020000000500010006"], 0x70}}, 0x0) dup2(r8, r8) (async) dup2(r8, r8) personality(0xfe47fef9f5ff7379) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x20) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 31.201613192s ago: executing program 3 (id=789): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000004, 0x511, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x7}, 0x2, 0x3ff, 0x9, 0x5, 0x80000000, 0x20006, 0x0, 0x0, 0x7f, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="18080000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x65e, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x1, 0x21, 0x1, 0x0, 0x0) 30.875982234s ago: executing program 3 (id=791): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x1f}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000b00)={0x53, 0x0, 0x0, 0x9, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x12, 0xffffffff, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x3eb}}], 0x1, 0x8001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ec6000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) capget(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x7f, 0x0, 0xfe000000, 0xffffffff, 0x0, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x5454, &(0x7f0000000280)={0x0, 0x9c3d, 0xc000, 0xc, 0xa0002f4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r2, @ANYBLOB="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"], 0x4d0}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x1f}) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000b00)={0x53, 0x0, 0x0, 0x9, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x12, 0xffffffff, 0x0}) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x3eb}}], 0x1, 0x8001) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ec6000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) capget(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x7f, 0x0, 0xfe000000, 0xffffffff, 0x0, 0x8}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x5454, &(0x7f0000000280)={0x0, 0x9c3d, 0xc000, 0xc, 0xa0002f4}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r2, @ANYBLOB="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"], 0x4d0}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) (async) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) (async) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) 30.602883723s ago: executing program 3 (id=792): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000580)="f156b5", 0x3}], 0x1, 0x5e9e, 0x3) socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 30.595868774s ago: executing program 3 (id=794): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000001380)=ANY=[], 0xe6f, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000cc0)=ANY=[], 0x8, 0x2ef, &(0x7f00000007c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) 30.221299889s ago: executing program 3 (id=801): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000004, 0x511, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x7}, 0x2, 0x3ff, 0x9, 0x5, 0x80000000, 0x20006, 0x0, 0x0, 0x7f, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="18080000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x65e, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x1, 0x21, 0x1, 0x0, 0x0) 29.834878005s ago: executing program 3 (id=802): set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50828, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000180), 0x6}, 0x0, 0x9, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x2d, 0x12000, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) fspick(0xffffffffffffffff, 0x0, 0xf0961890b4faa8d0) setuid(0xee00) setpriority(0x2, 0x0, 0x401) 29.774240709s ago: executing program 34 (id=802): set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50828, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000180), 0x6}, 0x0, 0x9, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x2d, 0x12000, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) fspick(0xffffffffffffffff, 0x0, 0xf0961890b4faa8d0) setuid(0xee00) setpriority(0x2, 0x0, 0x401) 27.99624282s ago: executing program 5 (id=815): r0 = getpid() socket$nl_xfrm(0x10, 0x3, 0x6) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000f80), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000000000181200", @ANYRES32=r3, @ANYBLOB="001f000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_notify(r2, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="6c6f636b0f0942fdb2"], 0x9) ftruncate(0xffffffffffffffff, 0x5) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) 27.032235876s ago: executing program 5 (id=821): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff3, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) 26.878896127s ago: executing program 5 (id=825): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x0, 0x3}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, 0x0, &(0x7f0000000180)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'lblc\x00', 0x11, 0x10000004, 0x8}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast1, 0x4e24, 0x3, 'lc\x00', 0x10, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x7, 0x12d5a, 0x12d4c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e1f, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0x300}, 0x0) 25.95434429s ago: executing program 5 (id=827): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000001380)=ANY=[], 0xe6f, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) 25.456683864s ago: executing program 5 (id=829): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000004, 0x511, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x7}, 0x2, 0x3ff, 0x9, 0x5, 0x80000000, 0x20006, 0x0, 0x0, 0x7f, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="18080000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x65e, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r5, r6, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x1, 0x21, 0x1, 0x0, 0x0) 25.050845452s ago: executing program 5 (id=830): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc}, {}, {0xd, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2f}}}]}}]}]}]}}]}, 0x6c}}, 0x0) 25.043863282s ago: executing program 35 (id=830): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc}, {}, {0xd, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2f}}}]}}]}]}]}}]}, 0x6c}}, 0x0) 20.657982331s ago: executing program 2 (id=839): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000004, 0x511, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x7}, 0x2, 0x3ff, 0x9, 0x5, 0x80000000, 0x20006, 0x0, 0x0, 0x7f, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="18080000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x65e, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r5, r6, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x1, 0x21, 0x1, 0x0, 0x0) 20.421913927s ago: executing program 2 (id=841): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0xf0, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0xb8, 0x2, [@TCA_BASIC_EMATCHES={0x18, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_ACT={0x9c, 0x3, [@m_connmark={0x98, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x68, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c443d003af1f22d796733e174a55728b309ff94c380276aa4c273687acbac759cf82dcb64f9e6"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x80009, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0x8001ff, 0x0, 0x8, 0x8, 0x23, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x5, 0x200, 0x8001, 0x0, 0x9}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x80}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) geteuid() socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x8002, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {}, {@nodiscard}, {@delalloc}, {@resgid}, {@jqfmt_vfsv0}, {@init_itable}]}, 0xff, 0x4b4, &(0x7f0000000c80)="$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") r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x80, 0x5}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000100)={0x84, @multicast2, 0x4e23, 0x3, 'sh\x00', 0x14, 0xc, 0x22}, 0x2c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4c080) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cd47000fcdbdf250900020073797a3200000000000041007278650014ee33007465616d5f736c61611f042a8b371f42"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c42647612d91de4353d68b0fa00", 0x0, 0x8, 0x4000000, 0x7}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000280)={@multicast1, @multicast1, 0x1, "7ea97ddb2a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) 17.482427308s ago: executing program 2 (id=851): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xd6309000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1f41, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x5, 0x60}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x10}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (fail_nth: 4) 16.900731377s ago: executing program 2 (id=853): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000001380)=ANY=[], 0xe6f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) 16.143377629s ago: executing program 2 (id=856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x2f2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r5, &(0x7f0000000300), 0x5aa, 0x3b00, 0x0, 0xfffffffffffffdfd) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}}, 0x0) 15.051901783s ago: executing program 2 (id=861): rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') (async) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0xf}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r3, 0x29, 0x0, 0x1, 0x200, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x4700, 0x0, 0xfffffffc}}) 15.004573447s ago: executing program 36 (id=861): rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') (async) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0xf}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r3, 0x29, 0x0, 0x1, 0x200, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x4700, 0x0, 0xfffffffc}}) 9.472625304s ago: executing program 6 (id=898): prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff850000005000000018118000c8f4feb9480af960b4b4a902bc37d31d238bc0a1b3357c9a6d7dadfe2bedec151c3027e8fb2c806f7ddcc127e94f93891daada70dddff874f6204490d1f1811f2555bbbd05c5402ca1d033631e4a1432387d121749a61df9f600000000000000009300284cabd2a66a870867e4e06b10b162eb593c18", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = dup(r4) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, 0x0) 8.249761307s ago: executing program 6 (id=902): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0xdf, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x9, 0x2, 0x80040001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x3, 0x1}}, {@generic={0x8864, "11703067c7e064cc"}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 6.016044639s ago: executing program 9 (id=904): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000000)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfd, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = inotify_init1(0x800) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="2feebe8d881590f656d01482831f4b036a7bb40c6782cbb5dafe72ea857665", 0x1f}], 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f00000003c0)=0xfffffffd, 0x1) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x40000000) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 5.554423751s ago: executing program 6 (id=908): r0 = getpid() socket$nl_xfrm(0x10, 0x3, 0x6) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000f80), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="001f000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_notify(r2, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="6c6f636b0f0942fdb2"], 0x9) ftruncate(0xffffffffffffffff, 0x5) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) 5.193530645s ago: executing program 7 (id=913): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x3432b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0xa4b4, 0x10003, 0xfffffff8, 0x7, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x2, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) 5.13679457s ago: executing program 6 (id=915): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x56, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}}) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000000901080000000000000000000000010900010073797a3100000000180002001400"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b79, &(0x7f0000000040)={0x0, 0xc89f, 0x20, 0x7, 0x151}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r6, 0x40285881, &(0x7f0000000000)={r6, 0x0, 0x7, 0x8, 0xfffffffffffffffb, 0xf}) 5.082368463s ago: executing program 9 (id=916): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27f", 0x88}], 0x1}, 0x40000) 5.006856328s ago: executing program 6 (id=919): rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xfffffefffffffffe]}, 0x0, 0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0xf) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffbb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "f38b7f869dc5c3e26ac45fddcba0ca9d8b1f049df651f99cae564df88a24d842876061dbdf47258e824d497e760b8f9cbe9125090dff51a2571d4dc8de8d09c8d7a0d142fcbe91b0816252d3e22656cfc65722a377c91594e0b8539e22c3bffb59e36f8245041a164c6c84ddc21798a522106e087bbdb7776f6e4d64596ca20200cd1b462c15473697813f5ecf263d6e0530300565b55f91ef6778d920386e698f98bb2d7eab2acec199eb22dff43085e4b72ae0a3a4dc3e54ea506f695d494ec0a6544905af790f39b1bd6cd89040d3d877025715674be73f7f7b985ac540ec4b274ccf55c6d69cb9c196c0a72e6c14a6bd22b1b65e04520800"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3c}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x400, 0x80000000, 0x55, 0x9, 0x3, 0x12, 0x1}}]}}]}, 0x154}}, 0x0) wait4(r0, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8001) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffffffffffe3e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x804) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 4.99275552s ago: executing program 4 (id=920): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2001ff, 0x2, @perf_config_ext={0x7, 0x1}, 0xc224, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x40009}, 0x1c) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r3, 0x204) r5 = socket(0x10, 0x2, 0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r8, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) 4.553290419s ago: executing program 4 (id=923): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0e000091d028ef8020"], 0xfe33) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x7ff, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r4 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) readv(r4, &(0x7f0000000140)=[{0x0}, {&(0x7f0000004900)=""/4067, 0xfe3}], 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) 4.130776958s ago: executing program 4 (id=925): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_io_uring_setup(0x760b, 0x0, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000000)) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = open(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x104) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x3c, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000001c0)='./bus/file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) inotify_init1(0x0) (async) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000040)='.\x00', 0xa4000061) (async) inotify_add_watch(r6, &(0x7f0000000040)='.\x00', 0xa4000061) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r7, 0x0, 0x54) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r8, 0x0, 0x0) (async) write$tcp_mem(r8, 0x0, 0x0) mbind(&(0x7f00006dc000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000240)=0xff, 0x603e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c00"], 0x14b0}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c00"], 0x14b0}}, 0x0) epoll_create(0x7) epoll_create1(0x0) (async) epoll_create1(0x0) 4.024419345s ago: executing program 7 (id=926): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000080)={[{@jqfmt_vfsv0}, {@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@resuid}, {@errors_remount}, {@nodiscard}, {@journal_ioprio}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000080)="aa1d484e243448000000f7c08b0e278a88f1bf9500726235276d720984d211fbdf23ea7eb5373532db0e8f21d5bc27d85e447511", 0x34}], 0x2) r1 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x400000) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r4, 0x0, 0x7, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) statfs(&(0x7f0000000ac0)='.\x00', 0x0) 3.791657971s ago: executing program 8 (id=927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400ffd910000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.642940381s ago: executing program 8 (id=928): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000004, 0x511, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x7}, 0x2, 0x3ff, 0x9, 0x5, 0x80000000, 0x20006, 0x0, 0x0, 0x7f, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="18080000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x65e, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, 0x0) io_uring_enter(r4, 0x1, 0x21, 0x1, 0x0, 0x0) 3.642515241s ago: executing program 6 (id=929): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x222802, 0xc0) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x2, 0x80805, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x700, {0x5, 0x7}, 0x1}, 0x1) listxattr(0x0, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x188202, 0x0) (async) r6 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010080ffffff000000000100000008000100020000001c0004800500030080000000050003008501000005fc0300060000000800"], 0x40}}, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x3c}}, 0x54) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 3.599256824s ago: executing program 37 (id=929): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x222802, 0xc0) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x2, 0x80805, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x700, {0x5, 0x7}, 0x1}, 0x1) listxattr(0x0, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x188202, 0x0) (async) r6 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010080ffffff000000000100000008000100020000001c0004800500030080000000050003008501000005fc0300060000000800"], 0x40}}, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x3c}}, 0x54) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 3.484183002s ago: executing program 4 (id=931): connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) socket(0xa, 0x3, 0x87) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f00000004c0)=0x3, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@multicast, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x8, 0x5, 0x0, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xfffc}}}}}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x20da, 0x9, 0xc, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x25}, {@loopback, 0x4e23, 0x1, 0x4, 0x12d5c, 0x12d5c}}, 0x44) 3.36729959s ago: executing program 8 (id=932): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) quotactl$Q_GETINFO(0xffffffff80000501, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0xb00000000000000, 0x0, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)={0xa, 0x7a, 0x601, 0xffffffff, 0x1, "", [@nested={0x0, 0xd3, 0x0, 0x1, [@generic="e1fe229ee72d60d9c60de772077c18a5b4dcba9fedd0c25a0cd7c0036e27e686bf2b505e845e61a421bc6d9adc84d1b2feacbdb89ab28d8702aa81b394140df3dd096eaba6e400cc9eca0a206b6138316753a8ef343ab1d69bc13f72cc0113c32d8029b6d886ad"]}]}, 0x18}], 0x1}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x80) 3.175972813s ago: executing program 9 (id=933): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 3) 2.594771373s ago: executing program 7 (id=934): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f6b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x8000000000000008, 0x0) mbind(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x8000000, 0x7, 0x3) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f00000002c0)="dcd8a7", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0xc852) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)={0x48, 0x0, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x20}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80000}, 0x4000040) setresgid(0x0, 0xffffffffffffffff, 0xee00) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001340)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}, 0x0) 2.49887121s ago: executing program 9 (id=935): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@remote, 0x4e21, 0x0, 0xf7fb, 0x2002, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x401, 0x0, 0x9, 0x8, 0x0, 0x0, 0x20000000000000}, {0x81, 0x9, 0x83, 0x80ff}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x8, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10, 0x4, 0x0, 0xfc, 0x1, 0x40000}]}]}, 0xfc}}, 0x4080) 2.235950198s ago: executing program 9 (id=936): mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x400000a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@newqdisc={0xf0, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6f30}, @TCA_RATE={0x6, 0x5, {0x1, 0x3a}}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x7, 0x9, 0x7ff, 0x1, 0x9, 0x60010f87, 0x5}}, {0xe, 0x2, [0xffff, 0x8, 0x0, 0x9, 0x5]}}, {{0x1c, 0x1, {0xc9, 0xf, 0xd, 0x10001, 0x0, 0x1ff, 0xf85d, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xe, 0x6, 0x1, 0x3, 0x3, 0x7, 0x2, 0x2}}, {0x8, 0x2, [0x9, 0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_RATE={0x6, 0x5, {0x80, 0x9}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xb1f}, @TCA_PIE_ECN={0x8}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x814}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)=@newtfilter={0x198, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {0x0, 0x6}, {0x4, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x164, 0x2, [@TCA_MATCHALL_ACT={0x160, 0x2, [@m_tunnel_key={0x15c, 0x14, 0x0, 0x0, {{0xf}, {0xa4, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x9, 0x6, 0x6, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x30}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x0, 0x4, @dev={0xac, 0x14, 0x14, 0x1e}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xf}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x8, 0x10000000, 0x8, 0x4}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0xec, 0x6, "b14dd78c6479ff0a05041acfe077ec10c87397ff28b4628d72d5c6e8d5d59a29be41c7f3fdf69789415b99a50d0d6ec632df4ab2a978480120c84efd4d109494fd0f7c3eb2ece2208a22bd94bdeed15bae8b7de863e90b1383d466d13128dfdb3fae3840581117118502fce58a3260b3ccf88be030f6e172951444893bece6d89628c31172"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x24044010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) clock_adjtime(0x3, &(0x7f0000000200)={0x8000000000000001, 0x0, 0x13, 0x6, 0x2f00, 0x0, 0xffffffff, 0xfffffffffffffd00, 0xf1, 0xffffffffffffff2e, 0xa, 0x25, 0x774, 0xfffffffffffffffb, 0x4, 0x8, 0x4, 0x9, 0xe, 0x8, 0xffffffffffff8000, 0xffffffffffffffec, 0x2, 0x9, 0x8, 0x6}) close_range(r0, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) r6 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) ioctl$SIOCX25GSUBSCRIP(r6, 0x89e0, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x73dacdde, 0x7ff}) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/60) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x4, 0x4, 0x380, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, @mcast1, [0xffffff00, 0xff000000, 0xff000000], [0x0, 0xff000000, 0x0, 0xff000000], 'dvmrp1\x00', 'lo\x00', {}, {0xff}, 0x3b, 0xa6, 0x2, 0x1e}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'pim6reg0\x00', {0xf18}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', [0xff, 0x0, 0xffffffff], [0x0, 0x0, 0xff000000, 0xff], 'batadv0\x00', '\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x74}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'veth0_to_team\x00', {0xffffffffffff3ebb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x80000001, 0x800}, 0x28) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6(0xa, 0x2, 0x0) 2.05271514s ago: executing program 4 (id=937): r0 = syz_io_uring_setup(0x60ec, &(0x7f0000000080)={0x0, 0x21b7, 0x800, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x11, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1, {0x1}}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x7}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map, 0x7, 0x0, 0x0, &(0x7f0000000400)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setregs(0xf, r4, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~', @ANYRES32=0x0], 0x1c}}, 0x4000054) io_uring_enter(r0, 0x3, 0x20557e, 0x64, 0x0, 0x0) r11 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r11, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r11, 0x29, 0x2f, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x7fffffff}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 1.986973284s ago: executing program 7 (id=938): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x300000000000, 0x0, 0x0, 0x9, 0x17, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000000000000000000000006948c34b0b7d2e5100", [0x4, 0x40000000000000]}}) splice(r1, &(0x7f0000000000)=0x1, r1, &(0x7f0000000040)=0xfffffffeffffffff, 0x3, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x101) 1.986623964s ago: executing program 9 (id=939): getpid() sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x268, 0x0, 0x5, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [{{0x254, 0x1, {{0x0, 0x9}, 0xd1, 0x1, 0x1e, 0x9, 0x25, 'syz0\x00', "cb90575cdb65d5490ebbc967f07d968c555ef416fccad479dc431825a635a101", "befc47c7fb75973c9e859836d3f86c4b66b8d45e9fb17d3ec74e1c1d6442651d", [{0x0, 0x2, {0x0, 0x4}}, {0x2, 0x0, {0x0, 0x8bef}}, {0x90, 0x9, {0x3, 0x8}}, {0x100, 0x9, {0x3, 0x8}}, {0x0, 0x8, {0x2, 0x7}}, {0x81, 0x5, {0x0, 0x80000001}}, {0x5, 0x7ff, {0x0, 0x7}}, {0x0, 0x4, {0x3, 0x1}}, {0x5, 0x3}, {0x7, 0xce4, {0x2, 0xfff}}, {0x2, 0xffea, {0x2, 0x3}}, {0x6da9, 0x3e6, {0x1, 0x3}}, {0x0, 0xc, {0x3, 0xfffffffa}}, {0x101, 0x3, {0x2, 0x8}}, {0x5, 0x9, {0x1}}, {0x5, 0x0, {0x2, 0xe}}, {0x97, 0x9, {0x1, 0xfffff800}}, {0xff, 0x8, {0x3, 0xfffff801}}, {0xffff, 0x24, {0x0, 0x7}}, {0x3, 0x7, {0x0, 0x8}}, {0xafd3, 0x4, {0x0, 0x10001}}, {0x9, 0x3, {0x3, 0x3}}, {0xab, 0x8, {0x1, 0x8ee}}, {0x1, 0xd, {0x1, 0x10000}}, {0x2, 0x31, {0x2, 0x5}}, {0x9, 0x5, {0x2, 0x4d4b6d6f}}, {0xfffe, 0x4, {0x2, 0x1}}, {0xd, 0x0, {0x0, 0x2}}, {0x3ff, 0x8, {0x0, 0x401}}, {0x7e66, 0x4, {0x2, 0x6}}, {0xc6, 0x8, {0x2, 0x100}}, {0x4a, 0x849, {0x3}}, {0x1000, 0x3, {0x3, 0x81}}, {0x5b31, 0x177, {0x2, 0x80}}, {0x702, 0x0, {0x3, 0x1}}, {0xfff8, 0x1, {0x1, 0x7}}, {0xac, 0xacb, {0x0, 0x6}}, {0x5, 0x1, {0x0, 0x80000001}}, {0x8000, 0x1, {0x0, 0x6}}, {0x7, 0x2, {0x1, 0xf}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x80}, 0x4) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001200000000000000000000000000000002000002000000000000000000000000fc01000000000000000000000000000005000600"], 0xa0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000001c0)=0x4, 0x4) close(0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)}], 0x1}, 0x84) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="39b9410bc827d54f29f7433d97e91ba018cc0aafb816d253cab7acb0dbc6998405bd6bbf4447ebff9b5de4c528c7078d4a5dbd74b66ac5adb427917399075ef83b0824563b5646da0fb9dcbee342857274c66cc52677da313fa717857758081315749b773d0f9ee284c3e06bd81ffa77f7738a668dc4c5d1aa95ff780db6ac75304a7e45c7c16e24a8ab7d2b40294b1aec7ae8db8e52dc10c112aea6186ef92e555ed2a14bcbe5d245e04730769ed69a0387fec44922a3200d83effe02cc80450900104cdde9"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), &(0x7f0000000a00)=ANY=[@ANYBLOB="00fbfb06109afa4d8dda4a51bc82c569e87e2c2b49e20bf35d95be4de7b5738dbe3cc78e97ef3ca2d58720a6ee3a222fc56b5414e3b4413ff3ec658a37d774e88a506d52c9647377d9f90489241f4095105cc37f63f7506ae626afff1b67ae7e1da2ff7b045cc5b1cc5176770dfeab207a545525c81ebeec8b93cd70590743a1726957e6475cd16eea28be0d05d83313bb35857bc80efe8f9de04a39f410f87b588b78e72f228c84339f887efc53b07544dba30ebc5abe0907d78136e2152be85b149bf821e2093098b85709d7f52217fb829518b2466c1eb096bdbed1c318783fe6f6dc951a1c9d340e0ef992dd37931fc3d1a44c79dc097afda491ed818165c8807c40daeaea641042eb92930d715c12347f7b7f05bd9a937da98a8184a1903b30596af98ffbd7209620b2e5d1bbcec39c54d1dfee9fa2a1e34f69c5c0bdbdbf090032d6346b09a7a420825de0c94b226f393ef95b7fd3bbbab2e3c257e1754750de791c6dd2696e367214b27ac2f1ee6886a23f29bc1808d852cc65dd5a82f3aade6d0904bdbb0c1a2e9137720afa035c4bc97bf3003c5e2d914d535b56b2e40bd2f698f0c19329514b3a216db39d43bfa691589c"], 0xfb, 0x2) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) 1.922694139s ago: executing program 7 (id=940): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x2000000, 0x0, 0x20008800}, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000500)=ANY=[@ANYBLOB="f60104e0"], 0x18) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @private1, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0) 1.356852617s ago: executing program 8 (id=941): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000004, 0x511, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x7}, 0x2, 0x3ff, 0x9, 0x5, 0x80000000, 0x20006, 0x0, 0x0, 0x7f, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="18080000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x65e, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, 0x0) io_uring_enter(r4, 0x1, 0x21, 0x1, 0x0, 0x0) 1.274876533s ago: executing program 7 (id=942): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27f", 0x88}], 0x1}, 0x40000) 550.867542ms ago: executing program 8 (id=943): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x424140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f950000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x806000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) statx(r3, &(0x7f0000000080)='./file0\x00', 0x1000, 0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x16, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@llc={0x4, {@snap={0x0, 0x1, "7f", "7252eb", 0xd}}}}}, 0x0) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000700, r4, &(0x7f0000000180)) r5 = request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='{[!\x06}(*&\x00', 0xfffffffffffffffd) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) keyctl$chown(0x4, r5, 0x0, r6) fchown(r0, r4, r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcfffffa, 0x4031, 0xffffffffffffffff, 0x41d1000) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x400, 0x800) ioctl$IOC_PR_RESERVE(r7, 0x401070c9, 0x0) 326.230027ms ago: executing program 8 (id=944): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000080)={[{@jqfmt_vfsv0}, {@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@resuid}, {@errors_remount}, {@nodiscard}, {@journal_ioprio}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000080)="aa1d484e243448000000f7c08b0e278a88f1bf9500726235276d720984d211fbdf23ea7eb5373532db0e8f21d5bc27d85e447511", 0x34}], 0x2) r1 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x400000) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r4, 0x0, 0x7, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) statfs(&(0x7f0000000ac0)='.\x00', 0x0) 0s ago: executing program 4 (id=945): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xf509, 0x1f480, 0x0, 0x39d}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* mw'], 0xa) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@inlinecrypt}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") io_uring_enter(r0, 0x12a, 0x14, 0x17, 0x0, 0x0) kernel console output (not intermixed with test programs): T28] audit: type=1400 audit(1775431244.543:3122): avc: granted { setsecparam } for pid=5312 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 72.846621][ T28] audit: type=1400 audit(1775431244.583:3123): avc: denied { accept } for pid=5314 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.897829][ T28] audit: type=1400 audit(1775431244.633:3124): avc: denied { write } for pid=5320 comm="syz.2.574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 72.917727][ T5321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.574'. [ 73.288045][ T5324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 73.385367][ T5330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 73.404729][ T5330] netlink: 44 bytes leftover after parsing attributes in process `syz.0.576'. [ 73.422802][ T28] audit: type=1400 audit(1775431245.163:3125): avc: denied { name_bind } for pid=5328 comm="syz.0.576" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 73.572554][ T5351] FAULT_INJECTION: forcing a failure. [ 73.572554][ T5351] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 73.572621][ T28] audit: type=1400 audit(1775431245.303:3126): avc: granted { setsecparam } for pid=5349 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 73.605822][ T5351] CPU: 1 UID: 0 PID: 5351 Comm: syz.0.583 Not tainted syzkaller #0 PREEMPT(full) [ 73.605853][ T5351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 73.605868][ T5351] Call Trace: [ 73.605876][ T5351] [ 73.605885][ T5351] __dump_stack+0x1d/0x30 [ 73.605925][ T5351] dump_stack_lvl+0x95/0xd0 [ 73.606017][ T5351] dump_stack+0x15/0x1b [ 73.606041][ T5351] should_fail_ex+0x263/0x280 [ 73.606080][ T5351] should_fail_alloc_page+0xf2/0x100 [ 73.606108][ T5351] __alloc_frozen_pages_noprof+0x108/0x360 [ 73.606192][ T5351] alloc_pages_mpol+0xb3/0x260 [ 73.606226][ T5351] alloc_pages_noprof+0x8f/0x140 [ 73.606256][ T5351] __pmd_alloc+0x47/0x430 [ 73.606327][ T5351] handle_mm_fault+0x1ebb/0x3020 [ 73.606421][ T5351] ? mt_find+0x291/0x3d0 [ 73.606456][ T5351] ? lock_mm_and_find_vma+0x8b/0x440 [ 73.606499][ T5351] do_user_addr_fault+0x3fd/0x1050 [ 73.606529][ T5351] ? _prb_read_valid+0x8f5/0x950 [ 73.606607][ T5351] exc_page_fault+0x62/0xa0 [ 73.606632][ T5351] asm_exc_page_fault+0x26/0x30 [ 73.606656][ T5351] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 73.606691][ T5351] Code: 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 19 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 73.606738][ T5351] RSP: 0018:ffffc90000e9fc48 EFLAGS: 00050206 [ 73.606836][ T5351] RAX: ffff888104246f48 RBX: 0000000000000100 RCX: 0000000000000100 [ 73.606853][ T5351] RDX: 0000000000000000 RSI: ffffc90000e9fc90 RDI: 0000200000000140 [ 73.606924][ T5351] RBP: ffffc90000e9fdd0 R08: 0000000000000233 R09: 0000000000000000 [ 73.606938][ T5351] R10: 0001c90000e9fc90 R11: 0001c90000e9fd8f R12: 0000200000000240 [ 73.607009][ T5351] R13: 00007ffffffff000 R14: 0000200000000140 R15: ffffc90000e9fc90 [ 73.607032][ T5351] _copy_to_user+0x7c/0xa0 [ 73.607066][ T5351] con_get_trans_old+0x204/0x250 [ 73.607112][ T5351] vt_ioctl+0xf43/0x18d0 [ 73.607139][ T5351] ? tty_jobctrl_ioctl+0x29c/0x810 [ 73.607167][ T5351] tty_ioctl+0x7d7/0xb80 [ 73.607198][ T5351] ? __pfx_tty_ioctl+0x10/0x10 [ 73.607228][ T5351] __se_sys_ioctl+0xce/0x140 [ 73.607303][ T5351] __x64_sys_ioctl+0x43/0x50 [ 73.607367][ T5351] x64_sys_call+0x1563/0x3020 [ 73.607400][ T5351] do_syscall_64+0x12c/0x370 [ 73.607427][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.607448][ T5351] RIP: 0033:0x7fb105a3c819 [ 73.607537][ T5351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.607589][ T5351] RSP: 002b:00007fb104497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.607612][ T5351] RAX: ffffffffffffffda RBX: 00007fb105cb5fa0 RCX: 00007fb105a3c819 [ 73.607629][ T5351] RDX: 0000200000000140 RSI: 0000000000004b40 RDI: 0000000000000003 [ 73.607697][ T5351] RBP: 00007fb104497090 R08: 0000000000000000 R09: 0000000000000000 [ 73.607710][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.607721][ T5351] R13: 00007fb105cb6038 R14: 00007fb105cb5fa0 R15: 00007ffe6bdd7ed8 [ 73.607740][ T5351] [ 73.912357][ T5325] syz.3.568 (5325) used greatest stack depth: 9288 bytes left [ 73.918083][ T5361] loop5: detected capacity change from 0 to 512 [ 74.047785][ T5363] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 74.064180][ T5367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.074991][ T5367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.078209][ T5361] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.586: inode has both inline data and extents flags [ 74.104386][ T5367] loop2: detected capacity change from 0 to 512 [ 74.114693][ T5367] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.115652][ T5363] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 74.123632][ T5370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.133788][ T5363] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 74.144102][ T5361] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.151849][ T5363] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 74.168927][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 74.171003][ T5363] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 74.177254][ C1] EXT4-fs (loop5): initial error at time 1775431245: ext4_orphan_get:1397: inode 15 [ 74.187041][ T5363] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 74.196486][ C1] EXT4-fs (loop5): last error at time 1775431245: ext4_orphan_get:1397: inode 15 [ 74.209622][ T5363] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 74.217308][ T5361] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.586: couldn't read orphan inode 15 (err -117) [ 74.226430][ T5363] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 74.241110][ T5370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.249013][ T5367] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.588: bg 0: block 393: padding at end of block bitmap is not set [ 74.256666][ T5361] loop5: lost filesystem error report for type 5 error -117 [ 74.270259][ T5363] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 74.287487][ T5367] loop2: lost filesystem error report for type 5 error -117 [ 74.287683][ T5363] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 74.288260][ T5361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.295060][ T5367] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 74.304815][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 74.304847][ C0] EXT4-fs (loop2): initial error at time 1775431246: ext4_validate_block_bitmap:441 [ 74.304875][ C0] EXT4-fs (loop2): last error at time 1775431246: ext4_validate_block_bitmap:441 [ 74.321782][ T5365] bridge_slave_0: left allmulticast mode [ 74.325956][ T5367] loop2: lost filesystem error report for type 5 error -117 [ 74.349418][ T5365] bridge_slave_0: left promiscuous mode [ 74.359283][ T5367] EXT4-fs (loop2): 2 truncates cleaned up [ 74.372561][ T5365] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.389440][ T5367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.425281][ T5367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.588'. [ 74.500281][ T28] audit: type=1400 audit(1775431246.243:3127): avc: denied { read } for pid=5359 comm="syz.5.586" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 74.880423][ T5365] bridge_slave_1: left allmulticast mode [ 74.886117][ T5365] bridge_slave_1: left promiscuous mode [ 74.894724][ T5365] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.912466][ T5365] bond0: (slave bond_slave_0): Releasing backup interface [ 74.927643][ T5365] bond0: (slave bond_slave_1): Releasing backup interface [ 74.938437][ T5365] team_slave_0: left allmulticast mode [ 74.949382][ T5365] team0: Port device team_slave_0 removed [ 74.959818][ T5365] team_slave_1: left allmulticast mode [ 74.967640][ T5365] team0: Port device team_slave_1 removed [ 74.984488][ T5365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.992346][ T5365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.001444][ T5365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.009139][ T5365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.018268][ T5360] netlink: 292 bytes leftover after parsing attributes in process `syz.5.586'. [ 75.038025][ T5374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.048276][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.404828][ T5414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=5414 comm=syz.4.601 [ 75.711247][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.872451][ T5423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=5423 comm=syz.4.604 [ 75.913272][ T5423] loop4: detected capacity change from 0 to 512 [ 76.122677][ T5429] netlink: 'syz.0.602': attribute type 21 has an invalid length. [ 76.176072][ T5429] netlink: 164 bytes leftover after parsing attributes in process `syz.0.602'. [ 76.229605][ T5446] loop4: detected capacity change from 0 to 128 [ 76.283239][ T5449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.349061][ T5449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.384042][ T5449] loop3: detected capacity change from 0 to 512 [ 76.561367][ T5449] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.576806][ T5453] loop5: detected capacity change from 0 to 1024 [ 76.593690][ T5449] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.613: bg 0: block 393: padding at end of block bitmap is not set [ 76.635601][ T5453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.675343][ T5453] EXT4-fs error (device loop5): __ext4_new_inode:1079: comm syz.5.615: reserved inode found cleared - inode=2 [ 76.687561][ T5449] loop3: lost filesystem error report for type 5 error -117 [ 76.688797][ T5449] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 76.696147][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 76.696168][ C1] EXT4-fs (loop3): initial error at time 1775431248: ext4_validate_block_bitmap:441 [ 76.696206][ C1] EXT4-fs (loop3): last error at time 1775431248: ext4_validate_block_bitmap:441 [ 76.786668][ T5453] EXT4-fs (loop5): Remounting filesystem read-only [ 76.802588][ T5453] 9p: Bad value for 'rfdno' [ 76.803040][ T5449] loop3: lost filesystem error report for type 5 error -117 [ 76.807503][ T5449] EXT4-fs (loop3): 2 truncates cleaned up [ 76.835429][ T5449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.856827][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.908390][ T5449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.613'. [ 77.196241][ T5474] 9p: Bad value for 'source' [ 77.981733][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.213746][ T5486] FAULT_INJECTION: forcing a failure. [ 78.213746][ T5486] name failslab, interval 1, probability 0, space 0, times 0 [ 78.249640][ T5488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.628'. [ 78.273848][ T5486] CPU: 0 UID: 0 PID: 5486 Comm: syz.2.627 Not tainted syzkaller #0 PREEMPT(full) [ 78.273926][ T5486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 78.273938][ T5486] Call Trace: [ 78.273944][ T5486] [ 78.273952][ T5486] __dump_stack+0x1d/0x30 [ 78.273981][ T5486] dump_stack_lvl+0x95/0xd0 [ 78.274005][ T5486] dump_stack+0x15/0x1b [ 78.274104][ T5486] should_fail_ex+0x263/0x280 [ 78.274137][ T5486] should_failslab+0x8c/0xb0 [ 78.274203][ T5486] __kmalloc_noprof+0xb8/0x4e0 [ 78.274229][ T5486] ? alloc_pipe_info+0x1c8/0x340 [ 78.274323][ T5486] alloc_pipe_info+0x1c8/0x340 [ 78.274342][ T5486] splice_direct_to_actor+0x591/0x670 [ 78.274364][ T5486] ? kstrtouint_from_user+0xa8/0xf0 [ 78.274465][ T5486] ? __pfx_direct_splice_actor+0x10/0x10 [ 78.274492][ T5486] ? avc_policy_seqno+0x15/0x30 [ 78.274521][ T5486] ? selinux_file_permission+0x1f2/0x690 [ 78.274546][ T5486] do_splice_direct+0x119/0x1a0 [ 78.274640][ T5486] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 78.274752][ T5486] do_sendfile+0x382/0x650 [ 78.274846][ T5486] __x64_sys_sendfile64+0x105/0x150 [ 78.274869][ T5486] x64_sys_call+0x2dc4/0x3020 [ 78.274955][ T5486] do_syscall_64+0x12c/0x370 [ 78.275011][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.275037][ T5486] RIP: 0033:0x7f6fe889c819 [ 78.275113][ T5486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.275135][ T5486] RSP: 002b:00007f6fe72f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 78.275159][ T5486] RAX: ffffffffffffffda RBX: 00007f6fe8b15fa0 RCX: 00007f6fe889c819 [ 78.275177][ T5486] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 78.275190][ T5486] RBP: 00007f6fe72f7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.275202][ T5486] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 78.275270][ T5486] R13: 00007f6fe8b16038 R14: 00007f6fe8b15fa0 R15: 00007ffddf70f7f8 [ 78.275296][ T5486] [ 78.278750][ T5488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.628'. [ 78.544856][ T5489] netlink: 100 bytes leftover after parsing attributes in process `syz.3.625'. [ 78.559267][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 78.559281][ T28] audit: type=1400 audit(1775431250.233:3226): avc: denied { read } for pid=5482 comm="syz.3.625" path="socket:[11795]" dev="sockfs" ino=11795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.674898][ T28] audit: type=1400 audit(1775431250.363:3227): avc: granted { setsecparam } for pid=5491 comm="syz.2.629" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 78.696877][ T5494] FAULT_INJECTION: forcing a failure. [ 78.696877][ T5494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.743174][ T5494] CPU: 0 UID: 0 PID: 5494 Comm: syz.2.630 Not tainted syzkaller #0 PREEMPT(full) [ 78.743268][ T5494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 78.743280][ T5494] Call Trace: [ 78.743288][ T5494] [ 78.743297][ T5494] __dump_stack+0x1d/0x30 [ 78.743322][ T5494] dump_stack_lvl+0x95/0xd0 [ 78.743345][ T5494] dump_stack+0x15/0x1b [ 78.743444][ T5494] should_fail_ex+0x263/0x280 [ 78.743471][ T5494] should_fail+0xb/0x20 [ 78.743624][ T5494] should_fail_usercopy+0x1a/0x20 [ 78.743657][ T5494] _copy_from_user+0x1c/0xb0 [ 78.743706][ T5494] ___sys_sendmsg+0xc1/0x1e0 [ 78.743814][ T5494] __x64_sys_sendmsg+0xd4/0x160 [ 78.743860][ T5494] x64_sys_call+0x194c/0x3020 [ 78.743891][ T5494] do_syscall_64+0x12c/0x370 [ 78.743962][ T5494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.744016][ T5494] RIP: 0033:0x7f6fe889c819 [ 78.744032][ T5494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.744049][ T5494] RSP: 002b:00007f6fe72f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.744072][ T5494] RAX: ffffffffffffffda RBX: 00007f6fe8b15fa0 RCX: 00007f6fe889c819 [ 78.744089][ T5494] RDX: 00000000000440b0 RSI: 0000200000000280 RDI: 0000000000000003 [ 78.744105][ T5494] RBP: 00007f6fe72f7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.744161][ T5494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.744174][ T5494] R13: 00007f6fe8b16038 R14: 00007f6fe8b15fa0 R15: 00007ffddf70f7f8 [ 78.744195][ T5494] [ 78.819356][ T5488] netlink: 'syz.5.628': attribute type 14 has an invalid length. [ 78.865765][ T5497] netlink: 36 bytes leftover after parsing attributes in process `syz.4.631'. [ 78.877661][ T5488] netlink: 'syz.5.628': attribute type 12 has an invalid length. [ 79.067671][ T5503] tipc: Started in network mode [ 79.073483][ T5509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.093340][ T5503] tipc: Node identity ac14140f, cluster identity 4711 [ 79.101754][ T5509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.116212][ T5509] loop3: detected capacity change from 0 to 512 [ 79.126425][ T5509] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 79.239648][ T5503] tipc: New replicast peer: 172.20.20.187 [ 79.250693][ T5503] tipc: Enabled bearer , priority 10 [ 79.286320][ T5509] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.635: bg 0: block 393: padding at end of block bitmap is not set [ 79.312583][ T5509] loop3: lost filesystem error report for type 5 error -117 [ 79.312879][ T5509] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 79.320224][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 79.320242][ C1] EXT4-fs (loop3): initial error at time 1775431251: ext4_validate_block_bitmap:441 [ 79.320269][ C1] EXT4-fs (loop3): last error at time 1775431251: ext4_validate_block_bitmap:441 [ 79.368945][ T5509] loop3: lost filesystem error report for type 5 error -117 [ 79.377611][ T5509] EXT4-fs (loop3): 2 truncates cleaned up [ 79.400581][ T28] audit: type=1400 audit(1775431251.143:3228): avc: denied { name_connect } for pid=5524 comm="syz.5.638" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 79.448185][ T5509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.468791][ T28] audit: type=1400 audit(1775431251.203:3229): avc: granted { setsecparam } for pid=5530 comm="syz.2.640" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 79.496498][ T28] audit: type=1400 audit(1775431251.233:3230): avc: denied { create } for pid=5533 comm="syz.4.642" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.555328][ T5532] netlink: 28 bytes leftover after parsing attributes in process `syz.5.638'. [ 79.558676][ T28] audit: type=1400 audit(1775431251.263:3231): avc: denied { write } for pid=5533 comm="syz.4.642" name="file0" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.598753][ T5543] loop4: detected capacity change from 0 to 512 [ 79.610358][ T5544] loop2: detected capacity change from 0 to 1024 [ 79.626955][ T5509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.635'. [ 79.662902][ T5544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.679395][ T28] audit: type=1400 audit(1775431251.263:3232): avc: denied { open } for pid=5533 comm="syz.4.642" path="/126/file0" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.708982][ T28] audit: type=1400 audit(1775431251.263:3233): avc: denied { ioctl } for pid=5533 comm="syz.4.642" path="/126/file0" dev="tmpfs" ino=678 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.733607][ T28] audit: type=1400 audit(1775431251.273:3234): avc: denied { unlink } for pid=3322 comm="syz-executor" name="file0" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.756587][ T28] audit: type=1400 audit(1775431251.283:3235): avc: denied { append } for pid=5538 comm="syz.4.644" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.779860][ T5543] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 79.786485][ T5543] EXT4-fs (loop4): mount failed [ 79.793517][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.991739][ T5551] loop5: detected capacity change from 0 to 512 [ 80.012005][ T5551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.054976][ T5551] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.205567][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.397880][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.717491][ T35] tipc: Node number set to 2886997007 [ 80.896533][ T5573] loop2: detected capacity change from 0 to 128 [ 80.981444][ T5573] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 81.006516][ T5584] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5584 comm=syz.5.657 [ 81.029519][ T5573] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.062553][ T5573] ext2 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.102142][ T5573] syzkaller1: entered promiscuous mode [ 81.109800][ T5573] syzkaller1: entered allmulticast mode [ 81.132361][ T5589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.147499][ T5591] loop0: detected capacity change from 0 to 256 [ 81.189238][ T5589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.223158][ T5589] loop4: detected capacity change from 0 to 512 [ 81.233904][ T5589] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.234509][ T5591] tmpfs: Bad value for 'size' [ 81.253406][ T5593] pim6reg: entered allmulticast mode [ 81.258120][ T5589] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.660: bg 0: block 393: padding at end of block bitmap is not set [ 81.260936][ T5593] pim6reg: left allmulticast mode [ 81.285344][ T5589] loop4: lost filesystem error report for type 5 error -117 [ 81.285497][ T5589] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 81.292859][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 81.292879][ C1] EXT4-fs (loop4): initial error at time 1775431253: ext4_validate_block_bitmap:441 [ 81.292902][ C1] EXT4-fs (loop4): last error at time 1775431253: ext4_validate_block_bitmap:441 [ 81.305960][ T5591] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 81.321005][ T5589] loop4: lost filesystem error report for type 5 error -117 [ 81.329367][ T5591] FAT-fs (loop0): Filesystem has been set read-only [ 81.339423][ T5589] EXT4-fs (loop4): 2 truncates cleaned up [ 81.356405][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.368563][ T5589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.397909][ T5591] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 81.408320][ T5591] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 81.435104][ T5589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.660'. [ 81.761323][ T5621] netlink: 80 bytes leftover after parsing attributes in process `syz.0.672'. [ 81.895123][ T5624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.671'. [ 82.409144][ T5629] loop2: detected capacity change from 0 to 1024 [ 82.442334][ T5629] EXT4-fs warning (device loop2): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 82.509993][ T5624] syz.5.671 (5624) used greatest stack depth: 8968 bytes left [ 82.560566][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.599465][ T5629] EXT4-fs (loop2): mount failed [ 82.635772][ T5635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.676'. [ 82.696433][ T5635] netlink: 'syz.5.676': attribute type 2 has an invalid length. [ 82.719453][ T5639] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 82.755151][ T5635] netlink: 'syz.5.676': attribute type 2 has an invalid length. [ 82.766426][ T5639] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 82.768493][ T5640] process 'syz.5.676' launched '/dev/fd/12' with NULL argv: empty string added [ 82.819423][ T5635] netlink: 'syz.5.676': attribute type 1 has an invalid length. [ 82.859030][ T5635] netlink: 176 bytes leftover after parsing attributes in process `syz.5.676'. [ 82.875853][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.676'. [ 83.078057][ T5664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.094000][ T5664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.156094][ T5668] loop4: detected capacity change from 0 to 512 [ 83.171520][ T5668] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.689: inode has both inline data and extents flags [ 83.189048][ T5668] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.189259][ T5668] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.689: couldn't read orphan inode 15 (err -117) [ 83.193067][ T5664] loop3: detected capacity change from 0 to 512 [ 83.199215][ T5668] loop4: lost filesystem error report for type 5 error -117 [ 83.210326][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 83.210360][ C0] EXT4-fs (loop4): initial error at time 1775431254: ext4_orphan_get:1397: inode 15 [ 83.210388][ C0] EXT4-fs (loop4): last error at time 1775431254: ext4_orphan_get:1397: inode 15 [ 83.250606][ T5664] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.254306][ T5668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.273940][ T5671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'. [ 83.293798][ T5664] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.688: bg 0: block 393: padding at end of block bitmap is not set [ 83.313563][ T5664] loop3: lost filesystem error report for type 5 error -117 [ 83.315288][ T5664] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 83.322669][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 83.322690][ C0] EXT4-fs (loop3): initial error at time 1775431255: ext4_validate_block_bitmap:441 [ 83.322731][ C0] EXT4-fs (loop3): last error at time 1775431255: ext4_validate_block_bitmap:441 [ 83.359147][ T5664] loop3: lost filesystem error report for type 5 error -117 [ 83.359503][ T5664] EXT4-fs (loop3): 2 truncates cleaned up [ 83.374510][ T5664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.429439][ T5664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.688'. [ 83.452004][ T5689] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 83.489268][ T5691] EXT4-fs: Ignoring removed bh option [ 83.527654][ T5691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 83.554519][ T5693] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 83.566724][ T5693] FAT-fs (loop5): Filesystem has been set read-only [ 83.580665][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.694081][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 83.694098][ T28] audit: type=1400 audit(1775431255.433:3254): avc: denied { setopt } for pid=5705 comm="syz.5.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 83.772822][ T5714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'. [ 83.898690][ T5722] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.709: inode has both inline data and extents flags [ 83.913583][ T5722] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.913741][ T5722] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.709: couldn't read orphan inode 15 (err -117) [ 83.922940][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 83.922961][ C1] EXT4-fs (loop5): initial error at time 1775431255: ext4_orphan_get:1397: inode 15 [ 83.922998][ C1] EXT4-fs (loop5): last error at time 1775431255: ext4_orphan_get:1397: inode 15 [ 83.960916][ T5722] loop5: lost filesystem error report for type 5 error -117 [ 83.961569][ T5722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.028860][ T5732] netlink: 192 bytes leftover after parsing attributes in process `syz.2.711'. [ 84.038454][ T5732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.711'. [ 84.050708][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 84.066379][ T5695] kmmpd-loop0: attempt to access beyond end of device [ 84.066379][ T5695] loop0: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 84.084242][ T5695] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 84.085512][ T311] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.117038][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.197942][ T5742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.717'. [ 84.212578][ T311] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.222905][ T23] IPVS: starting estimator thread 0... [ 84.264385][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.294817][ T311] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.300048][ T5753] netlink: 'syz.5.718': attribute type 11 has an invalid length. [ 84.313359][ T5745] IPVS: using max 2016 ests per chain, 100800 per kthread [ 84.363250][ T311] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.444753][ T5754] set_capacity_and_notify: 5 callbacks suppressed [ 84.444772][ T5754] loop3: detected capacity change from 0 to 2048 [ 84.529425][ T5754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.589068][ T5754] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.612944][ T28] audit: type=1400 audit(1775431256.353:3255): avc: denied { bind } for pid=5749 comm="syz.3.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.664473][ T28] audit: type=1400 audit(1775431256.353:3256): avc: denied { name_bind } for pid=5749 comm="syz.3.719" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 84.739009][ T28] audit: type=1400 audit(1775431256.353:3257): avc: denied { node_bind } for pid=5749 comm="syz.3.719" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 84.914659][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 84.924680][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 84.940364][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 84.952097][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 84.961453][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 84.984366][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 84.994051][ T311] bond0 (unregistering): Released all slaves [ 85.002579][ T311] bond1 (unregistering): Released all slaves [ 85.010396][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 85.017816][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 85.039215][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 85.049105][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 85.061765][ T10] hid-generic 0000:0000:000E.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 85.086103][ T311] hsr_slave_0: left promiscuous mode [ 85.106437][ T311] hsr_slave_1: left promiscuous mode [ 85.149855][ T311] veth1_macvtap: left promiscuous mode [ 85.159114][ T311] veth0_macvtap: left promiscuous mode [ 85.164717][ T311] veth1_vlan: left promiscuous mode [ 85.170101][ T311] veth0_vlan: left promiscuous mode [ 85.306226][ T5793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.329249][ T5770] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 85.342467][ T5793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.353926][ T5770] EXT4-fs (loop3): Remounting filesystem read-only [ 85.383651][ T5793] loop2: detected capacity change from 0 to 512 [ 85.390880][ T5793] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.408356][ T5743] chnl_net:caif_netlink_parms(): no params data found [ 85.446034][ T5793] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.724: bg 0: block 393: padding at end of block bitmap is not set [ 85.479292][ T5793] loop2: lost filesystem error report for type 5 error -117 [ 85.479449][ T5793] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 85.495867][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 85.495891][ C1] EXT4-fs (loop2): initial error at time 1775431257: ext4_validate_block_bitmap:441 [ 85.495916][ C1] EXT4-fs (loop2): last error at time 1775431257: ext4_validate_block_bitmap:441 [ 85.498048][ T5802] loop5: detected capacity change from 0 to 512 [ 85.530973][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.531611][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 85.538181][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.557533][ T5793] loop2: lost filesystem error report for type 5 error -117 [ 85.561932][ T5793] EXT4-fs (loop2): 2 truncates cleaned up [ 85.577017][ T5793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.586858][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.598680][ T5743] bridge_slave_0: entered allmulticast mode [ 85.605945][ T5743] bridge_slave_0: entered promiscuous mode [ 85.613633][ T5802] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.727: inode has both inline data and extents flags [ 85.614370][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.634312][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.654043][ T5743] bridge_slave_1: entered allmulticast mode [ 85.662035][ T5813] Cannot find del_set index 0 as target [ 85.664119][ T5743] bridge_slave_1: entered promiscuous mode [ 85.674645][ T5802] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.677195][ T5802] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.727: couldn't read orphan inode 15 (err -117) [ 85.686384][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 85.686406][ C1] EXT4-fs (loop5): initial error at time 1775431257: ext4_orphan_get:1397: inode 15 [ 85.686439][ C1] EXT4-fs (loop5): last error at time 1775431257: ext4_orphan_get:1397: inode 15 [ 85.724172][ T5802] loop5: lost filesystem error report for type 5 error -117 [ 85.725608][ T5802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.729754][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.772329][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.782706][ T28] audit: type=1400 audit(1775431257.513:3258): avc: denied { map } for pid=5812 comm="syz.3.726" path="pipe:[12937]" dev="pipefs" ino=12937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 85.807589][ T5820] loop3: detected capacity change from 0 to 128 [ 85.814705][ T5820] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (53453!=39978) [ 85.823168][ T5743] team0: Port device team_slave_0 added [ 85.839017][ T5820] EXT4-fs (loop3): group descriptors corrupted! [ 85.841941][ T28] audit: type=1400 audit(1775431257.513:3259): avc: denied { execute } for pid=5812 comm="syz.3.726" path="pipe:[12937]" dev="pipefs" ino=12937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 85.886837][ T311] IPVS: stop unused estimator thread 0... [ 85.903956][ T5743] team0: Port device team_slave_1 added [ 85.948780][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.988021][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.014793][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.029340][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.036403][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.065515][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.120776][ T5743] hsr_slave_0: entered promiscuous mode [ 86.128628][ T5743] hsr_slave_1: entered promiscuous mode [ 86.135892][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 86.142379][ T5743] Cannot create hsr debugfs directory [ 86.562542][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.572463][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.633556][ T5852] loop5: detected capacity change from 0 to 512 [ 86.684906][ T5852] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.697734][ T5852] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.701304][ T5855] net_ratelimit: 22543 callbacks suppressed [ 86.701320][ T5855] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 86.806945][ T55] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.824100][ T28] audit: type=1400 audit(1775431258.563:3260): avc: denied { write } for pid=5862 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.852503][ T5851] syzkaller0: entered promiscuous mode [ 86.858252][ T5851] syzkaller0: entered allmulticast mode [ 86.901955][ T5743] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 86.935077][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.938713][ T5743] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 87.017861][ T5743] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 87.031112][ T5743] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 87.150746][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.170866][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.192454][ T2111] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.199739][ T2111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.241581][ T2111] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.248684][ T2111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.263601][ T5900] loop5: detected capacity change from 0 to 512 [ 87.271080][ T5743] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.281667][ T5743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.331104][ T5900] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.739: inode has both inline data and extents flags [ 87.348254][ T5900] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.348454][ T5900] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.739: couldn't read orphan inode 15 (err -117) [ 87.357651][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 87.357671][ C0] EXT4-fs (loop5): initial error at time 1775431259: ext4_orphan_get:1397: inode 15 [ 87.357698][ C0] EXT4-fs (loop5): last error at time 1775431259: ext4_orphan_get:1397: inode 15 [ 87.404922][ T5900] loop5: lost filesystem error report for type 5 error -117 [ 87.405483][ T5900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.446179][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.602578][ T5743] veth0_vlan: entered promiscuous mode [ 87.611989][ T5743] veth1_vlan: entered promiscuous mode [ 87.635390][ T5743] veth0_macvtap: entered promiscuous mode [ 87.644531][ T5922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.648046][ T5743] veth1_macvtap: entered promiscuous mode [ 87.667721][ T5922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.675040][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.684526][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.700166][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.729132][ T5922] loop4: detected capacity change from 0 to 512 [ 87.736249][ T5922] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.752148][ T55] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.761219][ T55] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.770420][ T5922] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.740: bg 0: block 393: padding at end of block bitmap is not set [ 87.785302][ T5922] loop4: lost filesystem error report for type 5 error -117 [ 87.788958][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 87.790059][ T55] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.796389][ C1] EXT4-fs (loop4): initial error at time 1775431259: ext4_validate_block_bitmap:441 [ 87.796417][ C1] EXT4-fs (loop4): last error at time 1775431259: ext4_validate_block_bitmap:441 [ 87.819818][ T5922] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 87.840094][ T2165] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.869885][ T28] audit: type=1400 audit(1775431259.603:3261): avc: denied { mounton } for pid=5743 comm="syz-executor" path="/root/syzkaller.bpZZTY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 87.898777][ T28] audit: type=1400 audit(1775431259.643:3262): avc: denied { mount } for pid=5743 comm="syz-executor" name="/" dev="gadgetfs" ino=4540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 87.939148][ T5922] loop4: lost filesystem error report for type 5 error -117 [ 87.940658][ T5922] EXT4-fs (loop4): 2 truncates cleaned up [ 87.954543][ T5922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.982573][ T28] audit: type=1400 audit(1775431259.723:3263): avc: denied { getopt } for pid=5933 comm="syz.5.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.005760][ T5936] loop3: detected capacity change from 0 to 512 [ 88.015095][ T5936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.059288][ T5922] __nla_validate_parse: 4 callbacks suppressed [ 88.059307][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.740'. [ 88.063912][ T5936] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.075907][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.748'. [ 88.128153][ T5948] netlink: 72 bytes leftover after parsing attributes in process `syz.5.749'. [ 88.137178][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.5.749'. [ 88.146303][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.749'. [ 88.214655][ T5954] xt_hashlimit: size too large, truncated to 1048576 [ 88.222873][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.376280][ T5963] loop5: detected capacity change from 0 to 512 [ 88.400078][ T5963] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.753: inode has both inline data and extents flags [ 88.416845][ T5963] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.418912][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 88.434530][ C0] EXT4-fs (loop5): initial error at time 1775431260: ext4_orphan_get:1397: inode 15 [ 88.444055][ C0] EXT4-fs (loop5): last error at time 1775431260: ext4_orphan_get:1397: inode 15 [ 88.473156][ T5966] loop6: detected capacity change from 0 to 1764 [ 88.480663][ T5966] iso9660: Unknown parameter 'fowner<00000000000000000000' [ 88.542200][ T5963] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.753: couldn't read orphan inode 15 (err -117) [ 88.582862][ T5963] loop5: lost filesystem error report for type 5 error -117 [ 88.587585][ T5963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.699042][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 88.699077][ T28] audit: type=1326 audit(1775431260.433:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f748a90d04e code=0x7ffc0000 [ 88.735154][ T28] audit: type=1326 audit(1775431260.473:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f748a90d04e code=0x7ffc0000 [ 88.791367][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.847396][ T28] audit: type=1326 audit(1775431260.473:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f748a90d04e code=0x7ffc0000 [ 88.874251][ T28] audit: type=1326 audit(1775431260.473:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f748a90d04e code=0x7ffc0000 [ 88.902198][ T3586] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.196497][ T28] audit: type=1326 audit(1775431260.473:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f748a90d04e code=0x7ffc0000 [ 89.376379][ T28] audit: type=1326 audit(1775431260.503:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f748a90d04e code=0x7ffc0000 [ 90.089928][ T28] audit: type=1326 audit(1775431260.513:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f748a90d04e code=0x7ffc0000 [ 90.113616][ T28] audit: type=1326 audit(1775431260.523:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f748a90d04e code=0x7ffc0000 [ 90.390798][ T28] audit: type=1326 audit(1775431260.523:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f748a90d04e code=0x7ffc0000 [ 90.418023][ T5979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.757'. [ 90.432739][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.367137][ T28] audit: type=1326 audit(1775431260.523:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.3.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f748a90d04e code=0x7ffc0000 [ 91.789256][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.759'. [ 91.841996][ T5991] set_capacity_and_notify: 1 callbacks suppressed [ 91.842014][ T5991] loop5: detected capacity change from 0 to 512 [ 91.890274][ T5991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.923871][ T5991] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.846123][ T5999] 9p: Bad value for 'source' [ 93.241449][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.915597][ T28] kauditd_printk_skb: 155 callbacks suppressed [ 93.915615][ T28] audit: type=1326 audit(1775431265.653:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3dc8206597 code=0x7ffc0000 [ 94.097347][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 94.379556][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'. [ 94.549056][ T28] audit: type=1326 audit(1775431265.653:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3dc81adb99 code=0x7ffc0000 [ 94.578250][ T28] audit: type=1326 audit(1775431265.653:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 94.606787][ T28] audit: type=1326 audit(1775431265.653:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3dc81cd04e code=0x7ffc0000 [ 94.654567][ T28] audit: type=1326 audit(1775431265.653:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3dc81cd04e code=0x7ffc0000 [ 94.705942][ T28] audit: type=1326 audit(1775431265.653:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3dc8206597 code=0x7ffc0000 [ 94.753993][ T28] audit: type=1326 audit(1775431265.653:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3dc81adb99 code=0x7ffc0000 [ 94.805045][ T28] audit: type=1326 audit(1775431265.653:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 94.853857][ T28] audit: type=1326 audit(1775431265.803:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3dc8206597 code=0x7ffc0000 [ 94.946385][ T28] audit: type=1326 audit(1775431265.803:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6014 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3dc81adb99 code=0x7ffc0000 [ 95.029883][ T6044] netlink: 24 bytes leftover after parsing attributes in process `syz.5.775'. [ 95.166302][ T6054] FAULT_INJECTION: forcing a failure. [ 95.166302][ T6054] name failslab, interval 1, probability 0, space 0, times 0 [ 95.237949][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.4.781 Not tainted syzkaller #0 PREEMPT(full) [ 95.237984][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 95.237996][ T6054] Call Trace: [ 95.238002][ T6054] [ 95.238010][ T6054] __dump_stack+0x1d/0x30 [ 95.238088][ T6054] dump_stack_lvl+0x95/0xd0 [ 95.238110][ T6054] dump_stack+0x15/0x1b [ 95.238150][ T6054] should_fail_ex+0x263/0x280 [ 95.238182][ T6054] should_failslab+0x8c/0xb0 [ 95.238209][ T6054] kmem_cache_alloc_noprof+0x66/0x400 [ 95.238233][ T6054] ? can_rx_register+0x104/0x4d0 [ 95.238337][ T6054] can_rx_register+0x104/0x4d0 [ 95.238362][ T6054] ? __pfx_bcm_rx_handler+0x10/0x10 [ 95.238421][ T6054] bcm_rx_setup+0xd8b/0x10a0 [ 95.238508][ T6054] ? _raw_spin_lock_bh+0x56/0xb0 [ 95.238539][ T6054] ? _raw_spin_unlock_bh+0x18/0x20 [ 95.238629][ T6054] ? lock_sock_nested+0x132/0x160 [ 95.238654][ T6054] ? selinux_socket_sendmsg+0x192/0x1c0 [ 95.238687][ T6054] bcm_sendmsg+0x1bb/0x4a0 [ 95.238761][ T6054] ? __pfx_bcm_sendmsg+0x10/0x10 [ 95.238792][ T6054] ____sys_sendmsg+0x563/0x5b0 [ 95.238826][ T6054] ___sys_sendmsg+0x195/0x1e0 [ 95.238847][ T6054] ? path_openat+0x1b01/0x2050 [ 95.238874][ T6054] __sys_sendmmsg+0x185/0x320 [ 95.238924][ T6054] __x64_sys_sendmmsg+0x57/0x70 [ 95.238948][ T6054] x64_sys_call+0x27aa/0x3020 [ 95.238980][ T6054] do_syscall_64+0x12c/0x370 [ 95.239010][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.239085][ T6054] RIP: 0033:0x7f3dc820c819 [ 95.239105][ T6054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.239128][ T6054] RSP: 002b:00007f3dc6c5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 95.239166][ T6054] RAX: ffffffffffffffda RBX: 00007f3dc8485fa0 RCX: 00007f3dc820c819 [ 95.239180][ T6054] RDX: 040000000000003a RSI: 0000200000001b00 RDI: 0000000000000003 [ 95.239197][ T6054] RBP: 00007f3dc6c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 95.239213][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.239229][ T6054] R13: 00007f3dc8486038 R14: 00007f3dc8485fa0 R15: 00007ffe9f3e94e8 [ 95.239296][ T6054] [ 95.509574][ T6060] loop3: detected capacity change from 0 to 256 [ 95.552636][ T6061] bridge0: entered allmulticast mode [ 95.583956][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 95.980733][ T6070] loop6: detected capacity change from 0 to 512 [ 96.026919][ T6070] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 96.051528][ T6072] FAULT_INJECTION: forcing a failure. [ 96.051528][ T6072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.078874][ T6072] CPU: 1 UID: 0 PID: 6072 Comm: syz.4.788 Not tainted syzkaller #0 PREEMPT(full) [ 96.078977][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 96.078991][ T6072] Call Trace: [ 96.079000][ T6072] [ 96.079009][ T6072] __dump_stack+0x1d/0x30 [ 96.079040][ T6072] dump_stack_lvl+0x95/0xd0 [ 96.079064][ T6072] dump_stack+0x15/0x1b [ 96.079105][ T6072] should_fail_ex+0x263/0x280 [ 96.079135][ T6072] should_fail+0xb/0x20 [ 96.079163][ T6072] should_fail_usercopy+0x1a/0x20 [ 96.079274][ T6072] _copy_to_user+0x20/0xa0 [ 96.079309][ T6072] simple_read_from_buffer+0xb5/0x130 [ 96.079336][ T6072] proc_fail_nth_read+0x10e/0x150 [ 96.079455][ T6072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.079489][ T6072] vfs_read+0x1ab/0x7f0 [ 96.079510][ T6072] ? __rcu_read_unlock+0x4e/0x70 [ 96.079536][ T6072] ? __fget_files+0x184/0x1c0 [ 96.079605][ T6072] ? mutex_lock+0x57/0x90 [ 96.079626][ T6072] ksys_read+0xdc/0x1a0 [ 96.079647][ T6072] __x64_sys_read+0x40/0x50 [ 96.079667][ T6072] x64_sys_call+0x2886/0x3020 [ 96.079704][ T6072] do_syscall_64+0x12c/0x370 [ 96.079768][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.079797][ T6072] RIP: 0033:0x7f3dc81cd04e [ 96.079815][ T6072] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.079878][ T6070] EXT4-fs error (device loop6): ext4_init_orphan_info:618: comm syz.6.786: orphan file block 0: bad magic [ 96.079907][ T6072] RSP: 002b:00007f3dc6c5efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.079964][ T6072] RAX: ffffffffffffffda RBX: 00007f3dc6c5f6c0 RCX: 00007f3dc81cd04e [ 96.079979][ T6072] RDX: 000000000000000f RSI: 00007f3dc6c5f0a0 RDI: 0000000000000004 [ 96.080023][ T6072] RBP: 00007f3dc6c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.080037][ T6072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.080050][ T6072] R13: 00007f3dc8486038 R14: 00007f3dc8485fa0 R15: 00007ffe9f3e94e8 [ 96.080069][ T6072] [ 96.296614][ T6070] loop6: lost filesystem error report for type 5 error -117 [ 96.296778][ T6070] EXT4-fs (loop6): Remounting filesystem read-only [ 96.304676][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 96.304697][ C1] EXT4-fs (loop6): initial error at time 1775431268: ext4_init_orphan_info:618 [ 96.304739][ C1] EXT4-fs (loop6): last error at time 1775431268: ext4_init_orphan_info:618 [ 96.341578][ T6070] EXT4-fs (loop6): mount failed [ 96.369278][ T6081] FAULT_INJECTION: forcing a failure. [ 96.369278][ T6081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.401085][ T6081] CPU: 0 UID: 0 PID: 6081 Comm: syz.4.790 Not tainted syzkaller #0 PREEMPT(full) [ 96.401117][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 96.401132][ T6081] Call Trace: [ 96.401140][ T6081] [ 96.401149][ T6081] __dump_stack+0x1d/0x30 [ 96.401180][ T6081] dump_stack_lvl+0x95/0xd0 [ 96.401288][ T6081] dump_stack+0x15/0x1b [ 96.401312][ T6081] should_fail_ex+0x263/0x280 [ 96.401344][ T6081] should_fail+0xb/0x20 [ 96.401371][ T6081] should_fail_usercopy+0x1a/0x20 [ 96.401418][ T6081] _copy_from_user+0x1c/0xb0 [ 96.401525][ T6081] generic_map_update_batch+0x4f1/0x680 [ 96.401560][ T6081] ? __pfx_generic_map_update_batch+0x10/0x10 [ 96.401639][ T6081] bpf_map_do_batch+0x25c/0x380 [ 96.401669][ T6081] __sys_bpf+0x6a2/0x7e0 [ 96.401701][ T6081] __x64_sys_bpf+0x41/0x50 [ 96.401724][ T6081] x64_sys_call+0x10cb/0x3020 [ 96.401812][ T6081] do_syscall_64+0x12c/0x370 [ 96.401845][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.401871][ T6081] RIP: 0033:0x7f3dc820c819 [ 96.401929][ T6081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.401946][ T6081] RSP: 002b:00007f3dc6c5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.402022][ T6081] RAX: ffffffffffffffda RBX: 00007f3dc8485fa0 RCX: 00007f3dc820c819 [ 96.402039][ T6081] RDX: 0000000000000038 RSI: 0000200000002040 RDI: 000000000000001a [ 96.402074][ T6081] RBP: 00007f3dc6c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.402089][ T6081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.402103][ T6081] R13: 00007f3dc8486038 R14: 00007f3dc8485fa0 R15: 00007ffe9f3e94e8 [ 96.402122][ T6081] [ 96.408636][ T6083] netlink: 220 bytes leftover after parsing attributes in process `syz.3.791'. [ 96.559572][ T6088] loop6: detected capacity change from 0 to 512 [ 96.570490][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 96.602940][ T6083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.791'. [ 96.611950][ T6083] tipc: MTU too low for tipc bearer [ 96.656278][ T6070] netlink: 32 bytes leftover after parsing attributes in process `syz.6.786'. [ 96.690949][ T6088] EXT4-fs: test_dummy_encryption option not supported [ 96.706239][ T6094] loop3: detected capacity change from 0 to 1024 [ 96.713249][ T6094] EXT4-fs: Ignoring removed bh option [ 96.744778][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.6.786'. [ 96.756604][ T6094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 96.928983][ T6094] loop3: detected capacity change from 1024 to 64 [ 97.115926][ T5861] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 97.229013][ T6097] kmmpd-loop3: attempt to access beyond end of device [ 97.229013][ T6097] loop3: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 97.229141][ T6097] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 97.438160][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.493842][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.533455][ T50] team0: Port device netdevsim1 removed [ 97.535620][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.573795][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.729844][ T50] bridge_slave_1: left allmulticast mode [ 97.729867][ T50] bridge_slave_1: left promiscuous mode [ 97.730050][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.730757][ T50] bridge_slave_0: left allmulticast mode [ 97.730773][ T50] bridge_slave_0: left promiscuous mode [ 97.730994][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.955208][ T6134] loop6: detected capacity change from 0 to 512 [ 97.983851][ T6134] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.042244][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.043478][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.044406][ T50] bond0 (unregistering): Released all slaves [ 98.046224][ T6134] netlink: 172 bytes leftover after parsing attributes in process `syz.6.805'. [ 98.130389][ T50] hsr_slave_0: left promiscuous mode [ 98.130732][ T50] hsr_slave_1: left promiscuous mode [ 98.131015][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.131032][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.131483][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.131497][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.145682][ T50] team_slave_0: left promiscuous mode [ 98.145751][ T50] team_slave_1: left promiscuous mode [ 98.145789][ T50] veth1_macvtap: left promiscuous mode [ 98.145810][ T50] veth0_macvtap: left promiscuous mode [ 98.145861][ T50] veth1_vlan: left promiscuous mode [ 98.145895][ T50] veth0_vlan: left promiscuous mode [ 98.279498][ T50] pim6reg (unregistering): left allmulticast mode [ 98.438203][ T50] team0 (unregistering): Port device team_slave_1 removed [ 98.441516][ T50] team0 (unregistering): Port device team_slave_0 removed [ 98.764373][ T6167] loop5: detected capacity change from 0 to 512 [ 98.798492][ T6154] batman_adv: batadv0: Adding interface: dummy0 [ 98.809631][ T6154] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.846797][ T6154] batman_adv: batadv0: Interface activated: dummy0 [ 98.859153][ T6167] EXT4-fs: inline encryption not supported [ 98.863917][ T6165] IPVS: Error connecting to the multicast addr [ 98.865475][ T6167] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 98.874034][ T6118] chnl_net:caif_netlink_parms(): no params data found [ 98.892207][ T6167] EXT4-fs (loop5): 1 truncate cleaned up [ 98.898989][ T6167] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.935467][ T28] kauditd_printk_skb: 187 callbacks suppressed [ 98.935482][ T28] audit: type=1400 audit(1775431270.673:3704): avc: denied { watch } for pid=6166 comm="syz.5.811" path="/140/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.042037][ T6118] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.049958][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.059755][ T6118] bridge_slave_0: entered allmulticast mode [ 99.066365][ T6118] bridge_slave_0: entered promiscuous mode [ 99.073908][ T6118] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.082276][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.091793][ T6118] bridge_slave_1: entered allmulticast mode [ 99.107241][ T6118] bridge_slave_1: entered promiscuous mode [ 99.130462][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.141037][ T6118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.152220][ T6118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.190711][ T6118] team0: Port device team_slave_0 added [ 99.202396][ T6118] team0: Port device team_slave_1 added [ 99.241761][ T6118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.248856][ T6118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.296162][ T6118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.312805][ T6118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.320790][ T6118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.347777][ T6118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.486113][ T6210] netlink: 'syz.6.817': attribute type 8 has an invalid length. [ 99.584982][ T6210] __nla_validate_parse: 6 callbacks suppressed [ 99.585012][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.817'. [ 100.013448][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'. [ 100.028648][ T6220] program syz.6.818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.387711][ T6247] loop6: detected capacity change from 0 to 512 [ 100.426948][ T6247] EXT4-fs: inline encryption not supported [ 100.435064][ T28] audit: type=1326 audit(1775431272.163:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 100.489668][ T6247] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 100.505322][ T6118] hsr_slave_0: entered promiscuous mode [ 100.557232][ T6118] hsr_slave_1: entered promiscuous mode [ 100.570338][ T28] audit: type=1326 audit(1775431272.163:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 100.681392][ T28] audit: type=1326 audit(1775431272.163:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 100.814913][ T28] audit: type=1326 audit(1775431272.163:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 100.967985][ T28] audit: type=1326 audit(1775431272.163:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 101.009872][ T6118] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 101.059078][ T6118] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 101.092668][ T6118] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 101.103244][ T28] audit: type=1326 audit(1775431272.163:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 101.157790][ T10] hid_parser_main: 6 callbacks suppressed [ 101.157811][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 101.177836][ T6118] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 101.199187][ T28] audit: type=1326 audit(1775431272.163:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 101.216850][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.251201][ T28] audit: type=1326 audit(1775431272.173:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 101.279044][ T28] audit: type=1326 audit(1775431272.173:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 101.339435][ T6280] loop5: detected capacity change from 0 to 1024 [ 101.346300][ T6280] EXT4-fs: Ignoring removed bh option [ 101.441462][ T3322] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 101.441529][ T6280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 101.472149][ T3322] CPU: 1 UID: 0 PID: 3322 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 101.472178][ T3322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 101.472247][ T3322] Call Trace: [ 101.472254][ T3322] [ 101.472262][ T3322] __dump_stack+0x1d/0x30 [ 101.472288][ T3322] dump_stack_lvl+0x95/0xd0 [ 101.472310][ T3322] dump_stack+0x15/0x1b [ 101.472347][ T3322] dump_header+0x80/0x240 [ 101.472375][ T3322] oom_kill_process+0x295/0x350 [ 101.472407][ T3322] out_of_memory+0x97d/0xb80 [ 101.472436][ T3322] try_charge_memcg+0x62e/0xa10 [ 101.472484][ T3322] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 101.472532][ T3322] __swap_cache_prepare_and_add+0x67/0x460 [ 101.472565][ T3322] ? alloc_pages_mpol+0x217/0x260 [ 101.472604][ T3322] swap_cache_alloc_folio+0xa2/0x120 [ 101.472656][ T3322] swap_cluster_readahead+0x36b/0x3d0 [ 101.472696][ T3322] swapin_readahead+0xde/0x840 [ 101.472730][ T3322] ? __rcu_read_unlock+0x4e/0x70 [ 101.472785][ T3322] ? __perf_event_task_sched_in+0xa65/0xad0 [ 101.472811][ T3322] ? __list_add_valid_or_report+0x38/0xe0 [ 101.472835][ T3322] ? xfd_validate_state+0x45/0xf0 [ 101.472870][ T3322] ? __rcu_read_unlock+0x4e/0x70 [ 101.472941][ T3322] ? swap_cache_get_folio+0x26f/0x280 [ 101.472970][ T3322] do_swap_page+0x2fe/0x21e0 [ 101.473036][ T3322] ? __schedule+0x93c/0xd40 [ 101.473065][ T3322] ? __rcu_read_lock+0x36/0x50 [ 101.473117][ T3322] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 101.473221][ T3322] handle_mm_fault+0xb46/0x3020 [ 101.473314][ T3322] ? vma_start_read+0x1c7/0x2c0 [ 101.473341][ T3322] do_user_addr_fault+0x62f/0x1050 [ 101.473372][ T3322] ? trace_page_fault_user+0x1f/0xe0 [ 101.473442][ T3322] exc_page_fault+0x62/0xa0 [ 101.473469][ T3322] asm_exc_page_fault+0x26/0x30 [ 101.473493][ T3322] RIP: 0033:0x7f3dc81c7997 [ 101.473510][ T3322] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 101.473583][ T3322] RSP: 002b:00007ffe9f3e97e0 EFLAGS: 00010202 [ 101.473606][ T3322] RAX: 0000000000000000 RBX: 000055557dd62500 RCX: 00007f3dc81c7997 [ 101.473624][ T3322] RDX: 00007ffe9f3e9820 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.473640][ T3322] RBP: 00007ffe9f3e988c R08: 0000000000000000 R09: 0000000000000000 [ 101.473681][ T3322] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 101.473698][ T3322] R13: 00000000000927c0 R14: 000000000001899c R15: 00007ffe9f3e98e0 [ 101.473720][ T3322] [ 101.473913][ T3322] memory: usage 307200kB, limit 307200kB, failcnt 195 [ 101.486000][ T6118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.714368][ T3322] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 101.794536][ T6247] netlink: 128 bytes leftover after parsing attributes in process `syz.6.824'. [ 101.804484][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.6.824'. [ 101.828605][ T3322] kmem: usage 290700kB, limit 9007199254740988kB, failcnt 0 [ 101.858942][ T3322] Memory cgroup stats for /syz4: [ 101.859224][ T3322] cache 0 [ 101.867314][ T3322] rss 28672 [ 101.879236][ T3322] shmem 0 [ 101.888605][ T3322] mapped_file 0 [ 101.896779][ T3322] dirty 0 [ 101.904386][ T3322] writeback 0 [ 101.915608][ T3322] workingset_refault_anon 67 [ 101.927610][ T3322] workingset_refault_file 573 [ 101.943057][ T3322] swap 155648 [ 101.954241][ T3322] swapcached 552960 [ 101.962789][ T3322] pgpgin 101029 [ 101.970712][ T3322] pgpgout 101016 [ 101.978138][ T3322] pgfault 83829 [ 102.004768][ T6118] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.015892][ T3322] pgmajfault 92 [ 102.024403][ T1915] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.031500][ T1915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.042090][ T3322] inactive_anon 0 [ 102.046157][ T3322] active_anon 49152 [ 102.051698][ T3322] inactive_file 0 [ 102.059122][ T1915] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.066266][ T1915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.081537][ T3322] active_file 4096 [ 102.091338][ T3322] unevictable 0 [ 102.095924][ T3322] hierarchical_memory_limit 314572800 [ 102.099867][ T6118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.113857][ T3322] hierarchical_memsw_limit 9223372036854771712 [ 102.122843][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 102.128933][ T3322] total_cache 0 [ 102.135427][ T3322] total_rss 28672 [ 102.139339][ T6118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.143882][ T3322] total_shmem 0 [ 102.184039][ T3322] total_mapped_file 0 [ 102.191305][ T2111] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.205868][ T3322] total_dirty 0 [ 102.214299][ T3322] total_writeback 0 [ 102.230000][ T3322] total_workingset_refault_anon 67 [ 102.235794][ T3322] total_workingset_refault_file 573 [ 102.241207][ T3322] total_swap 155648 [ 102.245024][ T3322] total_swapcached 552960 [ 102.258078][ T3322] total_pgpgin 101029 [ 102.267872][ T2111] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.281629][ T3322] total_pgpgout 101016 [ 102.285756][ T3322] total_pgfault 83829 [ 102.290849][ T3322] total_pgmajfault 92 [ 102.295179][ T3322] total_inactive_anon 0 [ 102.307691][ T3322] total_active_anon 49152 [ 102.312349][ T3322] total_inactive_file 0 [ 102.318386][ T3322] total_active_file 4096 [ 102.322992][ T3322] total_unevictable 0 [ 102.332966][ T6118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.339035][ T3322] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.823,pid=6241,uid=0 [ 102.395199][ T6326] FAULT_INJECTION: forcing a failure. [ 102.395199][ T6326] name failslab, interval 1, probability 0, space 0, times 0 [ 102.397392][ T3322] Memory cgroup out of memory: OOM victim 6241 (syz.4.823) is already exiting. Skip killing the task [ 102.409393][ T6326] CPU: 0 UID: 0 PID: 6326 Comm: syz.2.832 Not tainted syzkaller #0 PREEMPT(full) [ 102.409497][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 102.409566][ T6326] Call Trace: [ 102.409574][ T6326] [ 102.409645][ T6326] __dump_stack+0x1d/0x30 [ 102.409692][ T6326] dump_stack_lvl+0x95/0xd0 [ 102.409716][ T6326] dump_stack+0x15/0x1b [ 102.409769][ T6326] should_fail_ex+0x263/0x280 [ 102.409895][ T6326] ? bcm_rx_setup+0x2c4/0x10a0 [ 102.409969][ T6326] should_failslab+0x8c/0xb0 [ 102.409992][ T6326] __kmalloc_cache_noprof+0x5f/0x410 [ 102.410018][ T6326] ? __rcu_read_unlock+0x4e/0x70 [ 102.410041][ T6326] bcm_rx_setup+0x2c4/0x10a0 [ 102.410082][ T6326] ? _raw_spin_lock_bh+0x56/0xb0 [ 102.410111][ T6326] ? _raw_spin_unlock_bh+0x18/0x20 [ 102.410139][ T6326] ? lock_sock_nested+0x132/0x160 [ 102.410175][ T6326] ? selinux_socket_sendmsg+0x192/0x1c0 [ 102.410225][ T6326] bcm_sendmsg+0x1bb/0x4a0 [ 102.410252][ T6326] ? __pfx_bcm_sendmsg+0x10/0x10 [ 102.410277][ T6326] ____sys_sendmsg+0x563/0x5b0 [ 102.410352][ T6326] ___sys_sendmsg+0x195/0x1e0 [ 102.410404][ T6326] ? path_openat+0x1b01/0x2050 [ 102.410431][ T6326] __sys_sendmmsg+0x185/0x320 [ 102.410467][ T6326] __x64_sys_sendmmsg+0x57/0x70 [ 102.410493][ T6326] x64_sys_call+0x27aa/0x3020 [ 102.410537][ T6326] do_syscall_64+0x12c/0x370 [ 102.410564][ T6326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.410587][ T6326] RIP: 0033:0x7f6fe889c819 [ 102.410604][ T6326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.410623][ T6326] RSP: 002b:00007f6fe72f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 102.410676][ T6326] RAX: ffffffffffffffda RBX: 00007f6fe8b15fa0 RCX: 00007f6fe889c819 [ 102.410691][ T6326] RDX: 040000000000003a RSI: 0000200000001b00 RDI: 0000000000000007 [ 102.410706][ T6326] RBP: 00007f6fe72f7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.410719][ T6326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.410732][ T6326] R13: 00007f6fe8b16038 R14: 00007f6fe8b15fa0 R15: 00007ffddf70f7f8 [ 102.410761][ T6326] [ 102.635855][ T2111] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.684652][ T6332] loop2: detected capacity change from 0 to 512 [ 102.719712][ T6332] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.834: inode has both inline data and extents flags [ 102.755686][ T6332] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.758412][ T2111] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.821448][ T6332] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.834: couldn't read orphan inode 15 (err -117) [ 102.833308][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 102.833376][ C0] EXT4-fs (loop2): initial error at time 1775431274: ext4_orphan_get:1397: inode 15 [ 102.833414][ C0] EXT4-fs (loop2): last error at time 1775431274: ext4_orphan_get:1397: inode 15 [ 102.875281][ T6332] loop2: lost filesystem error report for type 5 error -117 [ 102.875851][ T6332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.422506][ T2111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.475660][ T2111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.527873][ T2111] bond0 (unregistering): Released all slaves [ 103.800154][ T2111] hsr_slave_0: left promiscuous mode [ 103.819478][ T2111] hsr_slave_1: left promiscuous mode [ 103.845115][ T2111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.867592][ T2111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.902342][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.915202][ T2111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.928968][ T2111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.994231][ T2111] veth1_macvtap: left promiscuous mode [ 104.939880][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 104.939913][ T28] audit: type=1400 audit(1775431276.683:3814): avc: denied { setopt } for pid=6393 comm="syz.4.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.970462][ T2111] veth0_macvtap: left promiscuous mode [ 104.976120][ T2111] veth1_vlan: left promiscuous mode [ 104.981502][ T2111] veth0_vlan: left promiscuous mode [ 105.080659][ T28] audit: type=1326 audit(1775431276.823:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 105.207243][ T6399] loop4: detected capacity change from 0 to 4096 [ 105.226039][ T28] audit: type=1326 audit(1775431276.843:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 105.327919][ T6399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.394614][ T28] audit: type=1326 audit(1775431276.843:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 105.530852][ T28] audit: type=1326 audit(1775431276.843:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 105.616710][ T28] audit: type=1326 audit(1775431276.843:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 105.700381][ T28] audit: type=1326 audit(1775431276.843:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 105.788818][ T28] audit: type=1326 audit(1775431276.853:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 105.882189][ T28] audit: type=1326 audit(1775431276.853:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 105.969898][ T28] audit: type=1326 audit(1775431276.853:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 106.034006][ T2111] team0 (unregistering): Port device team_slave_1 removed [ 106.046945][ T2111] team0 (unregistering): Port device team_slave_0 removed [ 106.268360][ T6118] veth0_vlan: entered promiscuous mode [ 106.311864][ T6118] veth1_vlan: entered promiscuous mode [ 106.341257][ T6320] chnl_net:caif_netlink_parms(): no params data found [ 106.405490][ T6118] veth0_macvtap: entered promiscuous mode [ 106.434791][ T6118] veth1_macvtap: entered promiscuous mode [ 106.470929][ T2111] IPVS: stop unused estimator thread 0... [ 106.492461][ T6118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.548859][ T6118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.587908][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.606398][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.613889][ T6320] bridge_slave_0: entered allmulticast mode [ 106.620993][ T6320] bridge_slave_0: entered promiscuous mode [ 106.630128][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.637333][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.644581][ T6320] bridge_slave_1: entered allmulticast mode [ 106.653232][ T6320] bridge_slave_1: entered promiscuous mode [ 106.684326][ T2111] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.705650][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.720679][ T2111] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.760211][ T6320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.789179][ T6320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.798304][ T2111] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.811032][ T6425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.839150][ T6425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.854377][ T2111] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.860908][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.879750][ T6320] team0: Port device team_slave_0 added [ 106.891172][ T6425] loop4: detected capacity change from 0 to 512 [ 106.901991][ T6425] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.905866][ T6320] team0: Port device team_slave_1 added [ 106.938454][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.944445][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.954589][ T6425] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.840: bg 0: block 393: padding at end of block bitmap is not set [ 106.957644][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.995459][ T6320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.016112][ T6435] loop7: detected capacity change from 0 to 512 [ 107.018118][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.029625][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.036859][ T6425] loop4: lost filesystem error report for type 5 error -117 [ 107.055860][ T6320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.075804][ T6320] hsr_slave_0: entered promiscuous mode [ 107.095774][ T6435] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #12: comm syz.7.842: missing EA_INODE flag [ 107.095806][ T6435] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.095973][ T6435] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.842: error while reading EA inode 12 err=-117 [ 107.096058][ T6435] loop7: lost filesystem error report for type 5 error -117 [ 107.096208][ T6435] EXT4-fs (loop7): 1 orphan inode deleted [ 107.096760][ T6435] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.106716][ T6320] hsr_slave_1: entered promiscuous mode [ 107.107035][ T6320] debugfs: 'hsr0' already exists in 'hsr' [ 107.107051][ T6320] Cannot create hsr debugfs directory [ 107.123192][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 107.123214][ C0] EXT4-fs (loop4): initial error at time 1775431278: ext4_validate_block_bitmap:441 [ 107.123247][ C0] EXT4-fs (loop4): last error at time 1775431278: ext4_validate_block_bitmap:441 [ 107.123546][ T6425] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 107.123569][ T6425] loop4: lost filesystem error report for type 5 error -117 [ 107.139152][ T6425] EXT4-fs (loop4): 2 truncates cleaned up [ 107.139566][ T6425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.161549][ T6443] loop2: detected capacity change from 0 to 512 [ 107.215611][ T6425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.840'. [ 107.233884][ T6443] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.287306][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.842'. [ 107.287329][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.7.842'. [ 107.287353][ T6435] netlink: 'syz.7.842': attribute type 6 has an invalid length. [ 107.287661][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.842'. [ 107.287691][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.7.842'. [ 107.287712][ T6435] netlink: 'syz.7.842': attribute type 6 has an invalid length. [ 107.294237][ T6320] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 107.302264][ T6443] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.841: bg 0: block 393: padding at end of block bitmap is not set [ 107.460064][ T6443] loop2: lost filesystem error report for type 5 error -117 [ 107.460435][ T6443] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 107.476909][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 107.476950][ C1] EXT4-fs (loop2): initial error at time 1775431279: ext4_validate_block_bitmap:441 [ 107.476976][ C1] EXT4-fs (loop2): last error at time 1775431279: ext4_validate_block_bitmap:441 [ 107.502910][ T6443] loop2: lost filesystem error report for type 5 error -117 [ 107.503590][ T6443] EXT4-fs (loop2): 2 truncates cleaned up [ 107.517480][ T6443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.540837][ T6320] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 107.549981][ T6320] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 107.578566][ T6428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.841'. [ 107.602558][ T6320] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 107.633237][ T6456] 9p: Bad value for 'source' [ 107.798410][ T6320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.848089][ T6320] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.895915][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.903054][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.948113][ T6320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.005267][ T6320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.052985][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.060438][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.095658][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.471617][ T6320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.589718][ T6118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.722026][ T6320] veth0_vlan: entered promiscuous mode [ 108.738435][ T6320] veth1_vlan: entered promiscuous mode [ 108.756440][ T6320] veth0_macvtap: entered promiscuous mode [ 108.768289][ T6320] veth1_macvtap: entered promiscuous mode [ 108.781093][ T6320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.793024][ T6320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.804142][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.820157][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.848563][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.877777][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.350516][ T6516] loop4: detected capacity change from 0 to 8192 [ 109.363438][ T6516] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 109.451191][ T6516] FAT-fs (loop4): Filesystem has been set read-only [ 109.808631][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.938855][ T6532] loop8: detected capacity change from 0 to 512 [ 109.953714][ T28] kauditd_printk_skb: 471 callbacks suppressed [ 109.953741][ T28] audit: type=1326 audit(1775431281.693:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6520 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4aa6016597 code=0x7ffc0000 [ 110.036558][ T6535] FAULT_INJECTION: forcing a failure. [ 110.036558][ T6535] name failslab, interval 1, probability 0, space 0, times 0 [ 110.103418][ T6532] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.852: inode has both inline data and extents flags [ 110.129307][ T6535] CPU: 1 UID: 0 PID: 6535 Comm: syz.2.851 Not tainted syzkaller #0 PREEMPT(full) [ 110.129415][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 110.129470][ T6535] Call Trace: [ 110.129476][ T6535] [ 110.129485][ T6535] __dump_stack+0x1d/0x30 [ 110.129517][ T6535] dump_stack_lvl+0x95/0xd0 [ 110.129596][ T6535] dump_stack+0x15/0x1b [ 110.129694][ T6535] should_fail_ex+0x263/0x280 [ 110.129741][ T6535] ? alloc_async+0x2d/0x90 [ 110.129765][ T6535] should_failslab+0x8c/0xb0 [ 110.129791][ T6535] __kmalloc_cache_noprof+0x5f/0x410 [ 110.129891][ T6535] alloc_async+0x2d/0x90 [ 110.129918][ T6535] proc_do_submiturb+0x76d/0x1d00 [ 110.130038][ T6535] proc_submiturb+0x7b/0xa0 [ 110.130061][ T6535] usbdev_ioctl+0xcb4/0x1750 [ 110.130098][ T6535] ? __pfx_usbdev_ioctl+0x10/0x10 [ 110.130127][ T6535] __se_sys_ioctl+0xce/0x140 [ 110.130151][ T6535] __x64_sys_ioctl+0x43/0x50 [ 110.130174][ T6535] x64_sys_call+0x1563/0x3020 [ 110.130236][ T6535] do_syscall_64+0x12c/0x370 [ 110.130301][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.130322][ T6535] RIP: 0033:0x7f6fe889c819 [ 110.130412][ T6535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.130434][ T6535] RSP: 002b:00007f6fe72f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.130489][ T6535] RAX: ffffffffffffffda RBX: 00007f6fe8b15fa0 RCX: 00007f6fe889c819 [ 110.130554][ T6535] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000004 [ 110.130626][ T6535] RBP: 00007f6fe72f7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.130641][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.130653][ T6535] R13: 00007f6fe8b16038 R14: 00007f6fe8b15fa0 R15: 00007ffddf70f7f8 [ 110.130727][ T6535] [ 110.132725][ T6532] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.330679][ T28] audit: type=1326 audit(1775431281.693:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6520 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4aa5fbdb99 code=0x7ffc0000 [ 110.384509][ T6538] loop2: detected capacity change from 0 to 1024 [ 110.393497][ T28] audit: type=1326 audit(1775431281.733:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6520 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4aa6016597 code=0x7ffc0000 [ 110.423920][ T6538] EXT4-fs: Ignoring removed bh option [ 110.433606][ T28] audit: type=1326 audit(1775431281.733:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6520 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4aa5fbdb99 code=0x7ffc0000 [ 110.462201][ T28] audit: type=1326 audit(1775431281.733:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6520 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa601c819 code=0x7ffc0000 [ 110.493733][ T28] audit: type=1326 audit(1775431281.733:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6520 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4aa6016597 code=0x7ffc0000 [ 110.535412][ T28] audit: type=1326 audit(1775431281.733:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6520 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4aa5fbdb99 code=0x7ffc0000 [ 110.564147][ T6538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 110.577649][ T28] audit: type=1326 audit(1775431281.733:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6520 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa601c819 code=0x7ffc0000 [ 110.611850][ T6532] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.852: couldn't read orphan inode 15 (err -117) [ 110.623773][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 110.623792][ C1] EXT4-fs (loop8): initial error at time 1775431282: ext4_orphan_get:1397: inode 15 [ 110.623838][ C1] EXT4-fs (loop8): last error at time 1775431282: ext4_orphan_get:1397: inode 15 [ 110.662171][ T28] audit: type=1326 audit(1775431281.743:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6520 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4aa6016597 code=0x7ffc0000 [ 110.699209][ T28] audit: type=1326 audit(1775431281.743:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6520 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4aa5fbdb99 code=0x7ffc0000 [ 110.723185][ T6532] loop8: lost filesystem error report for type 5 error -117 [ 110.723705][ T6532] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.069068][ T6538] loop2: detected capacity change from 1024 to 64 [ 111.129471][ T6320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.154688][ T4929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 111.165457][ T6553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.858'. [ 111.250042][ T6554] 9p: Bad value for 'source' [ 112.140057][ T6540] kmmpd-loop2: attempt to access beyond end of device [ 112.140057][ T6540] loop2: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 112.172025][ T6540] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 112.237738][ T2165] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.305635][ T2165] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.382120][ T2165] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.468632][ T2165] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.522979][ T6567] chnl_net:caif_netlink_parms(): no params data found [ 112.596063][ T2165] bridge_slave_1: left allmulticast mode [ 112.602217][ T2165] bridge_slave_1: left promiscuous mode [ 112.608045][ T2165] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.616210][ T2165] bridge_slave_0: left allmulticast mode [ 112.622095][ T2165] bridge_slave_0: left promiscuous mode [ 112.627905][ T2165] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.771150][ T2165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.781405][ T2165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.791919][ T2165] bond0 (unregistering): Released all slaves [ 112.819587][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.827011][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.834556][ T6567] bridge_slave_0: entered allmulticast mode [ 112.841378][ T6567] bridge_slave_0: entered promiscuous mode [ 112.860815][ T2165] tipc: Disabling bearer [ 112.870709][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.879103][ T2165] tipc: Left network mode [ 112.895201][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.913130][ T6567] bridge_slave_1: entered allmulticast mode [ 112.919929][ T6567] bridge_slave_1: entered promiscuous mode [ 113.063235][ T6567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.092006][ T2165] hsr_slave_0: left promiscuous mode [ 113.100646][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.866'. [ 113.110163][ T2165] hsr_slave_1: left promiscuous mode [ 113.444069][ T2165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.452390][ T2165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.460856][ T2165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.468474][ T2165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.483716][ T6612] atomic_op ffff88811bfbad28 conn xmit_atomic 0000000000000000 [ 113.496519][ T2165] veth1_macvtap: left promiscuous mode [ 113.503303][ T2165] veth0_macvtap: left promiscuous mode [ 113.509343][ T2165] veth1_vlan: left promiscuous mode [ 113.515066][ T2165] veth0_vlan: left promiscuous mode [ 113.662910][ T2165] team0 (unregistering): Port device team_slave_1 removed [ 113.676944][ T2165] team0 (unregistering): Port device team_slave_0 removed [ 113.812573][ T6567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.863758][ T6614] loop7: detected capacity change from 0 to 128 [ 113.947639][ T6567] team0: Port device team_slave_0 added [ 113.981736][ T6567] team0: Port device team_slave_1 added [ 113.987988][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'. [ 114.056795][ T6625] netlink: 36 bytes leftover after parsing attributes in process `syz.4.870'. [ 114.103118][ T6567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.120057][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.870'. [ 114.135361][ T6567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.304173][ T6567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.475398][ T6620] bond1: option ad_actor_sys_prio: invalid value (0) [ 114.505147][ T6620] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 114.532303][ T6620] bond1 (unregistering): Released all slaves [ 114.563809][ T6567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.585133][ T6567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.695220][ T6567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.857069][ T6567] hsr_slave_0: entered promiscuous mode [ 114.889143][ T6567] hsr_slave_1: entered promiscuous mode [ 114.905863][ T6567] debugfs: 'hsr0' already exists in 'hsr' [ 114.915455][ T6567] Cannot create hsr debugfs directory [ 114.924624][ T2165] IPVS: stop unused estimator thread 0... [ 114.933289][ T6663] loop6: detected capacity change from 0 to 256 [ 114.965418][ T28] kauditd_printk_skb: 221 callbacks suppressed [ 114.965436][ T28] audit: type=1326 audit(1775431286.703:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.8.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b128c819 code=0x7ffc0000 [ 115.018945][ T28] audit: type=1326 audit(1775431286.743:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.8.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b128c819 code=0x7ffc0000 [ 115.046616][ T28] audit: type=1326 audit(1775431286.743:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.8.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b128c819 code=0x7ffc0000 [ 115.049152][ T3412] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.113806][ T3412] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.117405][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.6.878'. [ 115.161533][ T28] audit: type=1326 audit(1775431286.743:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.8.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f12b128c819 code=0x7ffc0000 [ 115.188321][ T6567] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 115.206504][ T28] audit: type=1326 audit(1775431286.813:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.8.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b128c819 code=0x7ffc0000 [ 115.239164][ T6567] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 115.247806][ T28] audit: type=1326 audit(1775431286.813:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.8.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f12b128c582 code=0x7ffc0000 [ 115.266645][ T6687] loop6: detected capacity change from 0 to 256 [ 115.280847][ T6567] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 115.324582][ T6567] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 115.329597][ T6687] FAT-fs (loop6): Directory bread(block 64) failed [ 115.337893][ T6687] FAT-fs (loop6): Directory bread(block 65) failed [ 115.341372][ T28] audit: type=1326 audit(1775431286.813:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.8.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f12b128c617 code=0x7ffc0000 [ 115.347418][ T6687] FAT-fs (loop6): Directory bread(block 66) failed [ 115.374058][ T28] audit: type=1326 audit(1775431286.813:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.8.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f12b1249511 code=0x7ffc0000 [ 115.418233][ T28] audit: type=1326 audit(1775431286.813:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.8.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f12b128d609 code=0x7ffc0000 [ 115.424977][ T6687] FAT-fs (loop6): Directory bread(block 67) failed [ 115.443411][ T28] audit: type=1326 audit(1775431286.813:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.8.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f12b124957b code=0x7ffc0000 [ 115.473435][ T6687] FAT-fs (loop6): Directory bread(block 68) failed [ 115.483910][ T6687] FAT-fs (loop6): Directory bread(block 69) failed [ 115.507925][ T6687] FAT-fs (loop6): Directory bread(block 70) failed [ 115.524991][ T6687] FAT-fs (loop6): Directory bread(block 71) failed [ 115.551187][ T6567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.558163][ T6687] FAT-fs (loop6): Directory bread(block 72) failed [ 115.571588][ T6567] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.578373][ T6687] FAT-fs (loop6): Directory bread(block 73) failed [ 115.590334][ T2111] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.597601][ T2111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.611236][ T2111] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.618537][ T2111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.646054][ T6567] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.658166][ T6567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.875364][ T6687] syz.6.881: attempt to access beyond end of device [ 115.875364][ T6687] loop6: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 115.910370][ T6708] syz.6.881: attempt to access beyond end of device [ 115.910370][ T6708] loop6: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 116.006676][ T6715] loop7: detected capacity change from 0 to 512 [ 116.187646][ T6715] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.256076][ T6715] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.165820][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.887'. [ 117.371475][ T6567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.405443][ T6755] tmpfs: Bad value for 'mpol' [ 117.570772][ T6118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.631990][ T6775] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.670778][ T6779] loop8: detected capacity change from 0 to 1024 [ 117.723547][ T6567] veth0_vlan: entered promiscuous mode [ 117.736735][ T6779] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.760749][ T6567] veth1_vlan: entered promiscuous mode [ 117.769312][ T6775] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6775 comm=syz.4.894 [ 117.785050][ T6779] EXT4-fs (loop8): shut down requested (0) [ 117.801494][ T6567] veth0_macvtap: entered promiscuous mode [ 117.812471][ T6567] veth1_macvtap: entered promiscuous mode [ 117.828451][ T6567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.836464][ T6779] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 117.837456][ T6567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.861041][ T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.876454][ T6793] loop6: detected capacity change from 0 to 512 [ 117.882829][ T6779] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 117.892314][ T6779] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 117.903019][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.934828][ T2111] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.940955][ T6793] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.946483][ T2111] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.956838][ T6772] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 118.027685][ T6320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.034383][ T6811] loop8: detected capacity change from 0 to 1024 [ 120.058968][ T6807] loop7: detected capacity change from 0 to 256 [ 120.059364][ T5743] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.037427][ T6811] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 121.266989][ T6811] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.385958][ T6823] loop9: detected capacity change from 0 to 1024 [ 121.396648][ T6823] EXT4-fs: Ignoring removed bh option [ 121.404935][ T28] kauditd_printk_skb: 160 callbacks suppressed [ 121.404954][ T28] audit: type=1400 audit(1775431293.143:4696): avc: denied { read write } for pid=6810 comm="syz.8.900" name="file2" dev="loop8" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.444280][ T6811] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.900: bg 0: block 112: padding at end of block bitmap is not set [ 121.467786][ T28] audit: type=1400 audit(1775431293.143:4697): avc: denied { open } for pid=6810 comm="syz.8.900" path="/9/file1/file2" dev="loop8" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.498953][ T6811] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 21 with max blocks 44 with error 28 [ 121.522869][ T6831] netlink: 'syz.8.900': attribute type 322 has an invalid length. [ 121.525135][ T6811] EXT4-fs (loop8): This should not happen!! Data will be lost [ 121.525135][ T6811] [ 121.541509][ T6811] EXT4-fs (loop8): Total free blocks count 0 [ 121.542261][ T6823] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.547623][ T6811] EXT4-fs (loop8): Free/Dirty block details [ 121.566131][ T6811] EXT4-fs (loop8): free_blocks=0 [ 121.571199][ T6811] EXT4-fs (loop8): dirty_blocks=64 [ 121.579006][ T28] audit: type=1400 audit(1775431293.323:4698): avc: denied { ioctl } for pid=6810 comm="syz.8.900" path="/9/file1/file2" dev="loop8" ino=16 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.585064][ T6837] program syz.6.902 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.603423][ T6811] EXT4-fs (loop8): Block reservation details [ 121.620149][ T6811] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 121.827190][ T28] audit: type=1326 audit(1775431293.563:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.4.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 121.852174][ T6320] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #16: comm syz-executor: data will be lost [ 121.869255][ T6320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 121.917166][ T28] audit: type=1326 audit(1775431293.563:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.4.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 121.971256][ T28] audit: type=1326 audit(1775431293.563:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.4.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 121.996271][ T28] audit: type=1326 audit(1775431293.563:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.4.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 122.029348][ T28] audit: type=1326 audit(1775431293.603:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.4.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 122.054460][ T28] audit: type=1326 audit(1775431293.603:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.4.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 122.109821][ T28] audit: type=1326 audit(1775431293.603:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.4.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc820c819 code=0x7ffc0000 [ 122.153287][ T6567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.613191][ T6916] loop8: detected capacity change from 0 to 1024 [ 122.692321][ T6916] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.776523][ T6916] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 122.873260][ T6929] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 123.024490][ T6320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.225039][ T6938] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.274441][ T6937] loop4: detected capacity change from 0 to 128 [ 123.292508][ T6938] netdevsim netdevsim4 netdevsim2 (unregistering): left allmulticast mode [ 123.310289][ T6938] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.372069][ T6938] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.399912][ T6956] loop7: detected capacity change from 0 to 512 [ 123.442351][ T6956] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 123.489172][ T6956] EXT4-fs (loop7): 1 truncate cleaned up [ 123.499413][ T6956] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.592819][ T6938] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.638058][ T1915] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.735267][ T50] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.806625][ T50] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.865722][ T1915] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.103015][ T50] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.125780][ T50] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.143556][ T6973] FAULT_INJECTION: forcing a failure. [ 124.143556][ T6973] name failslab, interval 1, probability 0, space 0, times 0 [ 124.203780][ T6973] CPU: 0 UID: 0 PID: 6973 Comm: syz.9.933 Not tainted syzkaller #0 PREEMPT(full) [ 124.203814][ T6973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 124.203902][ T6973] Call Trace: [ 124.203909][ T6973] [ 124.203916][ T6973] __dump_stack+0x1d/0x30 [ 124.203946][ T6973] dump_stack_lvl+0x95/0xd0 [ 124.203975][ T6973] dump_stack+0x15/0x1b [ 124.204068][ T6973] should_fail_ex+0x263/0x280 [ 124.204097][ T6973] ? __se_sys_mount+0xef/0x2e0 [ 124.204175][ T6973] should_failslab+0x8c/0xb0 [ 124.204214][ T6973] __kmalloc_cache_noprof+0x5f/0x410 [ 124.204245][ T6973] ? memdup_user+0x99/0xd0 [ 124.204270][ T6973] __se_sys_mount+0xef/0x2e0 [ 124.204344][ T6973] ? fput+0x8f/0xc0 [ 124.204371][ T6973] ? ksys_write+0x194/0x1a0 [ 124.204395][ T6973] __x64_sys_mount+0x67/0x80 [ 124.204529][ T6973] x64_sys_call+0x2d61/0x3020 [ 124.204554][ T6973] do_syscall_64+0x12c/0x370 [ 124.204584][ T6973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.204636][ T6973] RIP: 0033:0x7fd7a1d0c819 [ 124.204652][ T6973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.204674][ T6973] RSP: 002b:00007fd7a0767028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.204765][ T6973] RAX: ffffffffffffffda RBX: 00007fd7a1f85fa0 RCX: 00007fd7a1d0c819 [ 124.204783][ T6973] RDX: 0000200000000000 RSI: 0000200000000300 RDI: 0000000000000000 [ 124.204800][ T6973] RBP: 00007fd7a0767090 R08: 00002000000001c0 R09: 0000000000000000 [ 124.204824][ T6973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.204836][ T6973] R13: 00007fd7a1f86038 R14: 00007fd7a1f85fa0 R15: 00007ffedc45b928 [ 124.204924][ T6973] [ 124.471438][ T1915] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.693706][ T6118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.754021][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.931'. [ 124.986894][ T1915] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.017877][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.931'. [ 125.145801][ T7006] ip6t_REJECT: ECHOREPLY is not supported [ 125.322332][ T7013] capability: warning: `syz.7.938' uses deprecated v2 capabilities in a way that may be insecure [ 125.380795][ T1915] bridge_slave_1: left allmulticast mode [ 125.552848][ T1915] bridge_slave_1: left promiscuous mode [ 125.572819][ T1915] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.888907][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'. [ 125.979941][ T1915] bridge_slave_0: left allmulticast mode [ 126.046407][ T1915] bridge_slave_0: left promiscuous mode [ 126.480847][ T28] kauditd_printk_skb: 283 callbacks suppressed [ 126.480861][ T28] audit: type=1326 audit(1775431298.223:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.8.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b128c819 code=0x7ffc0000 [ 126.511419][ T1915] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.678723][ T28] audit: type=1326 audit(1775431298.263:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.8.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b128c819 code=0x7ffc0000 [ 126.971170][ T28] audit: type=1326 audit(1775431298.263:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.8.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b128c819 code=0x7ffc0000 [ 127.035604][ T1915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.052837][ T28] audit: type=1326 audit(1775431298.263:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.8.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b128c819 code=0x7ffc0000 [ 127.080918][ T7038] loop8: detected capacity change from 0 to 512 [ 127.098264][ T1915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.122312][ T28] audit: type=1326 audit(1775431298.263:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.8.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b128c819 code=0x7ffc0000 [ 127.151532][ T1915] bond0 (unregistering): Released all slaves [ 127.160054][ T7038] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 127.192924][ T7023] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 127.202387][ T7023] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 127.271300][ C0] ================================================================== [ 127.279423][ C0] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb [ 127.287727][ C0] [ 127.290155][ C0] write to 0xffff888103638788 of 2 bytes by interrupt on cpu 1: [ 127.297967][ C0] virtqueue_disable_cb+0x75/0x2c0 [ 127.303195][ C0] start_xmit+0x107/0x1ab0 [ 127.307635][ C0] dev_hard_start_xmit+0x136/0x3f0 [ 127.312780][ C0] sch_direct_xmit+0x192/0x550 [ 127.317664][ C0] __dev_queue_xmit+0xca9/0x1f20 [ 127.322720][ C0] ip_finish_output2+0x705/0x8c0 [ 127.328040][ C0] ip_finish_output+0x112/0x290 [ 127.333004][ C0] ip_output+0xbd/0x1c0 [ 127.337174][ C0] __ip_queue_xmit+0xb68/0xba0 [ 127.341952][ C0] ip_queue_xmit+0x39/0x50 [ 127.346468][ C0] __tcp_transmit_skb+0x1af2/0x1f10 [ 127.351704][ C0] tcp_write_xmit+0x1597/0x3640 [ 127.356666][ C0] __tcp_push_pending_frames+0x6d/0x1b0 [ 127.362231][ C0] tcp_rcv_established+0xda2/0x12f0 [ 127.367533][ C0] tcp_v4_do_rcv+0x91d/0xa30 [ 127.372400][ C0] tcp_v4_rcv+0x19f8/0x1db0 [ 127.377723][ C0] ip_protocol_deliver_rcu+0x395/0x790 [ 127.383301][ C0] ip_local_deliver_finish+0x1fc/0x2f0 [ 127.389392][ C0] ip_local_deliver+0xe8/0x1e0 [ 127.394194][ C0] ip_sublist_rcv+0x5a4/0x6a0 [ 127.399432][ C0] ip_list_rcv+0x261/0x290 [ 127.404018][ C0] __netif_receive_skb_list_core+0x4dc/0x500 [ 127.410196][ C0] netif_receive_skb_list_internal+0x47d/0x5f0 [ 127.416465][ C0] napi_complete_done+0x19c/0x3f0 [ 127.421627][ C0] virtnet_poll+0x1bb1/0x2040 [ 127.426691][ C0] __napi_poll+0x61/0x330 [ 127.431042][ C0] net_rx_action+0x452/0x930 [ 127.435660][ C0] handle_softirqs+0xb9/0x2a0 [ 127.440375][ C0] __irq_exit_rcu+0x39/0xc0 [ 127.444918][ C0] common_interrupt+0x83/0x90 [ 127.449635][ C0] asm_common_interrupt+0x26/0x40 [ 127.454692][ C0] kcsan_setup_watchpoint+0x404/0x410 [ 127.460102][ C0] ___sys_recvmsg+0x187/0x3b0 [ 127.464974][ C0] do_recvmmsg+0x1ef/0x560 [ 127.469483][ C0] __x64_sys_recvmmsg+0xe5/0x170 [ 127.474606][ C0] x64_sys_call+0x80f/0x3020 [ 127.479212][ C0] do_syscall_64+0x12c/0x370 [ 127.483823][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.489738][ C0] [ 127.492158][ C0] read to 0xffff888103638788 of 2 bytes by interrupt on cpu 0: [ 127.499712][ C0] virtqueue_disable_cb+0x4c/0x2c0 [ 127.504851][ C0] skb_xmit_done+0x67/0x1a0 [ 127.509368][ C0] vring_interrupt+0x2d7/0x310 [ 127.514158][ C0] __handle_irq_event_percpu+0x9c/0x4d0 [ 127.519766][ C0] handle_irq_event+0x64/0xf0 [ 127.524554][ C0] handle_edge_irq+0x154/0x470 [ 127.529504][ C0] __common_interrupt+0x60/0xb0 [ 127.534460][ C0] common_interrupt+0x7e/0x90 [ 127.539342][ C0] asm_common_interrupt+0x26/0x40 [ 127.544378][ C0] kcsan_setup_watchpoint+0x404/0x410 [ 127.549769][ C0] get_futex_key+0xa8/0xbe0 [ 127.554367][ C0] futex_wake+0x84/0x380 [ 127.558619][ C0] do_futex+0x323/0x380 [ 127.562807][ C0] mm_release+0xa1/0x190 [ 127.567052][ C0] exit_mm_release+0x25/0x30 [ 127.571733][ C0] exit_mm+0x37/0x180 [ 127.575726][ C0] do_exit+0x442/0x1600 [ 127.579893][ C0] do_group_exit+0xfe/0x140 [ 127.584409][ C0] get_signal+0xe54/0xf60 [ 127.588769][ C0] arch_do_signal_or_restart+0x96/0x450 [ 127.594332][ C0] exit_to_user_mode_loop+0x6a/0x6f0 [ 127.599624][ C0] do_syscall_64+0x249/0x370 [ 127.604227][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.610215][ C0] [ 127.612546][ C0] value changed: 0x0000 -> 0x0001 [ 127.617570][ C0] [ 127.619896][ C0] Reported by Kernel Concurrency Sanitizer on: [ 127.626049][ C0] CPU: 0 UID: 0 PID: 7037 Comm: syz.9.939 Not tainted syzkaller #0 PREEMPT(full) [ 127.635424][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 127.645485][ C0] ================================================================== [ 127.688913][ T28] audit: type=1326 audit(1775431298.263:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.8.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f12b128c819 code=0x7ffc0000 [ 127.716884][ T7041] loop4: detected capacity change from 0 to 512 [ 127.734456][ T7041] EXT4-fs: inline encryption not supported [ 127.754763][ T28] audit: type=1326 audit(1775431298.263:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.8.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b128c819 code=0x7ffc0000 [ 127.804024][ T7041] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.850523][ T28] audit: type=1326 audit(1775431298.263:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.8.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12b124d04e code=0x7ffc0000 [ 127.883500][ T28] audit: type=1326 audit(1775431298.263:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.8.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b128c819 code=0x7ffc0000 [ 127.919482][ T28] audit: type=1326 audit(1775431298.263:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.8.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12b124d04e code=0x7ffc0000 [ 127.957588][ T7038] EXT4-fs (loop8): 1 truncate cleaned up [ 127.964290][ T7038] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.981859][ T7041] EXT4-fs (loop4): 1 truncate cleaned up [ 127.987959][ T7041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.010489][ T1915] hsr_slave_0: left promiscuous mode [ 128.017179][ T7041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.029913][ T1915] hsr_slave_1: left promiscuous mode [ 128.037174][ T1915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.045492][ T1915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.075581][ T1915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.095177][ T1915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.142421][ T1915] veth1_macvtap: left promiscuous mode [ 128.153901][ T1915] veth0_macvtap: left promiscuous mode [ 128.159742][ T1915] veth1_vlan: left promiscuous mode [ 128.165041][ T1915] veth0_vlan: left promiscuous mode [ 128.239084][ T6320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.303935][ T1915] team0 (unregistering): Port device team_slave_1 removed [ 128.313357][ T1915] team0 (unregistering): Port device team_slave_0 removed [ 128.342695][ T6976] chnl_net:caif_netlink_parms(): no params data found [ 128.387481][ T6976] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.401586][ T6976] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.408863][ T6976] bridge_slave_0: entered allmulticast mode [ 128.417640][ T6976] bridge_slave_0: entered promiscuous mode [ 128.425368][ T6976] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.439238][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.449288][ T6976] bridge_slave_1: entered allmulticast mode [ 128.455933][ T6976] bridge_slave_1: entered promiscuous mode [ 128.474709][ T6976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.485615][ T6976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.505110][ T6976] team0: Port device team_slave_0 added [ 128.512134][ T6976] team0: Port device team_slave_1 added [ 128.527960][ T6976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.535360][ T6976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.561551][ T6976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.572995][ T6976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.580085][ T6976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.606226][ T6976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.644890][ T6976] hsr_slave_0: entered promiscuous mode [ 128.651322][ T6976] hsr_slave_1: entered promiscuous mode [ 128.657468][ T6976] debugfs: 'hsr0' already exists in 'hsr' [ 128.663632][ T6976] Cannot create hsr debugfs directory [ 128.934239][ T6976] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 128.943583][ T6976] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 128.953713][ T6976] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 128.963906][ T6976] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 129.011921][ T6976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.025961][ T6976] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.036143][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.043320][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.064902][ T6976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.075753][ T6976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.092924][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.100060][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.168785][ T6976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.256455][ T6976] veth0_vlan: entered promiscuous mode [ 129.266195][ T6976] veth1_vlan: entered promiscuous mode [ 129.287984][ T6976] veth0_macvtap: entered promiscuous mode [ 129.297789][ T6976] veth1_macvtap: entered promiscuous mode [ 129.311478][ T6976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.324102][ T6976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.335950][ T2165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.352357][ T2165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.374079][ T2165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.384037][ T2165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.039137][ T9] page_pool_release_retry() stalled pool shutdown: id 35, 1 inflight 60 sec